This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66.cer File: 961dbf2a-aa65-45d0-ab69-205783d0db66.cer (raw, json) Hash identifier: utyhHEFX09+SL4QAN0xsdnQXcpzchDei/cvgIeqOckA= Subject key identifier: BC:3A:83:D0:54:60:17:44:44:2E:61:6E:3D:8E:B7:F8:3C:AA:0B:77 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584C2F4956A3C94CB0DC80BAE880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/961dbf2a-aa65-45d0-ab69-205783d0db66.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 14 Dec 2025 13:45:24 +0000 Certificate not after: Sat 18 Mar 2028 12:45:24 +0000 Subordinate resources: AS: 10423 IP: 69.176.128.0/19 IP: 72.44.96.0/19 IP: 2604:71c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2f:49:56:a3:c9:4c:b0:dc:80:ba:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Dec 14 13:45:24 2025 GMT Not After : Mar 18 12:45:24 2028 GMT Subject: CN=961dbf2a-aa65-45d0-ab69-205783d0db66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:cf:98:21:f2:c0:a9:9a:14:72:49:cb:ee: f5:2d:12:aa:4f:37:ff:51:4c:0f:9d:c5:c3:b4:14: 88:c9:17:39:57:6e:39:65:4a:70:15:6e:11:b1:11: 8c:5c:75:09:b5:dd:07:12:89:12:c4:68:a6:f9:13: 76:47:bc:4c:a8:f0:ef:0e:e0:17:89:b3:69:06:f8: fa:e4:09:c3:a5:28:27:4f:3a:8b:aa:3e:d6:2d:0c: 16:ac:cb:77:90:ac:92:79:f8:f9:2d:9a:51:f3:d3: 1f:2f:c7:10:e9:bb:be:2f:c3:31:1d:2e:2c:3e:37: 08:97:0a:6f:44:55:e8:59:94:44:90:c8:97:39:36: 35:a4:a6:c4:90:e0:e0:92:52:3a:61:80:87:f3:68: 05:e9:b7:bb:d4:83:46:d3:c7:04:7b:84:b7:19:50: 4d:5e:43:57:41:f6:15:40:0b:cb:8b:57:cb:28:69: 50:1e:00:02:e5:64:6e:22:e9:62:40:ab:37:e9:af: f3:87:dc:4f:9c:bf:ed:60:9f:6c:31:b3:78:d5:2c: 8d:a2:d8:78:87:3f:43:fa:fd:86:0f:d5:bf:02:d0: 45:2e:82:89:da:fe:5e:ce:8a:fd:5f:ef:68:9f:34: 34:e6:cf:b1:0c:e5:d6:a2:1c:76:e9:bd:93:ed:92: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3A:83:D0:54:60:17:44:44:2E:61:6E:3D:8E:B7:F8:3C:AA:0B:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/961dbf2a-aa65-45d0-ab69-205783d0db66.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 69.176.128.0/19 72.44.96.0/19 IPv6: 2604:71c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10423 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:dc:a3:89:39:37:28:86:0b:5a:97:da:f7:0f:82:4f:82:d1: e6:2a:bd:1b:4f:b1:2e:d0:52:1b:0c:82:89:84:f5:10:e2:ad: 2b:0d:58:a5:e2:9a:8b:0c:36:2c:74:9c:65:c0:77:71:e3:f6: 68:9d:3a:22:0b:8e:e8:8a:00:6a:53:8c:32:4f:8a:92:f6:da: 93:67:3d:25:da:02:92:89:f7:ab:e2:e9:52:83:6d:09:44:e1: b5:75:b5:a9:78:b9:7a:1d:48:95:05:1d:27:b8:d3:8b:9c:7f: d4:fe:4d:79:d3:a5:a0:3e:18:94:ee:d8:a7:9b:4b:fb:9b:dc: 19:95:44:20:04:24:cb:1e:56:5e:00:00:e8:b7:01:f3:32:cd: 32:a4:bb:42:41:79:33:f0:5c:32:38:6e:91:c2:79:8a:56:48: 83:f2:02:64:39:17:da:6f:78:7a:5b:82:cc:28:94:75:ae:9b: 70:2d:4f:15:2c:47:ec:4b:db:1b:6f:71:7e:4a:32:4b:0c:e4: e0:97:ca:85:55:da:9b:a5:5e:e8:2a:2e:99:06:6a:64:fd:fd: 73:27:06:b0:3a:27:f2:62:f7:b3:67:c9:c7:ae:48:61:c0:4a: 37:a0:e7:a8:8c:a0:13:ad:1b:b7:c2:7c:27:d6:77:e1:b8:a1: 80:74:b7:be -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEwvSVajyUyw3IC66IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTIxNDEzNDUyNFoXDTI4MDMxODEyNDUyNFowLzEtMCsGA1UEAxMk OTYxZGJmMmEtYWE2NS00NWQwLWFiNjktMjA1NzgzZDBkYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9TPmCHywKmaFHJJy+71LRKqTzf/UUwPncXD tBSIyRc5V245ZUpwFW4RsRGMXHUJtd0HEokSxGim+RN2R7xMqPDvDuAXibNpBvj6 5AnDpSgnTzqLqj7WLQwWrMt3kKySefj5LZpR89MfL8cQ6bu+L8MxHS4sPjcIlwpv RFXoWZREkMiXOTY1pKbEkODgklI6YYCH82gF6be71ING08cEe4S3GVBNXkNXQfYV QAvLi1fLKGlQHgAC5WRuIuliQKs36a/zh9xPnL/tYJ9sMbN41SyNoth4hz9D+v2G D9W/AtBFLoKJ2v5ezor9X+9onzQ05s+xDOXWohx26b2T7ZKCrQIDAQABo4IELzCC BCswHQYDVR0OBBYEFLw6g9BUYBdERC5hbj2Ot/g8qgt3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85 NjFkYmYyYS1hYTY1LTQ1ZDAtYWI2OS0yMDU3ODNkMGRiNjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzk2MWRiZjJhLWFhNjUtNDVkMC1h YjY5LTIwNTc4M2QwZGI2Ni85NjFkYmYyYS1hYTY1LTQ1ZDAtYWI2OS0yMDU3ODNk MGRiNjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAVFsIADBAVILGAwDQQCAAIwBwMFACYEccAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICKLcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHtyjiTk3KIYLWpfa9w+C T4LR5iq9G0+xLtBSGwyCiYT1EOKtKw1YpeKaiww2LHScZcB3ceP2aJ06IguO6IoA alOMMk+Kkvbak2c9JdoCkon3q+LpUoNtCUThtXW1qXi5eh1IlQUdJ7jTi5x/1P5N edOloD4YlO7Yp5tL+5vcGZVEIAQkyx5WXgAA6LcB8zLNMqS7QkF5M/BcMjhukcJ5 ilZIg/ICZDkX2m94eluCzCiUda6bcC1PFSxH7EvbG29xfkoySwzk4JfKhVXam6Ve 6CoumQZqZP39cycGsDon8mL3s2fJx65IYcBKN6DnqIygE60bt8J8J9Z34bihgHS3 vg== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:50 2025 by rpki-client