This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2.cer File: 59b44f57-163e-4377-bee0-0f066b25f0c2.cer (raw, json) Hash identifier: 72T9veVthIyPfLNWcdNS1clElboHkmGFIsDXanFKFyg= Subject key identifier: A8:8C:0C:A4:00:5A:B7:CB:50:88:67:DF:46:9D:D9:65:88:35:96:B0 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC2F85E366ADB6B03AEC68790 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/59b44f57-163e-4377-bee0-0f066b25f0c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Nov 2025 18:34:57 +0000 Certificate not after: Tue 08 Feb 2028 18:34:57 +0000 Subordinate resources: IP: 204.239.204.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:f8:5e:36:6a:db:6b:03:ae:c6:87:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 5 18:34:57 2025 GMT Not After : Feb 8 18:34:57 2028 GMT Subject: CN=59b44f57-163e-4377-bee0-0f066b25f0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:83:e2:a4:18:09:e5:1f:30:e1:ec:12:39: 2b:1b:5d:6e:62:2c:ac:19:83:a3:95:61:15:75:64: 1b:06:da:4e:5f:f7:4f:c6:b9:4c:16:d8:50:32:57: 2a:d8:92:f2:2d:e0:2a:74:d0:bb:5d:ea:bb:f1:69: 7c:6b:53:7b:11:26:67:c1:a3:96:fa:26:7a:97:86: 32:79:91:5d:78:00:70:8e:03:a5:53:6e:d8:20:6d: 4b:03:b8:62:37:37:d7:f5:67:ce:c6:d5:99:bc:62: fd:97:c2:15:5e:ad:e2:54:8f:c4:f7:63:93:37:24: b6:96:f4:62:51:7b:b0:3a:19:e4:e9:75:ad:d4:c2: 34:e4:d8:b2:20:dc:80:54:9a:75:7d:8b:f4:91:0e: 28:e0:83:4e:13:8e:36:71:07:5d:57:5e:96:54:a6: 16:83:b4:30:be:ee:e9:d8:5d:b7:b6:89:9c:86:e6: 5f:f8:9a:25:c3:cc:a4:7a:fd:6a:bc:75:37:7c:73: 32:bc:9e:11:ec:e8:16:5b:52:31:ac:ce:96:57:a9: 54:21:ed:2b:73:cc:ed:a7:ea:26:19:a3:50:3c:20: 60:03:e9:13:f3:e3:92:88:45:ae:4c:05:72:77:26: e5:bc:12:92:0c:f1:f7:95:ba:62:69:fd:3c:a8:72: bb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8C:0C:A4:00:5A:B7:CB:50:88:67:DF:46:9D:D9:65:88:35:96:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/59b44f57-163e-4377-bee0-0f066b25f0c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 204.239.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cd:d7:13:1c:fe:44:d8:aa:b1:26:46:73:58:8a:a6:2a:a7: f3:ef:0c:1a:0e:1c:81:bc:32:c1:ad:71:f8:a1:37:e9:43:99: 79:9e:d4:b5:74:23:ef:1c:d8:17:8d:b4:e0:8d:41:f0:98:c0: 65:a2:76:51:36:d1:76:fa:79:a7:cb:25:cd:29:98:8d:88:de: 73:9f:0d:ca:31:f5:45:21:7e:c5:a5:ee:7e:cd:ea:d0:ce:9b: c6:6a:4c:e2:a0:bb:0a:df:60:68:4c:7b:81:39:69:30:f3:52: b5:db:c2:59:78:25:55:5d:f3:cf:90:d6:4b:2b:1d:50:51:6f: ce:72:de:78:9f:80:11:2e:b7:19:f4:87:66:68:a3:08:af:6e: 7e:87:12:da:31:ac:1c:87:81:c0:89:59:a3:cf:ab:4f:3f:98: 16:02:31:a7:91:5f:9f:a3:ac:4c:41:4a:18:85:eb:8d:1e:70: 3b:34:7c:98:3e:ee:29:d4:c8:2a:b3:46:a3:02:73:f1:2b:c6: e1:20:4b:2b:b2:8a:f9:1b:b6:84:9c:49:ae:5e:8b:a7:21:68: 0c:69:e2:5a:b7:f8:82:d5:e3:b9:8b:7a:a2:86:af:3c:0f:07: c2:62:16:e0:d6:d4:6d:f8:2d:f5:cb:49:49:78:5b:91:5c:9b: 22:70:80:4e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEvC+F42attrA67Gh5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNTE4MzQ1N1oXDTI4MDIwODE4MzQ1N1owLzEtMCsGA1UEAxMk NTliNDRmNTctMTYzZS00Mzc3LWJlZTAtMGYwNjZiMjVmMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4qD4qQYCeUfMOHsEjkrG11uYiysGYOjlWEV dWQbBtpOX/dPxrlMFthQMlcq2JLyLeAqdNC7Xeq78Wl8a1N7ESZnwaOW+iZ6l4Yy eZFdeABwjgOlU27YIG1LA7hiNzfX9WfOxtWZvGL9l8IVXq3iVI/E92OTNyS2lvRi UXuwOhnk6XWt1MI05NiyINyAVJp1fYv0kQ4o4INOE442cQddV16WVKYWg7Qwvu7p 2F23tomchuZf+Jolw8ykev1qvHU3fHMyvJ4R7OgWW1IxrM6WV6lUIe0rc8ztp+om GaNQPCBgA+kT8+OSiEWuTAVydyblvBKSDPH3lbpiaf08qHK74QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKiMDKQAWrfLUIhn30ad2WWINZawMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 OWI0NGY1Ny0xNjNlLTQzNzctYmVlMC0wZjA2NmIyNWYwYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzU5YjQ0ZjU3LTE2M2UtNDM3Ny1i ZWUwLTBmMDY2YjI1ZjBjMi81OWI0NGY1Ny0xNjNlLTQzNzctYmVlMC0wZjA2NmIy NWYwYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHM78wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVc3XExz+RNiqsSZGc1iK piqn8+8MGg4cgbwywa1x+KE36UOZeZ7UtXQj7xzYF4204I1B8JjAZaJ2UTbRdvp5 p8slzSmYjYjec58NyjH1RSF+xaXufs3q0M6bxmpM4qC7Ct9gaEx7gTlpMPNStdvC WXglVV3zz5DWSysdUFFvznLeeJ+AES63GfSHZmijCK9ufocS2jGsHIeBwIlZo8+r Tz+YFgIxp5Ffn6OsTEFKGIXrjR5wOzR8mD7uKdTIKrNGowJz8SvG4SBLK7KK+Ru2 hJxJrl6LpyFoDGniWrf4gtXjuYt6ooavPA8HwmIW4NbUbfgt9ctJSXhbkVybInCA Tg== -----END CERTIFICATE-----Generated at Fri Nov 28 06:12:01 2025 by rpki-client