This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260.cer File: a32f8632-bd41-4783-afca-fc93bcb85260.cer (raw, json) Hash identifier: zRTgOETF0QdhP7vp3cgtfl2KrRgfuq2ytZT29f65/IQ= Subject key identifier: 4E:76:F5:2D:CF:B4:A8:64:5D:50:9F:3E:9A:C1:31:4D:4D:87:F3:83 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C1BBE8BAA453312C0B2A10260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Dec 2025 13:45:23 +0000 Certificate not after: Sat 11 Mar 2028 13:45:23 +0000 Subordinate resources: AS: 398850 IP: 192.234.172.0/24 IP: 204.235.170.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1b:be:8b:aa:45:33:12:c0:b2:a1:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 7 13:45:23 2025 GMT Not After : Mar 11 13:45:23 2028 GMT Subject: CN=a32f8632-bd41-4783-afca-fc93bcb85260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:38:ef:fb:22:05:55:de:fe:28:9f:08:76: be:42:b1:81:52:1c:03:0a:9c:01:80:21:2b:6a:01: 05:63:83:7d:8a:b6:ef:f3:01:0e:86:88:1e:4b:35: 3a:44:bd:f7:fa:87:bb:4f:8d:99:1a:76:63:07:5d: 64:a3:39:64:44:11:0c:16:53:6a:5a:0f:41:7c:1f: 9d:54:b9:88:2b:fe:0d:27:eb:23:93:cd:f7:13:31: fa:ad:51:60:42:4f:46:a4:f9:11:ff:62:85:88:c3: 05:48:5d:59:a2:4f:6c:0f:cc:9c:2f:3f:fd:c5:47: 26:f7:0d:4f:e5:95:9a:0c:b8:bb:e0:df:7d:03:37: 4f:8d:9a:6b:88:61:e9:09:9f:89:9e:84:4f:98:73: d3:b9:9c:6b:2f:c0:6f:f2:0b:f0:d5:ba:34:56:b8: a5:b0:3c:bb:e9:20:5a:25:b5:c9:8a:dc:a7:c4:e4: 23:ad:71:64:88:04:a0:3b:82:f1:b2:ee:4b:d8:7d: 30:20:f6:b4:ae:97:96:25:fe:9d:d9:8c:52:44:b8: dd:3b:73:d6:c3:73:0f:a4:12:7c:13:f7:eb:bc:31: 29:73:79:72:6e:f6:cf:d9:dd:a9:01:d9:b8:9b:0f: 1d:22:76:a2:09:6d:87:35:55:c0:e0:87:98:82:62: ec:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:76:F5:2D:CF:B4:A8:64:5D:50:9F:3E:9A:C1:31:4D:4D:87:F3:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.234.172.0/24 204.235.170.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398850 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f8:c0:7b:a2:95:5b:9b:36:99:89:17:56:29:03:84:f3:44: 74:40:c1:b0:b5:88:0f:eb:e4:57:49:aa:37:c2:24:e3:43:ee: 7b:cc:23:42:72:8e:17:29:c4:da:3e:0f:ec:c1:f6:40:90:1b: 7e:58:2d:f3:cb:54:63:a1:f8:e8:d3:1e:99:be:3b:13:a6:ea: 51:03:9c:40:a2:20:13:6e:21:93:09:3d:f5:94:80:39:91:eb: 67:27:e9:6a:42:da:2f:40:70:71:f2:bd:b3:93:2b:1b:00:16: 01:69:92:43:0c:b4:d9:5e:b2:a9:f0:5c:21:04:97:e8:d0:92: d3:67:8e:66:20:19:9d:b0:be:3a:a5:42:e2:b9:59:44:fc:c0: ab:38:53:d9:cf:3c:f7:c6:39:24:08:9d:3e:63:07:e5:0d:c6: 18:5a:28:8e:a9:6c:2b:94:c1:7c:cc:92:53:71:36:73:d1:dd: 55:0e:95:5c:f7:88:57:9a:15:77:07:db:21:dd:ff:c9:27:46: 53:d9:34:cb:2e:42:8c:97:c3:64:63:2f:2a:dd:ff:9f:2e:ec: 91:a0:89:12:2e:7f:18:a8:21:0b:0c:a1:43:3b:7d:8c:10:c2: 75:7a:2f:df:75:14:bf:c9:cf:34:7c:cb:2f:79:1d:33:82:e9: 52:47:b5:85 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEwbvouqRTMSwLKhAmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTIwNzEzNDUyM1oXDTI4MDMxMTEzNDUyM1owLzEtMCsGA1UEAxMk YTMyZjg2MzItYmQ0MS00NzgzLWFmY2EtZmM5M2JjYjg1MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxQ47/siBVXe/iifCHa+QrGBUhwDCpwBgCEr agEFY4N9irbv8wEOhogeSzU6RL33+oe7T42ZGnZjB11kozlkRBEMFlNqWg9BfB+d VLmIK/4NJ+sjk833EzH6rVFgQk9GpPkR/2KFiMMFSF1Zok9sD8ycLz/9xUcm9w1P 5ZWaDLi74N99AzdPjZpriGHpCZ+JnoRPmHPTuZxrL8Bv8gvw1bo0VrilsDy76SBa JbXJitynxOQjrXFkiASgO4Lxsu5L2H0wIPa0rpeWJf6d2YxSRLjdO3PWw3MPpBJ8 E/frvDEpc3lybvbP2d2pAdm4mw8dInaiCW2HNVXA4IeYgmLs3wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFE529S3PtKhkXVCfPprBMU1Nh/ODMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h MzJmODYzMi1iZDQxLTQ3ODMtYWZjYS1mYzkzYmNiODUyNjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2EzMmY4NjMyLWJkNDEtNDc4My1h ZmNhLWZjOTNiY2I4NTI2MC9hMzJmODYzMi1iZDQxLTQ3ODMtYWZjYS1mYzkzYmNi ODUyNjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADA6qwDBAHM66owGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhYCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEj4wHuilVubNpmJF1YpA4TzRHRAwbC1iA/r5FdJ qjfCJOND7nvMI0JyjhcpxNo+D+zB9kCQG35YLfPLVGOh+OjTHpm+OxOm6lEDnECi IBNuIZMJPfWUgDmR62cn6WpC2i9AcHHyvbOTKxsAFgFpkkMMtNlesqnwXCEEl+jQ ktNnjmYgGZ2wvjqlQuK5WUT8wKs4U9nPPPfGOSQInT5jB+UNxhhaKI6pbCuUwXzM klNxNnPR3VUOlVz3iFeaFXcH2yHd/8knRlPZNMsuQoyXw2RjLyrd/58u7JGgiRIu fxioIQsMoUM7fYwQwnV6L991FL/JzzR8yy95HTOC6VJHtYU= -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:45 2025 by rpki-client