This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac.cer File: f64137c1-c8e3-4317-96e8-9ad64c7e74ac.cer (raw, json) Hash identifier: mcAgyRF+ppQutf6xfsI0CDU5VRe0dbHFDIIO7GKqXWk= Subject key identifier: C0:CE:28:8A:D5:CC:B2:1D:1A:A7:19:30:D6:37:8E:6E:C9:AB:BE:9F Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BD9D95D21250C58EDE8653100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac/f64137c1-c8e3-4317-96e8-9ad64c7e74ac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Nov 2025 23:16:04 +0000 Certificate not after: Wed 16 Feb 2028 23:16:04 +0000 Subordinate resources: AS: 16865 IP: 139.64.219.0/24 IP: 2602:814:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d9:d9:5d:21:25:0c:58:ed:e8:65:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 13 23:16:04 2025 GMT Not After : Feb 16 23:16:04 2028 GMT Subject: CN=f64137c1-c8e3-4317-96e8-9ad64c7e74ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:05:1c:2f:23:aa:ef:03:8b:ec:ad:38:59: 0e:38:ad:06:a8:79:38:e0:6f:0a:76:77:36:dd:72: 32:0b:f7:e1:cb:00:8e:73:12:84:8e:3e:b1:38:ef: a1:07:ae:0c:9f:1e:26:49:8e:2e:64:49:ac:90:75: c4:3a:83:d1:fe:d1:1e:ca:1f:31:b7:1e:0b:f8:76: 2c:8d:aa:44:17:a8:c4:b6:63:49:2c:d0:0c:47:a9: 1a:fc:51:b7:65:72:29:04:9b:fc:5b:59:3b:47:4a: 9d:46:29:c4:8a:99:d1:95:4d:a8:f3:ae:44:0d:14: 0d:0f:b6:4f:6b:52:de:5c:80:a9:62:d4:19:fd:9c: 12:b5:17:5e:b0:14:e5:cb:58:80:75:fa:ef:ac:13: ea:f7:ee:a1:72:a0:15:f8:5b:dd:b4:70:dd:b6:77: ae:1a:c3:dc:a2:fd:d8:e5:7f:7b:bb:c6:bf:ea:47: 54:1a:70:53:d9:af:5c:6d:af:01:36:f7:ad:f7:b4: ba:20:27:a7:12:c5:b8:cd:78:e8:2d:d0:8f:a4:11: 4d:79:2e:00:a1:f0:59:34:c6:05:50:7d:3b:92:35: 9f:38:15:4d:7c:7c:fb:9d:28:6d:58:e0:b8:cb:ec: 2f:82:20:56:12:34:e4:36:5b:8f:f9:d0:f7:dd:e4: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CE:28:8A:D5:CC:B2:1D:1A:A7:19:30:D6:37:8E:6E:C9:AB:BE:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac/f64137c1-c8e3-4317-96e8-9ad64c7e74ac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 139.64.219.0/24 IPv6: 2602:814:c000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16865 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a1:99:43:da:6b:d1:c4:e9:6c:b8:dc:9d:1b:7d:d7:7c:5d: 57:1d:4d:56:cb:b4:65:a4:ac:62:fb:16:83:5a:32:2e:13:0b: 91:34:9c:56:1a:8b:28:6a:c4:73:ca:ac:73:c7:16:1c:74:b7: b6:9f:98:52:7d:1f:e0:c4:19:8b:57:9f:a6:2d:38:0c:c5:7c: cf:78:76:ec:ba:27:d7:37:18:73:88:eb:a9:cc:2a:0e:6e:ca: 70:ef:69:1c:dd:38:85:dc:6d:cf:36:2f:ec:f1:12:b0:96:f0: 3e:0d:37:15:65:bc:16:a1:2d:6f:58:92:0b:5e:c5:e0:c5:92: 4b:2a:a9:35:15:67:8c:78:15:b4:9e:fd:a7:f5:e1:e1:96:69: df:48:7c:7a:4c:a9:94:ea:3b:89:77:b6:ec:71:1a:03:9e:e9: f8:0c:d0:63:6a:0d:da:4a:7f:e1:b8:b4:29:11:76:19:4d:0e: 1e:22:52:58:47:b9:2f:b1:d9:c7:19:ed:32:bd:2a:53:c4:b8: b4:51:80:08:6d:3e:9f:0d:67:1b:cb:58:d6:f4:e1:1b:9f:50: e3:fd:df:b6:cd:c1:77:12:d7:12:4e:e0:95:1d:50:2d:9a:67: b0:98:a6:5c:a1:e4:a9:49:01:7e:d3:fd:25:3c:62:70:03:c1: 83:88:94:15 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEvZ2V0hJQxY7ehlMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExMzIzMTYwNFoXDTI4MDIxNjIzMTYwNFowLzEtMCsGA1UEAxMk ZjY0MTM3YzEtYzhlMy00MzE3LTk2ZTgtOWFkNjRjN2U3NGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtsFHC8jqu8Di+ytOFkOOK0GqHk44G8Kdnc2 3XIyC/fhywCOcxKEjj6xOO+hB64Mnx4mSY4uZEmskHXEOoPR/tEeyh8xtx4L+HYs japEF6jEtmNJLNAMR6ka/FG3ZXIpBJv8W1k7R0qdRinEipnRlU2o865EDRQND7ZP a1LeXICpYtQZ/ZwStRdesBTly1iAdfrvrBPq9+6hcqAV+FvdtHDdtneuGsPcov3Y 5X97u8a/6kdUGnBT2a9cba8BNvet97S6ICenEsW4zXjoLdCPpBFNeS4AofBZNMYF UH07kjWfOBVNfHz7nShtWOC4y+wvgiBWEjTkNluP+dD33eTvkwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMDOKIrVzLIdGqcZMNY3jm7Jq76fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m NjQxMzdjMS1jOGUzLTQzMTctOTZlOC05YWQ2NGM3ZTc0YWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Y2NDEzN2MxLWM4ZTMtNDMxNy05 NmU4LTlhZDY0YzdlNzRhYy9mNjQxMzdjMS1jOGUzLTQzMTctOTZlOC05YWQ2NGM3 ZTc0YWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACLQNswDwQCAAIwCQMHBCYCCBTAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJB4TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9oZlD2mvRxOlsuNydG33XfF1X HU1Wy7RlpKxi+xaDWjIuEwuRNJxWGosoasRzyqxzxxYcdLe2n5hSfR/gxBmLV5+m LTgMxXzPeHbsuifXNxhziOupzCoObspw72kc3TiF3G3PNi/s8RKwlvA+DTcVZbwW oS1vWJILXsXgxZJLKqk1FWeMeBW0nv2n9eHhlmnfSHx6TKmU6juJd7bscRoDnun4 DNBjag3aSn/huLQpEXYZTQ4eIlJYR7kvsdnHGe0yvSpTxLi0UYAIbT6fDWcby1jW 9OEbn1Dj/d+2zcF3EtcSTuCVHVAtmmewmKZcoeSpSQF+0/0lPGJwA8GDiJQV -----END CERTIFICATE-----Generated at Fri Nov 28 06:13:39 2025 by rpki-client