This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2.cer File: cfe3e283-95fd-4916-9980-82cb3ba1d1c2.cer (raw, json) Hash identifier: GBQeS7c45lXZisfvXmm4Fj08zIxQ+G1PtS4orBJ2KXc= Subject key identifier: E1:D6:96:F1:9A:04:FB:83:95:76:74:87:C2:B2:C7:F0:D0:73:19:DA Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C5C59B786D011B4313C16A200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Dec 2025 17:09:46 +0000 Certificate not after: Mon 03 Apr 2028 16:09:46 +0000 Subordinate resources: AS: 4241 IP: 168.240.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5c:59:b7:86:d0:11:b4:31:3c:16:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 30 17:09:46 2025 GMT Not After : Apr 3 16:09:46 2028 GMT Subject: CN=cfe3e283-95fd-4916-9980-82cb3ba1d1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fc:a4:38:c3:fd:11:24:7e:87:78:18:4c:d0: 37:e3:7e:65:64:e0:a5:6d:d1:ca:a9:9a:a0:77:77: 0b:63:4b:85:f2:aa:50:bc:51:19:ff:9a:a3:6f:f5: ea:76:e7:4c:88:ea:a6:4b:ea:4f:99:cb:bf:15:e8: c7:e7:4d:fb:ee:d9:67:a5:e7:57:da:b5:93:9a:72: ce:2d:c9:b2:22:ad:46:fe:94:08:58:99:41:91:34: 89:15:1f:e1:73:10:ea:e3:f1:af:1e:5b:9d:71:22: f1:16:89:0c:23:26:c4:3f:f0:b6:79:ea:e6:e2:f6: a9:96:60:49:cb:ec:01:d8:1b:75:8a:44:48:23:53: 2f:f3:64:da:d0:d6:32:ac:8e:60:5e:5b:f4:3c:2a: 40:ac:20:01:d4:75:2a:b6:b0:8a:84:fd:5b:62:4f: 8d:14:38:1f:1c:aa:09:7d:66:1c:10:8a:50:2e:d3: 21:cb:d3:30:a8:02:89:08:b5:3c:f2:9d:7a:89:8f: b4:e2:5b:82:12:48:16:4a:22:f5:77:58:8b:0d:3a: 8a:8c:0d:4d:68:82:a7:14:9f:98:b8:69:de:c9:9d: 64:62:5c:68:04:43:44:14:23:ee:14:15:ea:39:9f: 6a:0d:67:81:f5:c6:3b:c7:34:68:1c:13:45:8a:b6: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D6:96:F1:9A:04:FB:83:95:76:74:87:C2:B2:C7:F0:D0:73:19:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 168.240.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4241 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c1:37:ff:14:a8:b6:57:69:12:15:17:7b:46:5b:1b:86:4d: 15:62:9d:7a:5d:77:6d:26:1a:f7:ed:5f:ae:a7:59:ad:6e:5b: 7e:39:6e:01:a4:4e:b7:af:5a:37:75:8c:48:ae:46:63:6b:34: 56:2d:d1:5c:77:c7:33:20:39:18:e7:19:ef:3e:08:ae:90:04: 77:c9:bb:18:3d:89:f9:9e:de:13:b8:67:c2:ec:f9:9b:55:8a: de:c4:25:a3:9c:98:e4:c5:ba:35:b9:2f:a6:71:28:21:d2:3b: 75:a4:fb:e0:d4:af:eb:bc:63:8f:5a:76:0b:27:3e:42:dd:5e: cb:a5:10:b6:94:3b:5c:63:f5:34:51:a0:ca:1c:0b:57:2c:1f: 92:d0:c0:b2:52:4a:46:df:ae:1d:ce:0c:8c:47:5b:c9:0a:28: aa:53:17:ba:e6:9b:58:6b:c8:9d:56:c5:3e:e5:e8:81:86:d2: f4:2e:d8:03:aa:45:4f:86:6d:a2:e4:5d:ce:1c:6e:c7:c2:b5: a0:4e:f6:72:4b:8e:66:31:8f:f0:8f:81:a9:b9:2b:4a:61:20: 88:c8:3a:dd:9d:f2:9c:de:bc:93:ab:ad:c5:f2:28:dd:3a:dc: 6c:03:6b:f4:05:a8:79:66:13:c8:27:7e:b3:e8:eb:61:35:b6: 55:45:d2:5c -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWExcWbeG0BG0MTwWogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIzMDE3MDk0NloXDTI4MDQwMzE2MDk0NlowLzEtMCsGA1UEAxMk Y2ZlM2UyODMtOTVmZC00OTE2LTk5ODAtODJjYjNiYTFkMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPykOMP9ESR+h3gYTNA3435lZOClbdHKqZqg d3cLY0uF8qpQvFEZ/5qjb/XqdudMiOqmS+pPmcu/FejH50377tlnpedX2rWTmnLO LcmyIq1G/pQIWJlBkTSJFR/hcxDq4/GvHludcSLxFokMIybEP/C2eerm4vaplmBJ y+wB2Bt1ikRII1Mv82Ta0NYyrI5gXlv0PCpArCAB1HUqtrCKhP1bYk+NFDgfHKoJ fWYcEIpQLtMhy9MwqAKJCLU88p16iY+04luCEkgWSiL1d1iLDTqKjA1NaIKnFJ+Y uGneyZ1kYlxoBENEFCPuFBXqOZ9qDWeB9cY7xzRoHBNFirbCRwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFOHWlvGaBPuDlXZ0h8Kyx/DQcxnaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j ZmUzZTI4My05NWZkLTQ5MTYtOTk4MC04MmNiM2JhMWQxYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2NmZTNlMjgzLTk1ZmQtNDkxNi05 OTgwLTgyY2IzYmExZDFjMi9jZmUzZTI4My05NWZkLTQ5MTYtOTk4MC04MmNiM2Jh MWQxYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCo8DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIQ kTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBbwTf/FKi2V2kSFRd7Rlsbhk0VYp16XXdtJhr37V+up1mtblt+ OW4BpE63r1o3dYxIrkZjazRWLdFcd8czIDkY5xnvPgiukAR3ybsYPYn5nt4TuGfC 7PmbVYrexCWjnJjkxbo1uS+mcSgh0jt1pPvg1K/rvGOPWnYLJz5C3V7LpRC2lDtc Y/U0UaDKHAtXLB+S0MCyUkpG364dzgyMR1vJCiiqUxe65ptYa8idVsU+5eiBhtL0 LtgDqkVPhm2i5F3OHG7HwrWgTvZyS45mMY/wj4GpuStKYSCIyDrdnfKc3ryTq63F 8ijdOtxsA2v0Bah5ZhPIJ36z6OthNbZVRdJc -----END CERTIFICATE-----Generated at Mon Jan 12 12:24:26 2026 by rpki-client