This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677.cer File: 423bfb5d-16be-44f8-b1ec-dead1152a677.cer (raw, json) Hash identifier: WeZzh5g+ZRLyWnpdDMLdgzi7DgV5LJ4dKt2Ioif3oas= Subject key identifier: A5:A6:4D:5C:AB:FD:D6:89:F5:0A:47:0F:1B:BC:66:5D:54:9F:43:07 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BECE9848E80AD095ED2C7C180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/423bfb5d-16be-44f8-b1ec-dead1152a677.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Nov 2025 19:08:59 +0000 Certificate not after: Wed 23 Feb 2028 19:08:59 +0000 Subordinate resources: AS: 13403 AS: 399725 IP: 134.128.224.0/19 IP: 167.94.192.0/22 IP: 216.108.216.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:e9:84:8e:80:ad:09:5e:d2:c7:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 20 19:08:59 2025 GMT Not After : Feb 23 19:08:59 2028 GMT Subject: CN=423bfb5d-16be-44f8-b1ec-dead1152a677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:f1:57:0b:ca:b4:45:54:0d:9c:74:e3:28: 7e:f9:6c:8f:79:4f:63:f0:9a:54:03:a8:d4:0f:fc: 96:d1:3c:e5:48:70:41:75:ce:e3:14:e2:8c:fe:6a: 31:d9:5e:b0:1f:82:e2:52:3f:88:35:8e:9b:dd:33: 7e:b2:96:41:50:28:57:de:8d:be:89:c0:91:85:a7: 19:fa:64:c4:e1:9e:db:e1:98:c7:fe:eb:e1:47:d7: dc:9a:a3:b1:6c:44:7b:1b:8b:2c:b2:31:50:92:2b: b7:c8:89:dd:fe:7b:61:ab:56:fb:73:f8:2c:0e:38: e5:10:7c:79:87:56:72:20:2b:b3:f4:9f:b5:90:12: 21:f9:b1:79:a4:ec:2e:eb:dd:4b:21:51:50:0f:58: 41:82:f9:31:29:5d:0e:ce:27:f8:bd:0f:f2:82:57: a0:32:ff:04:e8:63:49:bc:ee:f7:59:2d:e0:d1:8c: a5:9d:00:e5:0e:16:56:9c:4d:a4:f3:99:06:ea:a3: c5:23:d4:52:b2:56:b0:04:f1:5b:58:5b:d5:37:56: 85:28:bf:da:2d:e3:dc:7f:77:80:ed:7c:42:61:98: b9:0f:4b:69:d0:87:72:3e:9f:b1:c0:f4:d0:96:ad: 09:0d:88:dc:73:89:2c:29:5c:e6:9e:e1:c4:09:09: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A6:4D:5C:AB:FD:D6:89:F5:0A:47:0F:1B:BC:66:5D:54:9F:43:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/423bfb5d-16be-44f8-b1ec-dead1152a677.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 134.128.224.0/19 167.94.192.0/22 216.108.216.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13403 399725 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:55:e7:08:bd:67:5b:2b:ac:7f:20:87:a1:23:7c:e4:99:d0: 48:be:c6:bb:7e:5c:7b:f8:81:c4:16:27:fd:56:15:44:66:47: e6:fc:21:96:ba:99:29:c6:8b:c6:92:c1:fb:07:86:5e:4a:06: 81:11:32:2c:7e:1c:ae:63:a4:fe:e2:4e:95:c9:3c:5d:29:6f: 1b:06:51:f5:06:32:87:33:a5:32:98:40:13:87:fb:00:76:59: 2b:93:d5:a0:fe:02:05:3d:55:c4:19:3a:30:c6:dd:7f:5c:b5: a2:b4:f5:61:31:4e:f9:e1:f5:6e:d7:37:b0:4d:a8:ee:26:a7: e3:1a:d3:ac:01:0f:48:8a:9b:cf:a3:26:e1:83:62:72:54:ab: 8c:80:3a:33:e3:94:04:86:47:40:bf:f4:a0:00:d6:21:1b:0c: 7a:5a:b3:57:44:a4:0f:59:b3:e8:00:66:3b:eb:fc:57:3e:eb: ba:9f:94:54:70:b1:87:ba:e8:ab:b1:8b:59:32:37:07:ae:1c: ad:48:8e:21:dc:82:bd:c8:d3:79:03:c4:82:ba:66:9c:e2:aa: b6:3d:32:9d:fe:6f:33:c2:54:6e:24:4d:5e:62:78:4a:13:e4: b8:d1:95:13:4d:7a:47:45:0b:21:60:0f:69:0a:23:22:2c:75: ac:d3:a4:94 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEvs6YSOgK0JXtLHwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyMDE5MDg1OVoXDTI4MDIyMzE5MDg1OVowLzEtMCsGA1UEAxMk NDIzYmZiNWQtMTZiZS00NGY4LWIxZWMtZGVhZDExNTJhNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg7xVwvKtEVUDZx04yh++WyPeU9j8JpUA6jU D/yW0TzlSHBBdc7jFOKM/mox2V6wH4LiUj+INY6b3TN+spZBUChX3o2+icCRhacZ +mTE4Z7b4ZjH/uvhR9fcmqOxbER7G4sssjFQkiu3yInd/nthq1b7c/gsDjjlEHx5 h1ZyICuz9J+1kBIh+bF5pOwu691LIVFQD1hBgvkxKV0Ozif4vQ/yglegMv8E6GNJ vO73WS3g0YylnQDlDhZWnE2k85kG6qPFI9RSslawBPFbWFvVN1aFKL/aLePcf3eA 7XxCYZi5D0tp0IdyPp+xwPTQlq0JDYjcc4ksKVzmnuHECQmZbwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKWmTVyr/daJ9QpHDxu8Zl1Un0MHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 MjNiZmI1ZC0xNmJlLTQ0ZjgtYjFlYy1kZWFkMTE1MmE2NzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzQyM2JmYjVkLTE2YmUtNDRmOC1i MWVjLWRlYWQxMTUyYTY3Ny80MjNiZmI1ZC0xNmJlLTQ0ZjgtYjFlYy1kZWFkMTE1 MmE2NzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAWGgOADBAKnXsADBAHYbNgwHgYIKwYBBQUHAQgB Af8EDzANoAswCQICNFsCAwYZbTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXVecIvWdbK6x/IIehI3zkmdBI vsa7flx7+IHEFif9VhVEZkfm/CGWupkpxovGksH7B4ZeSgaBETIsfhyuY6T+4k6V yTxdKW8bBlH1BjKHM6UymEATh/sAdlkrk9Wg/gIFPVXEGTowxt1/XLWitPVhMU75 4fVu1zewTajuJqfjGtOsAQ9IipvPoybhg2JyVKuMgDoz45QEhkdAv/SgANYhGwx6 WrNXRKQPWbPoAGY76/xXPuu6n5RUcLGHuuirsYtZMjcHrhytSI4h3IK9yNN5A8SC umac4qq2PTKd/m8zwlRuJE1eYnhKE+S40ZUTTXpHRQshYA9pCiMiLHWs06SU -----END CERTIFICATE-----Generated at Fri Nov 28 06:12:10 2025 by rpki-client