This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer File: f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer (raw, json) Hash identifier: boMLu3+cKdPodUlctUaLmXg5aNCBMVWvE8KohLmaFWk= Subject key identifier: 3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC5499310B16AB7C4237C3780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Nov 2025 14:30:11 +0000 Certificate not after: Wed 09 Feb 2028 14:30:11 +0000 Subordinate resources: AS: 393462 IP: 192.35.252.0/24 IP: 2620:129:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:49:93:10:b1:6a:b7:c4:23:7c:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 6 14:30:11 2025 GMT Not After : Feb 9 14:30:11 2028 GMT Subject: CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:24:52:d9:b8:b0:82:5e:b1:db:92:74:80: 61:8f:a8:b9:a5:13:16:c1:8b:86:74:fa:c9:06:51: 37:21:45:68:9f:5d:ca:3a:ed:9c:36:ee:66:61:15: 08:a1:48:e8:1d:07:ac:92:cf:db:0f:55:93:58:09: f0:ec:28:25:20:38:20:f2:f1:41:e2:cb:66:91:09: 18:99:57:32:06:72:e4:dc:c0:4b:ef:86:02:73:cc: 3e:29:55:3d:d6:e0:7d:7c:a7:93:e4:04:6e:6a:57: 2f:a4:06:21:7a:d6:e9:09:6d:18:83:90:c6:15:f5: 6e:c1:1f:33:a3:5d:c1:ed:fc:0d:78:37:3c:63:18: 9c:f6:32:a3:82:2f:ad:17:f4:62:5c:ef:87:7c:1c: 4e:1d:4d:3b:d9:f1:c7:98:45:99:f4:c7:bf:6a:08: 68:50:ce:c6:43:04:d6:a5:aa:74:ed:25:f0:c4:53: 6b:a5:69:80:5e:df:27:1e:d1:0b:04:96:66:95:8d: 85:1d:6c:d1:ec:82:01:3d:48:69:d2:e6:ae:b8:c6: 9d:76:e4:d5:5f:dc:dd:ff:ae:90:1f:a7:12:7c:9f: d9:dd:36:ac:0d:f3:ae:ba:de:8a:56:3c:3e:d5:ec: 7f:4c:48:69:cf:53:dc:f3:bb:47:42:2f:98:3d:d2: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 192.35.252.0/24 IPv6: 2620:129:f000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393462 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f7:a8:7a:24:b5:07:30:95:63:fc:25:90:63:d0:ad:79:03: 8a:c4:61:90:ec:d6:9d:66:16:2c:46:3d:ef:09:14:30:93:a5: 45:08:d1:9c:2c:fb:69:2b:e4:15:d4:bb:f5:2f:eb:27:e3:0d: a9:fe:c7:21:54:22:ff:54:dc:a6:ad:6d:b1:a1:b9:35:51:d5: 91:fb:65:ba:89:86:fb:4d:ce:07:c4:84:d5:69:ec:f9:9d:51: 1e:9d:d6:21:b5:48:22:42:e5:6a:ed:41:e9:94:57:0d:a1:ba: 58:c2:6e:ad:32:c8:75:9c:bf:fa:fc:c2:de:e4:5f:02:7b:79: f4:8a:61:9c:dc:f7:07:03:a5:74:9b:55:65:ce:bc:2b:ea:91: d0:35:b6:f9:d2:70:90:12:a6:19:d3:be:70:f9:db:38:1a:31: ec:7e:1e:96:e4:1e:54:03:7b:2f:75:3a:27:f5:36:b5:f3:f0: ec:3a:a1:f5:7d:72:75:f7:90:87:5b:fa:dd:87:0d:b9:bc:51: e3:cb:3a:c0:1d:ca:d2:bc:f4:d2:26:36:52:2e:69:f4:25:6c: c6:ea:55:55:29:95:96:5f:c8:43:27:95:d1:29:a1:f6:f8:5b: 71:10:bc:e0:af:87:8c:f2:5e:46:2f:42:13:b2:30:0e:04:3f: 97:a4:43:53 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEvFSZMQsWq3xCN8N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNjE0MzAxMVoXDTI4MDIwOTE0MzAxMVowLzEtMCsGA1UEAxMk ZjczMjJiNWYtMDU0MS00Nzg0LTllNWUtYzRlOGRkNzI4ZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsgkUtm4sIJesduSdIBhj6i5pRMWwYuGdPrJ BlE3IUVon13KOu2cNu5mYRUIoUjoHQesks/bD1WTWAnw7CglIDgg8vFB4stmkQkY mVcyBnLk3MBL74YCc8w+KVU91uB9fKeT5ARualcvpAYhetbpCW0Yg5DGFfVuwR8z o13B7fwNeDc8Yxic9jKjgi+tF/RiXO+HfBxOHU072fHHmEWZ9Me/aghoUM7GQwTW pap07SXwxFNrpWmAXt8nHtELBJZmlY2FHWzR7IIBPUhp0uauuMadduTVX9zd/66Q H6cSfJ/Z3TasDfOuut6KVjw+1ex/TEhpz1Pc87tHQi+YPdLMMQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFDtyGsVUmvZwwIH9WDjtWU5IRqPVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m NzMyMmI1Zi0wNTQxLTQ3ODQtOWU1ZS1jNGU4ZGQ3MjhlNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Y3MzIyYjVmLTA1NDEtNDc4NC05 ZTVlLWM0ZThkZDcyOGU1OS9mNzMyMmI1Zi0wNTQxLTQ3ODQtOWU1ZS1jNGU4ZGQ3 MjhlNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAI/wwDwQCAAIwCQMHBCYgASnwADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGAPYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPPeoeiS1BzCVY/wlkGPQrXkD isRhkOzWnWYWLEY97wkUMJOlRQjRnCz7aSvkFdS79S/rJ+MNqf7HIVQi/1Tcpq1t saG5NVHVkftluomG+03OB8SE1Wns+Z1RHp3WIbVIIkLlau1B6ZRXDaG6WMJurTLI dZy/+vzC3uRfAnt59IphnNz3BwOldJtVZc68K+qR0DW2+dJwkBKmGdO+cPnbOBox 7H4eluQeVAN7L3U6J/U2tfPw7Dqh9X1ydfeQh1v63YcNubxR48s6wB3K0rz00iY2 Ui5p9CVsxupVVSmVll/IQyeV0Smh9vhbcRC84K+HjPJeRi9CE7IwDgQ/l6RDUw== -----END CERTIFICATE-----Generated at Fri Nov 28 06:11:44 2025 by rpki-client