This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer File: 2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer (raw, json) Hash identifier: 2K1YHiZfUrB6xi5O/G5OZzMPJIZNneIktgPQc4Vq2IA= Subject key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C459ECEAA90F04B9FE7757380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Dec 2025 13:45:23 +0000 Certificate not after: Sun 26 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 30422 AS: 40542 AS: 63203 IP: 149.112.4.0/24 IP: 149.112.17.0/24 IP: 149.112.70.0/23 IP: 206.51.7.0/24 IP: 2001:504:1b::/48 IP: 2001:504:100::/48 IP: 2001:504:110::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:9e:ce:aa:90:f0:4b:9f:e7:75:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 22 13:45:23 2025 GMT Not After : Mar 26 12:45:23 2028 GMT Subject: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:04:94:04:97:41:02:7c:7b:ed:f6:6a:46: 48:f2:27:a0:e6:72:bb:92:5f:27:ec:c1:0a:97:28: b2:36:0f:6e:ba:b4:8b:c4:1e:1a:61:5c:62:cc:67: c4:a3:38:7b:fd:e8:a4:d2:ba:2e:7e:60:7f:fd:e2: ac:f6:0f:80:27:12:04:1b:e1:be:1d:4f:bd:5c:50: 88:cc:47:2f:a6:c3:a9:4f:73:90:cc:f2:35:3d:b2: 60:41:53:7f:c2:f3:a4:0c:62:0a:9a:4d:07:09:62: 27:8b:8e:99:d3:25:b5:2a:2d:2e:c4:c1:4a:67:f5: 51:25:6e:85:07:6a:db:2a:b9:01:f1:eb:ef:db:52: 7b:43:3c:d1:f2:a0:af:f6:7a:fe:b0:a0:f9:66:27: db:72:99:54:a8:aa:97:6b:dc:14:07:66:aa:82:40: 0c:47:a7:55:c2:5d:c6:05:60:d5:f6:51:c8:86:aa: dd:d2:55:31:6b:5b:59:40:f2:7e:1d:c0:6e:cb:34: bd:7c:dd:82:82:09:80:28:d8:ec:8f:38:90:3b:a2: ab:08:93:9d:f5:3f:67:c5:83:8b:83:61:65:7d:73: 94:5f:b3:a6:f3:cf:33:87:57:e3:2c:b2:53:d6:d3: 2f:df:6f:ef:4a:18:96:3b:39:90:76:73:60:93:49: cc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 149.112.4.0/24 149.112.17.0/24 149.112.70.0/23 206.51.7.0/24 IPv6: 2001:504:1b::/48 2001:504:100::/48 2001:504:110::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30422 40542 63203 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ed:d5:84:6f:62:da:8a:d2:64:53:e9:ee:54:e5:4c:d9:23: be:f9:0b:a4:ea:23:d8:7a:ed:a4:57:8b:60:5b:6f:d8:09:bd: 4b:43:77:d3:08:c9:cf:17:5b:82:e7:a7:33:57:a7:98:42:2e: 66:ba:53:29:c5:43:98:2d:c1:28:47:a7:8c:84:17:21:a1:ab: f1:c2:ee:9d:aa:60:39:5a:2d:ec:da:d8:68:55:81:b1:02:96: 3b:00:93:89:17:5b:06:95:3c:d7:c6:72:96:8c:61:66:dd:cb: a5:be:80:69:23:a4:c0:6c:9b:ae:fd:0d:26:25:ae:d2:e3:d5: 45:f8:3c:c5:68:77:63:d2:b5:59:ea:9b:b7:f7:45:be:9d:13: 02:fe:0f:57:2d:20:00:f0:a4:30:a6:31:08:9e:d6:73:12:88: 0b:7a:19:e7:11:5c:1c:ec:63:d4:14:f9:2e:64:01:22:eb:6a: 73:6f:b7:fc:7a:17:6f:e9:66:3a:0d:bb:e0:10:33:21:47:12: 63:04:dd:51:41:b6:aa:3c:bc:e9:a7:02:e5:ea:09:97:9a:ff: 61:e3:af:34:e6:e2:c1:3a:0f:d7:39:38:16:23:bb:89:ad:73: f3:63:8f:ad:e5:f1:b0:a7:15:7d:8e:55:28:0c:75:e9:4d:50: b8:d6:a9:6a -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWExFns6qkPBLn+d1c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTIyMjEzNDUyM1oXDTI4MDMyNjEyNDUyM1owLzEtMCsGA1UEAxMk MmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4YzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv4ElASXQQJ8e+32akZI8ieg5nK7kl8n7MEK lyiyNg9uurSLxB4aYVxizGfEozh7/eik0roufmB//eKs9g+AJxIEG+G+HU+9XFCI zEcvpsOpT3OQzPI1PbJgQVN/wvOkDGIKmk0HCWIni46Z0yW1Ki0uxMFKZ/VRJW6F B2rbKrkB8evv21J7QzzR8qCv9nr+sKD5ZifbcplUqKqXa9wUB2aqgkAMR6dVwl3G BWDV9lHIhqrd0lUxa1tZQPJ+HcBuyzS9fN2CggmAKNjsjziQO6KrCJOd9T9nxYOL g2FlfXOUX7Om888zh1fjLLJT1tMv32/vShiWOzmQdnNgk0nMLwIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFOfDTZITvZDevphTtnVhl4ZbJ0ZNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y YTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzJhNjExZWYxLTE5NWUtNDk1OC1h NmFjLWY0YTFkMmNkOGM4Zi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJj ZDhjOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMB4EAgABMBgDBACVcAQDBACVcBEDBAGVcEYDBADOMwcwIQQCAAIw GwMHACABBQQAGwMHACABBQQBAAMHACABBQQBEDAjBggrBgEFBQcBCAEB/wQUMBKg EDAOAgJ21gIDAJ5eAgMA9uMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGe3VhG9i2orSZFPp7lTlTNkjvvkL pOoj2HrtpFeLYFtv2Am9S0N30wjJzxdbguenM1enmEIuZrpTKcVDmC3BKEenjIQX IaGr8cLunapgOVot7NrYaFWBsQKWOwCTiRdbBpU818ZyloxhZt3Lpb6AaSOkwGyb rv0NJiWu0uPVRfg8xWh3Y9K1Weqbt/dFvp0TAv4PVy0gAPCkMKYxCJ7WcxKIC3oZ 5xFcHOxj1BT5LmQBIutqc2+3/HoXb+lmOg274BAzIUcSYwTdUUG2qjy86acC5eoJ l5r/YeOvNObiwToP1zk4FiO7ia1z82OPreXxsKcVfY5VKAx16U1QuNapag== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:37 2025 by rpki-client