This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2.cer File: 7a69da01-24cd-4788-bccf-5053fbca3eb2.cer (raw, json) Hash identifier: 6hyysEcXf+XIEyPKUra3X4C8OErCLjbTNNb90nkQUfI= Subject key identifier: D8:5C:6E:3B:90:B6:AB:86:4B:CE:05:8F:67:AD:3A:8D:BA:D8:40:38 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BE4BCC2DE6EDA7154B8C06180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2/7a69da01-24cd-4788-bccf-5053fbca3eb2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Nov 2025 20:52:20 +0000 Certificate not after: Sun 20 Feb 2028 20:52:20 +0000 Subordinate resources: AS: 394368 IP: 23.149.188.0/24 IP: 2602:f4c7::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e4:bc:c2:de:6e:da:71:54:b8:c0:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 17 20:52:20 2025 GMT Not After : Feb 20 20:52:20 2028 GMT Subject: CN=7a69da01-24cd-4788-bccf-5053fbca3eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b6:2a:79:02:ea:26:8b:54:b9:fb:87:0d:9f: 3c:84:2a:6e:7b:4d:e7:be:8e:99:d4:52:2e:03:16: 76:50:09:3e:fa:6c:04:1c:af:25:35:e3:79:bc:b0: c1:77:6f:d0:ac:ea:32:ac:d0:8e:27:cc:f3:27:ee: cd:87:44:61:bd:a4:f5:2f:59:83:77:ba:84:86:2c: e6:be:2a:18:64:ac:00:cf:9a:07:3b:9d:ea:4b:21: ea:51:c3:3b:4e:96:b1:52:bc:5e:ad:7f:fd:98:1e: a8:f5:84:24:6d:60:1c:31:19:99:88:87:97:92:fd: 5f:40:72:24:77:98:40:5e:67:df:ea:75:ad:d9:df: 70:a6:a0:73:a0:f8:74:2e:5b:fb:11:63:0e:1e:16: 56:bd:43:7e:ef:a0:ed:e9:28:b6:f7:bc:ba:7c:3e: 56:53:60:70:a0:f7:f6:e1:2d:a1:41:b4:72:55:70: f7:de:c6:13:a3:f4:3a:e2:b4:1c:8a:48:30:2e:3a: 47:92:9f:9e:44:4e:57:93:5c:3a:19:aa:c2:83:6a: 3f:39:77:32:00:ee:4b:5a:36:15:50:09:c6:19:10: 21:b6:eb:36:f6:cc:e5:81:9e:c5:a9:d4:2d:bb:b4: e7:3f:2a:c6:28:97:cf:42:c8:4f:db:bb:0e:01:c1: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5C:6E:3B:90:B6:AB:86:4B:CE:05:8F:67:AD:3A:8D:BA:D8:40:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a69da01-24cd-4788-bccf-5053fbca3eb2/7a69da01-24cd-4788-bccf-5053fbca3eb2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.149.188.0/24 IPv6: 2602:f4c7::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7b:f1:83:02:19:88:a6:6e:a9:8b:4b:66:78:f2:cb:95:c8: c3:72:26:ba:4d:e1:51:e8:fd:eb:07:3e:e1:0d:94:3a:27:76: a2:45:39:c1:0c:8d:e1:38:f9:a6:14:bb:cf:bc:5a:ed:25:0d: ef:f6:b8:6d:71:7d:86:23:4c:57:b6:e8:e5:e9:91:53:75:e5: 50:22:53:3e:1b:68:33:e1:65:a5:af:64:49:12:e3:0b:bc:8b: 99:e5:26:33:7e:5c:38:df:a6:c8:27:82:79:d0:49:99:44:24: 9a:95:f0:f3:04:14:95:8a:fd:cc:49:43:1f:3d:26:2c:fa:41: 84:8f:2e:e3:39:ec:14:a5:0c:c4:35:b3:ad:0c:77:67:da:61: bf:bf:15:a0:60:84:ae:11:2a:ed:26:4a:67:fe:b6:ea:81:4b: 72:2d:6e:89:18:7c:98:75:b2:68:98:8b:e0:a8:bb:f3:3c:ab: d7:e2:bf:92:75:e8:1e:66:b4:9a:e4:17:e1:99:1e:17:f4:d2: 96:8e:f5:f4:bf:0d:4c:8d:5f:5c:ef:6e:55:8f:2f:0c:81:91: 80:99:62:11:b6:b1:be:8c:12:df:aa:5f:a5:d5:27:9c:92:de: 91:92:e8:0a:76:b8:11:bf:e2:ca:9f:2c:75:d1:97:fb:33:59: f4:be:1c:2f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEvkvMLebtpxVLjAYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExNzIwNTIyMFoXDTI4MDIyMDIwNTIyMFowLzEtMCsGA1UEAxMk N2E2OWRhMDEtMjRjZC00Nzg4LWJjY2YtNTA1M2ZiY2EzZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rYqeQLqJotUufuHDZ88hCpue03nvo6Z1FIu AxZ2UAk++mwEHK8lNeN5vLDBd2/QrOoyrNCOJ8zzJ+7Nh0RhvaT1L1mDd7qEhizm vioYZKwAz5oHO53qSyHqUcM7TpaxUrxerX/9mB6o9YQkbWAcMRmZiIeXkv1fQHIk d5hAXmff6nWt2d9wpqBzoPh0Llv7EWMOHhZWvUN+76Dt6Si297y6fD5WU2BwoPf2 4S2hQbRyVXD33sYTo/Q64rQcikgwLjpHkp+eRE5Xk1w6GarCg2o/OXcyAO5LWjYV UAnGGRAhtus29szlgZ7FqdQtu7TnPyrGKJfPQshP27sOAcE6gwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNhcbjuQtquGS84Fj2etOo262EA4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 YTY5ZGEwMS0yNGNkLTQ3ODgtYmNjZi01MDUzZmJjYTNlYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzdhNjlkYTAxLTI0Y2QtNDc4OC1i Y2NmLTUwNTNmYmNhM2ViMi83YTY5ZGEwMS0yNGNkLTQ3ODgtYmNjZi01MDUzZmJj YTNlYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlbwwDgQCAAIwCAMGACYC9McAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYEgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKe/GDAhmIpm6pi0tmePLLlcjD cia6TeFR6P3rBz7hDZQ6J3aiRTnBDI3hOPmmFLvPvFrtJQ3v9rhtcX2GI0xXtujl 6ZFTdeVQIlM+G2gz4WWlr2RJEuMLvIuZ5SYzflw436bIJ4J50EmZRCSalfDzBBSV iv3MSUMfPSYs+kGEjy7jOewUpQzENbOtDHdn2mG/vxWgYISuESrtJkpn/rbqgUty LW6JGHyYdbJomIvgqLvzPKvX4r+SdegeZrSa5BfhmR4X9NKWjvX0vw1MjV9c725V jy8MgZGAmWIRtrG+jBLfql+l1Seckt6RkugKdrgRv+LKnyx10Zf7M1n0vhwv -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:58 2025 by rpki-client