This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e6a7c0f-3195-4710-a481-1cf7eb2f0d68.cer File: 4e6a7c0f-3195-4710-a481-1cf7eb2f0d68.cer (raw, json) Hash identifier: MuDmW7qq6YWYm0PmGI2yK9hT1G4J+UIwKhtt0neLH50= Subject key identifier: F3:82:25:5E:6D:50:39:DC:62:95:38:57:6A:3B:12:6F:EA:67:5D:C1 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BFF5D48429EC30A91EA831FE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e6a7c0f-3195-4710-a481-1cf7eb2f0d68/4e6a7c0f-3195-4710-a481-1cf7eb2f0d68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e6a7c0f-3195-4710-a481-1cf7eb2f0d68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Nov 2025 09:46:47 +0000 Certificate not after: Wed 01 Mar 2028 09:46:47 +0000 Subordinate resources: IP: 23.150.100.0/24 IP: 2602:f4b2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:5d:48:42:9e:c3:0a:91:ea:83:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 27 09:46:47 2025 GMT Not After : Mar 1 09:46:47 2028 GMT Subject: CN=4e6a7c0f-3195-4710-a481-1cf7eb2f0d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:f9:10:6f:88:46:5d:77:3f:0b:54:27:fe: f8:7c:de:3a:1d:69:7d:26:41:72:9a:19:de:0a:26: c1:78:8e:52:a2:19:17:1e:4b:f7:59:b2:39:2b:82: 71:c0:e9:34:0a:55:0f:ca:f1:6d:b8:f7:65:51:a6: 8a:72:e0:28:07:61:11:fe:9c:58:3f:f8:f8:48:ae: 23:5d:00:77:e2:8b:6b:82:72:0d:37:25:31:52:9a: e5:e3:0d:d5:4b:6b:ba:92:51:d8:9c:19:60:3b:2a: c8:c5:e6:67:27:98:35:2c:ff:22:85:9f:7f:af:9d: 66:a6:cd:9e:77:92:e8:fa:e2:e6:98:47:6e:7d:2c: 37:f5:90:fe:af:20:9b:5a:67:23:1c:8a:24:6b:8e: c3:36:83:83:d2:69:aa:92:4f:7c:a0:dc:3c:5a:f5: bd:18:69:78:f2:20:dd:f1:59:95:f2:d9:54:05:83: 0b:6e:21:96:3e:3b:bf:0f:aa:06:b8:9e:7f:36:3b: 76:c0:bd:30:a6:7e:87:1c:8d:2c:e8:07:59:cf:18: c0:4e:89:79:5f:0d:6a:3a:05:a1:47:b2:5c:98:67: 68:22:7a:74:cd:4b:44:1c:3a:47:4c:a2:67:63:85: 4b:87:da:2e:8e:82:7f:98:8e:5a:20:d3:02:30:00: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:82:25:5E:6D:50:39:DC:62:95:38:57:6A:3B:12:6F:EA:67:5D:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e6a7c0f-3195-4710-a481-1cf7eb2f0d68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e6a7c0f-3195-4710-a481-1cf7eb2f0d68/4e6a7c0f-3195-4710-a481-1cf7eb2f0d68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.100.0/24 IPv6: 2602:f4b2::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a7:22:30:ad:29:49:a8:44:4b:c2:ab:a6:9e:d4:7c:68:7a: 38:6d:66:54:82:00:36:e2:2b:ab:22:12:2b:10:81:65:80:13: 43:29:42:1b:78:6a:4a:d7:70:83:d4:be:06:5c:40:62:63:7a: 4d:de:7e:4c:6c:1a:43:a8:0c:29:ed:42:91:74:ec:c8:bd:6b: 6f:85:b0:01:14:d6:d6:8b:ce:93:45:e8:31:ea:bf:e5:87:17: af:eb:65:2b:8b:c6:b7:4d:26:bb:1e:a6:dd:b9:0b:bd:09:72: b2:b2:1f:b7:e0:f2:7e:7c:cc:70:86:83:56:57:f1:9a:73:8a: 9e:6b:9c:a8:54:64:85:b1:eb:2e:76:c9:4a:9a:b0:2f:8f:c6: 6e:d0:d2:95:1b:ed:98:9b:9c:43:90:a0:c7:ec:51:ef:d9:77: 28:39:aa:f4:99:5c:05:52:4c:04:0d:9c:49:9e:35:c1:89:78: db:93:15:d8:34:b0:77:a5:45:b2:0b:e7:7c:4a:0c:28:6f:95: bb:cf:af:39:a0:fb:33:22:c6:f3:44:91:9a:a5:de:aa:b3:10: 92:3a:c8:0b:52:53:4c:99:fb:af:94:5f:30:9d:ac:24:52:fe: 37:76:15:c6:56:5b:91:42:69:4a:58:8d:3d:fa:6b:6a:ad:d8: a9:0c:3c:77 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEv/XUhCnsMKkeqDH+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNzA5NDY0N1oXDTI4MDMwMTA5NDY0N1owLzEtMCsGA1UEAxMk NGU2YTdjMGYtMzE5NS00NzEwLWE0ODEtMWNmN2ViMmYwZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsL5EG+IRl13PwtUJ/74fN46HWl9JkFymhne CibBeI5SohkXHkv3WbI5K4JxwOk0ClUPyvFtuPdlUaaKcuAoB2ER/pxYP/j4SK4j XQB34otrgnINNyUxUprl4w3VS2u6klHYnBlgOyrIxeZnJ5g1LP8ihZ9/r51mps2e d5Lo+uLmmEdufSw39ZD+ryCbWmcjHIoka47DNoOD0mmqkk98oNw8WvW9GGl48iDd 8VmV8tlUBYMLbiGWPju/D6oGuJ5/Njt2wL0wpn6HHI0s6AdZzxjATol5Xw1qOgWh R7JcmGdoInp0zUtEHDpHTKJnY4VLh9oujoJ/mI5aINMCMAChFwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPOCJV5tUDncYpU4V2o7Em/qZ13BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 ZTZhN2MwZi0zMTk1LTQ3MTAtYTQ4MS0xY2Y3ZWIyZjBkNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRlNmE3YzBmLTMxOTUtNDcxMC1h NDgxLTFjZjdlYjJmMGQ2OC80ZTZhN2MwZi0zMTk1LTQ3MTAtYTQ4MS0xY2Y3ZWIy ZjBkNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlmQwDgQCAAIwCAMGACYC9LIAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AA2nIjCtKUmoREvCq6ae1HxoejhtZlSCADbiK6siEisQgWWAE0MpQht4akrXcIPU vgZcQGJjek3efkxsGkOoDCntQpF07Mi9a2+FsAEU1taLzpNF6DHqv+WHF6/rZSuL xrdNJrsept25C70JcrKyH7fg8n58zHCGg1ZX8Zpzip5rnKhUZIWx6y52yUqasC+P xm7Q0pUb7ZibnEOQoMfsUe/Zdyg5qvSZXAVSTAQNnEmeNcGJeNuTFdg0sHelRbIL 53xKDChvlbvPrzmg+zMixvNEkZql3qqzEJI6yAtSU0yZ+6+UXzCdrCRS/jd2FcZW W5FCaUpYjT36a2qt2KkMPHc= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:52 2025 by rpki-client