This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.cer File: a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.cer (raw, json) Hash identifier: ZraJ/KH6RtyNiergT4hvZKUyq1OS3ixfkkmRhwpEboo= Subject key identifier: 0E:A2:DA:21:8A:06:A5:1E:81:1C:BD:BA:0C:DB:68:B4:32:65:F2:3F Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B85BA8DD87ACF94C1C7155480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 20:06:06 +0000 Certificate not after: Mon 17 Jan 2028 21:06:06 +0000 Subordinate resources: AS: 22281 IP: 23.153.192.0/24 IP: 2602:feaa::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:ba:8d:d8:7a:cf:94:c1:c7:15:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 14 20:06:06 2025 GMT Not After : Jan 17 21:06:06 2028 GMT Subject: CN=a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:67:bd:00:76:40:72:06:b9:ab:05:51:6a:2b: da:5a:cc:65:08:8b:98:50:46:65:77:9a:de:94:b3: de:89:b8:03:6f:49:0d:b8:a9:3f:20:1d:e0:8c:4c: 8a:44:17:a6:b2:4e:ea:df:18:dc:b7:44:43:4f:6d: 91:20:16:88:35:65:2e:b5:0d:50:b4:89:26:3f:dd: a4:60:72:b6:6e:d2:90:2b:86:a0:14:13:be:d0:75: 00:88:70:27:34:c1:55:53:c4:1c:f0:31:50:64:b7: 3d:a9:ed:fc:c1:4c:6a:5c:66:fc:72:c8:f5:bd:0a: 10:ce:74:52:69:5e:8c:88:17:0b:e5:c1:29:0d:41: 77:d4:7d:20:55:02:43:f8:cb:96:70:92:f6:cd:d0: 88:45:a2:de:7e:69:f5:21:aa:e1:60:c2:de:80:dc: d8:10:72:a7:7f:97:04:04:3f:02:87:b7:0d:f8:1b: 48:d4:52:5b:b1:d8:8b:4a:80:35:3f:64:31:23:34: d9:01:89:77:32:09:0c:95:68:4b:b9:94:60:da:13: 45:b2:31:de:44:10:65:bf:f0:62:4f:9c:f4:c1:cb: 69:95:86:4c:e1:12:e1:00:62:23:62:d8:10:f2:3e: 6c:02:f7:e7:27:72:af:57:5c:c8:4b:3d:18:89:09: 83:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A2:DA:21:8A:06:A5:1E:81:1C:BD:BA:0C:DB:68:B4:32:65:F2:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.153.192.0/24 IPv6: 2602:feaa::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22281 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:15:62:39:4f:ad:78:a4:1b:bd:2a:22:ad:d3:fe:46:49:2c: ff:28:3f:92:22:bc:57:58:f5:96:a1:6d:51:3a:f3:b6:b8:58: 18:fb:e6:20:71:0f:74:75:b7:4e:2a:e3:99:47:ce:f0:3c:7a: 35:a1:e9:17:16:24:76:a2:e8:5f:12:10:de:d9:6b:84:fc:5e: fb:1a:49:53:18:7c:90:e2:99:57:f8:73:48:f6:22:d1:6f:d8: 40:bd:ba:4b:86:07:e0:30:39:f2:de:8e:72:88:3a:7e:62:8f: e0:b7:84:fa:a3:14:4b:2f:e9:54:6f:5b:83:e5:25:15:fb:cd: 56:b1:f5:fa:91:82:ca:2b:1f:42:a1:18:06:52:c7:9f:05:fe: 30:83:c8:27:f0:29:ec:b0:bf:63:27:2f:cb:49:9a:4e:7b:c5: 3f:b6:ed:18:bf:e4:f4:92:eb:cc:13:88:72:7f:0a:f8:73:f3: 68:57:54:04:29:32:8a:b6:f5:1b:f4:13:83:af:c3:eb:1f:a7: 98:dc:d3:02:c8:9a:30:1d:4a:32:f4:5d:d1:84:47:55:c1:08: f1:c9:6a:02:b1:30:45:37:d0:b4:32:00:a7:8b:cb:70:72:1e: e2:bf:c9:72:7a:ca:9f:59:1e:6a:f4:ab:4d:df:72:96:d8:9e: 45:0f:3c:fa -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEuFuo3Yes+UwccVVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNDIwMDYwNloXDTI4MDExNzIxMDYwNlowLzEtMCsGA1UEAxMk YTRiNTg5NjEtYjIzYy00NDgwLWFhMWMtZjJlYzZmNGE4ZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAime9AHZAcga5qwVRaivaWsxlCIuYUEZld5re lLPeibgDb0kNuKk/IB3gjEyKRBemsk7q3xjct0RDT22RIBaINWUutQ1QtIkmP92k YHK2btKQK4agFBO+0HUAiHAnNMFVU8Qc8DFQZLc9qe38wUxqXGb8csj1vQoQznRS aV6MiBcL5cEpDUF31H0gVQJD+MuWcJL2zdCIRaLefmn1IarhYMLegNzYEHKnf5cE BD8Ch7cN+BtI1FJbsdiLSoA1P2QxIzTZAYl3MgkMlWhLuZRg2hNFsjHeRBBlv/Bi T5z0wctplYZM4RLhAGIjYtgQ8j5sAvfnJ3KvV1zISz0YiQmD4wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFA6i2iGKBqUegRy9ugzbaLQyZfI/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h NGI1ODk2MS1iMjNjLTQ0ODAtYWExYy1mMmVjNmY0YThkN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2E0YjU4OTYxLWIyM2MtNDQ4MC1h YTFjLWYyZWM2ZjRhOGQ3ZS9hNGI1ODk2MS1iMjNjLTQ0ODAtYWExYy1mMmVjNmY0 YThkN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmcAwDgQCAAIwCAMGBCYC/qoAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlcJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEAVYjlPrXikG70qIq3T/kZJLP8o P5IivFdY9ZahbVE687a4WBj75iBxD3R1t04q45lHzvA8ejWh6RcWJHai6F8SEN7Z a4T8XvsaSVMYfJDimVf4c0j2ItFv2EC9ukuGB+AwOfLejnKIOn5ij+C3hPqjFEsv 6VRvW4PlJRX7zVax9fqRgsorH0KhGAZSx58F/jCDyCfwKeywv2MnL8tJmk57xT+2 7Ri/5PSS68wTiHJ/Cvhz82hXVAQpMoq29Rv0E4Ovw+sfp5jc0wLImjAdSjL0XdGE R1XBCPHJagKxMEU30LQyAKeLy3ByHuK/yXJ6yp9ZHmr0q03fcpbYnkUPPPo= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:44 2025 by rpki-client