This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer File: 3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer (raw, json) Hash identifier: LGB2PBJgc3GITO6D8jT9PjbCyGPGNXq7H1/kJAM/5qM= Subject key identifier: 78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584C30AEABA94861BD8B8D338580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Dec 2025 01:45:22 +0000 Certificate not after: Sun 19 Mar 2028 00:45:22 +0000 Subordinate resources: AS: 27520 IP: 23.189.8.0/24 IP: 2602:f811::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:30:ae:ab:a9:48:61:bd:8b:8d:33:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 15 01:45:22 2025 GMT Not After : Mar 19 00:45:22 2028 GMT Subject: CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:6e:75:05:ce:58:7b:d7:14:a6:81:2f:ac: 73:78:7b:08:a6:3a:70:59:00:81:54:39:fe:60:e6: 72:99:b0:59:b7:05:d9:f2:17:1c:0f:1f:05:0c:c1: 63:c7:27:6b:03:dd:22:8f:6a:1a:08:20:9a:b7:69: 4e:9a:fa:27:e3:6e:36:3d:f7:ee:3e:b2:87:c8:b8: 26:a1:cc:43:b1:62:09:a6:5f:28:f9:3a:39:8e:98: fe:c4:63:00:a9:bf:f8:7e:4d:37:3b:1f:e2:59:c8: 7a:29:b5:3e:25:a8:0c:35:72:89:a7:7e:38:dd:c0: 3c:d9:f6:16:17:49:1d:f9:c3:79:56:7b:3d:0c:a0: d7:61:66:4a:c4:ac:00:50:44:c6:d3:9e:aa:91:45: 17:6d:d7:15:d1:10:aa:05:91:ad:39:ea:95:8c:f3: 5e:9c:46:e3:c5:42:36:bb:2f:c3:bd:d0:d2:70:c8: f7:60:4d:32:d9:e6:56:0a:ae:9f:d0:05:e8:6e:4b: a0:eb:b1:9d:44:70:40:bb:61:f5:c2:c8:f4:eb:3c: a5:95:3c:66:6d:6c:89:cc:c4:02:e8:c9:38:bb:1c: 13:52:80:23:6d:78:7c:aa:a0:a5:a3:43:a6:54:2d: f4:19:c9:fc:fa:2d:7f:29:f3:3c:c5:9d:5f:b0:c4: 72:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.189.8.0/24 IPv6: 2602:f811::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27520 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:45:9c:38:73:c5:88:f8:20:b0:a2:24:78:75:1c:d0:d3:11: 18:e2:92:0f:f2:4d:ea:29:03:06:c1:ee:53:b3:2c:21:ba:28: 34:7b:9a:9a:a3:b7:06:1a:52:7b:9c:b4:fe:15:0e:ae:ca:f7: ab:75:cc:07:60:fd:c8:60:67:f7:87:f9:32:17:b0:23:a1:18: 62:2f:7c:1a:90:3b:78:2e:73:bd:c6:48:4e:32:9a:81:48:7c: 8e:50:04:05:eb:7d:8c:59:1b:8b:fd:aa:0e:c2:4f:09:3f:9c: 24:af:79:49:4f:a3:a1:34:90:b1:20:14:08:cb:df:8e:cb:64: 51:9a:a8:0c:03:d4:8f:93:98:bd:2b:d3:41:df:a2:ad:65:46: fe:09:ae:45:87:e3:e1:1c:a3:db:45:a9:25:1f:76:d3:ab:35: 58:a2:55:10:40:de:28:2d:f1:9a:17:d8:1c:2b:3a:ad:00:68: 86:85:56:14:d2:20:e5:ff:a7:9f:97:00:38:39:4a:d0:d0:81: b7:bb:90:4e:aa:0e:07:fc:1d:67:48:2d:4e:fb:b1:a3:1e:b2: b3:c0:16:b5:42:11:5e:48:29:fa:68:43:2f:1e:42:1f:04:c2: 6d:cc:6c:e8:2e:dc:e8:49:55:64:c7:15:4a:88:5c:a5:d8:0e: 0f:78:b9:b0 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEwwrqupSGG9i40zhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTIxNTAxNDUyMloXDTI4MDMxOTAwNDUyMlowLzEtMCsGA1UEAxMk M2FjZmNkNzYtYmI5Yi00MTE0LThiMzYtZGE5ZWVlOTliNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGBudQXOWHvXFKaBL6xzeHsIpjpwWQCBVDn+ YOZymbBZtwXZ8hccDx8FDMFjxydrA90ij2oaCCCat2lOmvon4242PffuPrKHyLgm ocxDsWIJpl8o+To5jpj+xGMAqb/4fk03Ox/iWch6KbU+JagMNXKJp3443cA82fYW F0kd+cN5Vns9DKDXYWZKxKwAUETG056qkUUXbdcV0RCqBZGtOeqVjPNenEbjxUI2 uy/DvdDScMj3YE0y2eZWCq6f0AXobkug67GdRHBAu2H1wsj06zyllTxmbWyJzMQC 6Mk4uxwTUoAjbXh8qqClo0OmVC30Gcn8+i1/KfM8xZ1fsMRypwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFHhwixvWqITChKUOwSicJk7z2U+XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z YWNmY2Q3Ni1iYjliLTQxMTQtOGIzNi1kYTllZWU5OWI2YjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNhY2ZjZDc2LWJiOWItNDExNC04 YjM2LWRhOWVlZTk5YjZiMC8zYWNmY2Q3Ni1iYjliLTQxMTQtOGIzNi1kYTllZWU5 OWI2YjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXvQgwDgQCAAIwCAMGACYC+BEAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADxFnDhzxYj4ILCiJHh1HNDTERji kg/yTeopAwbB7lOzLCG6KDR7mpqjtwYaUnuctP4VDq7K96t1zAdg/chgZ/eH+TIX sCOhGGIvfBqQO3guc73GSE4ymoFIfI5QBAXrfYxZG4v9qg7CTwk/nCSveUlPo6E0 kLEgFAjL347LZFGaqAwD1I+TmL0r00Hfoq1lRv4JrkWH4+Eco9tFqSUfdtOrNVii VRBA3igt8ZoX2BwrOq0AaIaFVhTSIOX/p5+XADg5StDQgbe7kE6qDgf8HWdILU77 saMesrPAFrVCEV5IKfpoQy8eQh8Ewm3MbOgu3OhJVWTHFUqIXKXYDg94ubA= -----END CERTIFICATE-----Generated at Tue Dec 23 02:02:05 2025 by rpki-client