This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a58bdb83-b149-460f-a9d9-dc607c7f8279.cer File: a58bdb83-b149-460f-a9d9-dc607c7f8279.cer (raw, json) Hash identifier: e4E+RV31A+05jomtqq7Bnf5h52oo6PiuiH1PCSSoVsY= Subject key identifier: DD:14:B8:9A:5F:8A:04:72:16:EE:4A:45:00:68:A9:DA:D1:6B:88:FE Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B857DB962DED21879E8FB8080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a58bdb83-b149-460f-a9d9-dc607c7f8279/a58bdb83-b149-460f-a9d9-dc607c7f8279.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a58bdb83-b149-460f-a9d9-dc607c7f8279/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 18:03:32 +0000 Certificate not after: Mon 17 Jan 2028 19:03:32 +0000 Subordinate resources: IP: 66.118.16.0/22 IP: 66.205.236.0/22 IP: 134.195.176.0/22 IP: 161.129.178.0/23 IP: 172.99.196.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:7d:b9:62:de:d2:18:79:e8:fb:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 14 18:03:32 2025 GMT Not After : Jan 17 19:03:32 2028 GMT Subject: CN=a58bdb83-b149-460f-a9d9-dc607c7f8279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:df:cf:50:58:5c:51:a5:e6:5b:f4:13:d8: 37:95:df:55:11:6a:ae:9e:e3:ff:56:6c:b0:a6:3c: 9c:32:43:6b:bc:ff:60:9f:8c:62:c8:b7:0a:96:80: 35:20:c2:a7:36:23:85:03:73:8d:26:e3:83:01:d5: e1:68:ee:d9:0f:e8:46:af:fa:a7:72:50:6b:9b:af: e5:e4:9f:eb:51:00:aa:bd:76:fd:a3:9e:be:ec:92: 39:a2:f4:07:a4:4c:01:92:fb:ab:a8:9c:89:28:ea: 36:12:bb:cf:1c:f0:77:ac:d2:e8:61:e2:d5:62:9b: 64:8e:05:fd:7f:88:81:56:f4:0c:bf:82:a0:f8:94: 77:31:82:e1:8f:62:89:43:13:8f:e3:d5:10:59:c6: 68:72:f8:37:2c:21:a0:49:12:d0:5e:f4:30:27:85: 08:46:c8:0b:86:97:f4:ac:65:f5:a5:c6:70:6d:31: 36:b5:e7:11:0f:f3:9d:43:1f:89:c4:a9:56:3d:fb: db:4a:f4:8f:36:85:2c:83:78:bc:d4:8d:e7:59:09: a9:7c:99:44:ca:dc:f4:41:29:67:77:c9:ae:bc:56: fa:ca:60:d1:38:ec:2b:09:2d:a4:c3:b0:ba:74:f0: c1:a1:80:d3:3b:d0:8a:0c:a9:9a:23:bb:4d:fe:3b: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:14:B8:9A:5F:8A:04:72:16:EE:4A:45:00:68:A9:DA:D1:6B:88:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a58bdb83-b149-460f-a9d9-dc607c7f8279/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a58bdb83-b149-460f-a9d9-dc607c7f8279/a58bdb83-b149-460f-a9d9-dc607c7f8279.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 66.118.16.0/22 66.205.236.0/22 134.195.176.0/22 161.129.178.0/23 172.99.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:28:22:45:bc:12:8f:bd:5b:81:5c:43:14:5c:bd:76:58:86: ad:ac:fc:2b:b6:05:11:b7:90:05:ee:10:be:15:53:91:37:de: cb:07:f5:db:83:11:c7:11:2a:af:0f:98:e2:d4:65:00:43:89: d1:18:00:df:f6:cf:27:ce:76:5f:86:51:b5:c5:b9:3e:e9:41: 1a:08:f1:17:e8:c8:48:36:38:91:0c:0e:7c:7a:91:ac:b9:59: 2a:61:52:46:53:01:2a:75:73:2a:fb:5f:f0:d5:71:c2:38:55: 4a:62:8f:88:c9:83:02:d1:b3:cb:4a:f1:48:80:e8:dd:a0:ab: 0e:15:7e:4e:29:74:48:e1:6a:63:2f:f8:fd:e5:dd:d6:2c:f9: f2:23:3c:83:32:c2:03:3d:dc:7a:a0:16:2b:1e:a2:cb:13:3f: 5a:6c:1d:7c:06:21:85:8a:10:75:1b:f3:e9:98:bb:18:9f:32: 6b:83:8d:9c:b8:20:29:c9:3c:77:fc:11:7d:f8:78:47:1d:d0: 03:17:c6:55:74:9f:f6:27:c5:ef:41:c9:20:99:56:f0:7e:05: bc:f2:e7:0c:66:79:ca:3d:75:31:81:d5:a7:2a:a7:fd:b4:e6: 0d:84:c4:d5:7b:0a:8a:16:2d:9f:73:94:f1:ab:2b:0b:b8:b8: c0:56:00:5a -----BEGIN CERTIFICATE----- MIIHBTCCBe2gAwIBAgIUAQ0Mn0MoWEuFfbli3tIYeej7gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNDE4MDMzMloXDTI4MDExNzE5MDMzMlowLzEtMCsGA1UEAxMk YTU4YmRiODMtYjE0OS00NjBmLWE5ZDktZGM2MDdjN2Y4Mjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ffz1BYXFGl5lv0E9g3ld9VEWqunuP/Vmyw pjycMkNrvP9gn4xiyLcKloA1IMKnNiOFA3ONJuODAdXhaO7ZD+hGr/qnclBrm6/l 5J/rUQCqvXb9o56+7JI5ovQHpEwBkvurqJyJKOo2ErvPHPB3rNLoYeLVYptkjgX9 f4iBVvQMv4Kg+JR3MYLhj2KJQxOP49UQWcZocvg3LCGgSRLQXvQwJ4UIRsgLhpf0 rGX1pcZwbTE2tecRD/OdQx+JxKlWPfvbSvSPNoUsg3i81I3nWQmpfJlEytz0QSln d8muvFb6ymDROOwrCS2kw7C6dPDBoYDTO9CKDKmaI7tN/jsL2wIDAQABo4IEFzCC BBMwHQYDVR0OBBYEFN0UuJpfigRyFu5KRQBoqdrRa4j+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h NThiZGI4My1iMTQ5LTQ2MGYtYTlkOS1kYzYwN2M3ZjgyNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2E1OGJkYjgzLWIxNDktNDYwZi1h OWQ5LWRjNjA3YzdmODI3OS9hNThiZGI4My1iMTQ5LTQ2MGYtYTlkOS1kYzYwN2M3 ZjgyNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAJCdhADBAJCzewDBAKGw7ADBAGhgbIDBAKsY8Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcSgiRbwSj71bgVxDFFy9dliGraz8K7YFEbeQBe4QvhVTkTfeywf1 24MRxxEqrw+Y4tRlAEOJ0RgA3/bPJ852X4ZRtcW5PulBGgjxF+jISDY4kQwOfHqR rLlZKmFSRlMBKnVzKvtf8NVxwjhVSmKPiMmDAtGzy0rxSIDo3aCrDhV+Til0SOFq Yy/4/eXd1iz58iM8gzLCAz3ceqAWKx6iyxM/WmwdfAYhhYoQdRvz6Zi7GJ8ya4ON nLggKck8d/wRffh4Rx3QAxfGVXSf9ifF70HJIJlW8H4FvPLnDGZ5yj11MYHVpyqn /bTmDYTE1XsKihYtn3OU8asrC7i4wFYAWg== -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:59 2025 by rpki-client