This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c.cer File: 56964c1e-1743-472d-943f-01fba0dace8c.cer (raw, json) Hash identifier: KELpyqAB45JDgIiUQQPi5CJKIGQUnVt4zlXjsTSQlzg= Subject key identifier: 34:C1:BA:95:53:5E:D5:B5:78:B2:C6:DE:20:61:14:67:24:27:1E:6E Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C13BCE8893C4B6D03D9078700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c/56964c1e-1743-472d-943f-01fba0dace8c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Dec 2025 16:55:37 +0000 Certificate not after: Wed 08 Mar 2028 16:55:37 +0000 Subordinate resources: AS: 399712 IP: 192.190.230.0/24 IP: 206.197.197.0/24 IP: 2602:f4d7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:bc:e8:89:3c:4b:6d:03:d9:07:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 4 16:55:37 2025 GMT Not After : Mar 8 16:55:37 2028 GMT Subject: CN=56964c1e-1743-472d-943f-01fba0dace8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7c:b0:c6:9f:31:42:e1:70:3f:ee:34:bb:dc: ce:e9:f3:6e:46:13:28:f3:3e:6a:cd:ef:da:5e:75: 7b:d7:94:62:1c:15:88:0c:3a:52:ef:2d:94:2d:99: ab:02:7a:7f:7f:e1:46:cd:44:a8:52:77:0f:a2:d0: 52:87:24:3f:52:5d:4c:b5:7f:f7:c3:04:d8:1e:53: 09:45:88:19:82:b3:84:10:21:11:20:a1:e0:0d:8b: 07:52:78:82:f2:15:d7:c2:c4:ee:72:22:19:e0:80: 2b:31:e5:84:e8:2e:07:25:ea:85:83:41:da:56:3b: 8c:97:19:62:7c:b6:9e:ee:9c:50:b5:33:59:24:9d: 44:70:7f:2d:35:c7:93:2c:6c:e7:12:44:43:eb:29: 6e:d6:e1:b9:30:17:5a:b3:9d:99:27:30:95:df:db: 7a:5e:77:15:bd:7e:ce:68:22:6f:51:d5:0a:e7:ea: e0:56:ad:53:e7:69:a6:fd:65:a0:00:d0:03:97:f8: e6:91:3e:e5:37:c0:33:09:95:e3:14:d1:a6:8b:0d: 32:72:d5:d2:f6:4c:08:43:d0:5b:86:6c:1d:44:5c: 76:a3:d8:93:62:f7:2b:8d:08:27:62:88:4f:f3:0f: 46:0f:8e:72:95:e9:8f:dd:94:8b:0a:42:31:00:78: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C1:BA:95:53:5E:D5:B5:78:B2:C6:DE:20:61:14:67:24:27:1E:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c/56964c1e-1743-472d-943f-01fba0dace8c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 192.190.230.0/24 206.197.197.0/24 IPv6: 2602:f4d7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399712 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:87:9a:97:bd:39:e1:5e:d8:56:83:55:f5:60:f6:9a:19:c3: 6c:e5:3b:c1:74:08:41:20:24:07:29:94:be:e6:65:44:f0:20: c3:f8:1f:a3:69:18:f6:35:79:4a:fe:d9:87:73:36:f8:89:c1: 15:40:97:23:f8:56:4c:e6:6b:6c:5a:fb:75:c9:9b:d4:09:d1: 39:42:23:c6:89:96:52:96:62:40:3b:05:63:b2:83:8e:f8:ed: fb:00:c9:d4:9c:5e:3e:09:c1:ce:61:22:39:c8:15:dd:63:c1: 34:0a:55:e8:fe:0b:95:07:1c:4f:a8:22:71:bf:ff:8c:eb:c5: 39:a4:07:a5:66:1e:94:46:cb:21:f2:c8:59:87:74:9f:39:d1: 56:24:68:0a:5b:a1:05:99:0e:2e:b0:d9:f5:d1:e4:9b:90:a8: 67:a8:7a:96:7d:03:30:61:b4:12:5b:98:65:c9:4c:27:69:27: cb:a6:ab:37:bc:c8:f5:28:16:0b:8b:2c:3a:08:a4:87:3f:83: 85:87:47:af:b9:4a:f6:04:a0:49:b2:d3:09:06:06:0f:21:9b: 38:05:0d:6d:49:31:d2:80:4b:3f:5c:44:76:83:61:55:fb:e7: c4:09:e8:32:d7:a6:09:7e:b5:38:4b:3b:f5:57:69:5b:e8:5b: 39:78:a1:b8 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEwTvOiJPEttA9kHhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwNDE2NTUzN1oXDTI4MDMwODE2NTUzN1owLzEtMCsGA1UEAxMk NTY5NjRjMWUtMTc0My00NzJkLTk0M2YtMDFmYmEwZGFjZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3ywxp8xQuFwP+40u9zO6fNuRhMo8z5qze/a XnV715RiHBWIDDpS7y2ULZmrAnp/f+FGzUSoUncPotBShyQ/Ul1MtX/3wwTYHlMJ RYgZgrOEECERIKHgDYsHUniC8hXXwsTuciIZ4IArMeWE6C4HJeqFg0HaVjuMlxli fLae7pxQtTNZJJ1EcH8tNceTLGznEkRD6ylu1uG5MBdas52ZJzCV39t6XncVvX7O aCJvUdUK5+rgVq1T52mm/WWgANADl/jmkT7lN8AzCZXjFNGmiw0yctXS9kwIQ9Bb hmwdRFx2o9iTYvcrjQgnYohP8w9GD45ylemP3ZSLCkIxAHiUJQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFDTBupVTXtW1eLLG3iBhFGckJx5uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 Njk2NGMxZS0xNzQzLTQ3MmQtOTQzZi0wMWZiYTBkYWNlOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzU2OTY0YzFlLTE3NDMtNDcyZC05 NDNmLTAxZmJhMGRhY2U4Yy81Njk2NGMxZS0xNzQzLTQ3MmQtOTQzZi0wMWZiYTBk YWNlOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBADAvuYDBADOxcUwDgQCAAIwCAMGBCYC9NcAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYZYDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFh5qXvTnhXthWg1X1 YPaaGcNs5TvBdAhBICQHKZS+5mVE8CDD+B+jaRj2NXlK/tmHczb4icEVQJcj+FZM 5mtsWvt1yZvUCdE5QiPGiZZSlmJAOwVjsoOO+O37AMnUnF4+CcHOYSI5yBXdY8E0 ClXo/guVBxxPqCJxv/+M68U5pAelZh6URssh8shZh3SfOdFWJGgKW6EFmQ4usNn1 0eSbkKhnqHqWfQMwYbQSW5hlyUwnaSfLpqs3vMj1KBYLiyw6CKSHP4OFh0evuUr2 BKBJstMJBgYPIZs4BQ1tSTHSgEs/XER2g2FV++fECegy16YJfrU4Szv1V2lb6Fs5 eKG4 -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:09 2025 by rpki-client