This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer File: b1896033-ca2b-44a4-b67f-7160d614cf31.cer (raw, json) Hash identifier: hHqbRr1S/sNJDxXvGWrFYHaFTXbMcFd8G0EAzafceAE= Subject key identifier: 58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584C1BBE8BD858358DC0C58B5080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Dec 2025 13:45:23 +0000 Certificate not after: Sat 11 Mar 2028 13:45:23 +0000 Subordinate resources: AS: 928 AS: 12186 IP: 23.138.100.0/24 IP: 192.189.65.0/24 IP: 2607:2c40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1b:be:8b:d8:58:35:8d:c0:c5:8b:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 7 13:45:23 2025 GMT Not After : Mar 11 13:45:23 2028 GMT Subject: CN=b1896033-ca2b-44a4-b67f-7160d614cf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:7b:38:e8:d8:d9:7c:f6:db:05:1e:50:8c: af:1a:25:1d:1a:a6:80:9c:42:bf:d9:e4:9e:62:a0: c2:df:24:53:32:b1:a9:a5:c3:0b:bc:03:12:55:59: c9:f6:78:6c:e6:2f:e5:0f:4e:aa:58:ab:ad:8d:da: 08:95:76:e7:6e:fa:17:e4:f2:d0:b5:a3:66:b9:70: 67:f7:93:90:c7:a6:e2:a0:e1:6c:e6:df:b3:a9:bc: 80:c5:3c:41:32:c9:86:43:33:55:a8:e8:a6:33:52: f9:a1:e9:ec:30:98:18:52:97:42:d9:3b:1a:6f:07: c4:22:4b:07:b0:47:0d:0a:6a:f5:fd:51:c6:a0:3b: af:ea:9e:4f:ba:84:a4:83:c7:da:40:57:f3:21:96: 43:cc:de:43:c1:4a:a3:8e:f6:a7:04:f4:80:7e:7a: 11:2b:cf:82:cd:d0:25:f5:bb:f5:71:dd:66:de:0b: db:f2:77:8a:f6:1d:e9:ad:68:e6:d5:93:0f:63:40: 4c:4f:96:0e:ed:bf:e8:42:92:3d:0c:8b:5f:6c:9e: 04:dd:53:f5:8a:a3:ed:2a:cb:4c:76:e9:21:c3:ac: 14:4a:77:ef:d5:f9:31:07:0d:33:f7:d5:e9:89:d1: a1:5a:66:3b:63:37:70:74:13:cf:ac:5e:39:b5:a6: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.138.100.0/24 192.189.65.0/24 IPv6: 2607:2c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 928 12186 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c5:62:c4:08:10:5d:37:33:7d:ff:fc:78:bb:63:dd:1c:17: 63:11:27:9a:23:e6:e2:ce:08:e5:9b:72:20:43:51:a1:e4:f0: 4b:89:09:f6:dd:6f:7d:24:3e:3e:5b:36:9c:d5:8a:73:64:cf: 8f:5b:2b:f5:3a:21:19:87:f5:b8:c0:82:5a:2d:16:92:12:2f: 2e:ec:2a:c6:84:87:22:91:83:7e:c3:26:f6:55:b6:80:81:73: 2f:1a:23:5e:2d:28:6d:ca:5a:c8:69:39:f1:8d:c3:ce:54:da: 94:f6:6c:33:f4:34:95:e1:61:a7:ec:67:bb:cd:62:52:91:1d: 6d:be:5a:2c:f2:40:c1:3f:a1:72:49:0c:b6:d9:dd:8e:df:48: 1d:ff:68:1b:03:c2:55:5d:bc:af:3b:c9:1a:0f:bc:44:54:3f: f8:19:78:c2:90:6b:61:9e:f4:ee:f8:90:2e:c5:d8:1f:4c:61: 29:20:1a:21:af:a8:e2:ca:4c:27:f4:83:8e:c0:5e:03:15:72: 4f:c0:bb:1c:a2:1e:df:88:ed:42:0f:cf:fa:fd:09:16:ae:1f: d4:41:f9:e7:23:60:0c:62:dd:79:87:fc:94:b5:ff:6b:19:d9: 7e:80:26:60:cf:fc:6d:06:64:85:c7:e6:68:cd:0a:c3:4f:39: b5:bf:40:c5 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEwbvovYWDWNwMWLUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTIwNzEzNDUyM1oXDTI4MDMxMTEzNDUyM1owLzEtMCsGA1UEAxMk YjE4OTYwMzMtY2EyYi00NGE0LWI2N2YtNzE2MGQ2MTRjZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhx7OOjY2Xz22wUeUIyvGiUdGqaAnEK/2eSe YqDC3yRTMrGppcMLvAMSVVnJ9nhs5i/lD06qWKutjdoIlXbnbvoX5PLQtaNmuXBn 95OQx6bioOFs5t+zqbyAxTxBMsmGQzNVqOimM1L5oensMJgYUpdC2TsabwfEIksH sEcNCmr1/VHGoDuv6p5PuoSkg8faQFfzIZZDzN5DwUqjjvanBPSAfnoRK8+CzdAl 9bv1cd1m3gvb8neK9h3prWjm1ZMPY0BMT5YO7b/oQpI9DItfbJ4E3VP1iqPtKstM dukhw6wUSnfv1fkxBw0z99XpidGhWmY7YzdwdBPPrF45taahawIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFFivo/LAgKnaqpbTptXRxrpp8IkyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i MTg5NjAzMy1jYTJiLTQ0YTQtYjY3Zi03MTYwZDYxNGNmMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2IxODk2MDMzLWNhMmItNDRhNC1i NjdmLTcxNjBkNjE0Y2YzMS9iMTg5NjAzMy1jYTJiLTQ0YTQtYjY3Zi03MTYwZDYx NGNmMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXimQDBADAvUEwDQQCAAIwBwMFACYHLEAwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICA6ACAi+aMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFjFYsQIEF03M33/ /Hi7Y90cF2MRJ5oj5uLOCOWbciBDUaHk8EuJCfbdb30kPj5bNpzVinNkz49bK/U6 IRmH9bjAglotFpISLy7sKsaEhyKRg37DJvZVtoCBcy8aI14tKG3KWshpOfGNw85U 2pT2bDP0NJXhYafsZ7vNYlKRHW2+WizyQME/oXJJDLbZ3Y7fSB3/aBsDwlVdvK87 yRoPvERUP/gZeMKQa2Ge9O74kC7F2B9MYSkgGiGvqOLKTCf0g47AXgMVck/Auxyi Ht+I7UIPz/r9CRauH9RB+ecjYAxi3XmH/JS1/2sZ2X6AJmDP/G0GZIXH5mjNCsNP ObW/QMU= -----END CERTIFICATE-----Generated at Sun Dec 21 15:22:36 2025 by rpki-client