This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c.cer File: 4e639667-2398-443b-9142-a0e6c46a369c.cer (raw, json) Hash identifier: S+0Q3MyhVExrKE8gPLdMkStDck0H0ENO0uI+zR01hTk= Subject key identifier: 84:60:F4:8A:A2:5B:9D:7A:19:4C:69:5E:AE:DA:AC:EF:62:F8:81:A4 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BFA8402D4DD520A326960E340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Nov 2025 16:05:46 +0000 Certificate not after: Mon 28 Feb 2028 16:05:46 +0000 Subordinate resources: IP: 142.248.184.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:84:02:d4:dd:52:0a:32:69:60:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 25 16:05:46 2025 GMT Not After : Feb 28 16:05:46 2028 GMT Subject: CN=4e639667-2398-443b-9142-a0e6c46a369c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:e3:7f:70:0e:b7:70:ec:a3:8b:00:2e:95: c8:2b:b0:2c:07:ca:28:56:5a:f8:c8:12:49:38:e1: 97:94:25:e1:4c:31:80:c5:d0:b2:9e:31:0b:4f:96: 40:15:b8:83:fc:cf:28:76:3b:da:55:15:fd:c9:f4: 86:84:7d:1e:e5:ba:c3:80:5d:85:6a:f0:01:04:2c: bf:d1:03:f9:95:bd:ca:df:04:77:74:ef:00:e5:4d: 1c:02:25:6e:bf:53:d1:4d:68:9f:f1:b4:83:bb:6e: 49:fd:69:a4:07:7a:18:d1:d7:5e:79:6e:d4:e5:ef: 28:e3:80:a5:04:8f:2f:96:95:2f:69:e2:0a:43:ba: 86:e4:4b:75:22:7f:42:de:38:fa:94:e2:09:24:9c: fe:21:00:56:8d:b0:79:8d:98:61:bf:bf:db:7b:1d: 86:ea:f3:23:af:96:dc:6b:03:1d:ee:35:d5:e4:b1: 21:68:fc:21:57:c1:69:07:97:b5:a8:b9:89:d6:16: f7:b5:42:12:c3:ff:d4:29:3a:bc:83:41:99:c5:ae: 10:33:b8:35:a2:e8:00:93:8e:b3:9c:82:2c:3f:20: e2:c8:84:20:20:66:cd:6b:66:c9:45:03:9c:0a:99: ed:bb:b2:da:6f:58:72:13:ee:c8:3c:73:63:12:ea: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:60:F4:8A:A2:5B:9D:7A:19:4C:69:5E:AE:DA:AC:EF:62:F8:81:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e3:08:a0:eb:d5:64:2c:53:7a:69:38:80:53:65:ed:27:2b: 28:2f:e6:41:aa:bc:1b:88:77:6f:48:e4:b6:fa:6a:0d:80:fd: df:21:1f:68:2e:f0:d6:cf:5c:04:94:65:b4:39:6d:13:a2:a8: ab:a7:a8:ac:d8:3a:1c:9f:a5:66:07:b3:5b:9d:33:c7:f6:6b: 1f:7f:3d:df:5a:5b:f9:5f:f8:49:51:fb:3b:e9:cd:2b:d5:48: fb:4b:87:b7:a8:f0:7a:12:0b:60:54:cc:fd:1e:17:35:25:50: ea:2b:ee:71:4c:7d:2e:45:9b:db:5f:81:37:63:d5:f7:dc:41: e2:3a:93:28:5a:3c:74:15:90:f1:84:0f:b2:07:7a:67:c2:5d: cb:27:58:96:d0:81:6b:44:95:77:b4:b9:2d:dd:ec:b7:06:1e: 02:df:ad:f5:ad:d3:e8:c2:2c:96:1d:dc:1b:ba:e3:58:5f:ef: e1:2d:67:a6:03:bd:1b:56:a8:5c:62:de:12:1b:8a:4d:e9:50: 38:c6:2c:bd:33:6f:71:e9:1b:9a:0c:4b:cf:61:45:95:28:4e: df:0d:74:81:61:43:34:94:cb:00:51:fe:83:f0:b1:02:7e:ca: 6b:37:dd:8b:2e:3e:a0:98:e7:20:bb:8a:42:16:77:93:23:fc: 3e:dc:70:55 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEv6hALU3VIKMmlg40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNTE2MDU0NloXDTI4MDIyODE2MDU0NlowLzEtMCsGA1UEAxMk NGU2Mzk2NjctMjM5OC00NDNiLTkxNDItYTBlNmM0NmEzNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5zjf3AOt3Dso4sALpXIK7AsB8ooVlr4yBJJ OOGXlCXhTDGAxdCynjELT5ZAFbiD/M8odjvaVRX9yfSGhH0e5brDgF2FavABBCy/ 0QP5lb3K3wR3dO8A5U0cAiVuv1PRTWif8bSDu25J/WmkB3oY0ddeeW7U5e8o44Cl BI8vlpUvaeIKQ7qG5Et1In9C3jj6lOIJJJz+IQBWjbB5jZhhv7/bex2G6vMjr5bc awMd7jXV5LEhaPwhV8FpB5e1qLmJ1hb3tUISw//UKTq8g0GZxa4QM7g1ougAk46z nIIsPyDiyIQgIGbNa2bJRQOcCpntu7Lab1hyE+7IPHNjEup2OwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIRg9IqiW516GUxpXq7arO9i+IGkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 ZTYzOTY2Ny0yMzk4LTQ0M2ItOTE0Mi1hMGU2YzQ2YTM2OWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRlNjM5NjY3LTIzOTgtNDQzYi05 MTQyLWEwZTZjNDZhMzY5Yy80ZTYzOTY2Ny0yMzk4LTQ0M2ItOTE0Mi1hMGU2YzQ2 YTM2OWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKO+LgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEOMIoOvVZCxTemk4gFNl 7ScrKC/mQaq8G4h3b0jktvpqDYD93yEfaC7w1s9cBJRltDltE6Koq6eorNg6HJ+l ZgezW50zx/ZrH38931pb+V/4SVH7O+nNK9VI+0uHt6jwehILYFTM/R4XNSVQ6ivu cUx9LkWb21+BN2PV99xB4jqTKFo8dBWQ8YQPsgd6Z8JdyydYltCBa0SVd7S5Ld3s twYeAt+t9a3T6MIslh3cG7rjWF/v4S1npgO9G1aoXGLeEhuKTelQOMYsvTNvcekb mgxLz2FFlShO3w10gWFDNJTLAFH+g/CxAn7Kazfdiy4+oJjnILuKQhZ3kyP8Ptxw VQ== -----END CERTIFICATE-----Generated at Fri Nov 28 06:12:11 2025 by rpki-client