This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3f4e94e2-0edb-45ee-b1da-eba18c77b68a.cer File: 3f4e94e2-0edb-45ee-b1da-eba18c77b68a.cer (raw, json) Hash identifier: FBW9UIxdgmmwT5L8yDbU1qN/tX7PeLw8C+1itNOEW9A= Subject key identifier: 96:EA:A9:DA:1E:9D:84:0F:3B:3C:9D:44:AF:2F:01:93:B0:97:3D:03 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BDC15FB4C5CE47844ECF42080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3f4e94e2-0edb-45ee-b1da-eba18c77b68a/3f4e94e2-0edb-45ee-b1da-eba18c77b68a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3f4e94e2-0edb-45ee-b1da-eba18c77b68a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Nov 2025 18:29:50 +0000 Certificate not after: Thu 17 Feb 2028 18:29:50 +0000 Subordinate resources: AS: 23042 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:15:fb:4c:5c:e4:78:44:ec:f4:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 14 18:29:50 2025 GMT Not After : Feb 17 18:29:50 2028 GMT Subject: CN=3f4e94e2-0edb-45ee-b1da-eba18c77b68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:ef:a2:62:9b:19:dc:4e:8a:64:ff:c4:4d: 89:26:c7:65:65:fd:ca:1a:64:64:15:bb:fb:f6:58: f9:3d:7e:12:7e:fc:2f:b9:33:9a:51:e4:b5:e4:f0: 03:ff:44:c6:5a:3b:02:a5:4e:51:da:56:d8:8e:2b: ff:82:5b:94:0f:74:01:5e:59:c5:a2:28:8f:a5:88: e7:56:1a:ea:1e:96:e7:df:6e:f7:9f:c7:a2:ec:6a: 9c:7f:a8:6e:32:0b:eb:ef:57:e1:92:50:00:ba:64: a7:af:e9:fd:01:f0:89:e2:29:eb:0d:ff:84:29:df: 92:89:f0:ef:9e:cf:e7:f9:e9:22:fe:66:31:7f:46: d2:fc:c3:53:14:63:8c:33:dd:74:fd:70:7d:2d:1a: 50:b5:6e:be:cd:29:04:2e:c3:b9:33:66:da:b9:ea: 2d:a2:6b:fd:9f:ff:ea:71:7c:19:b7:ae:14:77:61: 73:2c:85:59:ab:f5:25:b1:97:1e:e6:92:a6:c0:66: 5e:e6:b7:91:15:2b:0f:55:cd:c8:39:e9:c3:c8:0b: e1:74:d3:af:b0:e9:86:0a:4d:d5:29:14:6f:f3:88: d4:14:55:69:2a:91:86:a9:ea:d9:1f:d0:b3:cb:25: 9f:04:f9:00:ba:a8:7e:9a:f4:d5:d4:83:14:90:d0: 3e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EA:A9:DA:1E:9D:84:0F:3B:3C:9D:44:AF:2F:01:93:B0:97:3D:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3f4e94e2-0edb-45ee-b1da-eba18c77b68a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3f4e94e2-0edb-45ee-b1da-eba18c77b68a/3f4e94e2-0edb-45ee-b1da-eba18c77b68a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 23042 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:17:97:fe:d3:3d:56:84:fc:91:d3:9e:41:f8:e4:a3:30:b0: 69:c3:fc:c8:10:03:7e:3d:cb:3c:16:6a:47:de:51:be:2e:91: 01:6c:37:85:f9:08:b3:39:71:64:54:e4:5a:4f:58:64:f5:49: 43:5d:3d:53:09:f8:ef:8d:7d:1e:71:7e:88:1d:84:b7:64:49: 40:b2:1c:4b:2d:13:87:3c:2b:33:44:f8:0c:cd:03:06:2e:65: 89:33:fa:bc:37:0c:4f:75:f5:23:9c:77:2d:62:bc:5d:8c:f0: dd:72:1c:92:86:3e:35:73:e4:93:05:17:61:1b:fd:2c:5d:40: ed:6e:45:85:26:2c:0f:3a:69:f5:d5:20:cd:21:85:df:65:d0: 67:ac:3d:a6:f4:e8:c0:9f:f7:7e:d2:78:df:40:20:5d:a1:d2: c1:5d:2f:d6:fd:31:16:5a:fc:8c:9b:aa:52:87:ff:ac:3e:6a: cc:34:22:3c:b7:fd:e5:8e:26:f4:d0:5f:53:f0:85:d5:62:8b: 5a:98:1a:ff:97:bf:02:2c:5f:89:90:5c:39:b1:0a:71:38:31: 4e:b8:64:c0:f0:e6:13:be:c3:8f:e2:fa:05:21:4e:69:16:41: 81:c2:90:6c:f7:27:15:f8:ca:39:82:5d:b1:81:b8:6f:a5:b3: 43:34:13:84 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEvcFftMXOR4ROz0IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExNDE4Mjk1MFoXDTI4MDIxNzE4Mjk1MFowLzEtMCsGA1UEAxMk M2Y0ZTk0ZTItMGVkYi00NWVlLWIxZGEtZWJhMThjNzdiNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls3vomKbGdxOimT/xE2JJsdlZf3KGmRkFbv7 9lj5PX4SfvwvuTOaUeS15PAD/0TGWjsCpU5R2lbYjiv/gluUD3QBXlnFoiiPpYjn VhrqHpbn3273n8ei7Gqcf6huMgvr71fhklAAumSnr+n9AfCJ4inrDf+EKd+SifDv ns/n+eki/mYxf0bS/MNTFGOMM910/XB9LRpQtW6+zSkELsO5M2baueotomv9n//q cXwZt64Ud2FzLIVZq/UlsZce5pKmwGZe5reRFSsPVc3IOenDyAvhdNOvsOmGCk3V KRRv84jUFFVpKpGGqerZH9CzyyWfBPkAuqh+mvTV1IMUkNA+twIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFJbqqdoenYQPOzydRK8vAZOwlz0DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z ZjRlOTRlMi0wZWRiLTQ1ZWUtYjFkYS1lYmExOGM3N2I2OGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzNmNGU5NGUyLTBlZGItNDVlZS1i MWRhLWViYTE4Yzc3YjY4YS8zZjRlOTRlMi0wZWRiLTQ1ZWUtYjFkYS1lYmExOGM3 N2I2OGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICWgIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAexeX/tM9VoT8kdOeQfjkozCwacP8 yBADfj3LPBZqR95Rvi6RAWw3hfkIszlxZFTkWk9YZPVJQ109Uwn47419HnF+iB2E t2RJQLIcSy0ThzwrM0T4DM0DBi5liTP6vDcMT3X1I5x3LWK8XYzw3XIckoY+NXPk kwUXYRv9LF1A7W5FhSYsDzpp9dUgzSGF32XQZ6w9pvTowJ/3ftJ430AgXaHSwV0v 1v0xFlr8jJuqUof/rD5qzDQiPLf95Y4m9NBfU/CF1WKLWpga/5e/AixfiZBcObEK cTgxTrhkwPDmE77Dj+L6BSFOaRZBgcKQbPcnFfjKOYJdsYG4b6WzQzQThA== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:47 2025 by rpki-client