This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.cer File: 781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.cer (raw, json) Hash identifier: bQNcsoXYmXNYcLEgCD+/N/OZgL3NkVzW7Z7anwmc78o= Subject key identifier: E5:8F:57:CE:14:F0:B3:C9:85:E4:32:74:5D:5D:A2:EC:8C:58:CD:2F Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BEC716C5BDE3ECF48C111B780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Nov 2025 15:07:00 +0000 Certificate not after: Wed 23 Feb 2028 15:07:00 +0000 Subordinate resources: AS: 395112 IP: 170.76.243.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:71:6c:5b:de:3e:cf:48:c1:11:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 20 15:07:00 2025 GMT Not After : Feb 23 15:07:00 2028 GMT Subject: CN=781d7bd5-5a41-4dfd-a4b9-0b12af4cae70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:3d:da:35:fa:91:9e:d8:08:43:24:2f:62: ab:ba:71:91:af:f1:c5:af:d3:25:49:17:69:5c:7c: 33:84:24:b3:a8:67:18:37:55:73:27:f2:7a:20:05: f6:13:d7:8c:33:88:3b:72:dd:a2:b0:db:1a:f2:8d: 5e:ce:63:55:ef:e9:ac:0b:b3:90:6c:65:86:13:49: 47:b1:db:59:9f:e2:7e:db:c9:01:84:58:f3:64:ea: 4c:ab:8b:6a:1e:79:cf:fb:b4:96:37:ed:39:db:0b: da:29:7b:91:92:4b:9a:87:59:9a:0e:95:04:59:54: 0c:6a:11:7b:5c:9c:38:54:8c:3e:65:00:22:0e:eb: 6e:63:86:55:2c:80:f8:a9:3b:99:5b:97:9f:2e:f8: a5:9e:1b:21:a1:5f:17:56:92:4f:39:8e:06:ab:f6: 87:05:62:03:3f:16:21:db:98:ec:13:59:75:a5:af: 4e:3f:8c:86:83:ff:69:c2:44:c6:fe:f4:80:28:9e: ab:21:cf:14:da:23:bf:8a:ab:53:9b:1c:7f:eb:a6: 0e:ab:20:4a:0d:99:31:c3:04:72:8f:30:4d:dd:4e: 09:ed:c0:56:12:75:be:22:75:dd:01:83:08:e8:e6: 0e:f6:bd:1c:65:e0:22:53:39:65:ac:a2:7f:7e:c1: 19:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8F:57:CE:14:F0:B3:C9:85:E4:32:74:5D:5D:A2:EC:8C:58:CD:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 170.76.243.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395112 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ee:ec:36:70:aa:0c:bd:cd:50:11:b9:c9:f5:01:2d:8e:ea: a2:e2:19:b1:57:fe:07:ab:9b:57:78:1b:76:fb:38:b1:b5:c9: b2:9a:00:04:bc:a7:d2:ab:5b:1a:2e:66:c3:85:a8:bd:ca:bd: dd:1e:c2:10:00:0b:99:b6:08:16:88:72:63:91:3a:e5:7a:7d: bf:85:6f:aa:ca:92:a5:e3:af:53:0d:ed:24:26:5b:ec:13:ef: bb:62:69:2d:20:9c:e1:af:73:bf:63:a5:80:53:15:b5:fb:5d: 5e:8d:32:07:fd:b1:61:ec:d2:53:c6:54:89:f7:19:ea:ec:ce: 64:d5:b3:76:8c:ce:f7:34:b9:77:d5:e2:c0:91:1e:fe:f5:24: 10:df:a5:a3:bc:9b:2a:e6:c5:f4:16:ba:6c:0c:c0:e3:1f:f2: b9:78:14:c5:da:a8:77:01:8a:28:00:8e:4b:ac:c7:8f:9c:5b: 0a:e8:a6:61:97:c7:0a:d9:f3:3c:86:66:55:4c:e8:1f:06:a0: 8d:05:aa:5c:4b:8c:76:b9:90:ca:4a:b3:49:13:6b:e1:12:51: 9e:6d:59:8f:07:03:d3:e8:43:62:f9:26:cf:08:09:b1:bf:f7: 42:80:11:a5:ba:2d:25:d6:93:62:47:c3:c5:d3:1e:7a:bc:64: 3b:76:e6:19 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEvscWxb3j7PSMERt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyMDE1MDcwMFoXDTI4MDIyMzE1MDcwMFowLzEtMCsGA1UEAxMk NzgxZDdiZDUtNWE0MS00ZGZkLWE0YjktMGIxMmFmNGNhZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0w92jX6kZ7YCEMkL2KrunGRr/HFr9MlSRdp XHwzhCSzqGcYN1VzJ/J6IAX2E9eMM4g7ct2isNsa8o1ezmNV7+msC7OQbGWGE0lH sdtZn+J+28kBhFjzZOpMq4tqHnnP+7SWN+052wvaKXuRkkuah1maDpUEWVQMahF7 XJw4VIw+ZQAiDutuY4ZVLID4qTuZW5efLvilnhshoV8XVpJPOY4Gq/aHBWIDPxYh 25jsE1l1pa9OP4yGg/9pwkTG/vSAKJ6rIc8U2iO/iqtTmxx/66YOqyBKDZkxwwRy jzBN3U4J7cBWEnW+InXdAYMI6OYO9r0cZeAiUzllrKJ/fsEZ8wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFOWPV84U8LPJheQydF1douyMWM0vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 ODFkN2JkNS01YTQxLTRkZmQtYTRiOS0wYjEyYWY0Y2FlNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzc4MWQ3YmQ1LTVhNDEtNGRmZC1h NGI5LTBiMTJhZjRjYWU3MC83ODFkN2JkNS01YTQxLTRkZmQtYTRiOS0wYjEyYWY0 Y2FlNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACqTPMwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgdoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGTu7DZwqgy9zVARucn1AS2O6qLiGbFX/germ1d4G3b7OLG1 ybKaAAS8p9KrWxouZsOFqL3Kvd0ewhAAC5m2CBaIcmOROuV6fb+Fb6rKkqXjr1MN 7SQmW+wT77tiaS0gnOGvc79jpYBTFbX7XV6NMgf9sWHs0lPGVIn3GerszmTVs3aM zvc0uXfV4sCRHv71JBDfpaO8myrmxfQWumwMwOMf8rl4FMXaqHcBiigAjkusx4+c WwropmGXxwrZ8zyGZlVM6B8GoI0FqlxLjHa5kMpKs0kTa+ESUZ5tWY8HA9PoQ2L5 Js8ICbG/90KAEaW6LSXWk2JHw8XTHnq8ZDt25hk= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:50 2025 by rpki-client