This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer File: a89dfa66-11db-4652-8710-2a69de76abaa.cer (raw, json) Hash identifier: Gximj/Nw139lP2fcUmfEg75HxQDrDLRByvu3rJS1dlI= Subject key identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BD5E837E34751D42E5CFE9814 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Nov 2025 13:22:46 +0000 Certificate not after: Tue 15 Feb 2028 13:22:46 +0000 Subordinate resources: AS: 401947 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:e8:37:e3:47:51:d4:2e:5c:fe:98:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 12 13:22:46 2025 GMT Not After : Feb 15 13:22:46 2028 GMT Subject: CN=a89dfa66-11db-4652-8710-2a69de76abaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:d2:df:be:d2:d2:17:4b:57:fe:b9:82:c9: 69:75:53:b6:06:22:80:47:f7:d9:74:6f:f1:a5:de: 2e:15:51:75:57:53:ab:e3:bb:2d:81:c1:f3:27:85: 3b:f4:65:10:fd:30:19:3a:03:2f:c7:a7:cd:e1:dd: 7b:67:af:89:c1:9e:96:4b:a4:0c:aa:fb:06:ef:15: 9f:31:2c:5c:6b:8e:c0:c7:c4:cb:fb:50:54:5f:ea: 63:b3:1e:b2:de:27:07:40:07:aa:07:d2:1b:17:ac: b5:f3:67:ff:2e:94:f7:83:2d:5c:ab:ec:67:cc:eb: 26:20:65:2e:fe:1d:2c:4d:60:9a:b7:52:89:7f:2a: 78:58:14:a9:a2:bf:67:ec:ee:58:96:0b:8e:c8:c8: b8:28:be:0c:13:0f:de:dd:c9:90:ed:ee:d3:19:5b: 2c:c1:1a:12:23:ca:72:9f:eb:a1:28:38:57:43:ea: 74:e8:63:86:c0:00:02:50:6d:1e:65:77:a6:2d:1d: 7c:37:d0:5a:72:bb:49:3f:37:fe:4b:4e:af:31:d7: bf:5f:59:43:14:38:f1:07:d9:0e:c3:d1:6d:74:a7: fd:10:e3:9e:92:96:79:4e:a8:ea:2a:00:67:bb:fc: af:6b:30:3a:5e:b4:40:70:57:21:9f:2b:a6:50:f5: ee:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401947 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e7:25:ed:5e:3b:1e:7f:c7:74:ac:aa:af:0c:9f:bc:c5:06: 81:98:55:d1:e1:e4:dd:8a:f9:31:7a:79:12:70:83:82:80:75: 06:48:ef:21:66:a6:b4:bf:c2:33:fa:5f:87:74:e3:41:da:38: 5e:87:e8:48:93:4e:a5:7a:71:fe:e1:56:ce:e0:bd:9f:2a:f4: 69:b9:f5:71:37:34:42:45:ab:19:29:be:8b:d7:b9:20:90:e2: fb:b4:38:9e:51:0e:87:a5:62:0d:8b:51:74:19:52:90:b5:57: 04:45:df:b7:3c:20:77:0c:db:53:69:39:98:35:fd:d0:cd:5e: 06:af:ba:07:3b:f9:0a:b6:18:4b:ae:35:84:f7:76:52:43:6c: 1d:50:7b:4b:cb:cd:e1:a6:19:93:86:cf:d5:53:2c:dd:d2:e7: e5:ea:44:73:25:e2:57:47:1b:2d:21:fd:32:eb:d7:11:08:06: 88:26:e1:bf:9c:a1:fc:fb:c6:bd:6c:be:0e:7c:12:be:79:c8: d8:a7:72:2d:29:2b:2e:8a:2d:d5:6d:86:6d:5b:9e:0f:61:ce: 25:3a:4b:2d:d8:80:0a:12:6b:0c:22:ce:af:51:7b:4d:1e:87: 8f:70:f1:8f:a7:f4:84:f0:7d:fb:31:7f:c7:1d:f9:c6:0f:91: 15:86:83:05 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEvV6DfjR1HULlz+mBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExMjEzMjI0NloXDTI4MDIxNTEzMjI0NlowLzEtMCsGA1UEAxMk YTg5ZGZhNjYtMTFkYi00NjUyLTg3MTAtMmE2OWRlNzZhYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9jS377S0hdLV/65gslpdVO2BiKAR/fZdG/x pd4uFVF1V1Or47stgcHzJ4U79GUQ/TAZOgMvx6fN4d17Z6+JwZ6WS6QMqvsG7xWf MSxca47Ax8TL+1BUX+pjsx6y3icHQAeqB9IbF6y182f/LpT3gy1cq+xnzOsmIGUu /h0sTWCat1KJfyp4WBSpor9n7O5YlguOyMi4KL4MEw/e3cmQ7e7TGVsswRoSI8py n+uhKDhXQ+p06GOGwAACUG0eZXemLR18N9BacrtJPzf+S06vMde/X1lDFDjxB9kO w9FtdKf9EOOekpZ5TqjqKgBnu/yvazA6XrRAcFchnyumUPXuXwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFEU3oMKCEfwiyJVrzvDBN+hL0hi2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h ODlkZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5ZGU3NmFiYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2E4OWRmYTY2LTExZGItNDY1Mi04 NzEwLTJhNjlkZTc2YWJhYS9hODlkZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5ZGU3 NmFiYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiIbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABXnJe1eOx5/x3Ssqq8Mn7zFBoGY VdHh5N2K+TF6eRJwg4KAdQZI7yFmprS/wjP6X4d040HaOF6H6EiTTqV6cf7hVs7g vZ8q9Gm59XE3NEJFqxkpvovXuSCQ4vu0OJ5RDoelYg2LUXQZUpC1VwRF37c8IHcM 21NpOZg1/dDNXgavugc7+Qq2GEuuNYT3dlJDbB1Qe0vLzeGmGZOGz9VTLN3S5+Xq RHMl4ldHGy0h/TLr1xEIBogm4b+cofz7xr1svg58Er55yNinci0pKy6KLdVthm1b ng9hziU6Sy3YgAoSawwizq9Re00eh49w8Y+n9ITwffsxf8cd+cYPkRWGgwU= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:46 2025 by rpki-client