This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.cer File: 46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.cer (raw, json) Hash identifier: t50w+SQ14O2AlIJGhWWHsjDtH33GLHQM4qPn8nTSlZg= Subject key identifier: 0D:F9:D7:68:00:02:78:2D:9A:95:01:6A:C4:A6:16:70:69:D4:61:17 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BD3774AE61DBA17BCC49F5760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Nov 2025 16:23:37 +0000 Certificate not after: Mon 14 Feb 2028 16:23:37 +0000 Subordinate resources: AS: 401232 IP: 104.219.64.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:77:4a:e6:1d:ba:17:bc:c4:9f:57:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 11 16:23:37 2025 GMT Not After : Feb 14 16:23:37 2028 GMT Subject: CN=46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:7e:40:aa:1a:20:8e:38:0c:54:46:2a:3a: e2:6e:93:bc:4a:d6:93:63:de:92:2d:89:6b:7f:9b: 62:a9:42:03:ba:35:3a:84:4f:05:dd:fc:f3:60:a9: c0:95:f7:55:f7:a5:cf:3d:6b:c3:06:90:a5:85:67: 66:0e:ae:74:b3:c3:75:f2:d1:67:fa:cd:3d:6e:14: ff:42:08:f3:aa:53:d7:40:66:97:06:5b:b7:b1:25: 07:62:99:db:d3:57:1f:1b:4f:f4:de:5d:a0:5a:ab: e4:c9:5f:2a:8c:1d:9c:09:fa:fc:48:56:34:e7:0f: 93:fa:77:48:89:a3:0d:26:f7:3d:3b:b9:a9:05:d4: 36:8f:31:44:35:fb:1c:b2:1f:87:06:a1:2d:d0:80: cd:d1:12:f7:2f:82:68:2f:0e:48:5e:8a:bd:ec:09: de:60:a3:2d:47:d8:54:80:12:f5:11:d5:97:f0:75: 06:c4:39:80:c2:62:2a:15:11:c0:76:bc:32:2e:89: 86:20:78:66:41:31:32:b4:7b:3f:6d:6c:af:30:c8: d1:de:62:49:44:e9:3a:d9:06:23:bf:70:54:b9:9b: 08:18:18:78:5e:e2:f1:c2:01:ad:77:04:2e:00:d0: 23:de:32:38:d2:06:a5:3d:80:13:de:94:49:e0:ad: b3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F9:D7:68:00:02:78:2D:9A:95:01:6A:C4:A6:16:70:69:D4:61:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd/46c9efe4-8b1a-4aec-b5ff-3fcdff1640bd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 104.219.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401232 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a0:7e:db:89:78:0f:aa:08:98:1c:11:15:41:71:3c:45:9e: 45:c0:3a:63:21:be:90:e4:99:55:00:75:44:27:fb:dd:37:e1: 7a:2d:1e:85:24:83:88:5f:c0:fd:02:60:70:94:b4:c8:aa:fd: a6:dd:4a:42:3c:cf:39:0b:36:b1:38:42:b9:24:89:c8:c6:4d: af:ec:ba:6a:64:23:7c:fb:5b:e8:6a:f2:f6:6a:13:8f:2f:9f: 7f:14:5f:5e:ac:c5:69:ce:37:2a:0a:36:d4:08:57:b5:8b:ca: f1:b7:8b:c7:25:60:93:fe:7f:af:45:43:70:51:dc:e9:70:05: 01:b6:6e:26:ce:b2:86:7a:5d:99:39:aa:c7:bc:31:45:cc:8a: 92:b7:dc:04:1b:bf:0b:77:1d:ce:85:1a:64:cd:c6:3e:ad:61: 10:9f:07:5e:7b:13:ff:1b:c0:e5:56:c1:81:7c:b8:b5:47:ea: d6:3d:2e:46:db:4e:d1:2d:ff:f5:99:6a:0e:78:f3:f5:93:fb: 8d:a2:60:bf:75:01:4c:a6:e2:08:99:52:c8:fc:bd:fc:34:b7: a0:f4:30:04:ab:51:26:76:9c:36:df:3d:07:79:a8:7b:12:1a: 46:88:5a:5b:bd:23:48:a0:fd:7f:2b:7f:66:66:cc:4a:c9:8d: 4e:b4:63:f2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEvTd0rmHboXvMSfV2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExMTE2MjMzN1oXDTI4MDIxNDE2MjMzN1owLzEtMCsGA1UEAxMk NDZjOWVmZTQtOGIxYS00YWVjLWI1ZmYtM2ZjZGZmMTY0MGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZl+QKoaII44DFRGKjribpO8StaTY96SLYlr f5tiqUIDujU6hE8F3fzzYKnAlfdV96XPPWvDBpClhWdmDq50s8N18tFn+s09bhT/ QgjzqlPXQGaXBlu3sSUHYpnb01cfG0/03l2gWqvkyV8qjB2cCfr8SFY05w+T+ndI iaMNJvc9O7mpBdQ2jzFENfscsh+HBqEt0IDN0RL3L4JoLw5IXoq97AneYKMtR9hU gBL1EdWX8HUGxDmAwmIqFRHAdrwyLomGIHhmQTEytHs/bWyvMMjR3mJJROk62QYj v3BUuZsIGBh4XuLxwgGtdwQuANAj3jI40galPYAT3pRJ4K2zrwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFA3512gAAngtmpUBasSmFnBp1GEXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 NmM5ZWZlNC04YjFhLTRhZWMtYjVmZi0zZmNkZmYxNjQwYmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzQ2YzllZmU0LThiMWEtNGFlYy1i NWZmLTNmY2RmZjE2NDBiZC80NmM5ZWZlNC04YjFhLTRhZWMtYjVmZi0zZmNkZmYx NjQwYmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJo20AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh9QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGOgftuJeA+qCJgcERVBcTxFnkXAOmMhvpDkmVUAdUQn+903 4XotHoUkg4hfwP0CYHCUtMiq/abdSkI8zzkLNrE4QrkkicjGTa/sumpkI3z7W+hq 8vZqE48vn38UX16sxWnONyoKNtQIV7WLyvG3i8clYJP+f69FQ3BR3OlwBQG2bibO soZ6XZk5qse8MUXMipK33AQbvwt3Hc6FGmTNxj6tYRCfB157E/8bwOVWwYF8uLVH 6tY9LkbbTtEt//WZag548/WT+42iYL91AUym4giZUsj8vfw0t6D0MASrUSZ2nDbf PQd5qHsSGkaIWlu9I0ig/X8rf2ZmzErJjU60Y/I= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:51 2025 by rpki-client