This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer File: db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer (raw, json) Hash identifier: av6FA7o8kuq3/A+illn8+/rrVGHCi4a9u9wtCTXVq0k= Subject key identifier: 6E:3B:85:52:29:A3:ED:24:2C:27:6C:71:CF:7C:3D:E5:2A:93:EE:49 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C0E56770C8DBD439827AF5200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Dec 2025 18:30:10 +0000 Certificate not after: Mon 06 Mar 2028 18:30:10 +0000 Subordinate resources: IP: 24.235.4.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0e:56:77:0c:8d:bd:43:98:27:af:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 2 18:30:10 2025 GMT Not After : Mar 6 18:30:10 2028 GMT Subject: CN=db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:40:31:45:d5:a0:46:8d:27:06:53:0c:e6: 27:e5:22:10:bb:eb:a7:39:df:05:78:46:32:57:8b: 2e:81:93:22:14:4e:11:a2:fc:26:73:b8:c9:48:9e: 9b:3f:09:35:25:0b:9d:39:31:89:f8:f1:3d:6a:9d: ff:15:a8:62:54:a5:fc:28:3c:e4:4b:76:59:bb:2a: f9:99:75:de:da:a7:59:59:ae:9a:6a:ae:9b:f1:da: 84:31:e3:ea:52:f3:3e:60:c4:1a:60:8d:bd:d5:a9: 70:04:e4:49:82:c4:41:77:44:da:7f:33:7e:98:39: 83:37:bd:b8:83:74:a7:cc:d4:d6:d1:f0:7c:ac:36: e9:da:aa:8f:cd:12:8d:53:e7:af:5b:ad:f2:12:7a: 65:28:c6:75:e1:a6:56:18:82:84:40:9e:12:03:02: bb:14:05:30:78:d3:95:d8:f7:ea:59:26:f9:9a:c9: ba:29:21:01:00:b1:3a:93:fd:57:f3:d8:9a:4d:3c: 94:c0:a5:28:55:e9:0b:4f:1f:36:fe:b1:8e:80:00: 2a:2c:bf:c2:db:67:10:95:f4:64:dd:cf:7e:3a:35: 4c:c7:62:75:25:2e:6e:65:9f:63:69:79:e6:25:df: aa:45:d4:6f:cd:61:dc:56:0c:1e:a7:52:8c:43:a4: 47:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3B:85:52:29:A3:ED:24:2C:27:6C:71:CF:7C:3D:E5:2A:93:EE:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 24.235.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8f:2f:3c:80:e3:55:19:50:f2:8f:12:47:3d:1d:47:26:81: 5e:d4:85:3b:87:78:9c:0e:11:32:a5:fc:a0:42:92:e2:e5:49: 28:6e:cb:ca:3b:b7:53:7c:b9:ca:65:cc:73:2e:c8:ec:ef:fd: a9:6a:56:df:06:d3:ed:2f:ac:c6:fd:56:c7:d9:c7:45:6b:37: 80:82:38:74:c2:05:10:cd:37:2e:b3:07:a5:95:67:e2:33:5b: dc:b0:ab:fc:af:9e:1c:2d:e0:39:ba:22:e8:d1:9a:56:f4:84: 6b:09:0a:45:88:63:6c:9e:09:3e:64:92:0c:7a:0a:82:81:29: be:81:a8:f7:72:a0:4e:d4:50:ab:29:a8:1a:1f:8d:cd:fe:2b: e7:bf:49:0c:42:8c:18:63:1a:80:99:a9:91:1f:2f:25:b9:58: bd:75:45:fd:a3:3c:ba:a7:98:34:a7:55:bb:6e:f2:c4:9c:57: 93:2f:cb:e8:d5:46:c1:36:90:e4:2c:3f:11:b4:2f:6a:52:d8: 0e:89:8e:c4:19:a7:a1:29:86:20:c4:7a:77:cd:c5:ee:c4:4e: 8c:f4:e5:6b:c8:90:bf:55:93:24:07:c0:08:44:f0:2f:98:27: 3d:54:96:c4:52:02:a5:fc:1d:ba:3d:dd:0f:0d:67:b4:98:50: 69:39:ec:6f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEwOVncMjb1DmCevUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwMjE4MzAxMFoXDTI4MDMwNjE4MzAxMFowLzEtMCsGA1UEAxMk ZGI0ZDdkOWItZDcyZC00NDg0LWEyZTUtZTZlZjFmNDRkYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDZAMUXVoEaNJwZTDOYn5SIQu+unOd8FeEYy V4sugZMiFE4Rovwmc7jJSJ6bPwk1JQudOTGJ+PE9ap3/FahiVKX8KDzkS3ZZuyr5 mXXe2qdZWa6aaq6b8dqEMePqUvM+YMQaYI291alwBORJgsRBd0TafzN+mDmDN724 g3SnzNTW0fB8rDbp2qqPzRKNU+evW63yEnplKMZ14aZWGIKEQJ4SAwK7FAUweNOV 2PfqWSb5msm6KSEBALE6k/1X89iaTTyUwKUoVekLTx82/rGOgAAqLL/C22cQlfRk 3c9+OjVMx2J1JS5uZZ9jaXnmJd+qRdRvzWHcVgwep1KMQ6RH/QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFG47hVIpo+0kLCdscc98PeUqk+5JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k YjRkN2Q5Yi1kNzJkLTQ0ODQtYTJlNS1lNmVmMWY0NGRhYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2RiNGQ3ZDliLWQ3MmQtNDQ4NC1h MmU1LWU2ZWYxZjQ0ZGFiNC9kYjRkN2Q5Yi1kNzJkLTQ0ODQtYTJlNS1lNmVmMWY0 NGRhYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAY6wQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIo8vPIDjVRlQ8o8SRz0d RyaBXtSFO4d4nA4RMqX8oEKS4uVJKG7Lyju3U3y5ymXMcy7I7O/9qWpW3wbT7S+s xv1Wx9nHRWs3gII4dMIFEM03LrMHpZVn4jNb3LCr/K+eHC3gOboi6NGaVvSEawkK RYhjbJ4JPmSSDHoKgoEpvoGo93KgTtRQqymoGh+Nzf4r579JDEKMGGMagJmpkR8v JblYvXVF/aM8uqeYNKdVu27yxJxXky/L6NVGwTaQ5Cw/EbQvalLYDomOxBmnoSmG IMR6d83F7sROjPTla8iQv1WTJAfACETwL5gnPVSWxFICpfwduj3dDw1ntJhQaTns bw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:35 2025 by rpki-client