This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6.cer File: f0e38106-b42f-4661-8168-b943de3f70a6.cer (raw, json) Hash identifier: DWQf55zYi2kLbGbJVwPWVNUSfrXDkSKsRzDTvD+xb1c= Subject key identifier: 13:F5:EE:02:D8:EB:68:CA:7D:26:14:A5:BB:07:11:08:97:3C:7A:50 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BDB9C25ACE60A7A994EBD4A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/f0e38106-b42f-4661-8168-b943de3f70a6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Nov 2025 14:24:21 +0000 Certificate not after: Wed 02 Feb 2028 19:49:38 +0000 Subordinate resources: AS: 11187 IP: 208.74.80.0/21 IP: 2602:f993::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:db:9c:25:ac:e6:0a:7a:99:4e:bd:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 14 14:24:21 2025 GMT Not After : Feb 2 19:49:38 2028 GMT Subject: CN=f0e38106-b42f-4661-8168-b943de3f70a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:27:5b:4e:3a:93:31:12:66:aa:c4:4c:b7:8c: 94:83:36:04:a6:0d:7b:87:10:c8:e5:75:13:9f:c9: 8a:3d:e2:78:18:0e:82:9b:4b:4e:89:a8:d2:93:9e: e5:56:0b:08:65:27:f1:e2:61:6f:4b:a1:3f:f2:dc: 51:ed:f3:bf:6c:74:b9:3f:12:39:3b:d2:7c:13:7c: 4f:7d:f2:d4:fc:5d:87:6d:43:3a:34:bd:4b:08:94: 67:63:7e:3b:38:fb:03:8e:ec:e8:85:cd:96:8f:de: 8b:77:91:79:8a:bb:4f:f2:38:14:05:99:43:de:a6: 1a:0f:5c:05:11:73:8f:de:c0:4a:65:14:cc:5e:36: 5a:25:5a:c3:c3:f4:6e:4e:42:a7:02:f5:f9:08:e2: e6:ba:0c:6b:3f:5a:1b:66:40:8e:f2:fa:f2:5a:14: 22:b0:18:ae:7b:1f:0b:04:77:9a:c6:df:4b:81:1b: 7a:55:30:21:16:50:76:6b:e3:97:3a:92:9a:28:13: d7:ad:52:77:ad:93:72:b6:35:88:92:b2:74:f4:a5: 99:75:3c:1e:2c:23:71:a1:90:9f:c5:25:ac:3e:6b: d9:0a:85:f9:c8:f0:20:29:df:39:9c:9d:31:5a:67: 50:31:3d:e5:fe:36:5d:cb:42:61:e6:68:e8:74:7b: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F5:EE:02:D8:EB:68:CA:7D:26:14:A5:BB:07:11:08:97:3C:7A:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/f0e38106-b42f-4661-8168-b943de3f70a6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 208.74.80.0/21 IPv6: 2602:f993::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11187 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:4b:e9:0b:ae:88:73:c6:d4:4c:7b:39:c5:ff:62:8c:cf:81: 47:ef:93:42:d0:e7:b3:da:ee:7c:f7:85:ea:73:b7:67:5d:0f: 62:7a:22:76:72:34:5c:f3:5d:7e:5d:78:5f:c6:c9:78:14:f6: 00:ab:4e:d1:6e:f6:60:a4:cc:b2:b7:2b:92:02:de:32:e3:63: fa:34:0c:49:0e:68:72:3b:7d:28:49:17:3d:84:21:cd:c7:1b: 6e:97:0c:22:72:2b:99:a1:38:47:aa:94:b1:8a:9e:b9:da:29: 7a:76:5a:07:e9:e2:a1:23:9b:07:85:fe:83:c2:5e:19:fa:1a: aa:f4:48:a7:de:c7:88:8e:1b:e7:a1:e1:43:a9:af:9c:f4:f4: 4f:ca:24:08:db:76:70:ff:ba:51:a3:4e:19:f7:da:2a:3e:51: 3e:bf:d5:0f:e2:42:f8:cc:9d:c5:4e:56:a4:f8:16:3b:30:d9: f7:ce:ac:34:49:ff:e9:2b:f9:71:26:cf:76:f6:73:7c:df:b7: b0:35:88:b0:ac:30:46:dc:1d:a7:ee:bd:e6:8d:9b:94:cb:17: c9:84:4c:8f:59:c4:0a:2f:ca:11:20:d0:3e:79:db:18:30:34: f6:db:31:b6:a0:0a:92:a2:09:7d:d7:26:b1:b2:90:c7:35:55: 4d:48:3b:a5 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEvbnCWs5gp6mU69SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExNDE0MjQyMVoXDTI4MDIwMjE5NDkzOFowLzEtMCsGA1UEAxMk ZjBlMzgxMDYtYjQyZi00NjYxLTgxNjgtYjk0M2RlM2Y3MGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgydbTjqTMRJmqsRMt4yUgzYEpg17hxDI5XUT n8mKPeJ4GA6Cm0tOiajSk57lVgsIZSfx4mFvS6E/8txR7fO/bHS5PxI5O9J8E3xP ffLU/F2HbUM6NL1LCJRnY347OPsDjuzohc2Wj96Ld5F5irtP8jgUBZlD3qYaD1wF EXOP3sBKZRTMXjZaJVrDw/RuTkKnAvX5COLmugxrP1obZkCO8vryWhQisBiuex8L BHeaxt9LgRt6VTAhFlB2a+OXOpKaKBPXrVJ3rZNytjWIkrJ09KWZdTweLCNxoZCf xSWsPmvZCoX5yPAgKd85nJ0xWmdQMT3l/jZdy0Jh5mjodHsILQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFBP17gLY62jKfSYUpbsHEQiXPHpQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m MGUzODEwNi1iNDJmLTQ2NjEtODE2OC1iOTQzZGUzZjcwYTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2YwZTM4MTA2LWI0MmYtNDY2MS04 MTY4LWI5NDNkZTNmNzBhNi9mMGUzODEwNi1iNDJmLTQ2NjEtODE2OC1iOTQzZGUz ZjcwYTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPQSlAwDQQCAAIwBwMFACYC+ZMwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICK7MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgEvpC66Ic8bUTHs5xf9ijM+BR++T QtDns9rufPeF6nO3Z10PYnoidnI0XPNdfl14X8bJeBT2AKtO0W72YKTMsrcrkgLe MuNj+jQMSQ5ocjt9KEkXPYQhzccbbpcMInIrmaE4R6qUsYqeudopenZaB+nioSOb B4X+g8JeGfoaqvRIp97HiI4b56HhQ6mvnPT0T8okCNt2cP+6UaNOGffaKj5RPr/V D+JC+MydxU5WpPgWOzDZ986sNEn/6Sv5cSbPdvZzfN+3sDWIsKwwRtwdp+695o2b lMsXyYRMj1nECi/KESDQPnnbGDA09tsxtqAKkqIJfdcmsbKQxzVVTUg7pQ== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:51 2025 by rpki-client