This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer File: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer (raw, json) Hash identifier: TzIhUegdZw6G77Vh8QRDEwmeAhFkvLU5YGEIof6Qd8I= Subject key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BEC6232F695C8AB12E3773580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Nov 2025 14:36:20 +0000 Certificate not after: Tue 08 Feb 2028 14:32:54 +0000 Subordinate resources: AS: 10918 IP: 173.243.232.0/22 IP: 199.96.108.0/22 IP: 2604:2aa0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:62:32:f6:95:c8:ab:12:e3:77:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 20 14:36:20 2025 GMT Not After : Feb 8 14:32:54 2028 GMT Subject: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c2:57:8e:d0:aa:d0:96:a8:d2:94:04:1e:1e: 83:d7:d6:20:67:7e:d5:5b:a8:8f:f0:1f:f1:e3:a9: 11:dd:7f:22:1e:e0:57:d3:0e:ba:ea:89:ce:ee:ae: 71:13:10:a8:55:e2:92:6b:a3:07:1c:3f:fd:ca:c7: 00:52:0a:e3:15:89:f1:7b:35:d3:02:1c:9b:24:9b: 11:d4:05:01:9a:57:cd:2a:16:68:99:a9:f0:ff:57: 02:fe:29:6f:2e:6d:02:b3:24:a6:92:d0:fd:a4:eb: 3b:71:2d:f0:bb:de:e9:7e:62:25:1f:4b:87:9a:ee: f0:30:03:cc:81:c7:ae:76:ec:87:00:4c:f4:6f:bb: 43:9d:c9:e2:c6:df:96:0a:97:99:db:d8:3e:e1:9c: a7:7b:bc:0b:3e:12:50:e8:52:16:04:ce:7b:33:56: bf:fc:8e:36:16:5b:88:c2:c9:f9:e9:80:87:de:20: 58:91:e3:d3:e5:38:d7:5b:6f:84:41:12:bb:86:ba: b7:af:79:11:ee:ca:81:52:11:b7:91:68:43:64:02: 51:a0:42:9c:82:e0:4f:80:38:05:ed:f9:15:ee:10: e3:fd:5d:4a:d6:56:f1:e1:a4:2e:5a:82:f1:a1:8c: ae:3e:b5:7c:61:f2:35:fb:9e:d5:67:b0:19:81:1c: 95:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 173.243.232.0/22 199.96.108.0/22 IPv6: 2604:2aa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10918 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e0:c7:a1:99:cd:ba:1f:e9:b9:11:19:af:d0:c4:fe:4f:56: a0:3e:5f:27:a3:47:c3:95:79:5e:c2:9f:74:d6:35:cb:62:e2: 33:6f:cf:34:8e:b9:6b:aa:fe:ba:96:10:cd:74:50:ee:4c:01: 5f:4a:98:7f:fd:e1:7f:d0:07:11:60:34:cb:fb:6f:a6:b6:bc: c6:3f:91:09:e0:03:4e:ac:98:3b:16:1d:f8:61:90:f9:d5:fa: 37:88:cd:d0:11:17:e8:17:b3:bf:d9:77:65:9d:d9:95:34:69: fb:28:60:d4:60:4f:fb:f9:ff:78:4d:08:5a:ec:82:3a:b0:18: d1:bf:b0:3a:c6:6b:06:d2:17:8f:a0:b2:c4:6e:80:7d:86:4d: d9:16:22:9d:02:7b:6a:9f:c2:1c:22:52:a1:2a:70:62:09:72: af:37:7e:0f:c7:c7:7b:90:31:ad:42:76:7c:b0:39:70:46:43: cb:da:d2:80:07:74:82:67:08:f9:3f:c0:98:ea:52:be:26:ba: f1:c2:08:f8:ec:3c:2d:e3:21:89:fe:c3:a9:fa:33:3b:19:6c: 90:bf:93:b2:3b:c4:2a:5e:4a:b2:67:3d:02:c1:44:7e:92:4e: 48:bb:cf:ed:d9:d5:9a:3b:ae:bf:cf:66:5d:bc:79:2b:0b:31: 98:cd:34:5d -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEvsYjL2lcirEuN3NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyMDE0MzYyMFoXDTI4MDIwODE0MzI1NFowLzEtMCsGA1UEAxMk ODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlmNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8JXjtCq0Jao0pQEHh6D19YgZ37VW6iP8B/x 46kR3X8iHuBX0w666onO7q5xExCoVeKSa6MHHD/9yscAUgrjFYnxezXTAhybJJsR 1AUBmlfNKhZomanw/1cC/ilvLm0CsySmktD9pOs7cS3wu97pfmIlH0uHmu7wMAPM gceuduyHAEz0b7tDncnixt+WCpeZ29g+4Zyne7wLPhJQ6FIWBM57M1a//I42FluI wsn56YCH3iBYkePT5TjXW2+EQRK7hrq3r3kR7sqBUhG3kWhDZAJRoEKcguBPgDgF 7fkV7hDj/V1K1lbx4aQuWoLxoYyuPrV8YfI1+57VZ7AZgRyVWQIDAQABo4IELzCC BCswHQYDVR0OBBYEFB0QoJLj0AqpWj8Eg185of+CyQeaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05 YzNkLTI0YjE0NDQ5ZjQ5ZC84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0 OWY0OWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKt8+gDBALHYGwwDQQCAAIwBwMFACYEKqAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICKqYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAB+DHoZnNuh/puREZr9DE /k9WoD5fJ6NHw5V5XsKfdNY1y2LiM2/PNI65a6r+upYQzXRQ7kwBX0qYf/3hf9AH EWA0y/tvpra8xj+RCeADTqyYOxYd+GGQ+dX6N4jN0BEX6Bezv9l3ZZ3ZlTRp+yhg 1GBP+/n/eE0IWuyCOrAY0b+wOsZrBtIXj6CyxG6AfYZN2RYinQJ7ap/CHCJSoSpw Yglyrzd+D8fHe5AxrUJ2fLA5cEZDy9rSgAd0gmcI+T/AmOpSvia68cII+Ow8LeMh if7DqfozOxlskL+TsjvEKl5Ksmc9AsFEfpJOSLvP7dnVmjuuv89mXbx5KwsxmM00 XQ== -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:44 2025 by rpki-client