This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.cer File: b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.cer (raw, json) Hash identifier: wKzkvKGZv+Ri82A9n6sLU1ipO70XOJlkYAsdhvfR/7Y= Subject key identifier: 95:8F:5B:39:E1:F6:78:59:9C:DF:59:58:74:83:6A:F2:41:A3:A1:08 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BD834D1B34225A62B8D4A9000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Nov 2025 09:08:44 +0000 Certificate not after: Wed 16 Feb 2028 09:08:44 +0000 Subordinate resources: IP: 74.117.152.0/21 IP: 184.75.240.0/20 IP: 2604:a100::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:34:d1:b3:42:25:a6:2b:8d:4a:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 13 09:08:44 2025 GMT Not After : Feb 16 09:08:44 2028 GMT Subject: CN=b7ab4c87-4845-4e51-9a77-1a7ef61e43f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:2f:f6:0f:b1:23:f0:80:15:0c:9b:e3:b9: e5:4b:b9:bb:61:5e:2d:f2:8b:4d:ab:3d:83:6e:c8: 5a:42:70:4f:2d:9a:57:80:db:42:b7:75:ea:ff:f1: 5e:1d:96:67:ca:76:80:95:71:75:00:21:8e:23:7a: b9:bd:61:46:2b:0c:3b:20:99:fc:2e:1d:61:55:ab: 2c:1c:d0:b0:fa:53:e7:65:a6:4c:63:45:c8:eb:ba: d8:c0:49:0d:1f:20:c9:66:5d:bd:b4:2c:41:cf:da: b6:d8:91:35:f4:e5:7c:f9:a5:d3:e2:5a:7f:0a:e8: a7:ec:6e:c5:a1:11:72:7d:47:33:e0:b2:d6:2c:49: 7e:e5:50:02:88:2c:33:2f:98:6d:ae:fa:bd:b1:35: a2:2d:a3:93:77:76:0c:e7:54:f3:1d:d0:cc:88:cb: c8:25:84:21:61:56:f5:27:38:04:52:14:e1:c6:3c: 9c:c8:16:b2:7f:0e:49:8e:e6:42:df:d7:46:d7:db: a4:12:5b:c0:57:60:ee:a0:a2:68:e8:a9:69:fd:47: 41:de:f3:4a:37:2c:76:1a:92:9e:96:52:7d:04:b8: 4c:7b:fd:08:6b:03:d5:de:20:9c:73:3c:29:e7:06: 46:bf:bd:de:06:f2:45:8d:8e:2e:cf:60:01:e6:f9: 56:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8F:5B:39:E1:F6:78:59:9C:DF:59:58:74:83:6A:F2:41:A3:A1:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 74.117.152.0/21 184.75.240.0/20 IPv6: 2604:a100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9d:53:0c:ac:0e:b5:52:3b:19:83:38:7e:be:c7:a0:a3:fe: 2b:b6:62:1f:4f:96:4e:f7:85:ea:d8:18:73:03:0e:38:a8:fb: 4d:ad:3b:5d:7a:f8:db:ce:a1:3b:1e:3b:20:b6:e7:19:ca:73: 06:67:6f:6e:cb:bf:60:c5:8b:e1:eb:cb:40:86:c4:ab:77:2d: 3b:78:20:b4:58:69:78:8f:22:f5:83:a5:14:81:28:5d:5c:5d: 01:54:55:a4:18:e5:c8:8d:48:0e:8f:19:2b:08:67:aa:bd:e3: 64:55:37:c8:32:60:04:f2:57:02:11:c3:6d:ed:3d:52:41:09: 5a:db:b7:84:31:4f:eb:27:c4:7e:f2:0d:14:ce:54:cb:53:39: a4:f7:20:e0:f7:5a:2a:f6:60:36:b6:e6:f4:4d:b2:5c:f2:5e: b8:ab:b5:e7:28:56:bc:89:e8:a2:7c:75:b2:a5:89:e1:5e:7b: 3c:ab:a8:d9:56:81:ce:2a:f6:20:8a:6c:15:ae:b2:c6:23:e5: 30:3c:3e:5a:2f:0b:8e:94:1c:87:4a:5e:2e:9b:2a:d7:cc:8f: ce:57:f7:42:f0:d0:c2:58:d1:91:00:bd:49:67:89:b2:15:20: 7d:2c:3e:1a:9a:6a:d7:ac:dd:f2:2f:d6:a5:ed:26:b5:c1:08: 10:1c:3e:a5 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEvYNNGzQiWmK41KkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExMzA5MDg0NFoXDTI4MDIxNjA5MDg0NFowLzEtMCsGA1UEAxMk YjdhYjRjODctNDg0NS00ZTUxLTlhNzctMWE3ZWY2MWU0M2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2Av9g+xI/CAFQyb47nlS7m7YV4t8otNqz2D bshaQnBPLZpXgNtCt3Xq//FeHZZnynaAlXF1ACGOI3q5vWFGKww7IJn8Lh1hVass HNCw+lPnZaZMY0XI67rYwEkNHyDJZl29tCxBz9q22JE19OV8+aXT4lp/Cuin7G7F oRFyfUcz4LLWLEl+5VACiCwzL5htrvq9sTWiLaOTd3YM51TzHdDMiMvIJYQhYVb1 JzgEUhThxjycyBayfw5JjuZC39dG19ukElvAV2DuoKJo6Klp/UdB3vNKNyx2GpKe llJ9BLhMe/0IawPV3iCcczwp5wZGv73eBvJFjY4uz2AB5vlW+QIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFJWPWznh9nhZnN9ZWHSDavJBo6EIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i N2FiNGM4Ny00ODQ1LTRlNTEtOWE3Ny0xYTdlZjYxZTQzZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2I3YWI0Yzg3LTQ4NDUtNGU1MS05 YTc3LTFhN2VmNjFlNDNmMy9iN2FiNGM4Ny00ODQ1LTRlNTEtOWE3Ny0xYTdlZjYx ZTQzZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBANKdZgDBAS4S/AwDQQCAAIwBwMFACYEoQAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWJ1TDKwOtVI7GYM4fr7HoKP+K7ZiH0+WTveF6tgYcwMOOKj7Ta07XXr4 286hOx47ILbnGcpzBmdvbsu/YMWL4evLQIbEq3ctO3ggtFhpeI8i9YOlFIEoXVxd AVRVpBjlyI1IDo8ZKwhnqr3jZFU3yDJgBPJXAhHDbe09UkEJWtu3hDFP6yfEfvIN FM5Uy1M5pPcg4PdaKvZgNrbm9E2yXPJeuKu15yhWvInoonx1sqWJ4V57PKuo2VaB zir2IIpsFa6yxiPlMDw+Wi8LjpQch0peLpsq18yPzlf3QvDQwljRkQC9SWeJshUg fSw+Gppq16zd8i/Wpe0mtcEIEBw+pQ== -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:44 2025 by rpki-client