This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.cer File: 893cd2a1-ffd7-42b2-af7a-45dc5cbce148.cer (raw, json) Hash identifier: BH6SvbeohhQbjYDaBHtOSfxwSFbqkm38z6hF2DZwfn0= Subject key identifier: 70:69:53:F2:57:BB:7B:D0:57:53:9C:62:32:B1:F6:E6:00:55:83:EC Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BDBBBD41D841CD3318B4B7380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Nov 2025 15:28:11 +0000 Certificate not after: Thu 17 Feb 2028 15:28:11 +0000 Subordinate resources: IP: 74.122.64.0/21 IP: 199.58.128.0/21 IP: 199.192.244.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:db:bb:d4:1d:84:1c:d3:31:8b:4b:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 14 15:28:11 2025 GMT Not After : Feb 17 15:28:11 2028 GMT Subject: CN=893cd2a1-ffd7-42b2-af7a-45dc5cbce148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:15:83:f9:06:7a:a6:3b:90:8f:f9:83:08: a5:03:6f:0b:e1:44:ef:d1:c5:c0:28:f8:9e:94:d3: 88:b9:14:4c:00:51:ce:89:03:f3:cf:92:ef:7c:50: a1:ba:cc:2f:73:7a:4f:d0:c5:48:00:a6:42:48:9b: 35:a2:03:19:d5:69:52:0d:34:56:7f:6b:59:a9:36: ac:bf:ec:05:d1:56:1e:67:48:d3:ec:fc:6d:f9:8e: 39:76:67:34:a2:c3:74:3f:d0:ba:69:5d:22:37:1b: 5b:f9:bb:e3:f8:43:24:cc:52:53:7c:3f:ec:62:27: 7f:5c:28:6e:23:a7:64:dc:c1:14:26:7d:82:70:f2: a0:aa:c1:e0:0a:44:45:02:44:7e:88:01:75:29:f8: 52:52:1f:60:e1:dc:ec:7a:2b:98:55:df:c7:1c:c8: 3b:8d:a2:57:f7:56:50:e5:14:9e:c0:14:fe:d5:68: 20:ec:8e:32:e9:f8:fb:1b:67:12:06:ec:b5:62:b8: 14:0f:5e:67:54:40:a1:2d:bd:60:18:2c:0c:1e:fe: 8a:7d:a5:7d:18:c6:62:ba:6a:46:13:66:0a:45:79: 20:04:79:ee:4a:5b:ba:8f:c8:43:48:d5:7a:76:06: 90:42:21:d0:e1:ef:55:5e:1b:6e:a0:99:36:b6:b2: f6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:69:53:F2:57:BB:7B:D0:57:53:9C:62:32:B1:F6:E6:00:55:83:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 74.122.64.0/21 199.58.128.0/21 199.192.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9a:3a:b9:4f:c9:bc:f2:4a:eb:23:87:67:8f:03:b1:c6:19: 58:e9:81:a3:26:73:c3:e7:3c:a1:53:58:79:f7:e2:67:67:d3: 2a:4b:e5:89:6e:e6:9e:49:1f:5b:a3:71:10:7b:86:45:86:2b: 8c:f1:a3:f5:80:b2:0f:e1:c6:77:82:d8:0e:49:d1:24:00:b4: e1:b9:39:1c:65:cd:b6:ac:2e:de:c1:79:c5:19:1b:2b:6e:c7: 0d:b9:f7:3d:ff:14:94:cb:dd:90:62:2e:4b:3a:31:9c:4a:4e: e6:65:38:88:3c:00:99:36:12:09:33:31:7f:53:86:5c:7a:25: 87:70:f0:89:52:30:9a:e8:8b:22:08:ff:4d:49:29:b9:9c:82: 7f:30:61:1c:cf:1f:b9:7a:4d:60:3a:b0:f1:cf:1e:3e:31:f6: 21:c5:f0:07:35:73:7a:24:bb:81:ea:f8:a6:a0:15:61:7c:3f: 7d:fb:94:56:88:aa:24:9c:48:b4:2d:1d:fd:4c:93:f3:b6:70: b2:91:0d:d8:db:a9:6d:c8:d9:03:8d:57:8a:03:a4:c0:d4:27: 6f:90:6b:5c:0b:a2:c8:3b:be:a2:5b:e0:3d:05:e7:8d:bf:a0: 40:d1:42:4f:f9:15:e6:55:4b:b1:3a:87:96:2d:bd:42:aa:65: 44:84:b1:97 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEvbu9QdhBzTMYtLc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExNDE1MjgxMVoXDTI4MDIxNzE1MjgxMVowLzEtMCsGA1UEAxMk ODkzY2QyYTEtZmZkNy00MmIyLWFmN2EtNDVkYzVjYmNlMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpcVg/kGeqY7kI/5gwilA28L4UTv0cXAKPie lNOIuRRMAFHOiQPzz5LvfFChuswvc3pP0MVIAKZCSJs1ogMZ1WlSDTRWf2tZqTas v+wF0VYeZ0jT7Pxt+Y45dmc0osN0P9C6aV0iNxtb+bvj+EMkzFJTfD/sYid/XChu I6dk3MEUJn2CcPKgqsHgCkRFAkR+iAF1KfhSUh9g4dzseiuYVd/HHMg7jaJX91ZQ 5RSewBT+1Wgg7I4y6fj7G2cSBuy1YrgUD15nVEChLb1gGCwMHv6KfaV9GMZiumpG E2YKRXkgBHnuSlu6j8hDSNV6dgaQQiHQ4e9VXhtuoJk2trL2wwIDAQABo4IECzCC BAcwHQYDVR0OBBYEFHBpU/JXu3vQV1OcYjKx9uYAVYPsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 OTNjZDJhMS1mZmQ3LTQyYjItYWY3YS00NWRjNWNiY2UxNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzg5M2NkMmExLWZmZDctNDJiMi1h ZjdhLTQ1ZGM1Y2JjZTE0OC84OTNjZDJhMS1mZmQ3LTQyYjItYWY3YS00NWRjNWNi Y2UxNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBANKekADBAPHOoADBALHwPQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUZo6 uU/JvPJK6yOHZ48DscYZWOmBoyZzw+c8oVNYeffiZ2fTKkvliW7mnkkfW6NxEHuG RYYrjPGj9YCyD+HGd4LYDknRJAC04bk5HGXNtqwu3sF5xRkbK27HDbn3Pf8UlMvd kGIuSzoxnEpO5mU4iDwAmTYSCTMxf1OGXHolh3DwiVIwmuiLIgj/TUkpuZyCfzBh HM8fuXpNYDqw8c8ePjH2IcXwBzVzeiS7ger4pqAVYXw/ffuUVoiqJJxItC0d/UyT 87ZwspEN2NupbcjZA41XigOkwNQnb5BrXAuiyDu+olvgPQXnjb+gQNFCT/kV5lVL sTqHli29QqplRISxlw== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:52 2025 by rpki-client