This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer File: 19e347cf-c0cb-49a3-b025-5d36006aab3e.cer (raw, json) Hash identifier: rP3Z7R0rqEoWH1zCNK5+Q2O4sxfM9g6dax+80X5mBeY= Subject key identifier: A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C400970B43EA225003A76E680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Dec 2025 13:45:23 +0000 Certificate not after: Fri 24 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 398537 IP: 198.206.191.0/24 IP: 204.108.164.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:09:70:b4:3e:a2:25:00:3a:76:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 20 13:45:23 2025 GMT Not After : Mar 24 12:45:23 2028 GMT Subject: CN=19e347cf-c0cb-49a3-b025-5d36006aab3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:ac:a6:fd:17:70:3b:f8:1e:14:b2:b1:21: 50:12:7b:cf:3e:83:7d:d2:28:b9:99:23:c4:99:38: 7c:71:ce:ef:4c:9f:aa:5e:bf:e6:87:a3:5e:9b:bb: 1f:78:e7:11:73:af:29:63:96:9d:2b:ce:c3:c9:08: d6:ad:8e:1a:80:e3:aa:2a:8d:35:ae:3e:d8:23:6f: a4:8d:03:6e:48:09:32:b4:4b:6f:8b:96:9e:b6:0e: 3c:17:a4:ec:f8:ad:fa:ba:86:78:05:cb:73:d0:f6: 2a:6d:9c:bb:4a:99:65:22:af:9a:31:a7:91:c6:f1: ec:ab:29:d4:8c:aa:3c:05:a7:f5:86:b8:1b:b5:3c: 0e:2c:13:49:c1:77:ae:c1:fc:2b:63:8a:4a:9d:64: d0:0e:03:ed:62:5d:65:c0:c4:34:32:7d:ec:b5:44: 80:3f:a2:2d:e2:bb:9e:6d:67:b0:7d:e5:41:74:5b: f6:6a:00:dc:20:93:f2:38:af:7c:f9:f3:7e:f8:37: 8b:d5:04:a8:ed:3e:42:34:1c:5b:f6:18:20:fc:60: b1:7b:51:23:57:5c:5a:33:35:a5:3a:51:7f:2f:4f: 37:cd:f0:1d:6c:6b:48:a3:72:90:61:a0:a4:28:03: df:c1:03:52:ff:9e:f9:8f:46:74:cb:22:27:1e:a2: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 198.206.191.0/24 204.108.164.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398537 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:79:fb:c1:6a:16:9a:78:96:0a:74:ff:da:0e:47:93:73:d1: df:7b:52:1e:36:29:12:12:86:f5:e1:83:50:e9:80:2d:8f:f1: 9c:af:0b:7c:6f:7f:66:25:7d:ea:19:44:f8:45:c9:4c:d4:4f: 09:4a:d1:13:96:ba:a8:8e:db:97:c9:09:45:af:df:c7:89:74: 05:15:c2:9b:f2:59:22:c8:bb:ef:f1:04:1e:39:9b:e7:7c:51: c3:b9:0b:7b:12:bb:d2:69:f9:c0:9c:27:b3:87:bd:d2:e6:bc: 31:71:62:bf:66:73:dd:b2:5d:ce:38:bc:bb:23:4b:8c:13:07: dc:88:25:4e:4f:6f:79:3c:fb:78:11:7e:eb:58:65:51:df:3d: 09:1f:35:db:62:ba:14:cf:0b:f7:57:d1:32:99:36:6c:2f:ed: 6b:99:da:46:e7:46:e6:94:89:5e:67:44:4a:02:cb:d2:1a:85: a3:9c:3d:b5:c1:91:ca:af:fe:5f:1a:68:3b:ae:55:33:18:78: c1:01:28:75:be:1e:d5:83:4d:e4:6b:49:66:49:cd:0e:40:1c: be:22:0f:aa:e4:ae:e4:f7:db:6f:12:b2:6d:e2:28:65:04:7c: fb:a1:dd:98:fc:54:2a:fb:32:d9:18:95:f1:50:e3:39:cc:b5: ba:87:2d:70 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWExACXC0PqIlADp25oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTIyMDEzNDUyM1oXDTI4MDMyNDEyNDUyM1owLzEtMCsGA1UEAxMk MTllMzQ3Y2YtYzBjYi00OWEzLWIwMjUtNWQzNjAwNmFhYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+qspv0XcDv4HhSysSFQEnvPPoN90ii5mSPE mTh8cc7vTJ+qXr/mh6Nem7sfeOcRc68pY5adK87DyQjWrY4agOOqKo01rj7YI2+k jQNuSAkytEtvi5aetg48F6Ts+K36uoZ4Bctz0PYqbZy7SpllIq+aMaeRxvHsqynU jKo8Baf1hrgbtTwOLBNJwXeuwfwrY4pKnWTQDgPtYl1lwMQ0Mn3stUSAP6It4rue bWewfeVBdFv2agDcIJPyOK98+fN++DeL1QSo7T5CNBxb9hgg/GCxe1EjV1xaMzWl OlF/L083zfAdbGtIo3KQYaCkKAPfwQNS/575j0Z0yyInHqI4OwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFKNhe00c2meBmxfwoU7R1bOnNtm1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x OWUzNDdjZi1jMGNiLTQ5YTMtYjAyNS01ZDM2MDA2YWFiM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzE5ZTM0N2NmLWMwY2ItNDlhMy1i MDI1LTVkMzYwMDZhYWIzZS8xOWUzNDdjZi1jMGNiLTQ5YTMtYjAyNS01ZDM2MDA2 YWFiM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGzr8DBAHMbKQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhTJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACl5+8FqFpp4lgp0/9oOR5Nz0d97Uh42KRIShvXh g1DpgC2P8ZyvC3xvf2YlfeoZRPhFyUzUTwlK0ROWuqiO25fJCUWv38eJdAUVwpvy WSLIu+/xBB45m+d8UcO5C3sSu9Jp+cCcJ7OHvdLmvDFxYr9mc92yXc44vLsjS4wT B9yIJU5Pb3k8+3gRfutYZVHfPQkfNdtiuhTPC/dX0TKZNmwv7WuZ2kbnRuaUiV5n REoCy9IahaOcPbXBkcqv/l8aaDuuVTMYeMEBKHW+HtWDTeRrSWZJzQ5AHL4iD6rk ruT3228Ssm3iKGUEfPuh3Zj8VCr7MtkYlfFQ4znMtbqHLXA= -----END CERTIFICATE-----Generated at Sat Dec 20 22:03:00 2025 by rpki-client