This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9.cer File: c99fde48-586e-4055-af69-8a7e56152de9.cer (raw, json) Hash identifier: ENj6Wr5oUUOMBUVyOzMeQXo+czZ6sCk4i3t6wiWBzX8= Subject key identifier: AE:AD:EF:91:C3:99:E1:29:0D:BF:84:9E:76:9B:36:6C:74:7F:21:47 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BEBC516A2020BBAA4157AA860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/c99fde48-586e-4055-af69-8a7e56152de9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Nov 2025 09:19:46 +0000 Certificate not after: Wed 23 Feb 2028 09:19:46 +0000 Subordinate resources: AS: 14116 AS: 22049 AS: 30447 AS: 33432 IP: 64.29.144.0/20 IP: 66.175.0.0/18 IP: 66.226.64.0/21 IP: 66.226.80.0/20 IP: 69.49.96.0/19 IP: 206.225.88.0/22 IP: 209.235.128.0/19 IP: 216.55.132.0/22 IP: 216.55.144.0/20 IP: 216.55.172.0/22 IP: 216.55.188.0/22 IP: 216.251.32.0/20 IP: 2001:1810::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:eb:c5:16:a2:02:0b:ba:a4:15:7a:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 20 09:19:46 2025 GMT Not After : Feb 23 09:19:46 2028 GMT Subject: CN=c99fde48-586e-4055-af69-8a7e56152de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:6b:66:c6:c4:92:55:6a:fd:61:0c:64:77: d7:f2:7c:a2:6d:cf:bb:50:42:4c:36:9b:45:0a:c0: 2e:15:77:96:2f:74:9a:6c:7d:3a:07:25:ac:1a:63: 1a:be:cb:a8:69:39:ad:0d:cb:9b:5a:f2:9c:0a:0e: f7:20:f9:1c:68:33:0d:8a:69:1f:0b:9c:85:08:2c: 7d:b5:e5:d8:77:de:31:ac:90:09:52:51:49:16:0e: e6:74:25:67:e9:64:3a:24:e5:19:1f:20:04:ca:59: 1a:ab:32:75:11:16:28:2c:a5:86:7a:7b:e2:7e:45: 5d:1a:33:74:57:96:b7:e2:27:74:38:50:25:78:66: 61:d0:6b:40:2d:34:4f:23:1d:d3:92:48:5c:26:e9: 5a:37:86:7e:20:ce:ba:3f:39:f1:c1:4a:86:0e:e1: 34:55:b8:d0:bd:17:73:2e:90:d8:ac:87:e6:eb:4a: 23:91:65:69:39:34:ef:f4:49:5d:1e:de:d4:33:f8: d6:30:6a:aa:c3:53:a8:f0:29:25:cd:07:ec:73:4a: 6a:22:52:d6:77:a4:02:d9:8e:d0:19:69:31:b5:e2: 32:24:62:57:2b:0c:3d:65:61:5c:4b:8f:f9:e4:36: f1:0e:7e:22:8c:25:f7:ef:97:69:23:2e:22:2a:15: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AD:EF:91:C3:99:E1:29:0D:BF:84:9E:76:9B:36:6C:74:7F:21:47 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c99fde48-586e-4055-af69-8a7e56152de9/c99fde48-586e-4055-af69-8a7e56152de9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 64.29.144.0/20 66.175.0.0/18 66.226.64.0/21 66.226.80.0/20 69.49.96.0/19 206.225.88.0/22 209.235.128.0/19 216.55.132.0/22 216.55.144.0/20 216.55.172.0/22 216.55.188.0/22 216.251.32.0/20 IPv6: 2001:1810::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14116 