This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b704dae3-f591-4c70-bd0e-bcab8036f146.cer File: b704dae3-f591-4c70-bd0e-bcab8036f146.cer (raw, json) Hash identifier: cVMjM7lgr3VN7Vy9ZaXMby4/oGgV7JwhRVzgjwT5StA= Subject key identifier: 14:45:0A:57:7A:82:E4:EA:76:2C:3A:2C:77:DF:A8:88:D2:6A:43:4A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B88837EDAF96E3C06CAE7B980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b704dae3-f591-4c70-bd0e-bcab8036f146/b704dae3-f591-4c70-bd0e-bcab8036f146.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b704dae3-f591-4c70-bd0e-bcab8036f146/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Oct 2025 20:02:35 +0000 Certificate not after: Tue 18 Jan 2028 21:02:35 +0000 Subordinate resources: AS: 401987 IP: 198.202.28.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:83:7e:da:f9:6e:3c:06:ca:e7:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 15 20:02:35 2025 GMT Not After : Jan 18 21:02:35 2028 GMT Subject: CN=b704dae3-f591-4c70-bd0e-bcab8036f146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:da:4a:df:15:8f:fb:72:e9:23:69:dc:c5:d6: 75:87:35:05:3e:f3:d4:52:7c:d5:55:0e:b3:79:d6: d2:68:9a:27:68:da:4d:48:90:44:30:4f:5e:89:68: ae:9c:94:1c:17:b7:3b:9b:9c:dc:83:ca:9c:81:9c: 53:bf:d1:a6:3e:66:77:92:15:d1:7b:a9:67:bb:78: 31:54:13:f7:15:dd:eb:d5:b5:95:47:a4:30:b8:28: bb:48:e7:e6:80:d7:9f:18:f7:63:ad:21:3d:e6:a4: a6:e2:43:74:52:96:92:1b:45:d0:0d:0e:4f:f6:0a: 60:2a:78:aa:21:11:53:da:e3:3b:a0:3e:81:ef:c0: 88:10:6c:1b:47:08:aa:c6:e7:1b:a3:f1:66:f3:72: e3:9e:08:92:7a:5c:41:73:23:2d:c8:ed:2f:ea:da: 18:ae:a9:2b:86:67:15:30:bf:b6:7f:95:51:c6:f6: d0:9d:0a:a9:1d:36:cd:db:a0:79:c5:a5:09:5b:24: 4c:b3:83:22:e6:dd:ba:7c:94:f1:3b:ea:6c:b7:5c: a2:78:1f:b6:3a:55:d3:44:14:13:4f:3f:20:3e:90: ad:54:61:7b:53:3b:5e:95:3c:61:a9:8b:39:4f:76: c3:54:c5:6e:76:b1:ca:51:99:ff:3e:98:02:75:0c: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:0A:57:7A:82:E4:EA:76:2C:3A:2C:77:DF:A8:88:D2:6A:43:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b704dae3-f591-4c70-bd0e-bcab8036f146/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b704dae3-f591-4c70-bd0e-bcab8036f146/b704dae3-f591-4c70-bd0e-bcab8036f146.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.202.28.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401987 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:50:51:da:40:9d:7e:68:b9:7e:d0:bd:b0:03:7d:ac:28:2d: 74:d5:e9:6e:b6:c1:4a:ad:15:6c:f8:be:53:ba:46:b8:06:b7: cf:ae:80:78:87:27:eb:83:43:7e:d1:fa:c2:2c:6c:20:7d:9b: 02:47:b4:a8:f5:65:f1:94:d3:a9:27:48:7c:25:3e:1d:db:20: 0a:98:e5:46:09:37:e8:12:e4:70:38:eb:52:f8:6b:82:35:77: e9:4f:bc:07:2c:a1:9a:67:96:70:52:0a:38:16:36:b0:19:1b: 6f:f6:fb:55:02:77:a1:5c:24:d6:af:4d:fd:04:3a:4b:ca:0a: 05:54:d8:78:b6:83:95:24:61:b3:67:9e:be:54:3b:fd:37:bb: 60:7b:af:f2:51:41:15:65:8f:69:14:d0:91:48:f2:bc:17:80: 8c:a6:51:d7:42:fa:a3:e2:89:8c:1d:ab:65:7b:83:2d:f1:80: 96:1c:14:fd:a6:66:cb:54:03:f5:c8:fc:48:fe:36:d8:08:c3: 91:b7:4a:94:1c:94:b6:15:30:69:64:ee:99:8e:10:e5:3b:98: 84:32:b5:22:8e:0e:de:73:d9:06:b2:23:8f:57:71:5a:a0:0f: 6f:88:76:ff:a9:c9:0e:bd:8d:51:bb:b7:b9:fa:b5:16:e0:e9: f9:e4:00:05 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEuIg37a+W48BsrnuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNTIwMDIzNVoXDTI4MDExODIxMDIzNVowLzEtMCsGA1UEAxMk YjcwNGRhZTMtZjU5MS00YzcwLWJkMGUtYmNhYjgwMzZmMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitpK3xWP+3LpI2ncxdZ1hzUFPvPUUnzVVQ6z edbSaJonaNpNSJBEME9eiWiunJQcF7c7m5zcg8qcgZxTv9GmPmZ3khXRe6lnu3gx VBP3Fd3r1bWVR6QwuCi7SOfmgNefGPdjrSE95qSm4kN0UpaSG0XQDQ5P9gpgKniq IRFT2uM7oD6B78CIEGwbRwiqxucbo/Fm83LjngiSelxBcyMtyO0v6toYrqkrhmcV ML+2f5VRxvbQnQqpHTbN26B5xaUJWyRMs4Mi5t26fJTxO+pst1yieB+2OlXTRBQT Tz8gPpCtVGF7UztelTxhqYs5T3bDVMVudrHKUZn/PpgCdQyrewIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBRFCld6guTqdiw6LHffqIjSakNKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i NzA0ZGFlMy1mNTkxLTRjNzAtYmQwZS1iY2FiODAzNmYxNDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2I3MDRkYWUzLWY1OTEtNGM3MC1i ZDBlLWJjYWI4MDM2ZjE0Ni9iNzA0ZGFlMy1mNTkxLTRjNzAtYmQwZS1iY2FiODAz NmYxNDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGyhwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiJDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADBQUdpAnX5ouX7QvbADfawoLXTV6W62wUqtFWz4vlO6RrgG t8+ugHiHJ+uDQ37R+sIsbCB9mwJHtKj1ZfGU06knSHwlPh3bIAqY5UYJN+gS5HA4 61L4a4I1d+lPvAcsoZpnlnBSCjgWNrAZG2/2+1UCd6FcJNavTf0EOkvKCgVU2Hi2 g5UkYbNnnr5UO/03u2B7r/JRQRVlj2kU0JFI8rwXgIymUddC+qPiiYwdq2V7gy3x gJYcFP2mZstUA/XI/Ej+NtgIw5G3SpQclLYVMGlk7pmOEOU7mIQytSKODt5z2Qay I49XcVqgD2+Idv+pyQ69jVG7t7n6tRbg6fnkAAU= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:50 2025 by rpki-client