This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.cer File: add7970c-e8e0-4915-9043-d52c6e3fd9c2.cer (raw, json) Hash identifier: q1Jf6drx5In6svsZal2hDyuXkTh/+G0o6RaxBAaPoro= Subject key identifier: 1A:2F:71:21:FD:F8:36:E9:20:CB:4F:2F:89:73:72:BF:C8:91:3C:FB Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BD70A1256E265519D25EA3680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Nov 2025 23:06:47 +0000 Certificate not after: Tue 15 Feb 2028 23:06:47 +0000 Subordinate resources: IP: 130.12.200.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:0a:12:56:e2:65:51:9d:25:ea:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 12 23:06:47 2025 GMT Not After : Feb 15 23:06:47 2028 GMT Subject: CN=add7970c-e8e0-4915-9043-d52c6e3fd9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0e:ff:05:1c:06:49:d6:16:82:3b:29:6c:24: ff:49:08:a4:f0:02:40:df:59:d7:cd:68:71:59:7e: 9b:f9:39:3d:5d:51:7f:85:8e:9c:f0:4c:82:9f:38: 5e:f0:f2:21:86:5f:dc:fa:e0:63:81:b6:50:84:e2: 5a:a1:af:4d:8a:4a:55:37:5b:fe:9c:18:51:1f:74: b3:05:40:dd:3a:f8:2b:36:83:50:ea:38:75:46:df: 39:73:02:42:56:84:10:e8:aa:86:c0:b7:e1:9a:4e: 50:a3:f3:0a:a6:16:09:a3:58:9c:6d:5f:b8:ca:79: fc:a6:02:b8:eb:85:67:97:4a:de:11:1b:0f:29:76: da:e0:d6:bc:9c:48:23:4c:cd:7b:5f:da:40:d8:fb: 8e:2a:44:ab:3c:0a:38:fb:85:58:32:d7:d2:c9:a8: e0:ab:d2:7f:49:38:ea:79:12:fc:92:34:f9:21:3b: 58:54:bc:ac:ae:aa:68:7c:e1:4e:8f:d2:bc:a6:e4: 2a:55:ae:54:11:1c:5e:a3:ed:bf:d0:c2:77:02:10: 54:63:6b:6c:a7:d1:d6:7a:06:11:fc:13:dc:95:4d: 5a:29:da:a2:d4:e8:a3:f4:d8:f9:c6:db:bc:f6:84: 38:07:02:a8:a0:67:93:25:1d:53:f0:d7:5f:56:ca: e7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2F:71:21:FD:F8:36:E9:20:CB:4F:2F:89:73:72:BF:C8:91:3C:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 130.12.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0d:46:eb:43:96:e4:67:1a:ec:7b:69:51:82:48:6f:77:e1: b8:2e:c4:bc:2f:0d:3e:f0:a2:d1:c3:0c:18:02:33:ce:9d:00: c4:1f:4c:47:73:36:2f:a6:a9:62:f1:13:64:22:13:99:e6:d6: da:73:10:e9:40:a9:f6:ae:27:31:78:55:93:0e:a6:ee:f7:83: c0:03:ad:0f:32:07:cf:02:8e:ff:cd:3a:08:57:be:26:b9:83: 78:d6:b7:f7:22:72:dc:21:1d:59:64:64:d3:b1:ee:bd:b4:03: 7b:9f:52:6c:c4:ad:af:ca:74:42:3a:fd:92:9a:ed:41:49:7a: b6:70:87:cb:f2:a1:89:dc:18:25:8a:b1:1c:3d:6a:31:10:ef: 52:b9:52:b2:ff:b7:49:53:7d:60:96:48:ce:61:50:92:a3:d2: 40:a6:9f:6d:5c:5c:fa:65:27:2b:4b:30:b9:70:30:dc:df:4d: 1a:7d:d6:a8:7f:9a:3a:e4:70:d2:bd:85:87:86:91:df:2f:41: a4:c5:ed:65:ec:cd:d9:ae:ff:ab:4b:21:49:32:ab:c8:c8:c6: bd:c5:86:d8:65:25:04:e7:ba:a8:2b:50:67:89:9d:49:a5:62: 5d:f4:9c:2c:c4:67:60:56:2c:37:87:6c:3f:99:40:85:64:b6: 33:dd:71:ce -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEvXChJW4mVRnSXqNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExMjIzMDY0N1oXDTI4MDIxNTIzMDY0N1owLzEtMCsGA1UEAxMk YWRkNzk3MGMtZThlMC00OTE1LTkwNDMtZDUyYzZlM2ZkOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw7/BRwGSdYWgjspbCT/SQik8AJA31nXzWhx WX6b+Tk9XVF/hY6c8EyCnzhe8PIhhl/c+uBjgbZQhOJaoa9NikpVN1v+nBhRH3Sz BUDdOvgrNoNQ6jh1Rt85cwJCVoQQ6KqGwLfhmk5Qo/MKphYJo1icbV+4ynn8pgK4 64Vnl0reERsPKXba4Na8nEgjTM17X9pA2PuOKkSrPAo4+4VYMtfSyajgq9J/STjq eRL8kjT5ITtYVLysrqpofOFOj9K8puQqVa5UERxeo+2/0MJ3AhBUY2tsp9HWegYR /BPclU1aKdqi1Oij9Nj5xtu89oQ4BwKooGeTJR1T8NdfVsrn5wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBovcSH9+DbpIMtPL4lzcr/IkTz7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h ZGQ3OTcwYy1lOGUwLTQ5MTUtOTA0My1kNTJjNmUzZmQ5YzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2FkZDc5NzBjLWU4ZTAtNDkxNS05 MDQzLWQ1MmM2ZTNmZDljMi9hZGQ3OTcwYy1lOGUwLTQ5MTUtOTA0My1kNTJjNmUz ZmQ5YzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKCDMgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOA1G60OW5Gca7HtpUYJI b3fhuC7EvC8NPvCi0cMMGAIzzp0AxB9MR3M2L6apYvETZCITmebW2nMQ6UCp9q4n MXhVkw6m7veDwAOtDzIHzwKO/806CFe+JrmDeNa39yJy3CEdWWRk07HuvbQDe59S bMStr8p0Qjr9kprtQUl6tnCHy/KhidwYJYqxHD1qMRDvUrlSsv+3SVN9YJZIzmFQ kqPSQKafbVxc+mUnK0swuXAw3N9NGn3WqH+aOuRw0r2Fh4aR3y9BpMXtZezN2a7/ q0shSTKryMjGvcWG2GUlBOe6qCtQZ4mdSaViXfScLMRnYFYsN4dsP5lAhWS2M91x zg== -----END CERTIFICATE-----Generated at Sat Nov 22 20:52:04 2025 by rpki-client