22049 30447 33432 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c2:bd:68:ec:f2:b8:fb:29:43:91:4e:df:35:e0:0c:c1:da: 22:a0:ab:0a:fa:d1:7f:79:67:19:3c:94:b5:72:1d:36:b5:da: c2:b2:3c:3c:90:7c:83:cd:3a:22:09:ad:72:42:f1:55:14:c3: 3b:98:b0:7b:df:14:bc:6d:67:9d:c4:28:f2:72:cb:71:c7:a0: 0c:53:f8:58:9d:cf:61:66:22:c1:2b:d2:04:08:d8:2f:f4:78: be:76:88:39:72:15:73:7d:b2:45:bf:f9:2f:e9:48:d0:32:0c: 0d:e2:e3:b6:3f:44:60:a7:32:f1:b2:31:f8:06:b0:ee:97:48: 7e:db:9e:f3:85:cb:3e:c0:45:c5:c3:a9:a8:32:da:44:07:d7: 54:c6:9c:8c:2f:be:cb:0a:dd:42:d8:40:2d:fa:45:7c:35:fa: c0:a2:cb:c9:15:de:51:7c:d6:64:ab:68:e4:89:f7:6f:3e:20: 86:44:04:62:7f:80:87:37:d9:01:b4:b6:d7:d4:d7:1d:67:a2: 47:3a:68:fb:ab:f3:33:32:55:1a:7d:68:e6:b2:0c:ab:d7:1d: 5f:82:d5:73:70:51:ef:9e:18:b8:82:71:d1:10:bf:b9:6e:16: 75:38:e8:dc:6e:9e:1b:38:9d:23:fb:c8:a4:a4:c1:0d:d0:f0: 2a:1e:c7:7a -----BEGIN CERTIFICATE----- MIIHZjCCBk6gAwIBAgIUAQ0Mn0MoWEvrxRaiAgu6pBV6qGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyMDA5MTk0NloXDTI4MDIyMzA5MTk0NlowLzEtMCsGA1UEAxMk Yzk5ZmRlNDgtNTg2ZS00MDU1LWFmNjktOGE3ZTU2MTUyZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf5rZsbEklVq/WEMZHfX8nyibc+7UEJMNptF CsAuFXeWL3SabH06ByWsGmMavsuoaTmtDcubWvKcCg73IPkcaDMNimkfC5yFCCx9 teXYd94xrJAJUlFJFg7mdCVn6WQ6JOUZHyAEylkaqzJ1ERYoLKWGenvifkVdGjN0 V5a34id0OFAleGZh0GtALTRPIx3TkkhcJulaN4Z+IM66PznxwUqGDuE0VbjQvRdz LpDYrIfm60ojkWVpOTTv9EldHt7UM/jWMGqqw1Oo8CklzQfsc0pqIlLWd6QC2Y7Q GWkxteIyJGJXKww9ZWFcS4/55DbxDn4ijCX375dpIy4iKhXl8wIDAQABo4IEeDCC BHQwHQYDVR0OBBYEFK6t75HDmeEpDb+EnnabNmx0fyFHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j OTlmZGU0OC01ODZlLTQwNTUtYWY2OS04YTdlNTYxNTJkZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2M5OWZkZTQ4LTU4NmUtNDA1NS1h ZjY5LThhN2U1NjE1MmRlOS9jOTlmZGU0OC01ODZlLTQwNTUtYWY2OS04YTdlNTYx NTJkZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBARAHZADBAZCrwADBANC4kADBARC4lADBAVFMWAD BALO4VgDBAXR64ADBALYN4QDBATYN5ADBALYN6wDBALYN7wDBATY+yAwDQQCAAIw BwMFACABGBAwJgYIKwYBBQUHAQgBAf8EFzAVoBMwEQICNyQCAlYhAgJ27wIDAIKY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAALCvWjs8rj7KUORTt814AzB2iKgqwr60X95Zxk8lLVyHTa12sKy PDyQfIPNOiIJrXJC8VUUwzuYsHvfFLxtZ53EKPJyy3HHoAxT+Fidz2FmIsEr0gQI 2C/0eL52iDlyFXN9skW/+S/pSNAyDA3i47Y/RGCnMvGyMfgGsO6XSH7bnvOFyz7A RcXDqagy2kQH11TGnIwvvssK3ULYQC36RXw1+sCiy8kV3lF81mSraOSJ928+IIZE BGJ/gIc32QG0ttfU1x1nokc6aPur8zMyVRp9aOayDKvXHV+C1XNwUe+eGLiCcdEQ v7luFnU46Nxunhs4nSP7yKSkwQ3Q8Coex3o= -----END CERTIFICATE-----Generated at Fri Nov 28 06:13:40 2025 by rpki-client