This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba.cer File: 4b3a1476-b23b-4161-a034-14838a929eba.cer (raw, json) Hash identifier: xsjYsElmB2t9aho0GSBlrM0JW5EsKCMqZHgO692orDo= Subject key identifier: A1:B8:74:60:76:D1:C5:C5:CA:F8:08:C7:46:E9:37:07:20:0E:E9:C4 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BF80E323B1272E184C804A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba/4b3a1476-b23b-4161-a034-14838a929eba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Nov 2025 18:56:46 +0000 Certificate not after: Sun 27 Feb 2028 18:56:46 +0000 Subordinate resources: AS: 1423 IP: 76.77.208.0/20 IP: 153.55.128.0/19 IP: 162.244.224.0/22 IP: 199.193.164.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:0e:32:3b:12:72:e1:84:c8:04:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 24 18:56:46 2025 GMT Not After : Feb 27 18:56:46 2028 GMT Subject: CN=4b3a1476-b23b-4161-a034-14838a929eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:cb:2f:69:46:11:a4:be:ce:6e:b0:ff:83: ae:87:06:99:6f:6f:d5:26:1b:c6:18:e1:57:0b:cb: b7:3f:66:f7:d3:52:28:41:df:69:10:62:b5:2e:13: 42:d1:4f:4a:df:4f:0f:20:f2:e5:b3:4b:06:18:db: 0f:0b:ea:72:cc:e0:92:02:97:2a:23:fe:5f:a2:73: f0:d7:47:36:62:69:32:37:44:a6:c9:38:ec:93:a4: 7b:d4:9d:56:df:db:0b:ef:99:34:94:8b:43:f1:38: 8e:67:67:d2:44:fe:7b:d7:83:f6:f9:05:4d:9b:23: ea:6e:81:aa:73:4a:1c:54:02:86:85:5d:52:03:86: 11:a8:ff:95:dd:d2:ae:a4:ab:da:98:1e:59:07:65: 73:1c:e8:39:23:88:cf:c3:35:14:8d:64:47:85:ef: 5e:91:30:03:83:6c:d1:79:0e:a6:ba:30:0e:fa:ef: 30:40:9c:80:74:49:cb:04:14:19:6a:c4:45:f3:73: 88:7a:22:7c:3a:ce:fe:9b:1d:a2:4a:ca:f4:6d:f4: 53:5e:f0:99:4d:2f:6b:ed:d5:a7:8e:0b:00:70:47: 7d:dc:1c:90:15:59:5b:79:58:f4:40:d9:d0:23:2e: 06:81:31:45:b4:63:7f:77:3e:86:fe:0f:9a:ce:06: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B8:74:60:76:D1:C5:C5:CA:F8:08:C7:46:E9:37:07:20:0E:E9:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b3a1476-b23b-4161-a034-14838a929eba/4b3a1476-b23b-4161-a034-14838a929eba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 76.77.208.0/20 153.55.128.0/19 162.244.224.0/22 199.193.164.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1423 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:cb:00:d6:9b:34:31:a4:aa:d3:01:03:6a:83:75:7b:fa:e5: fd:33:f9:ab:5f:52:09:c4:e1:0a:cf:c0:e7:6b:ce:88:41:59: 3c:f6:84:5d:84:0b:78:28:6e:31:08:18:2a:31:2c:23:84:37: 2a:c6:9d:24:1f:4c:41:5f:d1:cf:44:b3:81:2b:33:97:0d:7b: 5e:33:a8:ad:93:b1:36:76:4b:a5:20:97:8a:51:e4:20:da:65: 3a:8f:5c:ed:52:1e:98:47:18:b0:e0:56:92:3c:1f:43:69:40: f4:75:48:39:9e:84:6c:c4:45:40:63:36:81:b8:9c:83:61:07: c0:69:bf:85:ba:42:3f:da:f5:08:ed:4e:35:cc:a5:6d:34:dc: bf:c8:ec:86:ef:e4:21:3a:76:ea:18:ec:91:a8:32:ea:19:1f: 8b:47:e1:55:bc:3b:55:2f:dc:4a:c8:b2:19:92:fc:61:53:d0: b8:f6:d9:57:7e:0b:62:a6:33:7e:7d:b4:d9:80:47:c9:f6:c3: 3f:5d:2a:3f:7a:28:7a:d3:5e:a8:70:79:4b:6c:58:2a:77:47: bb:a7:c1:23:bd:24:1f:c3:cd:3c:ad:61:39:0c:39:b0:7f:60: fb:f6:7f:a6:7c:25:b6:27:1e:98:be:6a:43:b1:28:17:5a:6f: ba:a7:58:cb -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEv4DjI7EnLhhMgEoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNDE4NTY0NloXDTI4MDIyNzE4NTY0NlowLzEtMCsGA1UEAxMk NGIzYTE0NzYtYjIzYi00MTYxLWEwMzQtMTQ4MzhhOTI5ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfHLL2lGEaS+zm6w/4OuhwaZb2/VJhvGGOFX C8u3P2b301IoQd9pEGK1LhNC0U9K308PIPLls0sGGNsPC+pyzOCSApcqI/5fonPw 10c2YmkyN0SmyTjsk6R71J1W39sL75k0lItD8TiOZ2fSRP5714P2+QVNmyPqboGq c0ocVAKGhV1SA4YRqP+V3dKupKvamB5ZB2VzHOg5I4jPwzUUjWRHhe9ekTADg2zR eQ6mujAO+u8wQJyAdEnLBBQZasRF83OIeiJ8Os7+mx2iSsr0bfRTXvCZTS9r7dWn jgsAcEd93ByQFVlbeVj0QNnQIy4GgTFFtGN/dz6G/g+azgbHZwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFKG4dGB20cXFyvgIx0bpNwcgDunEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 YjNhMTQ3Ni1iMjNiLTQxNjEtYTAzNC0xNDgzOGE5MjllYmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRiM2ExNDc2LWIyM2ItNDE2MS1h MDM0LTE0ODM4YTkyOWViYS80YjNhMTQ3Ni1iMjNiLTQxNjEtYTAzNC0xNDgzOGE5 MjllYmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBARMTdADBAWZN4ADBAKi9OADBALHwaQwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICBY8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJcsA1ps0MaSq0wEDaoN1e/rl /TP5q19SCcThCs/A52vOiEFZPPaEXYQLeChuMQgYKjEsI4Q3KsadJB9MQV/Rz0Sz gSszlw17XjOorZOxNnZLpSCXilHkINplOo9c7VIemEcYsOBWkjwfQ2lA9HVIOZ6E bMRFQGM2gbicg2EHwGm/hbpCP9r1CO1ONcylbTTcv8jshu/kITp26hjskagy6hkf i0fhVbw7VS/cSsiyGZL8YVPQuPbZV34LYqYzfn202YBHyfbDP10qP3ooetNeqHB5 S2xYKndHu6fBI70kH8PNPK1hOQw5sH9g+/Z/pnwlticemL5qQ7EoF1pvuqdYyw== -----END CERTIFICATE-----Generated at Fri Nov 28 06:12:01 2025 by rpki-client