This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0.cer File: 99dcdccb-926b-4c77-aab5-f4b177f65fe0.cer (raw, json) Hash identifier: UifY6HcoUVprW5IRTD7Wx14YYuJ1K3GRdRrxWR6pppM= Subject key identifier: E8:C4:6F:57:93:A5:94:56:2B:5C:EB:31:F5:FA:45:B8:CF:69:2B:75 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8C131F75FC9FD6BEC88B3380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/99dcdccb-926b-4c77-aab5-f4b177f65fe0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 02:39:24 +0000 Certificate not after: Thu 20 Jan 2028 03:39:24 +0000 Subordinate resources: AS: 397130 IP: 66.179.150.0/24 IP: 148.59.91.0/24 IP: 148.227.174.0/24 IP: 156.67.60.0/24 IP: 162.33.183.0/24 IP: 162.33.191.0/24 IP: 162.223.123.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:13:1f:75:fc:9f:d6:be:c8:8b:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 02:39:24 2025 GMT Not After : Jan 20 03:39:24 2028 GMT Subject: CN=99dcdccb-926b-4c77-aab5-f4b177f65fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:2f:e4:53:6a:b6:50:a0:fc:08:a2:5f:fe: be:d9:24:d9:d6:d8:e7:eb:fd:fa:02:22:81:d9:cd: e9:58:b5:99:b6:b5:3a:0a:e0:a7:c0:f2:9b:1f:14: 77:c1:2e:ca:18:82:38:de:b0:3d:8a:b1:7b:9e:b9: 79:f5:2f:04:e7:48:60:55:27:d6:84:0a:71:95:fd: b3:33:8f:91:f1:c2:16:d5:f7:16:00:a4:04:43:dd: d6:70:15:67:17:bf:5d:6f:df:d6:8b:62:da:f6:4d: d1:07:85:cb:0f:f4:a0:18:e5:45:5c:e2:0c:f2:2f: ea:42:90:c8:49:70:4a:73:8e:90:14:fb:10:de:42: 9f:a7:a3:57:13:25:89:c9:88:5f:90:6e:39:d2:cf: 5f:26:1f:da:d5:5a:c9:34:b2:1e:9f:43:1a:ee:b1: bf:17:3a:73:84:f7:10:83:87:4d:92:39:1b:7d:a3: 29:c9:18:35:aa:30:04:99:66:61:30:06:f8:0c:93: 1c:2c:ab:d7:f7:5b:c0:43:ea:4d:66:30:1e:b1:9f: 7a:d3:f5:22:38:70:7c:d3:96:cc:b8:68:c1:2a:f2: 1b:a4:a3:6b:48:05:80:9e:1b:e0:c3:d8:55:18:33: 58:51:44:f2:dc:d4:50:77:99:f2:90:22:d4:57:d6: 6e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C4:6F:57:93:A5:94:56:2B:5C:EB:31:F5:FA:45:B8:CF:69:2B:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/99dcdccb-926b-4c77-aab5-f4b177f65fe0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 66.179.150.0/24 148.59.91.0/24 148.227.174.0/24 156.67.60.0/24 162.33.183.0/24 162.33.191.0/24 162.223.123.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397130 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:73:dd:f4:8d:b4:34:0f:e6:9c:bb:06:e9:01:46:dc:a6:00: d4:69:93:66:5d:5c:19:34:84:06:4f:d2:b5:ee:e7:c3:9a:a7: da:ff:14:5c:c7:ad:c3:7f:27:55:6d:53:af:8e:a6:98:fa:68: 6e:6a:6d:3a:d0:5c:d9:12:44:6a:a4:47:fe:0b:9b:80:a0:7e: 3d:ee:59:c1:20:0c:28:ff:6f:b0:ac:9b:b8:66:5a:05:80:db: 72:32:ae:42:8e:6c:57:f6:5a:90:99:99:b7:65:85:d9:c4:ea: 7f:0e:b4:79:34:46:ea:e7:15:06:f5:e3:9a:0e:6a:24:b5:86: 5f:bf:4b:58:c8:b3:66:b5:cc:e2:34:77:1f:a6:15:dd:86:0a: b8:18:76:5b:a8:cb:de:ea:2e:c2:6a:ea:41:9d:5c:67:0a:6d: 56:9c:70:37:59:a4:36:22:ba:87:50:91:11:ef:7a:7c:19:06: 2b:48:49:6b:5f:ad:40:1a:1f:b6:cb:61:d5:46:6d:43:d5:66: 6d:99:2b:36:d5:b5:58:d9:e8:3c:e4:43:11:d0:93:39:41:c8: ea:9f:a7:7a:ff:bb:44:3a:bf:7f:5b:f5:9a:85:5e:87:a0:28: 7f:fe:f7:61:7e:12:c8:c2:70:34:df:5c:94:55:e0:74:d3:7c: 66:3a:aa:48 -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEuMEx91/J/WvsiLM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzAyMzkyNFoXDTI4MDEyMDAzMzkyNFowLzEtMCsGA1UEAxMk OTlkY2RjY2ItOTI2Yi00Yzc3LWFhYjUtZjRiMTc3ZjY1ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1ov5FNqtlCg/AiiX/6+2STZ1tjn6/36AiKB 2c3pWLWZtrU6CuCnwPKbHxR3wS7KGII43rA9irF7nrl59S8E50hgVSfWhApxlf2z M4+R8cIW1fcWAKQEQ93WcBVnF79db9/Wi2La9k3RB4XLD/SgGOVFXOIM8i/qQpDI SXBKc46QFPsQ3kKfp6NXEyWJyYhfkG450s9fJh/a1VrJNLIen0Ma7rG/FzpzhPcQ g4dNkjkbfaMpyRg1qjAEmWZhMAb4DJMcLKvX91vAQ+pNZjAesZ960/UiOHB805bM uGjBKvIbpKNrSAWAnhvgw9hVGDNYUUTy3NRQd5nykCLUV9ZudwIDAQABo4IEPzCC BDswHQYDVR0OBBYEFOjEb1eTpZRWK1zrMfX6RbjPaSt1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 OWRjZGNjYi05MjZiLTRjNzctYWFiNS1mNGIxNzdmNjVmZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzk5ZGNkY2NiLTkyNmItNGM3Ny1h YWI1LWY0YjE3N2Y2NWZlMC85OWRjZGNjYi05MjZiLTRjNzctYWFiNS1mNGIxNzdm NjVmZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMDAEAgABMCoDBABCs5YDBACUO1sDBACU464DBACcQzwDBACiIbcD BACiIb8DBACi33swGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBg9KMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGJz3fSNtDQP5py7BukBRtymANRpk2ZdXBk0hAZP0rXu58Oap9r/FFzHrcN/J1Vt U6+Oppj6aG5qbTrQXNkSRGqkR/4Lm4Cgfj3uWcEgDCj/b7Csm7hmWgWA23IyrkKO bFf2WpCZmbdlhdnE6n8OtHk0RurnFQb145oOaiS1hl+/S1jIs2a1zOI0dx+mFd2G CrgYdluoy97qLsJq6kGdXGcKbVaccDdZpDYiuodQkRHvenwZBitISWtfrUAaH7bL YdVGbUPVZm2ZKzbVtVjZ6DzkQxHQkzlByOqfp3r/u0Q6v39b9ZqFXoegKH/+92F+ EsjCcDTfXJRV4HTTfGY6qkg= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:52 2025 by rpki-client