This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98731bc7-47ba-4560-9dce-96960427b448.cer File: 98731bc7-47ba-4560-9dce-96960427b448.cer (raw, json) Hash identifier: 18SjUh6Zg2ZC0vJwVkiyy1/3Y6OFxwOG6u7AVc1idc0= Subject key identifier: 49:29:A6:38:2B:36:17:27:6A:4E:21:89:9E:04:BA:F8:90:BE:D4:93 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C117298797BE598E6E83A2200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98731bc7-47ba-4560-9dce-96960427b448/98731bc7-47ba-4560-9dce-96960427b448.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98731bc7-47ba-4560-9dce-96960427b448/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Dec 2025 21:14:17 +0000 Certificate not after: Tue 07 Mar 2028 21:14:17 +0000 Subordinate resources: AS: 401920 IP: 170.39.16.0/22 IP: 2604:1e60::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:11:72:98:79:7b:e5:98:e6:e8:3a:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 3 21:14:17 2025 GMT Not After : Mar 7 21:14:17 2028 GMT Subject: CN=98731bc7-47ba-4560-9dce-96960427b448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5f:c0:50:8d:a3:bd:14:5b:94:95:e5:9a:52: b6:8b:17:a1:bf:b5:0f:b9:14:31:5d:3c:80:59:d2: 45:01:63:6d:69:b6:34:4e:95:64:75:14:a6:a5:c5: 56:f0:f5:14:bf:22:e9:7a:1b:e7:8a:a0:f2:d0:4e: 1a:ab:00:2b:c5:06:d1:7c:2d:d6:ad:fd:89:e9:8a: 97:4b:63:46:43:c9:e3:a5:06:39:b7:3b:1c:a3:f9: 47:29:63:6b:b7:c9:b4:8c:9b:ec:f4:04:b5:b8:e7: 13:32:cc:a9:84:3b:95:dd:a5:23:75:e4:bd:05:6a: 07:99:4c:12:19:4e:6b:3e:60:07:ea:ee:31:eb:6d: ad:64:f8:23:3e:1a:c6:12:33:19:f8:e4:0f:fe:51: 7e:36:23:0a:41:cf:b7:13:ef:66:9c:5a:b3:9a:ad: ea:d6:46:bb:c5:ac:ac:07:8d:d3:6a:44:3a:95:fc: b0:65:8c:26:84:bb:db:35:2c:30:85:05:43:0f:69: c9:20:c9:64:ef:54:1b:64:2d:34:74:4d:85:f0:7a: fb:85:c5:90:fb:2b:77:82:d4:2a:fd:b8:fe:a4:76: ed:0e:1d:0c:b9:f7:b2:d4:de:77:73:f1:68:62:39: 56:0e:d8:bb:ef:86:32:4b:72:c6:56:f4:ec:56:e9: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:29:A6:38:2B:36:17:27:6A:4E:21:89:9E:04:BA:F8:90:BE:D4:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98731bc7-47ba-4560-9dce-96960427b448/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98731bc7-47ba-4560-9dce-96960427b448/98731bc7-47ba-4560-9dce-96960427b448.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 170.39.16.0/22 IPv6: 2604:1e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401920 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d4:64:a1:92:16:01:be:47:e2:3b:36:a2:8a:7c:14:a5:28: c0:70:53:84:fe:08:ae:68:53:d4:fc:f0:6d:83:c9:bc:1a:56: e5:ca:f4:fa:74:0f:11:e4:57:02:4d:a5:8a:dd:0b:6e:49:19: 8f:d8:25:db:d2:c2:9b:a3:88:d7:76:ad:4c:d2:60:d3:c6:be: 5f:d7:fc:aa:5f:0a:3e:45:1f:c6:11:5b:d2:19:97:68:35:e0: 7b:42:38:52:fe:63:d0:57:cc:36:36:52:25:1f:38:18:d4:67: 3c:12:17:5a:fd:60:1f:67:ac:b1:bf:92:5f:a8:e5:a0:e4:49: ad:2f:5c:06:e6:94:25:81:dd:36:6f:48:a6:76:df:51:97:c0: 98:5e:7a:12:b2:77:4f:28:af:7b:5a:29:b7:64:08:b9:a6:5e: ac:66:72:3f:51:6d:03:c3:8c:af:7f:10:65:e0:72:59:84:10: de:2e:f8:ea:ba:5a:a0:15:99:10:8f:b6:38:e5:1f:c5:a0:e2: 07:c0:b6:3c:38:89:12:ac:32:44:4d:88:50:7b:4e:64:b0:17: 10:39:ad:22:bb:1c:7b:3c:d4:72:9d:c9:ec:77:6a:b0:6f:29: 60:e8:aa:43:2b:09:76:bc:ea:8f:31:48:a0:f4:82:70:e8:02: 40:95:d8:30 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEwRcph5e+WY5ug6IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwMzIxMTQxN1oXDTI4MDMwNzIxMTQxN1owLzEtMCsGA1UEAxMk OTg3MzFiYzctNDdiYS00NTYwLTlkY2UtOTY5NjA0MjdiNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1/AUI2jvRRblJXlmlK2ixehv7UPuRQxXTyA WdJFAWNtabY0TpVkdRSmpcVW8PUUvyLpehvniqDy0E4aqwArxQbRfC3Wrf2J6YqX S2NGQ8njpQY5tzsco/lHKWNrt8m0jJvs9AS1uOcTMsyphDuV3aUjdeS9BWoHmUwS GU5rPmAH6u4x622tZPgjPhrGEjMZ+OQP/lF+NiMKQc+3E+9mnFqzmq3q1ka7xays B43TakQ6lfywZYwmhLvbNSwwhQVDD2nJIMlk71QbZC00dE2F8Hr7hcWQ+yt3gtQq /bj+pHbtDh0Mufey1N53c/FoYjlWDti774YyS3LGVvTsVunpLwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEkppjgrNhcnak4hiZ4EuviQvtSTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 ODczMWJjNy00N2JhLTQ1NjAtOWRjZS05Njk2MDQyN2I0NDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzk4NzMxYmM3LTQ3YmEtNDU2MC05 ZGNlLTk2OTYwNDI3YjQ0OC85ODczMWJjNy00N2JhLTQ1NjAtOWRjZS05Njk2MDQy N2I0NDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKqJxAwDQQCAAIwBwMFACYEHmAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiIAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA7UZKGSFgG+R+I7NqKKfBSlKMBw U4T+CK5oU9T88G2DybwaVuXK9Pp0DxHkVwJNpYrdC25JGY/YJdvSwpujiNd2rUzS YNPGvl/X/KpfCj5FH8YRW9IZl2g14HtCOFL+Y9BXzDY2UiUfOBjUZzwSF1r9YB9n rLG/kl+o5aDkSa0vXAbmlCWB3TZvSKZ231GXwJheehKyd08or3taKbdkCLmmXqxm cj9RbQPDjK9/EGXgclmEEN4u+Oq6WqAVmRCPtjjlH8Wg4gfAtjw4iRKsMkRNiFB7 TmSwFxA5rSK7HHs81HKdyex3arBvKWDoqkMrCXa86o8xSKD0gnDoAkCV2DA= -----END CERTIFICATE-----Generated at Sat Dec 6 16:35:45 2025 by rpki-client