This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer File: 2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer (raw, json) Hash identifier: iiQkf9zKMme45l2pQ6e9RzWpgtVaVFDk8Jtm/bO9Jyo= Subject key identifier: 09:0D:93:FD:90:BB:C3:30:A7:31:00:6B:CD:D4:34:7C:9E:1E:98:16 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BFC6A5DBAADA33CC413BB9500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Nov 2025 08:25:43 +0000 Certificate not after: Tue 29 Feb 2028 08:25:43 +0000 Subordinate resources: IP: 23.150.28.0/24 IP: 2602:f4be::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fc:6a:5d:ba:ad:a3:3c:c4:13:bb:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 26 08:25:43 2025 GMT Not After : Feb 29 08:25:43 2028 GMT Subject: CN=2b0012f3-7f7d-46a7-80c4-e0836ff85f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e3:61:23:26:9e:c5:3f:f6:17:e2:42:26:f9: 95:00:0b:e0:e6:f5:11:12:6d:f6:a1:f5:27:02:45: 2e:ab:02:fc:16:07:1c:d5:1b:c8:d1:f1:44:5f:84: f8:95:df:74:db:c1:c6:b0:89:a6:53:28:db:90:2d: 6a:25:06:bc:93:fe:2b:24:ee:1f:e5:12:81:76:8e: b6:7d:4c:22:21:2b:45:aa:96:59:2a:55:8c:c1:dc: f4:d2:83:c6:f0:74:e9:1d:d4:f2:3c:c9:09:de:8d: 93:e8:ae:1e:0c:2c:10:5d:70:73:d8:ad:fb:65:d6: 48:f7:d8:70:9e:6f:95:37:5c:bf:c6:6a:db:d5:f3: 3d:d9:56:d4:06:12:26:d1:5b:b5:e2:ce:d3:f2:54: 38:e4:e4:ec:d0:ec:2a:fc:ff:90:06:b9:bd:1a:2c: a6:4b:95:fa:ca:d5:48:18:c5:83:da:13:15:f2:6c: f4:76:cd:36:09:ed:dc:a5:2a:57:80:02:90:af:30: b3:1c:2c:27:2d:04:06:5f:c4:e4:fd:a2:c0:1f:15: 7b:d0:82:b7:61:e7:29:1f:ed:55:05:c8:25:eb:8f: c3:d5:55:d9:69:4d:3a:71:a8:b3:ac:d9:a3:c5:65: 39:e8:ac:b4:ba:30:b9:68:6d:a8:7f:8d:3a:f3:b4: f4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:93:FD:90:BB:C3:30:A7:31:00:6B:CD:D4:34:7C:9E:1E:98:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.28.0/24 IPv6: 2602:f4be::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c3:bb:78:cf:aa:0b:45:6d:27:67:35:0c:92:f4:a5:25:7e: 98:d6:59:20:a7:0d:e8:b0:a8:ea:e6:f0:3e:a2:5b:32:a7:04: 90:79:89:2c:69:cd:e7:04:ad:87:ee:88:f9:fa:2b:e7:96:99: 93:51:d4:06:a1:f3:6e:24:be:df:61:a3:d0:2f:95:cb:61:ed: db:d5:93:3f:04:47:0f:55:34:b6:9d:4d:2a:1c:a9:15:24:59: e1:25:49:36:f7:fc:65:90:48:69:a2:ba:41:f6:03:ef:fe:a5: 36:1c:9c:eb:75:c6:fa:c4:76:26:cf:ff:c9:60:d2:b0:5d:7b: c6:f2:c1:5f:e5:94:25:92:b4:e2:69:66:8d:fd:df:d5:d9:15: bb:c4:fb:c1:d9:e9:cd:a2:c3:ed:48:7e:3e:e0:91:2a:8e:be: f7:80:e5:18:71:99:c6:64:48:f4:99:dc:cd:8c:4d:90:1c:01: 88:de:0d:7a:fb:3b:2a:3d:59:91:1f:56:58:b7:71:54:ce:f8: 3f:24:8c:7d:9d:4c:e4:05:17:b1:a9:8c:1f:65:73:5a:48:fe: c9:16:13:83:59:a3:6b:db:6b:b3:16:ab:f8:55:a9:bc:8f:ea: 34:ca:ad:b3:cc:db:84:20:7c:73:ab:7f:ab:b2:9a:0a:78:4f: 57:83:7f:d4 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEv8al26raM8xBO7lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNjA4MjU0M1oXDTI4MDIyOTA4MjU0M1owLzEtMCsGA1UEAxMk MmIwMDEyZjMtN2Y3ZC00NmE3LTgwYzQtZTA4MzZmZjg1ZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+NhIyaexT/2F+JCJvmVAAvg5vUREm32ofUn AkUuqwL8Fgcc1RvI0fFEX4T4ld9028HGsImmUyjbkC1qJQa8k/4rJO4f5RKBdo62 fUwiIStFqpZZKlWMwdz00oPG8HTpHdTyPMkJ3o2T6K4eDCwQXXBz2K37ZdZI99hw nm+VN1y/xmrb1fM92VbUBhIm0Vu14s7T8lQ45OTs0Owq/P+QBrm9GiymS5X6ytVI GMWD2hMV8mz0ds02Ce3cpSpXgAKQrzCzHCwnLQQGX8Tk/aLAHxV70IK3YecpH+1V Bcgl64/D1VXZaU06caizrNmjxWU56Ky0ujC5aG2of40687T07wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFAkNk/2Qu8MwpzEAa83UNHyeHpgWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8y YjAwMTJmMy03ZjdkLTQ2YTctODBjNC1lMDgzNmZmODVmN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzJiMDAxMmYzLTdmN2QtNDZhNy04 MGM0LWUwODM2ZmY4NWY3ZC8yYjAwMTJmMy03ZjdkLTQ2YTctODBjNC1lMDgzNmZm ODVmN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlhwwDgQCAAIwCAMGACYC9L4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACfDu3jPqgtFbSdnNQyS9KUlfpjWWSCnDeiwqOrm8D6iWzKnBJB5iSxpzecErYfu iPn6K+eWmZNR1Aah824kvt9ho9Avlcth7dvVkz8ERw9VNLadTSocqRUkWeElSTb3 /GWQSGmiukH2A+/+pTYcnOt1xvrEdibP/8lg0rBde8bywV/llCWStOJpZo3939XZ FbvE+8HZ6c2iw+1Ifj7gkSqOvveA5RhxmcZkSPSZ3M2MTZAcAYjeDXr7Oyo9WZEf Vli3cVTO+D8kjH2dTOQFF7GpjB9lc1pI/skWE4NZo2vba7MWq/hVqbyP6jTKrbPM 24QgfHOrf6uymgp4T1eDf9Q= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:47 2025 by rpki-client