This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer File: cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer (raw, json) Hash identifier: oPiVKXa7SUDIw1u2deQ/gB7NNnBHzChcpziEq23nMT4= Subject key identifier: D9:1E:B3:B5:38:2F:DD:6F:7E:EF:22:B6:0A:9C:15:26:FA:8C:A4:5F Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BACCDC4BECA36AA654C9DBD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 20:01:20 +0000 Certificate not after: Mon 31 Jan 2028 21:01:20 +0000 Subordinate resources: AS: 20020 IP: 23.164.8.0/24 IP: 192.34.16.0/23 IP: 2607:35c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:cd:c4:be:ca:36:aa:65:4c:9d:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 28 20:01:20 2025 GMT Not After : Jan 31 21:01:20 2028 GMT Subject: CN=cb8bbc7d-40a8-45a5-8a9a-95c05453c635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:2f:ef:40:97:91:e1:c9:65:43:33:72:ba: 60:69:75:e6:2d:0b:f6:0a:bc:04:2b:a5:c0:16:0c: 28:8d:ff:c5:d9:c2:8e:00:10:cb:97:db:f4:6d:d6: c6:f5:4a:de:91:d7:61:ab:dd:82:78:9d:94:db:e0: af:a7:b4:86:0c:51:6f:72:f3:84:54:ea:d6:50:d3: b0:73:a0:a6:5b:60:96:c0:c7:eb:01:4b:95:33:ce: 72:3c:31:91:45:80:6d:5c:90:f3:f6:82:9e:8b:82: 5c:a4:7f:ea:29:2d:a5:a8:be:b0:25:74:00:5f:70: 50:44:6e:e9:1a:ae:a7:80:25:d6:f8:5a:27:9c:27: 4e:34:eb:39:63:ba:77:66:b4:79:43:6a:a5:09:eb: 5a:d4:f4:0b:ca:8f:9b:c5:f4:6e:75:41:2e:7c:a6: 7d:15:3a:c2:9e:4e:eb:1d:22:ee:f0:73:74:48:c9: b3:f8:52:f1:3b:93:41:60:42:9b:7f:d4:44:c7:01: 38:18:8a:c6:d8:d6:20:a1:2f:84:73:26:d9:44:ac: 2a:76:4d:06:a4:85:49:71:2e:5c:11:df:91:fa:1a: b5:97:ac:01:0b:89:71:1e:a4:e1:bf:cc:04:71:8f: b8:b6:1f:ed:cc:06:dc:05:c5:65:00:14:9e:51:af: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1E:B3:B5:38:2F:DD:6F:7E:EF:22:B6:0A:9C:15:26:FA:8C:A4:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.164.8.0/24 192.34.16.0/23 IPv6: 2607:35c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20020 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:9f:ec:1f:85:ca:8d:e4:5e:b0:4b:c8:54:96:77:ab:a5:3b: 93:b0:b4:e5:3b:4c:37:14:a0:46:bd:3a:cf:21:31:05:ab:a6: 76:8c:ca:80:e3:40:76:c1:1e:70:f9:b8:25:da:a0:5d:86:6d: 06:0d:fc:84:77:09:ff:e6:90:1b:cb:f6:64:d1:79:0e:76:58: a1:f5:db:89:e1:3a:6a:06:0c:21:06:d1:29:ca:63:e3:a3:12: 51:07:1d:2d:ee:5b:40:5d:cc:d9:bb:86:22:67:2c:4b:7a:c6: 45:e4:f3:c1:3f:ae:63:23:1e:0c:e8:6a:ab:04:b1:c7:e0:a0: 11:5a:47:d7:5e:03:3f:d0:c3:32:0a:af:67:fe:42:9c:98:db: d7:4e:04:95:4f:6b:53:0d:e1:13:05:61:2a:40:62:e2:93:fd: 46:cf:a8:53:81:ee:e2:24:a1:1a:c8:17:2d:8a:99:39:63:2e: ce:93:a5:47:78:f2:e3:2a:82:bb:cb:f3:c9:ed:d6:b0:f0:1a: a6:d9:e6:81:19:68:93:3d:48:5e:70:55:9a:79:97:f3:66:ad: 12:c6:a6:64:2e:a2:4b:62:4f:be:bd:4b:bb:67:80:12:95:49: 66:37:1c:62:1c:34:6c:ec:97:1f:20:64:d4:70:ab:fc:fc:96: 01:3a:6a:ca -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEuszcS+yjaqZUydvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyODIwMDEyMFoXDTI4MDEzMTIxMDEyMFowLzEtMCsGA1UEAxMk Y2I4YmJjN2QtNDBhOC00NWE1LThhOWEtOTVjMDU0NTNjNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrAv70CXkeHJZUMzcrpgaXXmLQv2CrwEK6XA Fgwojf/F2cKOABDLl9v0bdbG9Urekddhq92CeJ2U2+Cvp7SGDFFvcvOEVOrWUNOw c6CmW2CWwMfrAUuVM85yPDGRRYBtXJDz9oKei4JcpH/qKS2lqL6wJXQAX3BQRG7p Gq6ngCXW+FonnCdONOs5Y7p3ZrR5Q2qlCeta1PQLyo+bxfRudUEufKZ9FTrCnk7r HSLu8HN0SMmz+FLxO5NBYEKbf9RExwE4GIrG2NYgoS+EcybZRKwqdk0GpIVJcS5c Ed+R+hq1l6wBC4lxHqThv8wEcY+4th/tzAbcBcVlABSeUa+vOwIDAQABo4IELzCC BCswHQYDVR0OBBYEFNkes7U4L91vfu8itgqcFSb6jKRfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j YjhiYmM3ZC00MGE4LTQ1YTUtOGE5YS05NWMwNTQ1M2M2MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2NiOGJiYzdkLTQwYTgtNDVhNS04 YTlhLTk1YzA1NDUzYzYzNS9jYjhiYmM3ZC00MGE4LTQ1YTUtOGE5YS05NWMwNTQ1 M2M2MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXpAgDBAHAIhAwDQQCAAIwBwMFACYHNcAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICTjQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAR5/sH4XKjeResEvIVJZ3 q6U7k7C05TtMNxSgRr06zyExBaumdozKgONAdsEecPm4JdqgXYZtBg38hHcJ/+aQ G8v2ZNF5DnZYofXbieE6agYMIQbRKcpj46MSUQcdLe5bQF3M2buGImcsS3rGReTz wT+uYyMeDOhqqwSxx+CgEVpH114DP9DDMgqvZ/5CnJjb104ElU9rUw3hEwVhKkBi 4pP9Rs+oU4Hu4iShGsgXLYqZOWMuzpOlR3jy4yqCu8vzye3WsPAaptnmgRlokz1I XnBVmnmX82atEsamZC6iS2JPvr1Lu2eAEpVJZjccYhw0bOyXHyBk1HCr/PyWATpq yg== -----END CERTIFICATE-----Generated at Fri Nov 28 06:12:00 2025 by rpki-client