This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer File: ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer (raw, json) Hash identifier: FuagDa91/anAVx7mP6IjheJ9WNtfyVKhQEuc32fW7v0= Subject key identifier: 88:93:B7:98:DC:F4:AB:C3:B0:AB:85:11:37:4D:66:45:90:71:DA:D0 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C35320FFC485BE6BDA6A3CDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Dec 2025 16:33:21 +0000 Certificate not after: Mon 13 Mar 2028 19:22:44 +0000 Subordinate resources: AS: 399353 IP: 199.21.100.0/22 IP: 2602:f94e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:35:32:0f:fc:48:5b:e6:bd:a6:a3:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 16 16:33:21 2025 GMT Not After : Mar 13 19:22:44 2028 GMT Subject: CN=ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:6c:9c:d3:8f:1c:2c:7f:4e:e5:28:5c:2b: 51:c0:73:7e:c6:5d:8f:c8:05:15:2c:c6:8f:6b:56: 5f:ef:1d:1f:2c:84:56:a2:ac:74:c1:3a:20:35:07: e3:37:ec:71:11:89:f7:7f:87:a6:f8:da:bb:df:b4: f1:0f:7d:87:39:9f:db:7a:5d:c2:5e:e9:e0:18:92: 50:35:4e:61:c1:82:fe:94:48:29:6c:40:f5:0b:b7: c1:b4:24:c2:e5:4c:d1:0a:39:8a:fd:be:0c:45:ed: 5a:ef:83:47:0c:22:46:ac:b0:93:d4:83:70:33:0f: 7e:64:99:01:44:21:71:62:6b:8b:b8:db:c2:bf:19: bc:33:6c:af:30:2e:53:dc:cc:03:3f:c7:87:20:a5: c5:79:44:62:94:f3:0c:0f:51:48:4e:f1:99:d7:0d: 7d:bc:5c:bb:da:2d:cc:08:62:bc:54:2f:68:36:ee: 26:43:19:13:b4:70:67:1e:9b:df:d4:7b:5c:fe:32: 92:71:df:4b:d7:50:fc:d6:3f:5a:16:a2:ba:f7:71: a8:08:19:40:fc:ca:76:8d:49:9f:71:7c:bd:98:36: 79:e8:52:e8:98:cb:48:01:a6:0d:70:de:a8:88:62: 3b:1d:80:dc:40:88:a2:ce:0a:fc:2b:3f:b2:7f:75: 7d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:93:B7:98:DC:F4:AB:C3:B0:AB:85:11:37:4D:66:45:90:71:DA:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.21.100.0/22 IPv6: 2602:f94e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399353 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:99:eb:28:c1:b1:68:a1:ac:53:fc:c6:66:0a:41:c9:a9:4d: 80:06:63:a0:5a:7a:43:19:d9:c8:1f:46:1f:cd:89:96:99:8e: 0b:9f:40:d2:8f:30:d8:64:6f:aa:ac:49:cf:4d:66:50:2e:74: e7:2f:89:6a:91:03:6b:94:92:b4:d5:ef:73:da:e8:30:1c:2b: 27:bd:c6:59:29:41:f9:bb:70:fa:ff:31:e4:cd:0c:97:6c:27: 9c:0d:45:74:3a:61:a6:f3:20:4b:e6:2e:1a:c4:2f:ac:53:09: 2b:b6:50:95:64:63:8b:1a:9c:c0:32:5f:38:d0:7e:5d:de:92: 77:e8:55:c3:87:3d:8c:6d:c2:f5:e4:de:91:41:3a:ef:df:8d: 46:cc:61:3c:18:3c:b4:8c:79:bd:db:d3:37:dc:58:f7:80:e9: 84:cd:04:87:ad:bb:5b:54:23:1c:49:14:5a:ae:6a:2d:97:0c: 53:a9:9e:fd:02:08:b5:79:26:eb:39:f1:a9:82:2c:2d:92:c5: a7:5e:e4:60:bf:c5:7b:15:26:9a:70:eb:45:fe:8f:32:aa:c0: 49:77:20:fe:5e:95:b3:3b:84:0c:49:01:eb:64:a3:9d:cd:df: 7c:fc:6d:a2:0b:e2:5a:f3:3b:c2:f0:b5:90:8f:21:1c:be:30: dd:71:92:dd -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEw1Mg/8SFvmvaajzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTIxNjE2MzMyMVoXDTI4MDMxMzE5MjI0NFowLzEtMCsGA1UEAxMk YWMwY2ZiZjQtYjZhZC00ZjNhLThlZWMtZTM4MmRmMjkzOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlddsnNOPHCx/TuUoXCtRwHN+xl2PyAUVLMaP a1Zf7x0fLIRWoqx0wTogNQfjN+xxEYn3f4em+Nq737TxD32HOZ/bel3CXungGJJQ NU5hwYL+lEgpbED1C7fBtCTC5UzRCjmK/b4MRe1a74NHDCJGrLCT1INwMw9+ZJkB RCFxYmuLuNvCvxm8M2yvMC5T3MwDP8eHIKXFeURilPMMD1FITvGZ1w19vFy72i3M CGK8VC9oNu4mQxkTtHBnHpvf1Htc/jKScd9L11D81j9aFqK693GoCBlA/Mp2jUmf cXy9mDZ56FLomMtIAaYNcN6oiGI7HYDcQIiizgr8Kz+yf3V9ywIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIiTt5jc9KvDsKuFETdNZkWQcdrQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h YzBjZmJmNC1iNmFkLTRmM2EtOGVlYy1lMzgyZGYyOTM4YzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FjMGNmYmY0LWI2YWQtNGYzYS04 ZWVjLWUzODJkZjI5MzhjMi9hYzBjZmJmNC1iNmFkLTRmM2EtOGVlYy1lMzgyZGYy OTM4YzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHFWQwDgQCAAIwCAMGACYC+U4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYX+TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqmesowbFooaxT/MZmCkHJqU2A BmOgWnpDGdnIH0YfzYmWmY4Ln0DSjzDYZG+qrEnPTWZQLnTnL4lqkQNrlJK01e9z 2ugwHCsnvcZZKUH5u3D6/zHkzQyXbCecDUV0OmGm8yBL5i4axC+sUwkrtlCVZGOL GpzAMl840H5d3pJ36FXDhz2MbcL15N6RQTrv341GzGE8GDy0jHm929M33Fj3gOmE zQSHrbtbVCMcSRRarmotlwxTqZ79Agi1eSbrOfGpgiwtksWnXuRgv8V7FSaacOtF /o8yqsBJdyD+XpWzO4QMSQHrZKOdzd98/G2iC+Ja8zvC8LWQjyEcvjDdcZLd -----END CERTIFICATE-----Generated at Mon Dec 22 19:59:05 2025 by rpki-client