This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d8dbab11-5b97-426b-a994-a39f9fd94d8a.cer File: d8dbab11-5b97-426b-a994-a39f9fd94d8a.cer (raw, json) Hash identifier: USXuIyvYuZoJnwkGAY4E9l3PhkdNClUDtnRqkPJN9Xg= Subject key identifier: 74:04:46:53:9D:DF:90:88:95:6B:F8:04:87:1D:A0:A0:B7:3E:0E:E2 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BFA1F0CD40C05450A91B19780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d8dbab11-5b97-426b-a994-a39f9fd94d8a/d8dbab11-5b97-426b-a994-a39f9fd94d8a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d8dbab11-5b97-426b-a994-a39f9fd94d8a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Nov 2025 12:42:21 +0000 Certificate not after: Sun 27 Feb 2028 21:01:33 +0000 Subordinate resources: AS: 46364 IP: 206.209.208.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:1f:0c:d4:0c:05:45:0a:91:b1:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 25 12:42:21 2025 GMT Not After : Feb 27 21:01:33 2028 GMT Subject: CN=d8dbab11-5b97-426b-a994-a39f9fd94d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:59:e4:25:49:f4:d5:75:92:c5:50:f4:f3: c8:f9:6b:72:15:5e:fd:7f:20:5d:3a:81:24:4a:41: 76:8d:ab:59:38:c2:0e:24:a7:8d:b4:76:63:95:e6: 2d:f4:cc:a4:e7:1a:f7:5e:48:5f:a4:55:91:bd:7d: 1e:ba:32:29:38:e3:95:5c:aa:5b:6b:c7:29:36:56: 03:54:34:48:dd:b1:4a:5c:ba:b1:1b:80:37:63:79: e2:bd:44:ed:3e:6b:7e:88:35:01:ec:d7:75:eb:86: 1c:42:00:11:82:bc:24:fb:66:f5:0d:27:6d:4f:04: 85:37:68:25:8c:bc:4a:44:89:ec:21:22:a3:a1:56: 4e:ee:7f:a4:3d:c5:a8:f2:23:a8:f9:c5:43:62:54: ce:f5:9f:32:bd:51:a8:3e:a5:3a:c2:e4:01:84:60: 6c:fd:79:8d:a5:84:d8:e2:75:19:da:68:87:14:4a: 8b:5d:10:04:49:a2:20:ee:c0:a9:e8:0c:7e:84:00: 41:f1:3b:ed:d5:34:f1:3a:fe:e7:60:95:b1:5b:29: 17:ba:8c:dd:2e:f6:c5:52:af:45:5f:62:e8:ea:1f: 63:f4:2a:be:a5:db:b3:26:7d:d7:ed:b5:04:7a:33: 29:8d:32:46:4b:83:c9:53:6f:85:91:84:b2:de:59: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:46:53:9D:DF:90:88:95:6B:F8:04:87:1D:A0:A0:B7:3E:0E:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d8dbab11-5b97-426b-a994-a39f9fd94d8a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d8dbab11-5b97-426b-a994-a39f9fd94d8a/d8dbab11-5b97-426b-a994-a39f9fd94d8a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 206.209.208.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46364 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ef:f7:49:32:de:c1:89:fe:77:0c:1e:9f:ad:23:bf:c5:38: 63:d0:89:cd:f1:62:1c:b1:a9:17:53:08:7f:16:5b:29:ee:a2: 6e:d4:26:f2:96:bb:6d:da:9f:9e:ce:01:c9:d8:93:b7:87:f5: 6c:a6:23:e6:ae:90:cf:52:a6:f5:06:41:07:10:9e:39:90:0c: 16:41:87:4c:83:9c:71:f4:13:59:5f:18:90:6d:07:28:5d:4c: 2c:f8:90:a2:61:a9:40:d1:2f:0a:98:36:09:d3:42:e5:a8:a5: b8:bc:d1:9f:02:72:35:16:bc:fc:09:e5:f2:00:0f:04:e2:69: 68:83:b0:ae:6f:b5:5c:c4:01:94:ca:07:12:ef:c9:40:8b:6c: 5a:7d:2f:15:53:03:45:dc:d2:dc:97:57:bd:91:5b:ec:dc:04: 81:94:9c:dc:bb:0a:72:93:8f:eb:09:d7:b8:2b:19:49:ca:7e: 0a:78:92:3c:74:d6:6c:5c:49:8f:47:5e:88:2e:fb:33:99:33: 96:fa:7d:18:30:11:38:f1:df:0f:0c:66:c1:9c:99:1a:48:07: e6:ad:57:ab:8f:44:c5:9e:30:9d:cb:c8:e7:39:cc:36:70:db: 68:f4:8e:10:ce:0f:44:37:d3:12:8f:2c:e0:99:98:7a:75:1e: 9c:32:28:17 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEv6HwzUDAVFCpGxl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNTEyNDIyMVoXDTI4MDIyNzIxMDEzM1owLzEtMCsGA1UEAxMk ZDhkYmFiMTEtNWI5Ny00MjZiLWE5OTQtYTM5ZjlmZDk0ZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMtZ5CVJ9NV1ksVQ9PPI+WtyFV79fyBdOoEk SkF2jatZOMIOJKeNtHZjleYt9Myk5xr3XkhfpFWRvX0eujIpOOOVXKpba8cpNlYD VDRI3bFKXLqxG4A3Y3nivUTtPmt+iDUB7Nd164YcQgARgrwk+2b1DSdtTwSFN2gl jLxKRInsISKjoVZO7n+kPcWo8iOo+cVDYlTO9Z8yvVGoPqU6wuQBhGBs/XmNpYTY 4nUZ2miHFEqLXRAESaIg7sCp6Ax+hABB8Tvt1TTxOv7nYJWxWykXuozdLvbFUq9F X2Lo6h9j9Cq+pduzJn3X7bUEejMpjTJGS4PJU2+FkYSy3lmx4wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHQERlOd35CIlWv4BIcdoKC3Pg7iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k OGRiYWIxMS01Yjk3LTQyNmItYTk5NC1hMzlmOWZkOTRkOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Q4ZGJhYjExLTViOTctNDI2Yi1h OTk0LWEzOWY5ZmQ5NGQ4YS9kOGRiYWIxMS01Yjk3LTQyNmItYTk5NC1hMzlmOWZk OTRkOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHO0dAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ALUcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHnv90ky3sGJ/ncMHp+tI7/FOGPQic3xYhyxqRdTCH8WWynu om7UJvKWu23an57OAcnYk7eH9WymI+aukM9SpvUGQQcQnjmQDBZBh0yDnHH0E1lf GJBtByhdTCz4kKJhqUDRLwqYNgnTQuWopbi80Z8CcjUWvPwJ5fIADwTiaWiDsK5v tVzEAZTKBxLvyUCLbFp9LxVTA0Xc0tyXV72RW+zcBIGUnNy7CnKTj+sJ17grGUnK fgp4kjx01mxcSY9HXogu+zOZM5b6fRgwETjx3w8MZsGcmRpIB+atV6uPRMWeMJ3L yOc5zDZw22j0jhDOD0Q30xKPLOCZmHp1HpwyKBc= -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:45 2025 by rpki-client