This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c.cer File: 86299c88-beff-4167-a32f-55e2726d4f7c.cer (raw, json) Hash identifier: nBApCi3lke1p0MlHPY7SzGmE4muXeAX6zi1n4xuGFGM= Subject key identifier: EE:62:3E:1A:55:60:BB:8F:3A:0E:D3:80:2D:89:E5:04:B7:15:6C:9E Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BA99DAAF2D4B03A6D35C6AE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c/86299c88-beff-4167-a32f-55e2726d4f7c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Oct 2025 16:37:00 +0000 Certificate not after: Sun 30 Jan 2028 17:37:00 +0000 Subordinate resources: AS: 46597 IP: 192.190.225.0/24 IP: 206.108.48.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:9d:aa:f2:d4:b0:3a:6d:35:c6:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 27 16:37:00 2025 GMT Not After : Jan 30 17:37:00 2028 GMT Subject: CN=86299c88-beff-4167-a32f-55e2726d4f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:52:51:ed:7a:46:25:12:d8:cf:a3:97:a9: 53:da:71:5d:5c:5c:5c:61:87:29:fd:f7:a6:f4:cd: 41:3d:de:92:8a:a5:7d:33:3e:1b:64:74:3c:1a:14: 77:5b:20:ec:15:6e:b2:62:30:25:bf:18:50:5e:71: 3c:f3:55:54:1f:7d:62:7c:49:61:02:fa:b8:2b:a4: 07:95:7e:ff:4c:42:91:38:42:1c:e5:a5:cf:47:94: 25:0a:a5:88:29:31:fc:10:ac:12:bc:c0:28:23:32: 2f:70:c8:90:d1:15:e7:f5:01:5a:df:64:eb:8b:5e: 4a:75:74:c0:f4:e0:1d:48:67:94:52:f5:18:ee:78: 69:e0:45:ad:fd:a7:73:a3:40:9f:05:b5:da:a7:9c: 48:a2:df:8e:46:cd:97:67:a5:dd:d4:55:30:02:d9: 17:ef:71:ee:9a:ea:fd:af:8c:09:48:c6:98:82:2f: 26:ff:37:22:ef:fe:23:f6:0d:6c:56:f5:9a:fc:92: 08:fa:ca:e0:0f:9a:53:d6:1a:d9:7d:b9:b6:1f:a8: e3:41:8f:e3:09:40:85:6c:93:0f:cf:21:d4:81:08: 36:37:e0:0d:5c:9f:77:07:7d:06:b7:af:78:d2:c9: 88:68:8b:e6:06:24:44:fa:1b:dd:3f:95:25:01:ac: 32:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:62:3E:1A:55:60:BB:8F:3A:0E:D3:80:2D:89:E5:04:B7:15:6C:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c/86299c88-beff-4167-a32f-55e2726d4f7c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 192.190.225.0/24 206.108.48.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46597 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cb:8b:b7:fe:84:d5:13:37:c6:64:07:84:c8:7c:3f:d0:27: 43:38:c0:7a:7d:61:db:8a:7b:f8:08:3a:a5:bc:b3:11:61:c3: d1:cc:24:cf:93:f2:13:d4:9f:02:fa:09:c0:bd:c0:96:80:8e: aa:a6:19:72:92:5d:41:40:bd:cc:80:78:0a:e0:48:31:e2:69: 3d:0a:4f:62:b5:e6:5e:6a:dd:74:1e:1c:d3:27:1f:c3:05:1a: 4f:3f:48:17:b0:7d:bb:7f:e8:97:fe:ed:30:63:f7:10:1c:f9: 7c:82:9a:cc:eb:6c:4d:14:46:f0:cc:ba:d6:4c:f5:42:46:40: f4:91:2e:fc:08:a4:43:a4:58:e6:72:db:3a:ed:b9:c9:de:9a: 19:53:72:e2:04:03:a4:82:c5:75:e8:62:66:e1:e2:db:13:0e: 3e:9b:14:b7:17:1a:5a:0e:36:ec:61:8a:55:3a:c4:2e:68:74: 48:fc:9c:17:f4:00:10:78:fb:32:14:6d:77:5c:88:c1:35:df: 65:d0:c8:9d:1f:c5:99:09:ba:de:24:86:a3:01:76:2b:53:d1: 5b:d0:80:60:b1:1d:22:7d:0d:99:94:58:ff:d4:01:28:d8:c4: ed:fe:7c:c3:8a:81:89:c0:f0:ee:1a:2e:43:8a:07:32:6b:71: c1:22:d0:aa -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEupnary1LA6bTXGrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyNzE2MzcwMFoXDTI4MDEzMDE3MzcwMFowLzEtMCsGA1UEAxMk ODYyOTljODgtYmVmZi00MTY3LWEzMmYtNTVlMjcyNmQ0ZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApphSUe16RiUS2M+jl6lT2nFdXFxcYYcp/fem 9M1BPd6SiqV9Mz4bZHQ8GhR3WyDsFW6yYjAlvxhQXnE881VUH31ifElhAvq4K6QH lX7/TEKROEIc5aXPR5QlCqWIKTH8EKwSvMAoIzIvcMiQ0RXn9QFa32Tri15KdXTA 9OAdSGeUUvUY7nhp4EWt/adzo0CfBbXap5xIot+ORs2XZ6Xd1FUwAtkX73Humur9 r4wJSMaYgi8m/zci7/4j9g1sVvWa/JII+srgD5pT1hrZfbm2H6jjQY/jCUCFbJMP zyHUgQg2N+ANXJ93B30Gt6940smIaIvmBiRE+hvdP5UlAawyCwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFO5iPhpVYLuPOg7TgC2J5QS3FWyeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 NjI5OWM4OC1iZWZmLTQxNjctYTMyZi01NWUyNzI2ZDRmN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzg2Mjk5Yzg4LWJlZmYtNDE2Ny1h MzJmLTU1ZTI3MjZkNGY3Yy84NjI5OWM4OC1iZWZmLTQxNjctYTMyZi01NWUyNzI2 ZDRmN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAvuEDBAPObDAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALYFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHLLi7f+hNUTN8ZkB4TIfD/QJ0M4wHp9YduKe/gI OqW8sxFhw9HMJM+T8hPUnwL6CcC9wJaAjqqmGXKSXUFAvcyAeArgSDHiaT0KT2K1 5l5q3XQeHNMnH8MFGk8/SBewfbt/6Jf+7TBj9xAc+XyCmszrbE0URvDMutZM9UJG QPSRLvwIpEOkWOZy2zrtucnemhlTcuIEA6SCxXXoYmbh4tsTDj6bFLcXGloONuxh ilU6xC5odEj8nBf0ABB4+zIUbXdciME132XQyJ0fxZkJut4khqMBditT0VvQgGCx HSJ9DZmUWP/UASjYxO3+fMOKgYnA8O4aLkOKBzJrccEi0Ko= -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:59 2025 by rpki-client