This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669.cer File: 97b2b039-29df-464b-999d-0a4a81b0c669.cer (raw, json) Hash identifier: oK5+t/75GnjxVKg68ahvxfHnGOYtVtQMJ/4sFq7HLvo= Subject key identifier: 39:5D:B9:19:6A:02:69:36:AD:71:4A:1F:D9:79:30:81:73:6C:D7:E5 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BFC69BB993765647530FE5CB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669/97b2b039-29df-464b-999d-0a4a81b0c669.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Nov 2025 08:24:27 +0000 Certificate not after: Tue 29 Feb 2028 08:24:27 +0000 Subordinate resources: IP: 23.149.244.0/24 IP: 2602:f4c0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fc:69:bb:99:37:65:64:75:30:fe:5c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 26 08:24:27 2025 GMT Not After : Feb 29 08:24:27 2028 GMT Subject: CN=97b2b039-29df-464b-999d-0a4a81b0c669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cf:e5:02:9d:49:cf:f4:ab:8b:ef:75:84:92: f9:8a:fc:ff:c8:a4:e3:ff:9f:53:00:ed:e6:61:83: 62:75:3c:8b:97:70:9b:cf:05:64:5d:aa:be:ed:cc: c0:1c:d4:84:d6:3c:7d:2e:03:5a:30:d9:12:98:8b: cb:40:7e:e4:28:1b:b5:77:78:7a:5e:d8:f6:f3:13: 0f:04:04:10:89:1d:07:59:09:57:a8:8a:f0:ec:c7: 65:1a:88:db:87:6a:70:60:b7:86:92:28:dc:6f:07: 07:5e:31:82:eb:dc:4d:1f:be:3e:cc:c2:1b:35:43: e9:98:92:89:95:85:8d:38:ea:d0:b3:4d:95:0b:3c: 20:53:6b:ce:15:36:7a:31:ae:3e:a9:6b:1b:a4:0a: ba:9c:8a:d0:04:5f:fc:3f:f1:bd:01:c8:56:08:cd: a6:96:03:28:2c:9c:d2:0c:41:81:51:e7:b4:51:89: bd:3d:bc:64:0a:9d:05:0d:fe:c3:07:04:04:54:20: 77:f6:c6:56:7b:3a:68:a2:4f:32:83:90:f5:7f:72: 0b:27:c4:f7:a0:01:72:37:5a:cf:4f:b7:83:25:0b: 92:93:7c:c4:58:db:35:c5:79:01:69:f5:ae:b3:be: e4:91:a1:c4:f2:2f:3b:cb:78:f7:46:47:e2:59:38: 5f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5D:B9:19:6A:02:69:36:AD:71:4A:1F:D9:79:30:81:73:6C:D7:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669/97b2b039-29df-464b-999d-0a4a81b0c669.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.149.244.0/24 IPv6: 2602:f4c0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d0:ee:fe:47:d1:60:18:8e:94:a6:ff:6a:9f:12:ec:9e:1e: 85:2f:a9:4e:08:0e:db:63:56:ff:47:e4:b8:f9:36:b6:bd:d7: e6:1b:fd:de:3d:02:7b:60:9a:be:62:03:2d:62:96:de:0a:4a: e5:81:6c:e0:f2:62:74:ed:4f:95:17:fc:2f:96:d4:b2:10:21: 38:7d:b1:91:57:2a:91:04:2e:8f:6a:1e:3c:ec:be:07:cc:df: ec:bb:ed:d9:76:47:e0:bb:34:06:3c:68:82:02:e2:c9:cc:65: d1:d0:9b:97:ca:3b:3d:28:85:e5:c8:87:cd:9b:8a:46:29:a7: 1a:9a:4b:26:16:cb:89:6c:8a:d9:90:88:6c:0c:23:2a:79:fd: 22:ee:a6:08:1d:d0:0c:6b:6f:4e:cd:34:64:ec:1b:e1:6b:74: ce:dd:d0:81:b5:55:13:f2:8f:fb:cd:bd:20:b1:d9:d5:38:4b: 8e:61:8f:2d:a8:06:df:02:fd:c1:c5:9a:f7:f0:4a:ba:90:7c: 0d:8f:25:d8:dc:ca:02:4e:ae:c6:1e:a3:d8:52:0a:b5:e2:2a: b2:c8:dd:81:8c:43:2f:b7:53:3b:f8:db:0e:75:c7:64:c4:cf: 98:3c:1d:93:f8:f7:6b:cd:a4:18:22:a0:ad:0a:b6:87:0e:3f: dc:fb:73:a7 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEv8abuZN2VkdTD+XLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNjA4MjQyN1oXDTI4MDIyOTA4MjQyN1owLzEtMCsGA1UEAxMk OTdiMmIwMzktMjlkZi00NjRiLTk5OWQtMGE0YTgxYjBjNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M/lAp1Jz/Sri+91hJL5ivz/yKTj/59TAO3m YYNidTyLl3CbzwVkXaq+7czAHNSE1jx9LgNaMNkSmIvLQH7kKBu1d3h6Xtj28xMP BAQQiR0HWQlXqIrw7MdlGojbh2pwYLeGkijcbwcHXjGC69xNH74+zMIbNUPpmJKJ lYWNOOrQs02VCzwgU2vOFTZ6Ma4+qWsbpAq6nIrQBF/8P/G9AchWCM2mlgMoLJzS DEGBUee0UYm9PbxkCp0FDf7DBwQEVCB39sZWezpook8yg5D1f3ILJ8T3oAFyN1rP T7eDJQuSk3zEWNs1xXkBafWus77kkaHE8i87y3j3RkfiWThfaQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDlduRlqAmk2rXFKH9l5MIFzbNflMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 N2IyYjAzOS0yOWRmLTQ2NGItOTk5ZC0wYTRhODFiMGM2NjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzk3YjJiMDM5LTI5ZGYtNDY0Yi05 OTlkLTBhNGE4MWIwYzY2OS85N2IyYjAzOS0yOWRmLTQ2NGItOTk5ZC0wYTRhODFi MGM2NjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlfQwDgQCAAIwCAMGACYC9MAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACTQ7v5H0WAYjpSm/2qfEuyeHoUvqU4IDttjVv9H5Lj5Nra91+Yb/d49Antgmr5i Ay1ilt4KSuWBbODyYnTtT5UX/C+W1LIQITh9sZFXKpEELo9qHjzsvgfM3+y77dl2 R+C7NAY8aIIC4snMZdHQm5fKOz0oheXIh82bikYppxqaSyYWy4lsitmQiGwMIyp5 /SLupggd0Axrb07NNGTsG+FrdM7d0IG1VRPyj/vNvSCx2dU4S45hjy2oBt8C/cHF mvfwSrqQfA2PJdjcygJOrsYeo9hSCrXiKrLI3YGMQy+3Uzv42w51x2TEz5g8HZP4 92vNpBgioK0KtocOP9z7c6c= -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:58 2025 by rpki-client