This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/368ef5bc-8b32-43b3-a2c4-f2c1c14b5e7d.cer File: 368ef5bc-8b32-43b3-a2c4-f2c1c14b5e7d.cer (raw, json) Hash identifier: jEnitFq/UqmrddC6Qlp2Xsq/f8V0Y1n7H4ngd3b2kZs= Subject key identifier: B8:6A:40:9B:F2:24:24:1D:26:0E:97:16:7B:26:DF:95:6C:07:9E:D5 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BE49E87A4A0EAAF0295858F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/368ef5bc-8b32-43b3-a2c4-f2c1c14b5e7d/368ef5bc-8b32-43b3-a2c4-f2c1c14b5e7d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/368ef5bc-8b32-43b3-a2c4-f2c1c14b5e7d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Nov 2025 19:51:25 +0000 Certificate not after: Sun 20 Feb 2028 19:51:25 +0000 Subordinate resources: AS: 20082 IP: 23.133.60.0/24 IP: 2602:f71c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e4:9e:87:a4:a0:ea:af:02:95:85:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 17 19:51:25 2025 GMT Not After : Feb 20 19:51:25 2028 GMT Subject: CN=368ef5bc-8b32-43b3-a2c4-f2c1c14b5e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:f0:70:09:29:57:ab:d2:54:a2:c0:77:39: 92:45:d8:19:23:f0:71:70:52:14:37:e0:06:4b:0e: 1f:99:b2:1e:69:f4:27:2b:f3:1c:6e:2e:7c:43:89: c2:ee:e7:57:c1:19:6f:97:84:74:cd:e1:26:22:9c: c7:1f:4f:26:c8:8e:f0:21:5f:f3:ef:a8:35:f8:b3: ce:9b:56:89:36:ec:e6:fe:c5:1d:19:b5:be:d1:8b: 68:6b:fe:bd:6c:e3:99:9b:8e:4e:5d:a1:08:9b:88: a8:ec:94:a3:df:bb:8d:f7:2f:99:8c:2a:2e:80:1c: 2d:8b:28:ab:3b:31:42:75:c9:0e:94:f0:59:c1:ab: c2:4c:de:8b:0e:55:55:10:e6:1c:61:4b:1f:ed:cb: 45:42:3b:e9:01:cb:9a:99:66:da:18:56:74:a0:26: b0:39:23:b3:71:d1:7e:c4:a0:04:79:f0:ff:77:59: d8:53:62:a9:ec:29:44:d6:2d:2b:08:f4:11:43:35: a2:c5:33:f6:fb:ce:7a:c7:4c:c2:ad:76:49:f5:9a: 2e:4d:1f:6f:f9:57:a4:30:17:ab:4e:f6:6d:35:2e: e0:49:36:e2:4a:51:51:5f:9c:ae:f1:32:fc:c2:36: 3a:e3:58:b5:52:19:b9:8c:69:3a:0a:87:80:fa:30: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6A:40:9B:F2:24:24:1D:26:0E:97:16:7B:26:DF:95:6C:07:9E:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/368ef5bc-8b32-43b3-a2c4-f2c1c14b5e7d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/368ef5bc-8b32-43b3-a2c4-f2c1c14b5e7d/368ef5bc-8b32-43b3-a2c4-f2c1c14b5e7d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.133.60.0/24 IPv6: 2602:f71c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20082 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6a:92:22:1f:d8:39:22:ab:bb:80:75:fd:83:48:a4:6a:c2: 08:f2:ed:5a:cd:dc:38:44:e3:8e:8b:4f:94:16:10:1d:a5:46: 1e:23:ef:2b:c4:fe:ca:1d:8e:c1:3a:68:c6:cf:a1:a9:68:8d: dc:0b:73:0e:d5:21:6d:4a:6f:29:bb:9d:00:26:5a:6c:2a:36: 74:2c:3f:03:a9:29:41:ab:42:7e:97:42:8a:63:c7:6d:54:f4: 5d:97:7a:35:c5:3d:0f:73:12:8b:10:f2:79:ea:67:0a:53:88: e1:28:80:85:0f:8a:2b:2d:5f:4b:4b:56:48:26:83:0f:c5:b5: bb:31:06:82:40:c5:9f:3c:da:91:50:dc:67:4a:6d:9b:f2:9a: d0:1d:25:28:70:2a:f8:12:ec:9d:17:44:fb:d6:1b:31:a3:54: 7c:31:a5:32:8c:18:9a:47:fa:df:dc:a2:25:c8:f4:11:9e:0a: 32:aa:74:08:3e:9b:9c:d0:ee:4d:02:32:c2:f0:9d:6d:ca:d4: 0c:8d:f7:fd:41:08:c1:cb:fe:55:e5:dc:f9:d7:cd:ca:e9:82: bf:fe:9d:c4:90:f6:64:61:4b:9c:02:64:6d:8b:49:6d:d8:6f: 15:c1:44:7b:ed:55:7c:26:26:b7:4a:02:8b:9f:50:2a:c2:f3: 82:fb:b4:e2 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEvknoekoOqvApWFjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExNzE5NTEyNVoXDTI4MDIyMDE5NTEyNVowLzEtMCsGA1UEAxMk MzY4ZWY1YmMtOGIzMi00M2IzLWEyYzQtZjJjMWMxNGI1ZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgfwcAkpV6vSVKLAdzmSRdgZI/BxcFIUN+AG Sw4fmbIeafQnK/Mcbi58Q4nC7udXwRlvl4R0zeEmIpzHH08myI7wIV/z76g1+LPO m1aJNuzm/sUdGbW+0Ytoa/69bOOZm45OXaEIm4io7JSj37uN9y+ZjCougBwtiyir OzFCdckOlPBZwavCTN6LDlVVEOYcYUsf7ctFQjvpAcuamWbaGFZ0oCawOSOzcdF+ xKAEefD/d1nYU2Kp7ClE1i0rCPQRQzWixTP2+856x0zCrXZJ9ZouTR9v+VekMBer TvZtNS7gSTbiSlFRX5yu8TL8wjY641i1Uhm5jGk6CoeA+jAS8wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLhqQJvyJCQdJg6XFnsm35VsB57VMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z NjhlZjViYy04YjMyLTQzYjMtYTJjNC1mMmMxYzE0YjVlN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzM2OGVmNWJjLThiMzItNDNiMy1h MmM0LWYyYzFjMTRiNWU3ZC8zNjhlZjViYy04YjMyLTQzYjMtYTJjNC1mMmMxYzE0 YjVlN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhTwwDgQCAAIwCAMGACYC9xwAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAk5yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAABqkiIf2Dkiq7uAdf2DSKRqwgjy 7VrN3DhE446LT5QWEB2lRh4j7yvE/sodjsE6aMbPoalojdwLcw7VIW1Kbym7nQAm WmwqNnQsPwOpKUGrQn6XQopjx21U9F2XejXFPQ9zEosQ8nnqZwpTiOEogIUPiist X0tLVkgmgw/FtbsxBoJAxZ882pFQ3GdKbZvymtAdJShwKvgS7J0XRPvWGzGjVHwx pTKMGJpH+t/coiXI9BGeCjKqdAg+m5zQ7k0CMsLwnW3K1AyN9/1BCMHL/lXl3PnX zcrpgr/+ncSQ9mRhS5wCZG2LSW3YbxXBRHvtVXwmJrdKAoufUCrC84L7tOI= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:46 2025 by rpki-client