This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer File: d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer (raw, json) Hash identifier: A5xYx2xeL+QkE5bKsTDIPA1edsfkMYdGJUe6Zvmhx+o= Subject key identifier: F7:D1:FE:EA:1C:EC:BE:6D:45:87:65:7F:4A:53:11:CE:D8:B2:7F:37 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BDA00324A96CD9AFDE7A12F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Nov 2025 00:34:19 +0000 Certificate not after: Thu 17 Feb 2028 00:34:19 +0000 Subordinate resources: IP: 23.149.108.0/24 IP: 2602:f4d0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:00:32:4a:96:cd:9a:fd:e7:a1:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 14 00:34:19 2025 GMT Not After : Feb 17 00:34:19 2028 GMT Subject: CN=d978ad6f-4614-4fcf-9d00-9f30e1a82674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:11:80:ef:37:fd:ee:ce:50:08:db:1a:7f: 60:83:ca:42:6c:27:22:75:3b:9f:b8:4b:d2:2a:1e: 2e:c6:b2:8f:29:3c:bb:94:3d:d7:12:3f:51:65:b1: 32:9c:d9:08:74:fc:be:e6:66:74:42:4e:73:d1:ad: 86:83:fe:a0:cd:ae:e5:bd:af:3e:2c:ce:d5:d4:c2: 63:d0:43:c4:95:b6:bc:d3:5e:1d:10:c9:7e:b0:c4: 19:8e:94:f3:08:10:db:6d:e3:0d:97:2b:81:1d:5a: e5:c4:79:a7:5b:80:6e:70:76:1e:54:a7:ce:92:76: ec:54:a7:ff:35:04:12:ae:a7:02:1e:77:1d:d0:9c: 93:25:41:1d:30:80:80:88:4e:51:65:61:49:b7:02: d1:8c:e7:65:a7:21:fa:13:92:c2:e8:79:29:c0:27: 93:c1:4f:26:1e:07:e5:c5:0c:32:d5:81:11:f6:95: 0b:49:ce:a2:95:8f:9b:34:c5:25:39:72:9a:27:0f: 09:8d:a2:81:d0:d9:01:c9:cc:83:92:1d:c4:11:3e: da:45:fc:fa:a3:89:22:21:38:5b:65:e7:c2:ef:05: e8:ac:b2:ba:12:72:fc:eb:36:9b:f9:59:b8:6e:30: 89:d9:a2:84:e6:f0:30:2d:66:e9:21:89:5b:bd:d0: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D1:FE:EA:1C:EC:BE:6D:45:87:65:7F:4A:53:11:CE:D8:B2:7F:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.149.108.0/24 IPv6: 2602:f4d0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c9:c6:b9:31:ba:bf:4d:b7:e2:f2:58:46:7e:a0:49:2f:d1: 68:b2:a7:5d:67:5c:2a:7d:31:85:6a:dc:70:91:ed:54:e5:61: 53:05:88:53:b4:cf:9e:e9:b6:7b:ef:66:74:57:7d:6e:6e:0d: ae:c5:13:77:b3:87:37:81:4a:88:87:e0:69:6b:cb:6a:71:8e: 09:b6:e9:7c:88:ed:a1:2a:28:23:0d:6c:0a:4f:1f:77:f5:1c: c0:88:ac:95:2d:d5:78:45:39:ff:3b:5f:43:9b:21:cd:05:64: 28:40:5c:3b:4b:1b:ef:bf:aa:0c:20:2d:f8:b0:60:ec:bd:bb: 8c:fe:16:cf:bc:db:23:d5:be:89:76:65:1d:1e:97:0d:61:7d: a7:0c:3b:57:7b:cc:7f:ab:bf:f8:fe:ac:d9:2f:83:0d:d9:00: 8b:82:b3:3a:6f:34:05:13:80:fd:8c:12:87:54:05:42:c2:25: db:6c:ca:81:6c:49:87:e4:58:d8:52:4f:45:47:a9:eb:40:4f: e7:10:10:87:8b:ec:f9:60:8c:4e:b7:15:b9:92:bd:e2:62:85: 5d:81:b5:c4:78:26:c8:d3:c7:fe:dd:33:a3:63:81:8c:0c:57: 7b:69:b4:a0:0a:85:a1:4d:7a:54:ef:08:c8:74:67:ae:c5:23: ca:8a:be:e4 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEvaADJKls2a/eehL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExNDAwMzQxOVoXDTI4MDIxNzAwMzQxOVowLzEtMCsGA1UEAxMk ZDk3OGFkNmYtNDYxNC00ZmNmLTlkMDAtOWYzMGUxYTgyNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ0RgO83/e7OUAjbGn9gg8pCbCcidTufuEvS Kh4uxrKPKTy7lD3XEj9RZbEynNkIdPy+5mZ0Qk5z0a2Gg/6gza7lva8+LM7V1MJj 0EPElba8014dEMl+sMQZjpTzCBDbbeMNlyuBHVrlxHmnW4BucHYeVKfOknbsVKf/ NQQSrqcCHncd0JyTJUEdMICAiE5RZWFJtwLRjOdlpyH6E5LC6HkpwCeTwU8mHgfl xQwy1YER9pULSc6ilY+bNMUlOXKaJw8JjaKB0NkBycyDkh3EET7aRfz6o4kiIThb ZefC7wXorLK6EnL86zab+Vm4bjCJ2aKE5vAwLWbpIYlbvdCVawIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPfR/uoc7L5tRYdlf0pTEc7Ysn83MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k OTc4YWQ2Zi00NjE0LTRmY2YtOWQwMC05ZjMwZTFhODI2NzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Q5NzhhZDZmLTQ2MTQtNGZjZi05 ZDAwLTlmMzBlMWE4MjY3NC9kOTc4YWQ2Zi00NjE0LTRmY2YtOWQwMC05ZjMwZTFh ODI2NzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlWwwDgQCAAIwCAMGACYC9NAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHXJxrkxur9Nt+LyWEZ+oEkv0Wiyp11nXCp9MYVq3HCR7VTlYVMFiFO0z57ptnvv ZnRXfW5uDa7FE3ezhzeBSoiH4Glry2pxjgm26XyI7aEqKCMNbApPH3f1HMCIrJUt 1XhFOf87X0ObIc0FZChAXDtLG++/qgwgLfiwYOy9u4z+Fs+82yPVvol2ZR0elw1h facMO1d7zH+rv/j+rNkvgw3ZAIuCszpvNAUTgP2MEodUBULCJdtsyoFsSYfkWNhS T0VHqetAT+cQEIeL7PlgjE63FbmSveJihV2BtcR4JsjTx/7dM6NjgYwMV3tptKAK haFNelTvCMh0Z67FI8qKvuQ= -----END CERTIFICATE-----Generated at Sun Nov 23 20:09:47 2025 by rpki-client