This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d.cer File: a2f16351-7ad6-41a4-92cd-1031003a6a0d.cer (raw, json) Hash identifier: hwwmat3sxMfsgbBIiTnZ+PtnbyQ53gdsvNFyIPiuEA0= Subject key identifier: EC:69:3A:E3:0B:EC:FA:1E:6B:86:19:A5:DE:40:F2:B0:F6:69:40:D8 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BF826DBA4D07089C951F38980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/a2f16351-7ad6-41a4-92cd-1031003a6a0d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Nov 2025 19:46:28 +0000 Certificate not after: Sun 27 Feb 2028 19:46:28 +0000 Subordinate resources: IP: 142.248.144.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:26:db:a4:d0:70:89:c9:51:f3:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 24 19:46:28 2025 GMT Not After : Feb 27 19:46:28 2028 GMT Subject: CN=a2f16351-7ad6-41a4-92cd-1031003a6a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7c:35:03:3c:ab:73:cf:6e:df:be:79:19:34: 51:60:bd:0b:fa:32:a4:8d:03:9d:70:69:7b:a2:3e: 47:c9:8b:b2:c9:97:2c:f0:96:f1:8c:cd:1a:e1:de: e8:32:7c:82:22:e6:05:4a:a8:f4:b9:a2:48:f9:ca: 23:0f:69:9b:7e:cd:84:d9:85:9e:b5:99:44:dd:76: 2d:54:ea:f7:1d:1e:7d:7f:8d:05:25:6d:7d:8b:a8: 57:c6:e5:5b:b4:5e:92:9e:c0:8d:86:d3:7f:53:08: bc:65:c7:33:67:a6:88:7a:17:00:2e:a8:c1:53:22: 8d:3b:1e:e9:c4:2e:35:8c:67:00:d3:e8:26:3d:b0: 39:69:12:42:00:2d:bf:9b:e0:83:12:4e:ce:d2:38: 45:27:b8:1e:9a:97:a7:ec:c8:09:c7:52:14:61:3f: 12:a5:3a:17:c4:4f:3d:e0:ca:ff:9e:62:86:69:44: 64:24:56:37:61:8b:b0:b7:c3:b8:0a:1d:d4:21:4c: 1c:7b:c9:8e:5a:18:28:a8:fa:ca:8c:2a:35:03:68: e7:9b:a7:ff:7b:69:0e:b3:b4:9d:aa:de:a3:ff:63: 7f:26:d4:2f:bf:07:cb:49:f2:29:bd:44:3c:84:af: 59:12:f5:bc:6e:42:f0:d0:7d:e2:ed:53:c1:a5:3b: 3a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:69:3A:E3:0B:EC:FA:1E:6B:86:19:A5:DE:40:F2:B0:F6:69:40:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/a2f16351-7ad6-41a4-92cd-1031003a6a0d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:fa:66:05:83:ce:41:3a:d9:69:94:6d:f0:d4:a5:e0:e4:16: 24:0c:8a:4c:a0:3e:77:4b:af:24:37:dc:37:0a:69:97:67:07: 6f:cb:94:c6:ca:c1:8a:da:04:eb:dd:c9:60:dd:72:d0:63:e6: 91:02:46:9e:c9:95:ce:48:9e:23:15:02:66:1b:39:ca:af:21: b4:5d:3a:f1:e9:92:a8:22:2a:f5:11:f7:78:68:4d:85:20:18: 52:77:cf:32:a0:e6:bc:5d:ab:d3:b7:5b:99:80:10:bf:38:d5: ba:29:3d:a1:00:82:d6:f9:98:b0:c3:36:77:2e:85:50:f3:e8: 1f:8d:17:b7:e8:b5:f7:44:e1:06:89:a9:71:89:fe:eb:71:88: 46:e9:ba:12:07:91:8e:8e:58:19:3b:d6:c3:27:af:ee:c2:f1: c1:55:40:46:df:eb:2a:8c:e1:49:30:99:21:fb:bd:df:da:7c: a7:63:8d:1a:38:26:68:c1:2f:74:7a:d9:ec:55:60:69:d9:e7: 11:ce:c8:18:c2:37:a8:62:b2:b1:44:20:5e:eb:a7:e1:a9:2e: 9a:07:8d:72:a1:6e:be:bc:a7:54:31:dc:8c:a1:8e:89:22:79: 2e:93:d7:6a:ba:56:83:bc:2f:c0:2d:0c:53:55:8e:f4:a9:8e: de:5e:9c:de -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEv4Jtuk0HCJyVHziYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNDE5NDYyOFoXDTI4MDIyNzE5NDYyOFowLzEtMCsGA1UEAxMk YTJmMTYzNTEtN2FkNi00MWE0LTkyY2QtMTAzMTAwM2E2YTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Xw1Azyrc89u3755GTRRYL0L+jKkjQOdcGl7 oj5HyYuyyZcs8JbxjM0a4d7oMnyCIuYFSqj0uaJI+cojD2mbfs2E2YWetZlE3XYt VOr3HR59f40FJW19i6hXxuVbtF6SnsCNhtN/Uwi8ZcczZ6aIehcALqjBUyKNOx7p xC41jGcA0+gmPbA5aRJCAC2/m+CDEk7O0jhFJ7gempen7MgJx1IUYT8SpToXxE89 4Mr/nmKGaURkJFY3YYuwt8O4Ch3UIUwce8mOWhgoqPrKjCo1A2jnm6f/e2kOs7Sd qt6j/2N/JtQvvwfLSfIpvUQ8hK9ZEvW8bkLw0H3i7VPBpTs6JwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOxpOuML7Poea4YZpd5A8rD2aUDYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h MmYxNjM1MS03YWQ2LTQxYTQtOTJjZC0xMDMxMDAzYTZhMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2EyZjE2MzUxLTdhZDYtNDFhNC05 MmNkLTEwMzEwMDNhNmEwZC9hMmYxNjM1MS03YWQ2LTQxYTQtOTJjZC0xMDMxMDAz YTZhMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKO+JAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXPpmBYPOQTrZaZRt8NSl 4OQWJAyKTKA+d0uvJDfcNwppl2cHb8uUxsrBitoE693JYN1y0GPmkQJGnsmVzkie IxUCZhs5yq8htF068emSqCIq9RH3eGhNhSAYUnfPMqDmvF2r07dbmYAQvzjVuik9 oQCC1vmYsMM2dy6FUPPoH40Xt+i190ThBompcYn+63GIRum6EgeRjo5YGTvWwyev 7sLxwVVARt/rKozhSTCZIfu939p8p2ONGjgmaMEvdHrZ7FVgadnnEc7IGMI3qGKy sUQgXuun4akumgeNcqFuvrynVDHcjKGOiSJ5LpPXarpWg7wvwC0MU1WO9KmO3l6c 3g== -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:45 2025 by rpki-client