This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514.cer File: db34d8ad-c64f-4fe0-a095-112a8e656514.cer (raw, json) Hash identifier: RjvxrXzlgFjXILF5M+h6nIkanLT40wxTewQWGH0amGE= Subject key identifier: 2F:94:8F:1F:6D:4C:10:90:33:EB:5D:AB:DF:F1:94:4E:78:3F:FF:53 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BF70E1316F45D5F27792F4880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Nov 2025 10:20:43 +0000 Certificate not after: Sun 27 Feb 2028 10:20:43 +0000 Subordinate resources: AS: 400714 IP: 204.225.223.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:0e:13:16:f4:5d:5f:27:79:2f:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 24 10:20:43 2025 GMT Not After : Feb 27 10:20:43 2028 GMT Subject: CN=db34d8ad-c64f-4fe0-a095-112a8e656514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f3:28:66:4b:5c:0b:a7:a4:a6:82:74:1e:2c: a9:e8:e1:bb:4f:4b:92:0e:e3:1e:a1:ed:0d:d3:d2: 27:84:51:0e:c4:6a:cf:29:64:33:e2:6b:d9:27:17: 3e:e2:ec:d6:26:4e:99:0d:76:b8:e3:48:e8:60:31: bc:9b:76:d1:e0:fd:a3:80:5c:0b:93:b6:a5:bb:aa: f4:e0:b8:f0:d8:1b:64:0a:b5:0f:74:6a:65:40:09: 27:bf:9f:f2:a7:f4:ff:93:68:b6:7a:1b:be:f6:31: 95:c6:1b:ee:a7:29:2f:20:b8:96:59:9c:f7:5e:24: b9:81:cd:a9:32:4f:e7:21:33:b4:88:15:18:d0:6c: 3c:14:aa:2a:71:bf:ab:b2:4d:de:de:05:83:14:2d: 56:e5:5e:99:ea:34:1e:c6:9e:45:5b:29:68:80:7f: 66:26:7b:e3:d0:47:3b:32:e4:e9:ed:7b:fd:e7:d6: 9f:b6:e9:5c:cd:ff:4b:51:81:fc:93:1f:15:bd:ae: 86:0e:b2:be:4f:73:ba:18:80:72:7e:6c:ed:38:dc: d1:04:08:85:91:2e:7d:e7:e1:ab:80:a6:36:71:f5: dc:b5:24:9f:1a:86:0e:4e:42:97:ac:b9:18:25:54: ee:0f:85:71:bf:c8:23:6f:da:cd:44:9c:25:b6:02: 8a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:94:8F:1F:6D:4C:10:90:33:EB:5D:AB:DF:F1:94:4E:78:3F:FF:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 204.225.223.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400714 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:aa:c0:0d:0c:eb:0a:37:6d:d4:bb:cf:50:9e:f4:a0:09:56: 0c:4c:5a:09:25:92:c6:de:c5:9e:33:78:19:17:f5:7f:74:75: 26:5d:98:95:d6:f5:03:43:71:ee:2b:e5:db:fc:79:93:f6:83: 6b:95:83:18:f5:82:11:80:39:1d:9f:ae:51:5a:48:4c:46:ec: 44:aa:cc:d4:f0:b1:94:36:d9:ea:4e:45:d8:da:22:59:a2:ba: d4:95:8d:8a:a9:d4:8f:d6:7a:b2:97:0b:a0:43:b6:4e:3e:27: ba:e6:d5:40:9b:84:b9:92:15:f2:b9:b3:2f:22:ee:1f:97:bb: fd:f6:a1:8f:6a:88:0a:e2:b2:57:b9:16:82:c0:2b:23:00:b1: 01:76:3d:3a:cf:dc:55:21:1d:e6:90:67:8b:73:e9:c3:9a:66: 95:07:33:a1:ec:3e:62:70:1c:5e:d9:be:23:79:43:76:d6:a3: af:ad:18:d2:d9:91:56:3d:29:2a:ec:5c:c1:c6:43:9b:65:6a: 37:d9:00:47:d6:82:b1:da:76:72:b6:7a:6d:c3:7d:ee:30:98: 2b:f7:00:38:f5:c3:da:9a:3c:41:3a:f0:b3:c6:9c:f0:35:ce: a7:57:29:29:f6:18:fb:35:be:b1:0a:02:4d:c4:11:cc:55:bf: a7:11:a0:9f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEv3DhMW9F1fJ3kvSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNDEwMjA0M1oXDTI4MDIyNzEwMjA0M1owLzEtMCsGA1UEAxMk ZGIzNGQ4YWQtYzY0Zi00ZmUwLWEwOTUtMTEyYThlNjU2NTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fMoZktcC6ekpoJ0Hiyp6OG7T0uSDuMeoe0N 09InhFEOxGrPKWQz4mvZJxc+4uzWJk6ZDXa440joYDG8m3bR4P2jgFwLk7alu6r0 4Ljw2BtkCrUPdGplQAknv5/yp/T/k2i2ehu+9jGVxhvupykvILiWWZz3XiS5gc2p Mk/nITO0iBUY0Gw8FKoqcb+rsk3e3gWDFC1W5V6Z6jQexp5FWylogH9mJnvj0Ec7 MuTp7Xv959aftulczf9LUYH8kx8Vva6GDrK+T3O6GIByfmztONzRBAiFkS595+Gr gKY2cfXctSSfGoYOTkKXrLkYJVTuD4Vxv8gjb9rNRJwltgKKWQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFC+Ujx9tTBCQM+tdq9/xlE54P/9TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k YjM0ZDhhZC1jNjRmLTRmZTAtYTA5NS0xMTJhOGU2NTY1MTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2RiMzRkOGFkLWM2NGYtNGZlMC1h MDk1LTExMmE4ZTY1NjUxNC9kYjM0ZDhhZC1jNjRmLTRmZTAtYTA5NS0xMTJhOGU2 NTY1MTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADM4d8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh1KMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA6qwA0M6wo3bdS7z1Ce9KAJVgxMWgklksbexZ4zeBkX9X90 dSZdmJXW9QNDce4r5dv8eZP2g2uVgxj1ghGAOR2frlFaSExG7ESqzNTwsZQ22epO RdjaIlmiutSVjYqp1I/WerKXC6BDtk4+J7rm1UCbhLmSFfK5sy8i7h+Xu/32oY9q iArisle5FoLAKyMAsQF2PTrP3FUhHeaQZ4tz6cOaZpUHM6HsPmJwHF7ZviN5Q3bW o6+tGNLZkVY9KSrsXMHGQ5tlajfZAEfWgrHadnK2em3Dfe4wmCv3ADj1w9qaPEE6 8LPGnPA1zqdXKSn2GPs1vrEKAk3EEcxVv6cRoJ8= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:49 2025 by rpki-client