This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.cer File: f4b23dbc-6332-4e4e-aa8e-73a6064f441b.cer (raw, json) Hash identifier: noK5HdjiEOYH6Smiw6YlChw9i9baIViskViXsZeJRnQ= Subject key identifier: A8:1F:83:9E:F0:ED:8A:7E:C8:C7:54:C4:CE:35:7B:0C:3E:FB:C0:50 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BFF8D701227F5BCCEF6372E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Nov 2025 11:23:49 +0000 Certificate not after: Wed 01 Mar 2028 11:23:49 +0000 Subordinate resources: IP: 142.248.140.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:8d:70:12:27:f5:bc:ce:f6:37:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 27 11:23:49 2025 GMT Not After : Mar 1 11:23:49 2028 GMT Subject: CN=f4b23dbc-6332-4e4e-aa8e-73a6064f441b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:db:9b:61:dd:00:68:58:26:ab:52:20:5a: e5:2d:dc:07:f9:17:f2:46:1e:a7:0b:ce:50:71:57: e4:98:e9:49:8d:9d:eb:df:a3:fa:01:10:4a:90:1b: e5:39:ee:c5:cd:0f:a1:40:68:ea:5e:f2:8a:66:ca: ba:7e:3d:97:c0:3f:03:dd:de:2e:5d:1a:a8:17:84: f3:7c:d4:0e:76:30:af:60:b9:26:72:51:7f:11:7f: 74:09:41:d1:4b:d3:58:9b:e0:40:e0:64:82:cd:5b: 42:5a:da:4d:49:cf:33:2e:68:c7:de:22:b4:4e:f2: 04:08:d3:e2:69:53:3f:72:d6:47:3f:ae:3f:4d:54: 76:41:ca:92:7b:88:8d:82:54:de:3d:26:5c:08:cd: 95:8b:98:ef:19:a8:44:26:6f:1d:61:c0:3c:58:ba: 99:e5:d1:09:2d:06:47:bb:17:6f:55:c7:58:fb:c5: 1c:15:1e:a0:d7:44:b9:59:3a:20:19:e5:c4:b6:7e: bb:7d:68:0d:aa:f6:12:a4:a4:68:30:a8:9d:5e:dd: 90:4d:03:0b:34:a0:18:3b:05:da:ee:7f:6b:7c:3a: 4d:13:a2:5e:6c:be:a3:0f:2d:f3:27:c8:0d:38:35: 39:2a:1d:71:91:d9:f2:3a:40:ef:1b:52:7d:70:1b: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1F:83:9E:F0:ED:8A:7E:C8:C7:54:C4:CE:35:7B:0C:3E:FB:C0:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:cb:23:c4:d2:76:c0:ae:70:d3:8b:59:a0:05:bd:46:aa:78: fb:25:40:21:ef:0c:dd:7a:02:27:7f:f6:65:b8:3c:38:ca:94: 1e:f9:0c:3a:6a:57:d3:8f:05:b9:95:69:1f:66:d3:b3:0f:54: 65:84:4f:8b:ae:11:53:c8:4b:bc:2c:5c:0f:9a:ec:b1:db:00: 9f:dc:1b:0b:37:67:07:dc:fc:66:a7:dd:13:08:e6:17:e8:2d: a5:8e:43:8f:48:3b:e9:f9:44:8e:17:9e:8e:88:7b:9a:a0:93: b9:44:ff:b8:b3:f1:39:68:8e:aa:63:7e:ae:ea:87:da:84:e3: 67:b5:ed:83:3d:8a:39:2d:76:58:86:b5:ad:63:b6:2d:c9:3f: 6b:80:6f:42:7e:43:4f:c1:49:9c:e6:6a:83:1f:0a:b7:fb:11: ba:55:c0:ba:6c:8a:b2:ae:5d:1e:dd:e3:9d:5e:c8:86:ce:6a: 0c:9c:26:09:80:cd:ab:e0:31:8b:37:8c:9d:47:7e:c8:ec:c4: b9:7a:19:d8:d9:51:42:5a:2a:1e:69:ac:73:76:09:5b:3e:f9: 16:63:9d:c5:31:83:d2:98:ba:65:f8:e4:a6:86:7c:50:5a:14: b5:b6:0d:cf:fe:c4:93:fb:ed:d1:e7:0f:11:14:5a:a5:a3:53: e6:7a:4c:d2 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEv/jXASJ/W8zvY3LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNzExMjM0OVoXDTI4MDMwMTExMjM0OVowLzEtMCsGA1UEAxMk ZjRiMjNkYmMtNjMzMi00ZTRlLWFhOGUtNzNhNjA2NGY0NDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGnbm2HdAGhYJqtSIFrlLdwH+RfyRh6nC85Q cVfkmOlJjZ3r36P6ARBKkBvlOe7FzQ+hQGjqXvKKZsq6fj2XwD8D3d4uXRqoF4Tz fNQOdjCvYLkmclF/EX90CUHRS9NYm+BA4GSCzVtCWtpNSc8zLmjH3iK0TvIECNPi aVM/ctZHP64/TVR2QcqSe4iNglTePSZcCM2Vi5jvGahEJm8dYcA8WLqZ5dEJLQZH uxdvVcdY+8UcFR6g10S5WTogGeXEtn67fWgNqvYSpKRoMKidXt2QTQMLNKAYOwXa 7n9rfDpNE6JebL6jDy3zJ8gNODU5Kh1xkdnyOkDvG1J9cBs0VQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKgfg57w7Yp+yMdUxM41eww++8BQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m NGIyM2RiYy02MzMyLTRlNGUtYWE4ZS03M2E2MDY0ZjQ0MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Y0YjIzZGJjLTYzMzItNGU0ZS1h YThlLTczYTYwNjRmNDQxYi9mNGIyM2RiYy02MzMyLTRlNGUtYWE4ZS03M2E2MDY0 ZjQ0MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKO+IwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdcsjxNJ2wK5w04tZoAW9 Rqp4+yVAIe8M3XoCJ3/2Zbg8OMqUHvkMOmpX048FuZVpH2bTsw9UZYRPi64RU8hL vCxcD5rssdsAn9wbCzdnB9z8ZqfdEwjmF+gtpY5Dj0g76flEjheejoh7mqCTuUT/ uLPxOWiOqmN+ruqH2oTjZ7Xtgz2KOS12WIa1rWO2Lck/a4BvQn5DT8FJnOZqgx8K t/sRulXAumyKsq5dHt3jnV7Ihs5qDJwmCYDNq+AxizeMnUd+yOzEuXoZ2NlRQloq Hmmsc3YJWz75FmOdxTGD0pi6ZfjkpoZ8UFoUtbYNz/7Ek/vt0ecPERRapaNT5npM 0g== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:46 2025 by rpki-client