This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer File: 2b687897-0772-49b6-9e4b-0f6ffee30894.cer (raw, json) Hash identifier: 8FcjEDDTPtNYE25ELgPpLZRRJQi5SrAS91tRAitF64g= Subject key identifier: 82:30:1A:70:60:99:11:47:F7:EF:AA:08:20:03:78:79:AB:FA:E7:F2 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C6E4EB294469D9183B65AA880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Jan 2026 03:32:07 +0000 Certificate not after: Mon 10 Apr 2028 02:32:07 +0000 Subordinate resources: AS: 29938 IP: 64.25.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:4e:b2:94:46:9d:91:83:b6:5a:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 6 03:32:07 2026 GMT Not After : Apr 10 02:32:07 2028 GMT Subject: CN=2b687897-0772-49b6-9e4b-0f6ffee30894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:a5:03:54:a8:b4:3a:ed:88:e4:bc:d4:3e: dc:7b:10:c2:fa:ed:3f:26:8a:d7:08:52:32:2f:7f: a4:da:30:32:5c:86:f8:c7:ef:c4:ff:af:66:a7:8e: 94:61:55:5d:36:b7:9f:fe:8b:4c:4a:d0:b9:a6:65: bb:72:11:e0:df:a3:94:7f:a0:a7:15:c5:cf:fd:01: c7:0c:50:0f:91:1b:98:2c:d8:6f:91:c5:f0:96:23: 57:b0:b3:83:86:33:4b:55:00:43:4c:f1:24:b0:62: 34:9f:10:81:9d:82:89:a9:8b:61:15:15:e3:ab:d7: d1:46:48:c2:e7:dc:d8:9b:86:47:c6:3b:54:5a:7b: fb:d1:ce:d4:01:93:67:29:7f:4f:d5:62:59:87:b3: 01:52:a8:69:87:34:da:80:ed:a8:42:43:aa:cd:82: 7e:f9:ef:29:85:50:d9:30:e8:7d:b4:00:73:51:ec: ff:7e:e9:bd:b1:76:e4:8b:c4:e8:b8:62:45:90:9c: 56:0b:5c:e1:fc:8a:1c:06:b5:83:70:3c:b0:8e:67: 9b:79:6c:34:c3:09:da:7f:7c:63:68:f8:f3:d8:87: 89:59:91:fd:e2:7c:87:79:80:82:92:33:52:f3:13: 69:4b:52:0c:b4:93:2c:ac:53:e5:9c:df:eb:09:4e: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:30:1A:70:60:99:11:47:F7:EF:AA:08:20:03:78:79:AB:FA:E7:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 64.25.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29938 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:cc:ae:ef:fb:a8:2f:86:ce:f0:ee:10:d2:00:9e:d0:2b:76: e0:1d:d0:19:4d:b3:15:ab:3f:6c:f1:6b:09:21:66:26:e2:ee: 86:be:be:76:61:f2:b8:82:4c:ac:79:e7:ca:ab:cd:68:cf:86: ff:64:5b:b2:35:3a:30:71:6b:fc:db:e0:bd:38:b3:ed:94:8c: 20:be:c6:22:be:e6:ce:f5:8f:93:53:1d:8f:41:73:0b:0e:0d: 78:fd:aa:f1:b5:b0:30:a6:a3:b9:76:47:71:7a:b3:78:d2:75: 68:d7:62:88:03:df:e2:b4:5b:10:12:5f:bb:a8:4d:30:7f:be: db:50:84:cb:ee:3c:0b:ae:2b:6d:69:3f:4a:64:af:64:38:33: ce:58:4d:cd:cf:4e:8e:88:70:80:04:53:37:91:13:c3:31:3c: e2:eb:ef:c7:e0:94:00:09:24:a0:e9:46:c5:89:96:50:7a:ad: 35:07:80:57:9b:78:fd:3a:a9:e9:a4:35:fc:a3:a9:6c:56:f0: 5b:b2:09:01:79:e8:43:34:71:ba:ae:f8:f3:c5:79:32:56:82: 23:a9:f8:49:aa:bd:fa:79:97:76:e0:d0:ad:15:17:98:53:eb: 64:52:91:e4:03:b6:6d:e9:5c:eb:26:a1:38:e6:89:f2:22:22: aa:e7:62:c7 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWExuTrKURp2Rg7ZaqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDEwNjAzMzIwN1oXDTI4MDQxMDAyMzIwN1owLzEtMCsGA1UEAxMk MmI2ODc4OTctMDc3Mi00OWI2LTllNGItMGY2ZmZlZTMwODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC6lA1SotDrtiOS81D7cexDC+u0/JorXCFIy L3+k2jAyXIb4x+/E/69mp46UYVVdNref/otMStC5pmW7chHg36OUf6CnFcXP/QHH DFAPkRuYLNhvkcXwliNXsLODhjNLVQBDTPEksGI0nxCBnYKJqYthFRXjq9fRRkjC 59zYm4ZHxjtUWnv70c7UAZNnKX9P1WJZh7MBUqhphzTagO2oQkOqzYJ++e8phVDZ MOh9tABzUez/fum9sXbki8TouGJFkJxWC1zh/IocBrWDcDywjmebeWw0wwnaf3xj aPjz2IeJWZH94nyHeYCCkjNS8xNpS1IMtJMsrFPlnN/rCU4xOQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIIwGnBgmRFH9++qCCADeHmr+ufyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8y YjY4Nzg5Ny0wNzcyLTQ5YjYtOWU0Yi0wZjZmZmVlMzA4OTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzJiNjg3ODk3LTA3NzItNDliNi05 ZTRiLTBmNmZmZWUzMDg5NC8yYjY4Nzg5Ny0wNzcyLTQ5YjYtOWU0Yi0wZjZmZmVl MzA4OTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARAGfAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dPIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAe8yu7/uoL4bO8O4Q0gCe0Ct24B3QGU2zFas/bPFrCSFmJuLu hr6+dmHyuIJMrHnnyqvNaM+G/2RbsjU6MHFr/NvgvTiz7ZSMIL7GIr7mzvWPk1Md j0FzCw4NeP2q8bWwMKajuXZHcXqzeNJ1aNdiiAPf4rRbEBJfu6hNMH++21CEy+48 C64rbWk/SmSvZDgzzlhNzc9OjohwgARTN5ETwzE84uvvx+CUAAkkoOlGxYmWUHqt NQeAV5t4/Tqp6aQ1/KOpbFbwW7IJAXnoQzRxuq7488V5MlaCI6n4Saq9+nmXduDQ rRUXmFPrZFKR5AO2belc6yahOOaJ8iIiqudixw== -----END CERTIFICATE-----Generated at Mon Jan 12 12:24:24 2026 by rpki-client