This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer File: 3eb60598-76ca-49b0-9a1f-01270603d8d9.cer (raw, json) Hash identifier: 1FLkOcFsjrQZn8gEW/Na/IqE5bpRiEVdUwvrlgTSjzw= Subject key identifier: 88:66:D5:0B:77:AD:DC:73:3D:B3:35:CD:C7:6A:E7:7F:E0:03:FB:7E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C3EA418E190ABAF04682CD9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Dec 2025 01:45:23 +0000 Certificate not after: Fri 24 Mar 2028 00:45:23 +0000 Subordinate resources: AS: 399781 IP: 45.45.156.0/24 IP: 108.160.212.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:a4:18:e1:90:ab:af:04:68:2c:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 20 01:45:23 2025 GMT Not After : Mar 24 00:45:23 2028 GMT Subject: CN=3eb60598-76ca-49b0-9a1f-01270603d8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:d7:9e:88:e1:ae:e7:bd:25:60:12:2b:73: 1e:e6:fc:1e:67:b9:9d:19:08:57:e9:23:ee:a9:86: 13:e7:21:93:af:4b:5c:04:5d:68:29:33:bd:00:a6: ef:3c:be:31:a8:f7:d9:95:43:80:06:73:44:e6:61: 5e:1d:5e:4e:e4:a2:d3:10:bc:c1:5d:28:95:1b:d5: 71:7e:25:98:a9:5b:c3:fd:42:af:83:12:95:5e:7d: ff:1c:be:48:c9:10:a1:1e:7c:2f:e9:7b:76:04:d1: 6c:ba:4a:3a:f2:db:8d:71:91:7b:84:a7:76:71:7d: b3:ce:a6:b2:91:99:0d:68:95:c8:cd:84:b2:fb:7a: 3e:c3:9b:cf:a4:36:61:12:b7:89:14:ff:49:1e:7c: 0b:d7:b7:ed:b9:b3:f9:fb:c9:5d:30:e1:40:52:e7: 29:3a:68:75:07:72:de:b6:5c:0c:e6:77:a5:65:3e: 75:b2:ce:af:2f:46:e9:01:89:d8:c2:c1:1b:7e:23: 5a:c2:8c:e1:43:e8:0b:76:42:42:66:c4:bd:81:16: ee:3b:f1:b2:8f:14:51:59:19:0f:2a:a7:9a:d6:c7: 14:2d:03:63:20:59:25:51:6b:53:5f:ab:b8:0a:17: 61:2f:09:99:72:29:e2:7c:d3:6d:0a:f5:ed:ef:34: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:D5:0B:77:AD:DC:73:3D:B3:35:CD:C7:6A:E7:7F:E0:03:FB:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 45.45.156.0/24 108.160.212.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399781 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d9:77:50:1f:c7:49:ca:45:65:24:25:23:e0:66:5d:f1:1c: 99:72:e0:b4:77:5d:d8:2b:6f:5d:bb:85:c1:3d:f2:25:a9:8d: ac:e9:83:b3:48:4a:71:12:eb:ab:f6:d2:e7:72:88:56:06:95: 30:6c:eb:73:ad:d1:55:1e:02:ad:3a:32:c4:a1:28:92:e8:82: 78:5c:d5:f3:50:24:79:0d:59:cd:1e:c5:d5:42:70:6f:09:03: 29:fc:94:46:82:1d:f3:1c:7f:c2:09:ac:11:fb:4f:1a:15:11: 04:d8:5b:98:63:d7:61:45:ef:dd:11:11:41:ea:7d:37:80:cd: 2a:90:96:75:94:13:54:2e:ba:e9:ce:5c:e5:ca:11:f9:e6:c0: 1c:ea:a5:29:cd:4f:62:5f:bd:d7:a2:1d:0b:0a:54:90:8a:40: 23:85:c4:5a:62:a3:de:f5:0e:02:77:7b:80:c6:f2:88:39:cc: dd:e8:13:3b:26:c7:11:bb:1f:11:f9:06:c0:a1:d7:c6:36:8f: a8:ff:3a:1a:c8:d4:a4:37:b0:97:c3:3f:2f:4e:91:ae:c2:25: 0c:6d:95:67:2e:6b:22:28:1b:c8:69:5e:06:d0:31:f6:bd:02: 2d:ae:c6:8d:57:c5:84:16:46:3b:17:a6:06:c1:33:10:fb:3c: 75:68:ef:15 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEw+pBjhkKuvBGgs2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTIyMDAxNDUyM1oXDTI4MDMyNDAwNDUyM1owLzEtMCsGA1UEAxMk M2ViNjA1OTgtNzZjYS00OWIwLTlhMWYtMDEyNzA2MDNkOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlDXnojhrue9JWASK3Me5vweZ7mdGQhX6SPu qYYT5yGTr0tcBF1oKTO9AKbvPL4xqPfZlUOABnNE5mFeHV5O5KLTELzBXSiVG9Vx fiWYqVvD/UKvgxKVXn3/HL5IyRChHnwv6Xt2BNFsuko68tuNcZF7hKd2cX2zzqay kZkNaJXIzYSy+3o+w5vPpDZhEreJFP9JHnwL17ftubP5+8ldMOFAUucpOmh1B3Le tlwM5nelZT51ss6vL0bpAYnYwsEbfiNawozhQ+gLdkJCZsS9gRbuO/GyjxRRWRkP Kqea1scULQNjIFklUWtTX6u4ChdhLwmZcinifNNtCvXt7zRG6wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFIhm1Qt3rdxzPbM1zcdq53/gA/t+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z ZWI2MDU5OC03NmNhLTQ5YjAtOWExZi0wMTI3MDYwM2Q4ZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzNlYjYwNTk4LTc2Y2EtNDliMC05 YTFmLTAxMjcwNjAzZDhkOS8zZWI2MDU5OC03NmNhLTQ5YjAtOWExZi0wMTI3MDYw M2Q4ZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAAtLZwDBAJsoNQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhmlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKXZd1Afx0nKRWUkJSPgZl3xHJly4LR3Xdgrb127 hcE98iWpjazpg7NISnES66v20udyiFYGlTBs63Ot0VUeAq06MsShKJLognhc1fNQ JHkNWc0exdVCcG8JAyn8lEaCHfMcf8IJrBH7TxoVEQTYW5hj12FF790REUHqfTeA zSqQlnWUE1QuuunOXOXKEfnmwBzqpSnNT2JfvdeiHQsKVJCKQCOFxFpio971DgJ3 e4DG8og5zN3oEzsmxxG7HxH5BsCh18Y2j6j/OhrI1KQ3sJfDPy9Oka7CJQxtlWcu ayIoG8hpXgbQMfa9Ai2uxo1XxYQWRjsXpgbBMxD7PHVo7xU= -----END CERTIFICATE-----Generated at Mon Dec 22 20:06:39 2025 by rpki-client