This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d.cer File: cbb33f41-f493-4fe5-8254-63482c6f008d.cer (raw, json) Hash identifier: d3wHPLsVixFsP3CSNdSdD7b7p8e5iEvpBakudKKRXuU= Subject key identifier: A8:52:B4:85:05:69:95:F8:76:47:B0:E2:7C:B4:3F:41:1E:A7:44:B3 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B859C2F056B45566E493AD200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d/cbb33f41-f493-4fe5-8254-63482c6f008d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 19:04:54 +0000 Certificate not after: Mon 17 Jan 2028 20:04:54 +0000 Subordinate resources: AS: 15292 AS: 399901 -- 399902 IP: 23.176.96.0/24 IP: 104.243.221.0/24 IP: 192.228.110.0/23 IP: 2620:67:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:9c:2f:05:6b:45:56:6e:49:3a:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 14 19:04:54 2025 GMT Not After : Jan 17 20:04:54 2028 GMT Subject: CN=cbb33f41-f493-4fe5-8254-63482c6f008d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:21:7d:1b:31:71:7c:79:f5:a3:df:e8:8c: 56:72:aa:be:3b:1f:c9:18:4c:23:fa:8c:1f:82:b1: 18:bd:86:f8:b9:f5:b6:54:4e:9e:46:c6:9b:08:94: ba:02:f1:3c:0e:65:c1:6c:ae:c0:9b:21:e9:9c:bd: 47:04:ac:22:66:69:52:74:8f:e2:b4:4e:54:d8:99: 2a:3d:7f:d5:5e:30:d9:eb:5f:64:c0:9f:56:48:9c: cc:8e:e1:b6:72:68:ff:a9:a6:ef:43:db:de:3f:ee: 46:59:a7:e8:d4:0b:5c:9c:3a:92:b3:52:c7:5a:54: 38:65:ab:b7:9f:34:7f:1e:47:33:ad:18:d8:51:4d: f1:a3:84:21:ef:68:4a:8b:9a:b3:ce:79:e0:e3:c6: 29:16:a3:a3:13:62:40:dd:1c:43:81:64:2d:b6:06: 1a:80:df:50:fd:c3:d3:0b:f1:fb:37:76:72:c1:04: d2:a2:aa:20:b5:71:3d:0c:a8:c2:b3:1b:ee:f2:63: 17:c3:59:28:8c:de:82:bf:58:64:ba:24:f7:21:1a: 14:18:34:0f:de:97:b1:ab:89:87:ca:d7:ac:62:95: d4:7f:ca:97:30:c0:d1:80:1e:12:10:08:cb:41:dd: f2:8a:3d:38:50:ba:25:35:54:31:ec:97:a7:7f:18: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:52:B4:85:05:69:95:F8:76:47:B0:E2:7C:B4:3F:41:1E:A7:44:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cbb33f41-f493-4fe5-8254-63482c6f008d/cbb33f41-f493-4fe5-8254-63482c6f008d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.176.96.0/24 104.243.221.0/24 192.228.110.0/23 IPv6: 2620:67:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15292 399901-399902 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:21:cd:ea:fd:e0:cd:fb:2f:26:a1:de:a8:86:1e:ba:32:5c: 4b:4e:a3:9c:03:5c:aa:73:57:c4:34:20:d3:b0:b4:88:10:41: a4:7f:e2:39:50:e8:87:70:48:58:fe:1f:a9:6a:35:84:91:65: 9e:f1:ef:56:4c:27:b8:d2:e7:21:fc:91:b0:a2:4c:3f:e8:ac: 88:2e:15:36:0b:2f:10:5d:b3:d3:8f:73:1d:63:a8:23:b4:4d: a8:e3:d3:a3:ad:a3:81:a8:41:89:a9:b8:ca:ff:d4:5f:5e:b9: 40:22:48:b9:d7:45:4c:a7:f7:4c:f7:63:49:4a:1c:c6:b7:9c: 2a:c9:3c:ed:16:c7:a0:1c:f9:bc:85:8b:3e:78:0f:81:15:9b: 8d:e6:4c:96:81:a7:91:4e:a4:b1:4d:d4:cc:ed:4c:71:d0:09: d3:28:4c:b3:80:a7:5d:e7:0f:af:fb:85:5c:72:c5:6b:56:22: 0e:e7:10:a1:01:e0:5a:f0:fe:a3:0f:7e:1c:c8:92:ad:06:3f: ae:af:cf:b4:ee:67:a7:f2:e7:fd:c0:ff:90:2d:73:a6:1f:d5: 76:3a:55:43:21:bf:b5:75:e8:c1:66:05:20:48:6f:3f:b4:2f: 1e:10:f6:d6:05:c3:b5:4d:6d:30:67:de:88:13:ab:6b:93:ab: 31:fd:0f:42 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEuFnC8Fa0VWbkk60gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNDE5MDQ1NFoXDTI4MDExNzIwMDQ1NFowLzEtMCsGA1UEAxMk Y2JiMzNmNDEtZjQ5My00ZmU1LTgyNTQtNjM0ODJjNmYwMDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscwhfRsxcXx59aPf6IxWcqq+Ox/JGEwj+owf grEYvYb4ufW2VE6eRsabCJS6AvE8DmXBbK7AmyHpnL1HBKwiZmlSdI/itE5U2Jkq PX/VXjDZ619kwJ9WSJzMjuG2cmj/qabvQ9veP+5GWafo1AtcnDqSs1LHWlQ4Zau3 nzR/HkczrRjYUU3xo4Qh72hKi5qzznng48YpFqOjE2JA3RxDgWQttgYagN9Q/cPT C/H7N3ZywQTSoqogtXE9DKjCsxvu8mMXw1kojN6Cv1hkuiT3IRoUGDQP3pexq4mH ytesYpXUf8qXMMDRgB4SEAjLQd3yij04ULolNVQx7JenfxgofwIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFKhStIUFaZX4dkew4ny0P0Eep0SzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j YmIzM2Y0MS1mNDkzLTRmZTUtODI1NC02MzQ4MmM2ZjAwOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2NiYjMzZjQxLWY0OTMtNGZlNS04 MjU0LTYzNDgyYzZmMDA4ZC9jYmIzM2Y0MS1mNDkzLTRmZTUtODI1NC02MzQ4MmM2 ZjAwOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBAAXsGADBABo890DBAHA5G4wDwQCAAIwCQMHACYg AGdgADAlBggrBgEFBQcBCAEB/wQWMBSgEjAQAgI7vDAKAgMGGh0CAwYaHjBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAJIc3q/eDN+y8mod6ohh66MlxLTqOcA1yqc1fENCDTsLSIEEGkf+I5UOiH cEhY/h+pajWEkWWe8e9WTCe40uch/JGwokw/6KyILhU2Cy8QXbPTj3MdY6gjtE2o 49OjraOBqEGJqbjK/9RfXrlAIki510VMp/dM92NJShzGt5wqyTztFsegHPm8hYs+ eA+BFZuN5kyWgaeRTqSxTdTM7Uxx0AnTKEyzgKdd5w+v+4VccsVrViIO5xChAeBa 8P6jD34cyJKtBj+ur8+07men8uf9wP+QLXOmH9V2OlVDIb+1dejBZgUgSG8/tC8e EPbWBcO1TW0wZ96IE6trk6sx/Q9C -----END CERTIFICATE-----Generated at Fri Nov 28 06:13:38 2025 by rpki-client