This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8dc54b5f-2d6a-4e4d-a904-034618f4c02d.cer File: 8dc54b5f-2d6a-4e4d-a904-034618f4c02d.cer (raw, json) Hash identifier: UL/XJvDmmrgdrDBAzihLdfbQk1J/mJmw/V3tEOylH1o= Subject key identifier: 73:6A:7D:7F:B5:08:AC:7A:1E:C0:78:23:C6:BF:59:AA:4F:2F:91:66 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BFB445E330AF4247D4D79A660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8dc54b5f-2d6a-4e4d-a904-034618f4c02d/8dc54b5f-2d6a-4e4d-a904-034618f4c02d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8dc54b5f-2d6a-4e4d-a904-034618f4c02d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Nov 2025 22:33:21 +0000 Certificate not after: Mon 28 Feb 2028 18:16:03 +0000 Subordinate resources: AS: 63231 IP: 23.150.92.0/24 IP: 2602:f4b8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:44:5e:33:0a:f4:24:7d:4d:79:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 25 22:33:21 2025 GMT Not After : Feb 28 18:16:03 2028 GMT Subject: CN=8dc54b5f-2d6a-4e4d-a904-034618f4c02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:8f:a9:4a:44:b8:fa:4a:27:d3:67:70:10: 00:87:f0:93:6f:69:d6:b8:bf:3f:d8:a8:31:7d:17: 4e:c8:11:ef:35:11:08:3c:9d:ec:ad:e1:02:59:9d: 78:e9:32:99:a0:74:79:71:b3:ea:53:31:70:32:26: 42:b1:ee:65:1d:cb:77:bb:46:25:b4:ca:bb:26:65: e4:c1:c2:a6:89:56:a5:8b:4b:50:3e:ff:9a:8a:c1: 55:14:6a:8b:f7:4b:f1:03:9f:59:4c:6b:cb:08:dc: 5a:a5:01:6a:f3:f6:89:5f:41:fc:b4:2e:5e:6a:ac: 11:cb:f3:47:8c:66:6b:94:6a:6e:72:7f:4d:7b:18: 73:2e:86:b3:22:db:f6:3e:55:f9:a3:2e:af:ff:13: 94:93:cd:49:2a:11:79:d5:04:73:a2:54:9e:29:c7: dc:8d:77:ef:8d:d0:a0:14:d0:e7:89:86:dd:b8:50: 9d:0c:08:a4:a5:2f:43:8f:76:3c:fd:83:46:df:da: 13:cf:09:96:d3:fb:7a:8c:27:1a:8f:23:8c:22:32: 14:3f:53:28:91:2b:5e:02:c6:46:f9:b5:62:7b:ef: 1d:57:07:6c:f1:fa:03:9e:00:7a:46:4c:c0:14:c1: 6f:22:d5:83:f7:7b:7d:af:97:c8:85:3e:79:57:2a: b2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6A:7D:7F:B5:08:AC:7A:1E:C0:78:23:C6:BF:59:AA:4F:2F:91:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8dc54b5f-2d6a-4e4d-a904-034618f4c02d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8dc54b5f-2d6a-4e4d-a904-034618f4c02d/8dc54b5f-2d6a-4e4d-a904-034618f4c02d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.92.0/24 IPv6: 2602:f4b8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63231 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ef:59:64:dc:9a:f0:4e:c7:b1:89:e5:73:ce:ef:f0:9c:d7: 8d:af:e1:5f:af:c3:3c:11:a8:7b:ca:c5:59:75:91:58:11:1e: 19:bb:c8:68:67:4b:c3:9c:44:80:1f:03:c5:49:28:b0:e8:8f: 2a:0d:36:10:5b:a2:77:c2:f9:3f:63:27:1e:b1:14:a8:17:4a: c4:d4:1d:73:04:87:db:35:96:02:66:c6:26:76:63:ab:2c:ce: d6:2d:0e:87:90:4f:16:36:d7:0b:34:b0:bd:76:7a:f5:bc:04: 36:88:0e:d1:85:ff:dd:c6:eb:84:8c:62:e3:3e:ca:20:ee:77: 6e:01:da:5f:7d:fb:50:83:02:b4:1e:9d:f6:19:92:48:8a:3f: bb:43:55:4e:ed:cb:fe:79:45:49:5d:48:8a:60:ac:d8:96:9d: 1d:1b:01:27:ef:90:ff:b8:e7:68:a9:89:28:4e:a1:68:96:ae: 5d:b5:b8:e5:3a:82:e4:e5:a8:ab:8f:1b:f4:bc:0d:b2:2e:1b: 5a:64:b1:51:83:74:40:33:72:58:a3:03:80:68:05:52:1d:56: 04:c9:a1:b1:34:94:67:9c:2e:f9:f4:7c:85:b2:c5:a1:d0:1d: c9:07:a4:f6:b3:b9:82:6e:0f:9a:99:e3:ad:d1:f3:7e:36:21: d4:3b:6a:59 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEv7RF4zCvQkfU15pmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNTIyMzMyMVoXDTI4MDIyODE4MTYwM1owLzEtMCsGA1UEAxMk OGRjNTRiNWYtMmQ2YS00ZTRkLWE5MDQtMDM0NjE4ZjRjMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOaPqUpEuPpKJ9NncBAAh/CTb2nWuL8/2Kgx fRdOyBHvNREIPJ3sreECWZ146TKZoHR5cbPqUzFwMiZCse5lHct3u0YltMq7JmXk wcKmiVali0tQPv+aisFVFGqL90vxA59ZTGvLCNxapQFq8/aJX0H8tC5eaqwRy/NH jGZrlGpucn9NexhzLoazItv2PlX5oy6v/xOUk81JKhF51QRzolSeKcfcjXfvjdCg FNDniYbduFCdDAikpS9Dj3Y8/YNG39oTzwmW0/t6jCcajyOMIjIUP1MokSteAsZG +bVie+8dVwds8foDngB6RkzAFMFvItWD93t9r5fIhT55Vyqy0QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHNqfX+1CKx6HsB4I8a/WapPL5FmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 ZGM1NGI1Zi0yZDZhLTRlNGQtYTkwNC0wMzQ2MThmNGMwMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzhkYzU0YjVmLTJkNmEtNGU0ZC1h OTA0LTAzNDYxOGY0YzAyZC84ZGM1NGI1Zi0yZDZhLTRlNGQtYTkwNC0wMzQ2MThm NGMwMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXllwwDgQCAAIwCAMGACYC9LgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD2/zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBW71lk3JrwTsexieVzzu/wnNeN r+Ffr8M8Eah7ysVZdZFYER4Zu8hoZ0vDnESAHwPFSSiw6I8qDTYQW6J3wvk/Yyce sRSoF0rE1B1zBIfbNZYCZsYmdmOrLM7WLQ6HkE8WNtcLNLC9dnr1vAQ2iA7Rhf/d xuuEjGLjPsog7nduAdpffftQgwK0Hp32GZJIij+7Q1VO7cv+eUVJXUiKYKzYlp0d GwEn75D/uOdoqYkoTqFolq5dtbjlOoLk5airjxv0vA2yLhtaZLFRg3RAM3JYowOA aAVSHVYEyaGxNJRnnC759HyFssWh0B3JB6T2s7mCbg+ameOt0fN+NiHUO2pZ -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:49 2025 by rpki-client