This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer File: 472e14ed-5432-4736-a4d2-f21c573a3c6c.cer (raw, json) Hash identifier: HXqRle/rmXDY9tOb1jXI54UplaqOSxetq+2ZycbbHH8= Subject key identifier: 8B:A2:BA:D7:51:5F:82:21:64:65:FB:12:18:B3:E5:AD:C2:E1:77:D4 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BD2E739C2D1B44789111ADA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Nov 2025 11:33:21 +0000 Certificate not after: Mon 14 Feb 2028 11:33:21 +0000 Subordinate resources: IP: 131.143.32.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d2:e7:39:c2:d1:b4:47:89:11:1a:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 11 11:33:21 2025 GMT Not After : Feb 14 11:33:21 2028 GMT Subject: CN=472e14ed-5432-4736-a4d2-f21c573a3c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:41:f1:55:68:5e:07:51:8d:f7:2f:31:a7:41: 9e:ed:e0:0d:0e:41:5a:14:59:7e:0c:be:e6:9b:43: 2e:9e:69:33:83:f1:9b:45:f1:2c:73:b3:01:d1:18: 57:01:bd:09:9b:07:3e:c2:ee:e6:29:6e:02:ef:59: ae:0b:8b:9e:d9:c8:0f:e3:9e:1f:c0:30:55:86:0e: 8e:c1:7c:0f:35:48:a8:05:3c:25:b3:4a:c3:a0:e2: 3f:8d:63:72:8b:b5:0d:18:4c:5d:55:e3:50:8e:80: 07:b9:d5:94:d5:2f:1b:ce:2c:11:4c:aa:db:2e:46: 38:40:90:81:78:a1:a3:1b:67:d2:54:be:b6:9d:e3: 5e:31:80:84:7e:08:c0:85:bb:f5:9a:d4:2f:86:de: f3:79:f1:00:2e:16:f3:96:87:89:03:ca:f6:37:9c: 89:10:d9:03:d8:8d:3f:d7:5c:f7:ec:6c:a0:70:c2: 38:65:9d:1f:a6:fa:c6:c5:26:c7:85:34:05:1f:ed: 8b:39:91:54:71:7a:74:3c:8f:dc:c3:5f:23:b9:ce: 89:fe:12:73:7e:c2:8b:8c:ac:1d:e7:40:72:6d:32: 21:20:74:24:87:54:6d:ec:fd:02:80:f5:e7:a2:84: 95:be:47:4f:a3:13:34:d3:e4:ca:d3:ef:ef:85:72: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A2:BA:D7:51:5F:82:21:64:65:FB:12:18:B3:E5:AD:C2:E1:77:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 131.143.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:09:4c:6f:0d:32:97:2b:2a:cb:82:1b:76:3a:4a:20:73:57: 9d:e5:da:ba:2a:8f:52:42:e0:e7:9a:38:a1:f9:cc:f9:3b:44: 45:b4:ee:67:30:b1:9a:c1:05:26:33:17:16:cf:64:60:1e:75: 48:ca:28:31:58:97:6e:e5:62:6b:fb:70:33:d1:51:59:a9:9f: db:19:ad:33:06:50:2e:69:fc:39:37:7f:ff:59:f0:46:81:2b: c7:a8:ee:32:f1:52:0d:fd:41:9a:0d:74:6c:5e:c8:e6:1c:70: 9e:dd:2b:d4:56:fd:c1:cf:8a:57:24:b6:23:8d:24:65:3c:5d: e3:43:93:92:d3:56:59:4e:d4:1e:88:ee:1d:db:81:10:e1:93: 93:ff:dd:78:06:fc:77:85:3b:20:05:3c:ce:71:9f:b5:f0:62: c7:9b:4e:21:a2:c7:24:87:b6:5d:ed:d2:55:d5:4e:ab:d1:7f: 6b:c8:84:30:dd:e6:84:fa:d4:50:27:f6:58:a9:01:1c:b0:73: 16:0f:e4:3d:d4:79:ac:89:0d:ad:42:54:e2:a0:e1:c9:be:c9: 12:6e:43:4f:0d:8d:55:07:5e:a5:86:62:f5:21:5f:03:0d:a9: d2:f0:b0:a9:98:00:72:c4:d7:4f:85:e8:60:af:81:a4:fa:53: 94:f2:54:4e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEvS5znC0bRHiREa2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExMTExMzMyMVoXDTI4MDIxNDExMzMyMVowLzEtMCsGA1UEAxMk NDcyZTE0ZWQtNTQzMi00NzM2LWE0ZDItZjIxYzU3M2EzYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUHxVWheB1GN9y8xp0Ge7eANDkFaFFl+DL7m m0Munmkzg/GbRfEsc7MB0RhXAb0Jmwc+wu7mKW4C71muC4ue2cgP454fwDBVhg6O wXwPNUioBTwls0rDoOI/jWNyi7UNGExdVeNQjoAHudWU1S8bziwRTKrbLkY4QJCB eKGjG2fSVL62neNeMYCEfgjAhbv1mtQvht7zefEALhbzloeJA8r2N5yJENkD2I0/ 11z37GygcMI4ZZ0fpvrGxSbHhTQFH+2LOZFUcXp0PI/cw18juc6J/hJzfsKLjKwd 50BybTIhIHQkh1Rt7P0CgPXnooSVvkdPoxM00+TK0+/vhXJEtQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIuiutdRX4IhZGX7Ehiz5a3C4XfUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 NzJlMTRlZC01NDMyLTQ3MzYtYTRkMi1mMjFjNTczYTNjNmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzQ3MmUxNGVkLTU0MzItNDczNi1h NGQyLWYyMWM1NzNhM2M2Yy80NzJlMTRlZC01NDMyLTQ3MzYtYTRkMi1mMjFjNTcz YTNjNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKDjyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcQlMbw0ylysqy4IbdjpK IHNXneXauiqPUkLg55o4ofnM+TtERbTuZzCxmsEFJjMXFs9kYB51SMooMViXbuVi a/twM9FRWamf2xmtMwZQLmn8OTd//1nwRoErx6juMvFSDf1Bmg10bF7I5hxwnt0r 1Fb9wc+KVyS2I40kZTxd40OTktNWWU7UHojuHduBEOGTk//deAb8d4U7IAU8znGf tfBix5tOIaLHJIe2Xe3SVdVOq9F/a8iEMN3mhPrUUCf2WKkBHLBzFg/kPdR5rIkN rUJU4qDhyb7JEm5DTw2NVQdepYZi9SFfAw2p0vCwqZgAcsTXT4XoYK+BpPpTlPJU Tg== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:50 2025 by rpki-client