This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8602ec6b-e53f-48d3-84d8-6bb2494e02e8.cer File: 8602ec6b-e53f-48d3-84d8-6bb2494e02e8.cer (raw, json) Hash identifier: RxrHjzfY9LxuYhChPz0LaKzQqP1B45FnyjW1cV0Yoxc= Subject key identifier: F0:39:A5:73:FD:44:DF:F4:39:91:89:AB:09:7F:5C:CB:66:68:55:B1 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC2F8856D9FF529757B64F400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8602ec6b-e53f-48d3-84d8-6bb2494e02e8/8602ec6b-e53f-48d3-84d8-6bb2494e02e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8602ec6b-e53f-48d3-84d8-6bb2494e02e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Nov 2025 18:35:16 +0000 Certificate not after: Tue 08 Feb 2028 18:35:16 +0000 Subordinate resources: AS: 7068 AS: 11971 AS: 23429 AS: 35845 AS: 36393 AS: 394758 IP: 141.173.0.0/16 IP: 146.240.0.0/16 IP: 148.168.0.0/16 IP: 155.142.0.0/16 IP: 162.48.0.0/16 IP: 168.224.0.0/16 IP: 170.116.0.0/16 IP: 192.43.213.0/24 IP: 192.112.103.0/24 IP: 192.132.36.0 -- 192.132.38.255 IP: 198.49.255.0/24 IP: 198.205.128.0/17 IP: 204.114.128.0/17 IP: 2620:71:8000::/48 IP: 2620:1fd::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:f8:85:6d:9f:f5:29:75:7b:64:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 5 18:35:16 2025 GMT Not After : Feb 8 18:35:16 2028 GMT Subject: CN=8602ec6b-e53f-48d3-84d8-6bb2494e02e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:9b:87:51:7b:33:75:66:46:14:72:cd:87: df:11:81:a8:bb:59:03:82:d9:e3:72:b6:6b:b4:0e: 44:ad:ef:76:1d:a1:e9:14:4c:eb:71:7c:fc:c5:af: 49:c8:b4:35:bb:24:a1:d1:90:d2:83:72:cc:be:bf: 96:92:e7:26:a4:13:8b:0d:0f:49:24:6c:ad:f7:44: 93:74:d8:b7:58:2c:05:71:af:93:ec:eb:78:e4:27: 56:d8:8e:20:36:1f:97:af:7b:71:5a:aa:47:78:26: 26:f1:44:f3:cb:64:2a:17:2f:25:40:8a:18:69:f3: 0f:c0:e7:c5:ae:b9:53:ba:c6:f7:1f:de:ce:c5:68: 4c:a1:dd:16:79:3e:6c:65:35:bf:9a:48:b6:68:f8: ce:32:8d:67:18:a8:e7:de:78:ec:8a:2d:f4:f7:4d: 4c:dc:ee:e6:01:2f:0d:34:c4:09:d3:97:cc:24:55: 6e:ab:c0:9c:c6:61:6e:31:dc:1e:06:3d:6a:0f:5a: a3:34:37:1e:71:40:bb:eb:3c:e9:8b:e7:a7:9e:11: 72:c8:5a:fc:ef:cb:14:82:31:9e:10:4d:15:34:c5: f1:34:e9:7d:c0:e8:7f:38:94:07:a3:67:cd:1c:b9: 62:3a:64:ec:29:73:f0:c5:ae:fa:a5:aa:2b:0f:51: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:39:A5:73:FD:44:DF:F4:39:91:89:AB:09:7F:5C:CB:66:68:55:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8602ec6b-e53f-48d3-84d8-6bb2494e02e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8602ec6b-e53f-48d3-84d8-6bb2494e02e8/8602ec6b-e53f-48d3-84d8-6bb2494e02e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 141.173.0.0/16 146.240.0.0/16 148.168.0.0/16 155.142.0.0/16 162.48.0.0/16 168.224.0.0/16 170.116.0.0/16 192.43.213.0/24 192.112.103.0/24 192.132.36.0-192.132.38.255 