This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79.cer File: 97ba4c39-c242-4d94-905d-4f71d6178f79.cer (raw, json) Hash identifier: SuxIMNFWc4fd/ruzTvYucIAir5r7v9R4aK843+JEhZQ= Subject key identifier: A9:FF:FA:20:07:D8:F7:04:33:B2:3B:A8:35:44:31:F7:BA:6C:06:57 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BD11EE446EA418B98A2A27BE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/97ba4c39-c242-4d94-905d-4f71d6178f79.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Nov 2025 20:13:53 +0000 Certificate not after: Sun 13 Feb 2028 20:13:53 +0000 Subordinate resources: AS: 393363 IP: 162.253.104.0 -- 162.253.106.255 IP: 2620:a4:40::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:1e:e4:46:ea:41:8b:98:a2:a2:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 10 20:13:53 2025 GMT Not After : Feb 13 20:13:53 2028 GMT Subject: CN=97ba4c39-c242-4d94-905d-4f71d6178f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ec:fb:4d:58:a5:08:c1:ca:91:93:f7:56:c7: 24:c7:2d:74:1c:ca:76:e3:cb:0d:7f:29:2e:b2:5f: 8f:6e:c3:62:6d:72:a7:87:03:81:d1:c0:54:56:4f: e1:a7:3d:ec:1c:a0:46:7a:74:0d:4a:02:56:fd:5f: 61:a7:d6:60:7a:83:ae:01:cf:2a:24:87:68:78:fb: 12:e4:f0:ba:82:c2:b1:1f:69:2c:37:f3:1a:12:c8: 06:69:a0:12:b2:33:06:67:f2:79:ba:d2:14:3f:6c: 9b:9a:fa:70:f1:5e:f7:9d:65:b6:32:ff:59:84:e7: a6:2b:e6:09:3b:63:42:3d:5e:93:10:73:b9:85:cf: 06:41:72:3b:ba:55:1d:09:ea:20:d1:46:51:63:9f: 1a:04:90:ee:53:e7:c7:1c:39:5c:a8:59:f7:d3:b8: 22:7d:b0:c2:89:58:8d:e8:5f:ea:38:24:95:32:57: 12:2a:a0:f4:20:5e:39:d6:9c:00:5a:bc:80:01:c8: 56:8c:e9:7e:f8:40:05:78:2a:d6:25:f9:ca:54:6d: 5f:ad:6b:61:a3:5b:25:3d:46:28:50:fc:89:e3:b5: df:d5:1c:eb:48:3e:8d:f5:46:7d:2a:0d:f1:10:ad: 5c:ff:08:e7:ae:3c:82:a1:5e:41:bd:4a:f4:38:68: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FF:FA:20:07:D8:F7:04:33:B2:3B:A8:35:44:31:F7:BA:6C:06:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/97ba4c39-c242-4d94-905d-4f71d6178f79.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 162.253.104.0-162.253.106.255 IPv6: 2620:a4:40::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393363 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:bc:01:1a:58:93:a7:34:02:80:0a:ca:98:18:20:ed:2c:bc: 42:bc:5b:fe:db:27:98:16:99:42:c2:1f:a5:3d:e7:69:f7:81: b4:15:5a:1d:a3:2a:96:d0:c5:1a:1a:8e:2e:a7:bb:41:9f:de: 9a:71:e2:ec:91:8e:a2:72:05:b8:91:f8:a7:0b:6b:b8:cd:bd: d4:85:e5:bc:3e:80:f8:84:1a:54:45:48:5b:07:98:70:d4:2f: 26:0c:e0:43:04:b2:24:29:3f:e6:8e:f1:8a:8c:36:81:64:40: ed:a4:f6:8a:c4:84:73:41:c3:25:61:10:b4:7d:15:a6:9d:20: f9:8b:2f:58:94:18:0f:8e:69:b6:c0:f8:e1:b0:da:07:2d:72: ea:79:b0:63:d5:cf:ba:3c:9c:3a:f4:3a:f0:b2:88:49:27:c0: c6:b4:28:39:72:c8:c1:c4:49:3b:da:fc:d1:3f:9c:5d:b4:e7: 4e:1f:b3:bf:28:e2:91:27:8a:9e:d8:42:9c:7f:33:c6:6e:3d: a9:89:4a:0c:7a:00:b0:bc:b5:52:0e:28:a2:b9:8f:bd:48:9f: a7:ce:0d:f4:8e:b1:9f:bb:4b:1d:b6:c8:2f:b1:76:79:1f:6d: 30:b6:2f:61:7d:a5:46:a3:6d:16:56:a4:fd:f7:be:a8:c0:a0: 5e:a6:3e:70 -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEvRHuRG6kGLmKKie+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExMDIwMTM1M1oXDTI4MDIxMzIwMTM1M1owLzEtMCsGA1UEAxMk OTdiYTRjMzktYzI0Mi00ZDk0LTkwNWQtNGY3MWQ2MTc4Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Oz7TVilCMHKkZP3Vsckxy10HMp248sNfyku sl+PbsNibXKnhwOB0cBUVk/hpz3sHKBGenQNSgJW/V9hp9ZgeoOuAc8qJIdoePsS 5PC6gsKxH2ksN/MaEsgGaaASsjMGZ/J5utIUP2ybmvpw8V73nWW2Mv9ZhOemK+YJ O2NCPV6TEHO5hc8GQXI7ulUdCeog0UZRY58aBJDuU+fHHDlcqFn307gifbDCiViN 6F/qOCSVMlcSKqD0IF451pwAWryAAchWjOl++EAFeCrWJfnKVG1frWtho1slPUYo UPyJ47Xf1RzrSD6N9UZ9Kg3xEK1c/wjnrjyCoV5BvUr0OGhTzQIDAQABo4IENDCC BDAwHQYDVR0OBBYEFKn/+iAH2PcEM7I7qDVEMfe6bAZXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 N2JhNGMzOS1jMjQyLTRkOTQtOTA1ZC00ZjcxZDYxNzhmNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzk3YmE0YzM5LWMyNDItNGQ5NC05 MDVkLTRmNzFkNjE3OGY3OS85N2JhNGMzOS1jMjQyLTRkOTQtOTA1ZC00ZjcxZDYx NzhmNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMBQEAgABMA4wDAMEA6L9aAMEAKL9ajAPBAIAAjAJAwcAJiAApABA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYAkzBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVvAEaWJOnNAKA CsqYGCDtLLxCvFv+2yeYFplCwh+lPedp94G0FVodoyqW0MUaGo4up7tBn96aceLs kY6icgW4kfinC2u4zb3UheW8PoD4hBpURUhbB5hw1C8mDOBDBLIkKT/mjvGKjDaB ZEDtpPaKxIRzQcMlYRC0fRWmnSD5iy9YlBgPjmm2wPjhsNoHLXLqebBj1c+6PJw6 9DrwsohJJ8DGtCg5csjBxEk72vzRP5xdtOdOH7O/KOKRJ4qe2EKcfzPGbj2piUoM egCwvLVSDiiiuY+9SJ+nzg30jrGfu0sdtsgvsXZ5H20wti9hfaVGo20WVqT9976o wKBepj5w -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:59 2025 by rpki-client