This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3.cer File: 604508ee-6bf9-47f1-a46b-b394f344e9a3.cer (raw, json) Hash identifier: GVnNCMSYc5aaJmaisJir8FG7S1D4lHw6EH9c+JZvr7g= Subject key identifier: F0:74:65:A9:E9:2E:D2:E0:9B:DF:F5:35:B3:24:AC:AD:92:5F:76:F6 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BEEF2F39775FED4B9FA1A8EB8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3/604508ee-6bf9-47f1-a46b-b394f344e9a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Nov 2025 12:39:36 +0000 Certificate not after: Thu 24 Feb 2028 12:39:36 +0000 Subordinate resources: AS: 26830 IP: 204.126.253.0/24 IP: 2620:84:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ee:f2:f3:97:75:fe:d4:b9:fa:1a:8e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 21 12:39:36 2025 GMT Not After : Feb 24 12:39:36 2028 GMT Subject: CN=604508ee-6bf9-47f1-a46b-b394f344e9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c3:34:c3:7d:fb:58:40:bb:15:1a:ab:cd:c2: 0a:94:e6:2e:18:97:d5:36:82:33:bf:b5:b4:e4:83: 46:34:0a:79:5e:25:a4:1a:ce:aa:01:ca:4f:68:9e: 6a:9c:f5:7d:75:b0:a2:78:4b:a6:00:c4:cb:a6:75: fe:20:7a:5d:55:50:f8:74:a0:e6:ff:ab:bf:d2:e1: 63:75:5b:b9:01:5b:91:bf:92:1c:dd:73:d1:b7:54: 39:6b:46:17:ab:59:a0:44:8e:21:c3:ad:b5:49:fb: fc:4d:31:27:45:22:c8:db:7f:db:43:ec:0e:a5:3e: 59:3e:c0:e4:c6:87:08:63:40:6e:73:47:fe:4d:b6: 71:c0:bf:83:bf:c5:f5:77:05:dc:8d:83:36:51:2c: 68:86:b5:b0:02:f2:01:6b:1c:85:60:52:68:03:92: 24:00:91:f2:14:05:0f:db:09:92:55:8e:ac:b3:a1: ad:69:20:5b:34:99:14:29:9b:7e:c0:af:04:b6:aa: e7:4e:46:94:ba:de:0b:2a:78:e2:d2:bf:37:e4:59: ac:75:85:b1:b0:10:67:fb:cd:11:5f:8f:60:a1:fb: c2:d5:fe:d1:f4:03:04:2e:9c:c5:36:f1:c2:4d:93: eb:2d:15:f7:2d:fa:1a:24:7b:6b:48:a8:f2:46:6c: c3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:74:65:A9:E9:2E:D2:E0:9B:DF:F5:35:B3:24:AC:AD:92:5F:76:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3/604508ee-6bf9-47f1-a46b-b394f344e9a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 204.126.253.0/24 IPv6: 2620:84:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26830 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:0c:c4:d4:7c:46:74:db:91:ce:f8:d3:1a:79:12:5e:8f:bc: 10:46:0d:64:d2:c5:52:a7:75:dd:c5:ca:f8:ff:04:30:28:63: 97:c5:61:ac:7f:71:a0:9f:cb:3b:54:67:0d:46:97:00:1b:56: 7c:a9:25:5d:0b:2c:ea:18:76:b7:58:a5:4c:5f:f8:e8:3a:ea: 7a:bf:dc:81:f7:a5:fc:b5:34:07:79:de:2c:f1:cf:0a:4f:90: d6:67:01:86:18:12:ac:2b:c6:fd:db:38:75:58:e6:50:de:7b: bf:fd:41:ed:5c:81:41:9d:0b:56:ec:f9:99:f9:e8:25:be:bb: de:48:dc:23:46:b6:a6:09:a2:9e:28:5c:db:99:3e:9d:87:34: 03:99:4c:fb:1f:c0:69:4b:71:6a:91:8f:d6:4a:58:44:34:03: b3:6d:93:b1:5d:06:f7:e0:ec:40:32:55:f3:18:33:e3:31:49: fe:27:cb:d1:c3:04:24:ed:a9:25:4c:e6:75:46:c3:03:ad:79: 11:c5:6c:b5:35:e7:fb:74:52:6d:26:68:a1:c2:e7:9f:bf:4c: 5f:ce:f9:ec:4f:e1:2c:6d:ab:ac:31:23:63:7d:61:be:36:5b: 53:8a:09:d9:90:30:9f:47:7c:73:89:d2:dd:8f:ca:fa:d6:70: 0a:0e:0e:ba -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEvu8vOXdf7UufoajrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyMTEyMzkzNloXDTI4MDIyNDEyMzkzNlowLzEtMCsGA1UEAxMk NjA0NTA4ZWUtNmJmOS00N2YxLWE0NmItYjM5NGYzNDRlOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sM0w337WEC7FRqrzcIKlOYuGJfVNoIzv7W0 5INGNAp5XiWkGs6qAcpPaJ5qnPV9dbCieEumAMTLpnX+IHpdVVD4dKDm/6u/0uFj dVu5AVuRv5Ic3XPRt1Q5a0YXq1mgRI4hw621Sfv8TTEnRSLI23/bQ+wOpT5ZPsDk xocIY0Buc0f+TbZxwL+Dv8X1dwXcjYM2USxohrWwAvIBaxyFYFJoA5IkAJHyFAUP 2wmSVY6ss6GtaSBbNJkUKZt+wK8EtqrnTkaUut4LKnji0r835FmsdYWxsBBn+80R X49gofvC1f7R9AMELpzFNvHCTZPrLRX3LfoaJHtrSKjyRmzDjQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPB0ZanpLtLgm9/1NbMkrK2SX3b2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 MDQ1MDhlZS02YmY5LTQ3ZjEtYTQ2Yi1iMzk0ZjM0NGU5YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzYwNDUwOGVlLTZiZjktNDdmMS1h NDZiLWIzOTRmMzQ0ZTlhMy82MDQ1MDhlZS02YmY5LTQ3ZjEtYTQ2Yi1iMzk0ZjM0 NGU5YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADMfv0wDwQCAAIwCQMHACYgAISAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJozjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYDMTUfEZ025HO+NMaeRJej7wQ Rg1k0sVSp3Xdxcr4/wQwKGOXxWGsf3Ggn8s7VGcNRpcAG1Z8qSVdCyzqGHa3WKVM X/joOup6v9yB96X8tTQHed4s8c8KT5DWZwGGGBKsK8b92zh1WOZQ3nu//UHtXIFB nQtW7PmZ+eglvrveSNwjRramCaKeKFzbmT6dhzQDmUz7H8BpS3FqkY/WSlhENAOz bZOxXQb34OxAMlXzGDPjMUn+J8vRwwQk7aklTOZ1RsMDrXkRxWy1Nef7dFJtJmih wuefv0xfzvnsT+EsbausMSNjfWG+NltTignZkDCfR3xzidLdj8r61nAKDg66 -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:43 2025 by rpki-client