This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer File: 4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer (raw, json) Hash identifier: s84xgxxabwtoUkRYPGJC1cQuoJnT9I8E1hca2UTc/oE= Subject key identifier: 18:F9:DA:91:FD:FC:57:A5:28:F5:40:9B:11:CD:B8:2D:D9:A9:0B:C3 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BF8AF642B0F388AC004800F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Nov 2025 00:21:34 +0000 Certificate not after: Mon 28 Feb 2028 00:21:34 +0000 Subordinate resources: AS: 397562 AS: 399463 IP: 23.169.16.0/24 IP: 69.90.230.0/24 IP: 216.98.172.0/24 IP: 2602:fd99::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:af:64:2b:0f:38:8a:c0:04:80:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 25 00:21:34 2025 GMT Not After : Feb 28 00:21:34 2028 GMT Subject: CN=4a214c14-52f7-4b21-a2ec-7e64e41ea27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:ab:2c:82:aa:5a:5a:d2:76:22:6e:21:c0: 5e:86:f8:31:98:a3:94:23:3c:1d:86:40:a3:4a:68: 40:a7:de:30:28:1f:40:f6:06:1c:0a:91:7c:a1:e3: ae:45:5c:1c:86:f4:40:3d:98:27:d6:f8:34:9b:a5: 1a:18:03:7a:d7:b3:e3:53:8b:6f:d6:04:ed:8c:d7: 73:f7:b2:4e:d2:4b:68:8c:80:5b:ee:ec:6d:eb:d1: b4:e3:4e:3b:d7:9e:f0:1c:41:c2:80:26:41:fd:b8: 86:b9:de:c0:0c:08:8a:a9:18:e7:53:88:50:fe:79: 28:6e:9b:55:bb:ab:74:f1:2d:57:f6:1b:f4:be:a3: de:07:55:e1:04:24:75:88:f2:73:dc:34:fc:ef:fd: 47:ab:28:e2:1e:82:3a:2c:32:a4:76:25:b0:c5:59: bd:50:ce:c5:96:69:03:58:6f:1c:70:8f:03:14:83: 1c:b2:16:e7:44:4e:18:b5:d1:a9:68:37:e3:97:60: a0:56:5a:0d:dc:42:33:e7:74:55:c3:2d:d6:75:9c: 6c:9d:83:99:76:6c:6e:43:59:ea:68:e7:4a:e2:80: cf:70:d8:d3:d0:a9:b0:8f:ad:d2:27:59:fe:84:20: 44:9a:a1:37:94:e8:0a:e0:4b:1c:f3:dd:f4:70:b6: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F9:DA:91:FD:FC:57:A5:28:F5:40:9B:11:CD:B8:2D:D9:A9:0B:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.169.16.0/24 69.90.230.0/24 216.98.172.0/24 IPv6: 2602:fd99::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397562 399463 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ba:fa:06:de:28:5d:f2:eb:e7:ff:7f:95:d4:1e:1e:cd:ca: a2:d9:d4:c9:4f:15:ae:5d:37:18:4e:fd:80:70:2f:81:54:ae: d5:91:0e:6a:0b:7c:e5:34:28:22:71:35:eb:a6:8a:4f:3b:f5: e0:0b:aa:ce:08:a0:bb:ff:a1:92:31:fa:a8:2d:cf:95:ed:84: c0:65:78:86:c3:79:5d:45:f2:ac:f5:71:8b:99:57:c5:ea:ec: 4a:07:79:85:06:2c:df:e8:f4:5d:eb:b2:56:0f:b3:90:0c:42: 9c:a1:ad:0c:3f:1f:ea:78:46:39:55:8f:8f:ed:6e:9e:03:3c: 76:81:71:5b:c9:68:8e:1e:74:6e:99:2e:be:67:ed:7f:21:3a: 21:51:3a:94:3c:13:88:f3:20:16:c4:bf:03:3d:d6:a6:75:59: 2a:7b:9b:ef:cd:e5:4c:c4:a4:1e:0a:37:76:b0:78:10:e2:3e: 21:bd:ae:9e:84:4a:97:24:54:17:06:61:fc:a7:6c:aa:06:df: e5:f0:6b:a6:7a:df:89:de:b4:8a:dd:b6:a8:cd:ea:3e:0e:21: 1a:3b:a8:cf:c7:07:6c:16:a6:ad:95:17:00:c5:ca:3f:e3:8d: 9b:cd:16:81:fb:8f:46:b2:12:ac:de:66:37:dd:fb:cb:f0:4f: c9:6c:ed:1d -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEv4r2QrDziKwASAD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNTAwMjEzNFoXDTI4MDIyODAwMjEzNFowLzEtMCsGA1UEAxMk NGEyMTRjMTQtNTJmNy00YjIxLWEyZWMtN2U2NGU0MWVhMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4arLIKqWlrSdiJuIcBehvgxmKOUIzwdhkCj SmhAp94wKB9A9gYcCpF8oeOuRVwchvRAPZgn1vg0m6UaGAN617PjU4tv1gTtjNdz 97JO0ktojIBb7uxt69G04047157wHEHCgCZB/biGud7ADAiKqRjnU4hQ/nkobptV u6t08S1X9hv0vqPeB1XhBCR1iPJz3DT87/1HqyjiHoI6LDKkdiWwxVm9UM7FlmkD WG8ccI8DFIMcshbnRE4YtdGpaDfjl2CgVloN3EIz53RVwy3WdZxsnYOZdmxuQ1nq aOdK4oDPcNjT0Kmwj63SJ1n+hCBEmqE3lOgK4Esc8930cLZqTwIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFBj52pH9/FelKPVAmxHNuC3ZqQvDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 YTIxNGMxNC01MmY3LTRiMjEtYTJlYy03ZTY0ZTQxZWEyN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRhMjE0YzE0LTUyZjctNGIyMS1h MmVjLTdlNjRlNDFlYTI3ZC80YTIxNGMxNC01MmY3LTRiMjEtYTJlYy03ZTY0ZTQx ZWEyN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXqRADBABFWuYDBADYYqwwDgQCAAIwCAMGBCYC /ZkAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwYQ+gIDBhhnMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADy6 +gbeKF3y6+f/f5XUHh7NyqLZ1MlPFa5dNxhO/YBwL4FUrtWRDmoLfOU0KCJxNeum ik879eALqs4IoLv/oZIx+qgtz5XthMBleIbDeV1F8qz1cYuZV8Xq7EoHeYUGLN/o 9F3rslYPs5AMQpyhrQw/H+p4RjlVj4/tbp4DPHaBcVvJaI4edG6ZLr5n7X8hOiFR OpQ8E4jzIBbEvwM91qZ1WSp7m+/N5UzEpB4KN3aweBDiPiG9rp6ESpckVBcGYfyn bKoG3+Xwa6Z634netIrdtqjN6j4OIRo7qM/HB2wWpq2VFwDFyj/jjZvNFoH7j0ay EqzeZjfd+8vwT8ls7R0= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:51 2025 by rpki-client