This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e.cer File: 86f1a799-fc40-4fe1-b430-8eb80d44fe2e.cer (raw, json) Hash identifier: 6YNX8E4IaN1/cMoDGlRbVLLJYw1yCzm4D2xs91UPSGQ= Subject key identifier: E1:B1:0A:D3:18:AE:FB:3F:69:4E:02:7D:71:BC:23:B5:DB:A9:A0:80 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C1BBE8B79855C896B17F99980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/86f1a799-fc40-4fe1-b430-8eb80d44fe2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Dec 2025 13:45:23 +0000 Certificate not after: Sat 11 Mar 2028 13:45:23 +0000 Subordinate resources: IP: 192.152.127.0/24 IP: 204.235.144.0/20 IP: 204.235.162.0 -- 204.235.167.255 IP: 204.235.174.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1b:be:8b:79:85:5c:89:6b:17:f9:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 7 13:45:23 2025 GMT Not After : Mar 11 13:45:23 2028 GMT Subject: CN=86f1a799-fc40-4fe1-b430-8eb80d44fe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:34:ad:18:70:43:0a:da:ee:3d:8b:be:0e: 89:3f:d5:3d:a7:67:e6:e8:48:2c:60:e4:e2:1f:12: 95:67:95:7a:17:d6:f1:ad:eb:ad:4a:c5:a2:57:21: cd:d2:83:6e:80:fd:df:5b:6f:fc:c0:21:46:79:14: 65:80:c4:0c:38:71:19:d5:65:98:0c:b1:56:57:26: 5a:b3:2b:d4:04:53:42:3b:c4:45:0d:61:95:cb:eb: 75:4c:e6:ac:69:f3:f3:ac:48:68:45:21:9e:15:88: 1f:b0:b4:b9:83:7d:ee:fe:6d:76:5c:7d:0f:ba:6c: 59:d8:07:1c:02:2e:65:93:13:d4:2b:7d:90:5b:cc: bd:37:dc:bf:cc:98:4d:b2:ce:fc:6f:f2:d6:17:f3: e4:a0:44:c3:79:10:ed:88:05:72:f3:b6:d5:e6:80: cd:2d:50:25:f1:5c:86:0c:10:32:f0:59:56:df:43: 96:7c:bc:9e:a7:47:9e:bb:81:cc:49:62:67:a3:ea: e6:07:f7:0e:88:4a:19:20:27:ad:11:4d:14:b1:9c: 80:c3:c2:00:22:61:21:0a:fe:d8:ce:0c:4e:e3:53: ea:95:69:2b:a1:f9:47:e8:6f:6b:bd:28:b5:cf:f1: cf:6e:f3:8a:77:02:39:51:c6:40:e0:c6:7b:d1:71: b8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B1:0A:D3:18:AE:FB:3F:69:4E:02:7D:71:BC:23:B5:DB:A9:A0:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/86f1a799-fc40-4fe1-b430-8eb80d44fe2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.152.127.0/24 204.235.144.0/20 204.235.162.0-204.235.167.255 204.235.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:bf:a3:d2:07:ff:79:6b:6b:55:41:7a:6e:9f:78:8e:d9:da: 61:57:0d:f2:5e:f9:64:00:87:36:c1:a8:dd:a8:9d:30:e7:37: e3:2c:56:44:e0:5a:d6:1f:d0:78:82:7f:57:89:41:58:e6:fe: 41:da:be:ca:e8:62:66:af:5d:2d:7f:82:de:29:39:4c:06:9f: d8:ee:0f:d6:82:83:17:a7:63:67:0e:30:b9:77:2c:a1:83:10: ce:80:1a:0e:59:6c:89:48:c1:08:f4:ef:65:51:a9:f4:7d:7a: 57:c9:bc:b9:22:13:06:21:6c:5a:12:47:3a:c7:35:84:54:14: ec:92:11:71:90:57:67:27:02:4d:77:dd:51:bf:c3:4f:0d:44: b4:b9:b6:ad:62:13:fc:3a:b5:5b:d0:6f:9c:34:71:17:86:6c: a6:d1:5d:52:cb:40:62:1e:7e:4a:72:17:fa:8f:25:8c:e8:c6: a1:1c:ae:c4:59:e5:bc:97:01:8e:b1:9a:0c:17:ab:86:d6:7e: a4:ad:3b:aa:5b:b4:57:8c:dd:4f:d7:4b:3d:76:4b:40:a8:f0: eb:7e:3c:ca:2b:98:6d:e7:9d:97:0b:ce:bf:97:27:f3:18:db: 4a:7b:dc:e0:1c:c5:38:c0:75:af:2e:0d:4b:2a:b2:c8:7f:49: 77:53:41:77 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEwbvot5hVyJaxf5mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTIwNzEzNDUyM1oXDTI4MDMxMTEzNDUyM1owLzEtMCsGA1UEAxMk ODZmMWE3OTktZmM0MC00ZmUxLWI0MzAtOGViODBkNDRmZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskI0rRhwQwra7j2Lvg6JP9U9p2fm6EgsYOTi HxKVZ5V6F9bxreutSsWiVyHN0oNugP3fW2/8wCFGeRRlgMQMOHEZ1WWYDLFWVyZa syvUBFNCO8RFDWGVy+t1TOasafPzrEhoRSGeFYgfsLS5g33u/m12XH0PumxZ2Acc Ai5lkxPUK32QW8y9N9y/zJhNss78b/LWF/PkoETDeRDtiAVy87bV5oDNLVAl8VyG DBAy8FlW30OWfLyep0eeu4HMSWJno+rmB/cOiEoZICetEU0UsZyAw8IAImEhCv7Y zgxO41PqlWkroflH6G9rvSi1z/HPbvOKdwI5UcZA4MZ70XG4YwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFOGxCtMYrvs/aU4CfXG8I7XbqaCAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 NmYxYTc5OS1mYzQwLTRmZTEtYjQzMC04ZWI4MGQ0NGZlMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzg2ZjFhNzk5LWZjNDAtNGZlMS1i NDMwLThlYjgwZDQ0ZmUyZS84NmYxYTc5OS1mYzQwLTRmZTEtYjQzMC04ZWI4MGQ0 NGZlMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADBADAmH8DBATM65AwDAMEAczrogMEA8zroAMEAczr rjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBdv6PSB/95a2tVQXpun3iO2dphVw3yXvlkAIc2wajdqJ0w5zfj LFZE4FrWH9B4gn9XiUFY5v5B2r7K6GJmr10tf4LeKTlMBp/Y7g/WgoMXp2NnDjC5 dyyhgxDOgBoOWWyJSMEI9O9lUan0fXpXyby5IhMGIWxaEkc6xzWEVBTskhFxkFdn JwJNd91Rv8NPDUS0ubatYhP8OrVb0G+cNHEXhmym0V1Sy0BiHn5Kchf6jyWM6Mah HK7EWeW8lwGOsZoMF6uG1n6krTuqW7RXjN1P10s9dktAqPDrfjzKK5ht552XC86/ lyfzGNtKe9zgHMU4wHWvLg1LKrLIf0l3U0F3 -----END CERTIFICATE-----Generated at Thu Dec 18 07:07:28 2025 by rpki-client