This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515.cer File: cb465e3e-2777-4f45-8f30-b7f465c4e515.cer (raw, json) Hash identifier: wV+URmSNRSWQuBBRUtORKBd/FRmttnZpnNwG8gCet6M= Subject key identifier: CB:02:39:AA:E1:5A:68:D7:B3:8F:72:73:9C:E1:7C:BB:2E:E4:2A:21 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BDA0327215293D9E0A3D7BE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/cb465e3e-2777-4f45-8f30-b7f465c4e515.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Nov 2025 00:40:16 +0000 Certificate not after: Thu 17 Feb 2028 00:40:16 +0000 Subordinate resources: IP: 23.149.156.0/24 IP: 2602:f4cc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:03:27:21:52:93:d9:e0:a3:d7:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 14 00:40:16 2025 GMT Not After : Feb 17 00:40:16 2028 GMT Subject: CN=cb465e3e-2777-4f45-8f30-b7f465c4e515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0b:65:a8:7c:d7:04:e5:9a:d1:dc:95:02:da: 6c:fa:4e:f8:71:77:ba:c5:ba:f6:db:10:e3:d2:66: ce:76:cd:3a:f4:be:b8:52:f0:0b:ae:9f:aa:2f:89: 81:be:17:b7:99:24:28:00:cd:ce:f2:fd:21:48:97: 48:71:23:92:69:07:e0:aa:21:c0:c1:f0:93:11:a4: 9f:ad:31:9b:13:9e:fe:30:d7:62:8c:dd:51:b5:0c: 0c:e6:1f:8c:8b:0e:d6:39:27:aa:22:e1:f6:55:9a: 70:90:f2:9c:b7:2c:87:9b:97:11:03:3e:60:fe:7e: 61:07:f9:b5:25:f8:45:ee:10:53:d2:fb:1e:f2:b5: 18:45:e9:d3:f3:c5:9a:b0:9d:82:7a:df:0a:f9:92: c6:93:53:40:28:08:be:ce:08:63:cd:44:67:dc:34: 3a:b8:ce:73:40:aa:83:10:bb:cc:a2:b9:e8:3b:fe: 16:ee:93:3b:d5:75:46:b7:8b:6b:ec:b4:df:fa:2b: 9a:a4:ea:68:06:64:1d:d5:f4:4f:ba:7b:3f:88:47: ab:29:8f:4d:b4:db:1c:5a:64:32:c1:b5:be:22:db: 0f:c1:36:7c:15:d2:df:92:8e:a0:1b:79:4e:65:99: 98:9b:46:d0:ac:9d:cb:04:64:c2:1a:2b:3a:d6:3b: aa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:02:39:AA:E1:5A:68:D7:B3:8F:72:73:9C:E1:7C:BB:2E:E4:2A:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/cb465e3e-2777-4f45-8f30-b7f465c4e515.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.149.156.0/24 IPv6: 2602:f4cc::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8c:ed:79:62:83:0d:9c:9f:c4:cd:6d:73:f8:39:3a:8e:61: 22:89:91:f5:37:09:85:22:08:5d:5e:3f:5a:d4:30:66:3b:ad: 88:45:de:07:2e:c1:5d:09:9f:64:81:e9:ec:da:1c:87:6d:ef: 79:4d:dc:bc:4b:4f:cf:b1:87:86:a7:b6:45:19:18:3d:a3:76: 93:01:ac:40:1b:37:c2:a7:d3:cc:ae:73:5c:7d:d6:c1:29:90: 87:60:bf:ac:8f:4f:89:79:68:be:c4:4f:91:bd:ec:ad:01:7c: 4f:e4:89:03:16:04:92:45:8c:5b:0e:66:b7:47:c6:2e:94:8b: 43:04:f0:54:69:b2:3f:c6:c4:e3:1c:06:3d:0d:33:d6:fc:82: 90:6a:35:93:e6:22:4a:b3:45:77:ae:e2:be:86:20:1d:5c:98: 18:6a:49:84:9f:e2:ee:73:7b:e7:7d:59:d6:51:33:63:dc:6e: b8:b6:b8:99:68:6f:29:a6:02:55:c0:00:5e:41:2d:b8:c6:9d: ee:9c:39:94:9f:59:d0:41:80:75:05:6a:74:1a:e4:a3:a6:50: 15:ea:8c:d3:02:eb:29:d4:5b:8a:bb:06:4a:6a:1b:8b:df:9f: c6:e0:77:bd:91:ca:25:60:7e:f6:5d:79:ff:1b:26:94:30:29: 3b:bb:ca:bf -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEvaAychUpPZ4KPXvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExNDAwNDAxNloXDTI4MDIxNzAwNDAxNlowLzEtMCsGA1UEAxMk Y2I0NjVlM2UtMjc3Ny00ZjQ1LThmMzAtYjdmNDY1YzRlNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wtlqHzXBOWa0dyVAtps+k74cXe6xbr22xDj 0mbOds069L64UvALrp+qL4mBvhe3mSQoAM3O8v0hSJdIcSOSaQfgqiHAwfCTEaSf rTGbE57+MNdijN1RtQwM5h+Miw7WOSeqIuH2VZpwkPKctyyHm5cRAz5g/n5hB/m1 JfhF7hBT0vse8rUYRenT88WasJ2Cet8K+ZLGk1NAKAi+zghjzURn3DQ6uM5zQKqD ELvMornoO/4W7pM71XVGt4tr7LTf+iuapOpoBmQd1fRPuns/iEerKY9NtNscWmQy wbW+ItsPwTZ8FdLfko6gG3lOZZmYm0bQrJ3LBGTCGis61juqbwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFMsCOarhWmjXs49yc5zhfLsu5CohMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j YjQ2NWUzZS0yNzc3LTRmNDUtOGYzMC1iN2Y0NjVjNGU1MTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2NiNDY1ZTNlLTI3NzctNGY0NS04 ZjMwLWI3ZjQ2NWM0ZTUxNS9jYjQ2NWUzZS0yNzc3LTRmNDUtOGYzMC1iN2Y0NjVj NGU1MTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlZwwDgQCAAIwCAMGACYC9MwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACSM7Xligw2cn8TNbXP4OTqOYSKJkfU3CYUiCF1eP1rUMGY7rYhF3gcuwV0Jn2SB 6ezaHIdt73lN3LxLT8+xh4antkUZGD2jdpMBrEAbN8Kn08yuc1x91sEpkIdgv6yP T4l5aL7ET5G97K0BfE/kiQMWBJJFjFsOZrdHxi6Ui0ME8FRpsj/GxOMcBj0NM9b8 gpBqNZPmIkqzRXeu4r6GIB1cmBhqSYSf4u5ze+d9WdZRM2Pcbri2uJlobymmAlXA AF5BLbjGne6cOZSfWdBBgHUFanQa5KOmUBXqjNMC6ynUW4q7BkpqG4vfn8bgd72R yiVgfvZdef8bJpQwKTu7yr8= -----END CERTIFICATE-----Generated at Sat Nov 22 20:52:10 2025 by rpki-client