This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer File: c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer (raw, json) Hash identifier: aTDctrWrDRE76fIQSZ9qt+6zyTKiY9GuwBqvV3/+Yf4= Subject key identifier: F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC17BC9FC8234A230DF5FA580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Nov 2025 05:48:08 +0000 Certificate not after: Tue 08 Feb 2028 05:48:08 +0000 Subordinate resources: AS: 398047 IP: 23.129.172.0/24 IP: 2602:f791::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:7b:c9:fc:82:34:a2:30:df:5f:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 5 05:48:08 2025 GMT Not After : Feb 8 05:48:08 2028 GMT Subject: CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:e4:78:41:f3:b0:42:d4:a0:2b:22:5c:38: 95:ab:56:ce:70:46:99:30:1d:57:73:03:12:47:55: fc:68:c0:37:71:87:53:71:33:a8:4e:fd:ab:c6:ba: 34:a2:21:7b:8a:b6:4e:7c:b3:15:88:ad:7a:1a:e1: 45:3d:b8:8d:76:30:01:25:c9:e4:ae:17:2d:24:41: 25:8d:f0:54:23:b8:35:bc:ca:6b:25:5e:98:d8:74: 71:fb:e5:64:3d:5f:8c:10:f1:e4:f9:1a:39:ae:fa: 47:8b:9d:02:a7:c2:f8:97:63:bb:3d:bd:6c:c1:d9: 92:ba:36:8a:e3:80:f9:46:97:2f:c2:ad:73:2e:d0: fe:01:f0:04:b9:85:fd:be:29:f4:a4:80:fc:5d:a7: 90:42:d6:eb:f2:c9:83:31:32:ed:68:b2:01:77:d8: c8:f3:77:27:03:67:ad:36:f8:7b:15:4c:d6:53:c4: a0:c2:c4:67:e3:e9:b3:23:38:bd:eb:7e:d0:3c:b8: f2:c3:a4:01:5a:66:8c:30:70:c7:c8:36:2a:4d:6a: 14:5a:11:39:25:b0:c9:3e:ee:d5:e1:b2:df:98:69: dc:62:fd:6f:43:21:1c:61:60:8d:b3:0d:20:e0:55: c2:9a:86:b2:2c:0e:18:ac:19:9c:7e:0c:74:4a:2c: cf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.129.172.0/24 IPv6: 2602:f791::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398047 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4c:b2:b2:bf:37:0c:94:3b:87:13:05:77:c4:59:60:80:2d: fc:de:ea:eb:49:10:9f:24:ce:4d:5e:4e:cc:df:42:ca:18:64: ff:d2:3f:04:73:5e:ff:87:48:b7:6c:7f:1a:b3:f5:be:6b:3d: 0a:02:2d:eb:9e:f9:3e:01:6d:0f:77:53:c8:50:a9:fa:1b:ab: 2d:64:ae:ed:f7:db:a5:54:05:d7:70:87:32:16:50:e4:38:1a: 26:fd:56:6a:08:7f:fd:00:b9:ee:c1:61:43:a8:63:9a:1a:4c: 06:f3:67:0a:90:e1:ae:a6:f0:f2:df:2d:f8:44:1f:eb:82:29: 4e:b3:1a:bb:1d:6a:c9:63:03:8b:b5:fb:8f:e2:84:40:76:f1: 95:d0:1e:ee:c4:6c:08:2e:d9:24:99:08:72:4b:bd:1e:5f:4b: e7:7c:fe:42:34:dc:60:52:16:7a:11:b2:71:21:57:49:e2:f8: e4:69:16:d2:61:a8:96:85:83:8c:e9:d3:16:a5:01:1c:57:38: 09:39:03:24:56:ed:f6:9f:ce:50:24:d1:42:46:c5:fc:e2:c6: 23:be:7e:b4:79:e5:f9:8e:bb:92:31:3a:27:10:56:70:d9:0f: 1b:bf:e9:85:d4:de:29:7c:49:e2:1e:59:cd:d2:0e:cc:6f:a3: 75:fd:a5:66 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEvBe8n8gjSiMN9fpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNTA1NDgwOFoXDTI4MDIwODA1NDgwOFowLzEtMCsGA1UEAxMk YzA4OWNlOGUtZjE3Ni00ZGQyLWE1N2EtOGE0OGNmNmU0MmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc7keEHzsELUoCsiXDiVq1bOcEaZMB1XcwMS R1X8aMA3cYdTcTOoTv2rxro0oiF7irZOfLMViK16GuFFPbiNdjABJcnkrhctJEEl jfBUI7g1vMprJV6Y2HRx++VkPV+MEPHk+Ro5rvpHi50Cp8L4l2O7Pb1swdmSujaK 44D5Rpcvwq1zLtD+AfAEuYX9vin0pID8XaeQQtbr8smDMTLtaLIBd9jI83cnA2et Nvh7FUzWU8SgwsRn4+mzIzi9637QPLjyw6QBWmaMMHDHyDYqTWoUWhE5JbDJPu7V 4bLfmGncYv1vQyEcYWCNsw0g4FXCmoayLA4YrBmcfgx0SizPdQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPd59pxk1bj5BIHZR6+o3QymRaB4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j MDg5Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4Y2Y2ZTQyYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2MwODljZThlLWYxNzYtNGRkMi1h NTdhLThhNDhjZjZlNDJhOS9jMDg5Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4Y2Y2 ZTQyYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgawwDgQCAAIwCAMGBCYC95EAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYS3zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByTLKyvzcMlDuHEwV3xFlggC38 3urrSRCfJM5NXk7M30LKGGT/0j8Ec17/h0i3bH8as/W+az0KAi3rnvk+AW0Pd1PI UKn6G6stZK7t99ulVAXXcIcyFlDkOBom/VZqCH/9ALnuwWFDqGOaGkwG82cKkOGu pvDy3y34RB/rgilOsxq7HWrJYwOLtfuP4oRAdvGV0B7uxGwILtkkmQhyS70eX0vn fP5CNNxgUhZ6EbJxIVdJ4vjkaRbSYaiWhYOM6dMWpQEcVzgJOQMkVu32n85QJNFC RsX84sYjvn60eeX5jruSMTonEFZw2Q8bv+mF1N4pfEniHlnN0g7Mb6N1/aVm -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:49 2025 by rpki-client