This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a05c87b6-edd9-4af4-a12a-d32c14a454d2.cer File: a05c87b6-edd9-4af4-a12a-d32c14a454d2.cer (raw, json) Hash identifier: nrtDbvUmnHOtp+bfp3pJgkaVwNoz91nu9uMAsihY7m4= Subject key identifier: 32:EC:EC:59:41:EB:CD:AA:15:3D:B9:83:61:9B:D6:EA:83:98:07:2A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBA3BC00C7FBAAC2E47354120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a05c87b6-edd9-4af4-a12a-d32c14a454d2/a05c87b6-edd9-4af4-a12a-d32c14a454d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a05c87b6-edd9-4af4-a12a-d32c14a454d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Nov 2025 15:28:27 +0000 Certificate not after: Sat 05 Feb 2028 15:28:27 +0000 Subordinate resources: IP: 23.146.116.0/24 IP: 2602:f53f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:3b:c0:0c:7f:ba:ac:2e:47:35:41:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 2 15:28:27 2025 GMT Not After : Feb 5 15:28:27 2028 GMT Subject: CN=a05c87b6-edd9-4af4-a12a-d32c14a454d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:49:44:88:0c:0f:e9:8d:89:d5:a3:86:7d: ea:d0:95:e5:95:7b:32:09:d5:d9:e1:f8:2e:01:4b: 7f:21:47:2f:8b:5f:da:9c:00:99:fc:8a:00:78:d4: 5f:1d:32:00:50:22:75:50:89:77:10:1d:b5:90:90: d4:8f:ec:32:99:6b:b4:66:9b:a0:a4:9f:af:2b:bc: dd:1d:82:9e:cd:69:69:9b:01:3e:51:df:8e:7e:1e: cf:a4:e7:c7:78:3c:60:5b:8e:1d:5c:4a:96:18:9b: 44:58:92:84:7d:bc:a9:b6:e1:d6:69:29:d2:2a:bb: 37:9c:59:bf:3a:78:81:f1:76:60:16:15:3f:84:c2: c0:1b:a4:65:b1:da:bc:b5:ab:a1:f9:9d:a3:38:37: af:98:88:31:05:97:18:ff:77:96:2e:2e:5c:21:2f: c2:f1:fa:8a:09:13:b6:93:21:23:5a:3a:79:f7:e8: 83:12:b5:f2:54:9a:e3:f8:7c:cf:f5:43:c7:2b:88: c2:0e:c5:8c:52:8d:3d:5d:bc:f1:53:aa:b2:23:3a: d2:55:5d:a9:61:4d:5a:7b:b0:dc:97:82:2a:86:9e: a0:44:2c:dc:27:6c:b2:38:e5:ff:ce:47:7c:f6:33: c3:b0:ec:e3:d3:fc:b4:94:82:1b:d9:2d:dd:74:64: ba:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EC:EC:59:41:EB:CD:AA:15:3D:B9:83:61:9B:D6:EA:83:98:07:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a05c87b6-edd9-4af4-a12a-d32c14a454d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a05c87b6-edd9-4af4-a12a-d32c14a454d2/a05c87b6-edd9-4af4-a12a-d32c14a454d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.146.116.0/24 IPv6: 2602:f53f::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:09:46:ee:24:e7:3a:dc:5f:e5:48:6d:b5:c4:48:24:79:d9: a6:b1:ff:6d:c8:14:83:9a:ef:8a:34:fc:12:0d:e0:e5:a1:9e: 52:79:e2:c7:49:7d:24:d1:a6:3c:dd:a0:b6:c5:fc:5e:2f:a6: c4:c5:27:b8:c9:c6:1e:36:26:7d:a6:c8:b8:c8:34:0f:2d:2e: 58:d1:6f:ca:04:bb:c5:12:04:ca:7b:70:5e:33:3e:08:4f:29: ee:50:4f:34:a1:0e:89:6c:21:40:30:6d:05:4f:03:00:ec:9b: b3:06:a2:d5:aa:1f:32:b0:0a:91:96:4b:b8:7b:2a:79:9d:c4: 4e:07:bb:91:43:4e:9a:bf:30:a2:ee:7e:b0:64:44:be:e0:7a: a4:b8:86:23:f8:f4:62:bc:f4:59:78:10:7d:b9:b7:22:fc:dc: 9e:61:28:c8:c9:66:0f:a4:d7:5d:aa:40:12:ba:c7:db:4e:7a: 8c:11:36:ed:cc:e2:e2:0a:d0:dc:70:35:3b:65:3c:79:83:dd: d5:5b:8d:58:4d:be:d1:9e:0e:f0:49:31:d5:f5:95:ab:06:97: 50:68:c9:ae:73:c3:75:f6:ef:41:0e:6e:d5:7f:8c:bf:56:ab: 25:a5:63:2f:a9:13:66:ac:04:cf:32:d4:02:9f:18:0f:26:5b: 16:4b:24:ff -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEu6O8AMf7qsLkc1QSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMjE1MjgyN1oXDTI4MDIwNTE1MjgyN1owLzEtMCsGA1UEAxMk YTA1Yzg3YjYtZWRkOS00YWY0LWExMmEtZDMyYzE0YTQ1NGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgpJRIgMD+mNidWjhn3q0JXllXsyCdXZ4fgu AUt/IUcvi1/anACZ/IoAeNRfHTIAUCJ1UIl3EB21kJDUj+wymWu0ZpugpJ+vK7zd HYKezWlpmwE+Ud+Ofh7PpOfHeDxgW44dXEqWGJtEWJKEfbyptuHWaSnSKrs3nFm/ OniB8XZgFhU/hMLAG6Rlsdq8tauh+Z2jODevmIgxBZcY/3eWLi5cIS/C8fqKCRO2 kyEjWjp59+iDErXyVJrj+HzP9UPHK4jCDsWMUo09XbzxU6qyIzrSVV2pYU1ae7Dc l4Iqhp6gRCzcJ2yyOOX/zkd89jPDsOzj0/y0lIIb2S3ddGS6AwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDLs7FlB682qFT25g2Gb1uqDmAcqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h MDVjODdiNi1lZGQ5LTRhZjQtYTEyYS1kMzJjMTRhNDU0ZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2EwNWM4N2I2LWVkZDktNGFmNC1h MTJhLWQzMmMxNGE0NTRkMi9hMDVjODdiNi1lZGQ5LTRhZjQtYTEyYS1kMzJjMTRh NDU0ZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXknQwDgQCAAIwCAMGACYC9T8AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADEJRu4k5zrcX+VIbbXESCR52aax/23IFIOa74o0/BIN4OWhnlJ54sdJfSTRpjzd oLbF/F4vpsTFJ7jJxh42Jn2myLjINA8tLljRb8oEu8USBMp7cF4zPghPKe5QTzSh DolsIUAwbQVPAwDsm7MGotWqHzKwCpGWS7h7KnmdxE4Hu5FDTpq/MKLufrBkRL7g eqS4hiP49GK89Fl4EH25tyL83J5hKMjJZg+k112qQBK6x9tOeowRNu3M4uIK0Nxw NTtlPHmD3dVbjVhNvtGeDvBJMdX1lasGl1Boya5zw3X270EObtV/jL9WqyWlYy+p E2asBM8y1AKfGA8mWxZLJP8= -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:01 2025 by rpki-client