198.49.255.0/24 198.205.128.0/17 204.114.128.0/17 IPv6: 2620:71:8000::/48 2620:1fd::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7068 11971 23429 35845 36393 394758 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:08:4a:2b:72:f5:f9:7f:73:a8:0e:3e:91:54:94:b8:1e:58: 5e:d6:9e:ed:b5:11:41:80:d4:70:61:3e:e9:71:f9:5e:cf:ef: 6a:54:59:24:f7:c2:e1:27:8f:47:5c:fb:c4:6b:f0:c4:c4:b1: dd:e3:e6:d9:1e:99:dc:71:ba:b0:f3:77:d9:74:60:15:f1:db: 28:ca:10:c7:51:a8:9e:68:d1:f7:a1:5a:5d:cf:b3:c1:f6:45: f4:11:09:fc:65:75:b8:2c:23:41:e1:d3:2b:be:40:7b:e8:10: 4d:6b:e4:c8:9b:5e:bd:00:04:61:0e:c6:a8:25:51:99:a5:8f: 27:6b:9e:2d:68:da:c0:1e:06:4f:a2:12:5a:1a:d7:29:3c:98: 92:8d:10:45:81:5d:b5:d3:b0:02:15:d2:5a:0c:c9:1e:fa:a6: 1a:fb:24:ff:77:43:73:47:1c:77:09:11:58:ca:04:32:a9:9a: 40:6b:16:6c:c7:ef:4d:1d:c5:25:3b:ad:b7:03:e1:6b:f4:9a: 0c:06:14:60:c3:9f:88:6b:72:c9:1e:e2:c4:e8:eb:3e:e1:6e: 15:b4:e2:35:f7:5c:ec:1b:f6:6a:1e:7c:99:e6:35:87:a6:a1: 37:5d:7f:85:88:ad:37:30:bb:09:a4:fc:bd:f3:17:7e:cb:bc: 54:40:91:ee -----BEGIN CERTIFICATE----- MIIHgjCCBmqgAwIBAgIUAQ0Mn0MoWEvC+IVtn/UpdXtk9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNTE4MzUxNloXDTI4MDIwODE4MzUxNlowLzEtMCsGA1UEAxMk ODYwMmVjNmItZTUzZi00OGQzLTg0ZDgtNmJiMjQ5NGUwMmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc+bh1F7M3VmRhRyzYffEYGou1kDgtnjcrZr tA5Ere92HaHpFEzrcXz8xa9JyLQ1uySh0ZDSg3LMvr+WkucmpBOLDQ9JJGyt90ST dNi3WCwFca+T7Ot45CdW2I4gNh+Xr3txWqpHeCYm8UTzy2QqFy8lQIoYafMPwOfF rrlTusb3H97OxWhMod0WeT5sZTW/mki2aPjOMo1nGKjn3njsii30901M3O7mAS8N NMQJ05fMJFVuq8CcxmFuMdweBj1qD1qjNDcecUC76zzpi+ennhFyyFr878sUgjGe EE0VNMXxNOl9wOh/OJQHo2fNHLliOmTsKXPwxa76paorD1EUkwIDAQABo4IElDCC BJAwHQYDVR0OBBYEFPA5pXP9RN/0OZGJqwl/XMtmaFWxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 NjAyZWM2Yi1lNTNmLTQ4ZDMtODRkOC02YmIyNDk0ZTAyZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzg2MDJlYzZiLWU1M2YtNDhkMy04 NGQ4LTZiYjI0OTRlMDJlOC84NjAyZWM2Yi1lNTNmLTQ4ZDMtODRkOC02YmIyNDk0 ZTAyZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwgYEGCCsGAQUF BwEHAQH/BHIwcDBVBAIAATBPAwMAja0DAwCS8AMDAJSoAwMAm44DAwCiMAMDAKjg AwMAqnQDBADAK9UDBADAcGcwDAMEAsCEJAMEAMCEJgMEAMYx/wMEB8bNgAMEB8xy gDAXBAIAAjARAwcAJiAAcYAAAwYEJiAB/QAwMAYIKwYBBQUHAQgBAf8EITAfoB0w GwICG5wCAi7DAgJbhQIDAIwFAgMAjikCAwYGBjBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0CEorcvX5f3Oo Dj6RVJS4Hlhe1p7ttRFBgNRwYT7pcflez+9qVFkk98LhJ49HXPvEa/DExLHd4+bZ Hpnccbqw83fZdGAV8dsoyhDHUaieaNH3oVpdz7PB9kX0EQn8ZXW4LCNB4dMrvkB7 6BBNa+TIm169AARhDsaoJVGZpY8na54taNrAHgZPohJaGtcpPJiSjRBFgV2107AC FdJaDMke+qYa+yT/d0NzRxx3CRFYygQyqZpAaxZsx+9NHcUlO623A+Fr9JoMBhRg w5+Ia3LJHuLE6Os+4W4VtOI191zsG/ZqHnyZ5jWHpqE3XX+FiK03MLsJpPy98xd+ y7xUQJHu -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:38 2025 by rpki-client