This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer File: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer (raw, json) Hash identifier: D/28rikGm62/qUZpptyx3Iccj9j3nQtS+R5rDRB1Ba4= Subject key identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC7EBCDAF8FAB8F7F08984580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Nov 2025 13:08:41 +0000 Certificate not after: Thu 10 Feb 2028 13:08:41 +0000 Subordinate resources: IP: 23.146.4.0/24 IP: 2602:f550::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c7:eb:cd:af:8f:ab:8f:7f:08:98:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 7 13:08:41 2025 GMT Not After : Feb 10 13:08:41 2028 GMT Subject: CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:fb:5e:3b:c6:ae:5c:a2:9b:89:be:b9:89: ba:a2:dd:f6:b9:97:fe:40:71:09:54:7d:24:5e:39: 8a:ad:d0:c6:0a:9c:f9:5d:19:82:30:63:10:8d:c5: a2:44:df:fe:dc:19:11:fa:e2:0c:44:9b:43:56:89: c8:4b:60:8a:6f:94:cf:d5:68:0b:b3:be:f7:87:48: 39:33:d3:84:9a:86:76:57:c8:54:fd:fe:d3:46:34: bb:13:3d:42:83:e7:14:95:42:0c:67:0c:90:9f:70: 87:c5:39:ef:b3:50:7e:14:3c:b7:1d:47:c7:55:8b: d5:d9:3f:ef:82:ce:99:b2:51:07:b6:1a:13:3c:1d: 6c:c6:22:27:d6:c1:53:87:e1:87:ec:6e:6e:5f:9a: 5a:8e:d0:ea:74:37:26:6a:ec:e4:a9:f1:0e:4d:c3: 02:8a:d4:c0:c3:ab:9e:5e:b7:97:13:a4:91:db:af: 92:d4:ee:19:34:58:f9:ce:6a:84:c0:fd:1a:9d:0f: 8e:80:46:0c:0c:3f:ff:b3:70:21:d7:bc:7c:2b:31: 87:ea:9f:fa:e7:58:ed:d4:49:1d:87:1e:0b:43:e2: e8:a4:c9:1c:43:ab:3c:08:58:1f:0f:72:5c:73:9b: d2:24:e7:b9:d9:10:d3:14:73:83:02:25:f6:dc:f8: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.146.4.0/24 IPv6: 2602:f550::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c5:f7:7c:27:80:c5:b2:62:57:40:69:4d:7f:0f:ec:31:a0: cf:6c:e0:cf:c0:ef:d9:3b:8c:3d:26:cc:6b:15:b8:b1:68:93: a0:fd:3a:90:42:d8:29:a1:1f:fa:ac:29:af:aa:ba:05:3d:7c: 04:6d:00:46:1d:cc:1b:29:09:95:d7:37:79:7f:cb:88:77:c6: 8e:f1:f5:bd:45:00:4a:48:dd:c5:80:a9:9f:ba:f8:d6:96:8b: 66:78:20:14:36:6f:af:e4:28:fd:2c:7c:19:34:71:97:94:66: 73:8f:65:87:55:aa:08:90:57:11:d6:76:bf:47:97:7b:26:11: 7d:ca:e7:f4:4c:4f:88:9e:08:a0:01:14:13:4d:f0:8f:66:77: 7b:e8:51:5f:28:9d:58:d8:75:b7:b1:49:e8:47:9a:0f:e4:25: 4f:53:13:31:7a:81:8c:be:43:b1:48:4f:59:c1:40:6f:5f:9a: 35:0c:cb:bb:81:f2:ab:f0:69:42:35:07:41:78:d4:1e:55:f2: 43:cf:73:4e:a5:ec:2d:23:98:35:06:a7:82:ef:d1:5f:c5:f7: 5b:46:ed:59:fd:a3:9e:c0:e7:88:cc:25:0b:3a:f2:36:5a:e9: f8:2f:e6:02:62:f8:c5:58:66:a6:c7:5c:24:e8:85:35:f9:9a: 46:72:b4:27 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEvH682vj6uPfwiYRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNzEzMDg0MVoXDTI4MDIxMDEzMDg0MVowLzEtMCsGA1UEAxMk NGRjZGYxZjQtNWU2MC00MzhkLTg5MzQtMGNhMjFkMGI0NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfD7XjvGrlyim4m+uYm6ot32uZf+QHEJVH0k XjmKrdDGCpz5XRmCMGMQjcWiRN/+3BkR+uIMRJtDVonIS2CKb5TP1WgLs773h0g5 M9OEmoZ2V8hU/f7TRjS7Ez1Cg+cUlUIMZwyQn3CHxTnvs1B+FDy3HUfHVYvV2T/v gs6ZslEHthoTPB1sxiIn1sFTh+GH7G5uX5pajtDqdDcmauzkqfEOTcMCitTAw6ue XreXE6SR26+S1O4ZNFj5zmqEwP0anQ+OgEYMDD//s3Ah17x8KzGH6p/651jt1Ekd hx4LQ+LopMkcQ6s8CFgfD3Jcc5vSJOe52RDTFHODAiX23PiBUQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCrXKzemCvEK+Qj9ZrX4OMDEsWFjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 ZGNkZjFmNC01ZTYwLTQzOGQtODkzNC0wY2EyMWQwYjQ1YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRkY2RmMWY0LTVlNjAtNDM4ZC04 OTM0LTBjYTIxZDBiNDVhZi80ZGNkZjFmNC01ZTYwLTQzOGQtODkzNC0wY2EyMWQw YjQ1YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkgQwDgQCAAIwCAMGACYC9VAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFrF93wngMWyYldAaU1/D+wxoM9s4M/A79k7jD0mzGsVuLFok6D9OpBC2CmhH/qs Ka+qugU9fARtAEYdzBspCZXXN3l/y4h3xo7x9b1FAEpI3cWAqZ+6+NaWi2Z4IBQ2 b6/kKP0sfBk0cZeUZnOPZYdVqgiQVxHWdr9Hl3smEX3K5/RMT4ieCKABFBNN8I9m d3voUV8onVjYdbexSehHmg/kJU9TEzF6gYy+Q7FIT1nBQG9fmjUMy7uB8qvwaUI1 B0F41B5V8kPPc06l7C0jmDUGp4Lv0V/F91tG7Vn9o57A54jMJQs68jZa6fgv5gJi +MVYZqbHXCTohTX5mkZytCc= -----END CERTIFICATE-----Generated at Sun Nov 23 20:03:41 2025 by rpki-client