This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer File: b2db0e90-cb59-4049-beac-d39b54244d28.cer (raw, json) Hash identifier: oPlaFbfjNKr2TbIPr+H9rPvpjNjNosJ23mgG54cd5tk= Subject key identifier: 1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC8C0E5ED87034C63D93D3880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Nov 2025 20:18:02 +0000 Certificate not after: Thu 10 Feb 2028 20:18:02 +0000 Subordinate resources: AS: 11155 IP: 147.124.16.0/20 IP: 162.118.64.0/19 IP: 2605:f9c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:c0:e5:ed:87:03:4c:63:d9:3d:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 7 20:18:02 2025 GMT Not After : Feb 10 20:18:02 2028 GMT Subject: CN=b2db0e90-cb59-4049-beac-d39b54244d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:20:6b:49:70:e0:07:4c:8d:95:8d:7d:c5: 97:d0:1d:3b:86:12:57:16:0d:cb:43:69:e5:9d:eb: 3d:20:13:3d:e5:eb:91:9f:45:59:47:9f:4e:59:6f: 67:c7:92:8a:81:7b:da:c1:7c:15:f3:66:fa:d2:60: 4b:6d:64:62:c0:af:48:ff:aa:ba:32:e4:3f:f9:44: 2c:60:50:d9:11:37:1f:22:d4:a6:03:e2:4c:df:df: c0:ce:7c:a8:b5:31:8b:48:9c:f4:dd:82:da:68:15: ac:8a:5d:fe:aa:72:3a:92:b2:f4:e4:da:46:58:7c: 45:57:76:74:fc:2d:92:46:a2:f3:d0:82:c7:ee:47: b2:a1:70:6d:e8:1f:5d:0f:70:69:1c:23:7b:ef:dd: dc:17:37:17:f4:62:9e:fe:90:71:c9:20:d5:54:eb: 7e:4a:67:5e:4e:31:e2:11:a5:c2:d3:20:5a:22:5a: 0a:38:de:f6:f9:64:ef:a0:e5:f1:ad:4c:ee:10:46: 37:76:c9:07:65:63:c5:b3:47:5d:b9:57:d0:fb:fa: b6:c5:cc:b4:be:6d:2e:f5:0d:32:13:de:99:4f:67: df:7b:00:ff:53:3f:a4:0b:98:59:42:ee:81:e1:ee: 69:f6:17:8b:76:2a:5e:1c:17:0f:44:a2:6a:08:6f: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 147.124.16.0/20 162.118.64.0/19 IPv6: 2605:f9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11155 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d8:68:bd:ec:3e:0c:4c:2d:d6:b6:3a:fa:d7:4c:c6:eb:dd: 84:30:7c:a2:d1:27:91:d2:28:e6:70:e8:e1:86:f4:90:da:33: 19:3f:a0:b4:ca:52:40:af:fe:86:e7:2c:77:eb:47:3f:af:03: 1e:3f:d2:6a:ee:bb:0d:fb:68:b9:58:e7:60:64:41:d6:7e:f0: 70:ea:7d:81:53:8b:1b:4d:3c:be:80:6f:6a:6d:70:03:08:e7: f5:0f:50:6f:d6:38:88:07:72:f6:a9:b5:ec:42:8c:73:0c:19: 00:24:3d:c6:6b:8f:e8:bd:3e:ae:7a:c8:0f:b4:4b:21:a1:18: 5e:cc:68:b9:20:92:d8:b8:74:f4:56:cf:81:4b:a7:d7:c8:7f: bb:a7:88:f1:f1:96:8f:4a:c6:cc:a4:8b:c8:88:a9:54:d9:cf: fc:52:88:7e:65:e0:dd:76:8d:65:35:45:05:c3:a7:8d:fa:52: 7a:b2:bf:db:5e:27:08:14:17:8d:db:8c:11:fe:16:1d:2f:7d: a2:c3:55:83:cd:ee:e1:0d:3f:45:0f:31:c1:37:99:2f:82:26: db:c4:5c:66:69:11:8e:50:09:17:f7:07:72:30:61:4b:6b:19: b7:65:6c:50:25:5e:d8:b9:df:66:ca:52:7f:6a:2c:ac:94:8a: 8d:12:43:4a -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEvIwOXthwNMY9k9OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNzIwMTgwMloXDTI4MDIxMDIwMTgwMlowLzEtMCsGA1UEAxMk YjJkYjBlOTAtY2I1OS00MDQ5LWJlYWMtZDM5YjU0MjQ0ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwIga0lw4AdMjZWNfcWX0B07hhJXFg3LQ2nl nes9IBM95euRn0VZR59OWW9nx5KKgXvawXwV82b60mBLbWRiwK9I/6q6MuQ/+UQs YFDZETcfItSmA+JM39/AznyotTGLSJz03YLaaBWsil3+qnI6krL05NpGWHxFV3Z0 /C2SRqLz0ILH7keyoXBt6B9dD3BpHCN7793cFzcX9GKe/pBxySDVVOt+SmdeTjHi EaXC0yBaIloKON72+WTvoOXxrUzuEEY3dskHZWPFs0dduVfQ+/q2xcy0vm0u9Q0y E96ZT2ffewD/Uz+kC5hZQu6B4e5p9heLdipeHBcPRKJqCG+k0QIDAQABo4IELzCC BCswHQYDVR0OBBYEFB3BJgAW6ewZvGn1KZPpHEfnAH6uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i MmRiMGU5MC1jYjU5LTQwNDktYmVhYy1kMzliNTQyNDRkMjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2IyZGIwZTkwLWNiNTktNDA0OS1i ZWFjLWQzOWI1NDI0NGQyOC9iMmRiMGU5MC1jYjU5LTQwNDktYmVhYy1kMzliNTQy NDRkMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBASTfBADBAWidkAwDQQCAAIwBwMFACYF+cAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICK5MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAH9hovew+DEwt1rY6+tdM xuvdhDB8otEnkdIo5nDo4Yb0kNozGT+gtMpSQK/+hucsd+tHP68DHj/Sau67Dfto uVjnYGRB1n7wcOp9gVOLG008voBvam1wAwjn9Q9Qb9Y4iAdy9qm17EKMcwwZACQ9 xmuP6L0+rnrID7RLIaEYXsxouSCS2Lh09FbPgUun18h/u6eI8fGWj0rGzKSLyIip VNnP/FKIfmXg3XaNZTVFBcOnjfpSerK/214nCBQXjduMEf4WHS99osNVg83u4Q0/ RQ8xwTeZL4Im28RcZmkRjlAJF/cHcjBhS2sZt2VsUCVe2LnfZspSf2osrJSKjRJD Sg== -----END CERTIFICATE-----Generated at Fri Nov 28 06:12:00 2025 by rpki-client