This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer File: 86fea470-b380-45c0-9f6b-033b7d884388.cer (raw, json) Hash identifier: Rk7o5qzuXAreaukmNmqAm9lEUGFDC9s+dOp69p7jgtc= Subject key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C2DE3FD891EF559DEC1416980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 14 Dec 2025 01:45:23 +0000 Certificate not after: Sat 18 Mar 2028 00:45:23 +0000 Subordinate resources: AS: 17048 AS: 33333 IP: 67.220.64.0/19 IP: 68.168.16.0/20 IP: 69.42.208.0/20 IP: 186.190.208.0/20 IP: 2607:3b40::/32 IP: 2607:f5a0::/32 IP: 2607:ffd8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2d:e3:fd:89:1e:f5:59:de:c1:41:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 14 01:45:23 2025 GMT Not After : Mar 18 00:45:23 2028 GMT Subject: CN=86fea470-b380-45c0-9f6b-033b7d884388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c4:fc:cf:0c:9d:73:b2:7e:b1:20:96:5f:80: 4a:5e:77:a9:a1:38:db:ee:5b:b0:e8:c9:d6:d2:40: 78:01:63:bb:46:52:bd:72:88:1f:96:fe:8c:5a:b8: 1b:73:b2:95:d4:21:d0:61:73:d9:4e:ec:b9:b8:fd: 8b:07:4c:5b:ba:0a:54:ec:4f:17:a7:23:af:6a:af: 21:91:db:27:97:44:39:20:48:58:5d:de:b7:dd:dc: c7:65:cc:dd:ad:f7:77:75:62:5f:5d:ce:c8:41:78: 90:c6:77:bb:3e:92:87:29:31:25:2d:02:68:0e:64: 51:44:a1:85:e6:17:79:ad:7d:f0:5a:de:98:6c:65: 9d:b5:23:80:dd:b2:44:5e:5c:97:2e:8d:59:b4:fd: 36:73:8b:0f:13:0a:40:12:2b:b1:67:14:d1:57:d2: e4:3f:c3:37:e5:8f:eb:3d:69:b7:66:7c:a6:cd:ff: 31:28:34:c3:8d:f7:2b:fe:a8:7e:88:44:56:9d:87: e4:af:7a:97:bf:86:78:b1:f0:4d:3a:4f:7f:18:8f: e3:e3:ec:6d:31:57:4b:1e:a3:67:76:3e:79:19:34: b8:ee:9a:2c:cd:e3:d1:1d:ca:89:08:45:74:0f:35: 25:94:8f:c3:9f:dc:b6:49:80:5d:79:6d:2f:25:4e: 37:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 67.220.64.0/19 68.168.16.0/20 69.42.208.0/20 186.190.208.0/20 IPv6: 2607:3b40::/32 2607:f5a0::/32 2607:ffd8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17048 33333 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:03:dd:48:5b:1f:d0:ca:70:5d:ab:55:8b:fa:77:73:ea:52: 85:0c:80:9b:0b:e0:3b:df:cc:d2:a6:47:88:95:63:09:39:db: 47:b6:a9:db:a0:dd:ee:43:32:53:dd:65:45:76:1a:52:e5:d4: 7d:58:a5:18:f6:e1:8b:2c:12:20:d2:27:92:7a:ad:1a:51:70: b7:3b:b6:d8:f6:81:2b:ee:e5:79:3a:eb:2b:21:e7:83:ec:23: e4:ad:33:34:be:d9:8e:91:a1:ee:07:12:66:a6:56:f9:92:e5: e2:bd:94:f4:2b:8c:fa:5e:f9:c1:a7:02:18:da:21:f7:76:29: 75:e7:2d:1b:cd:8c:a8:9d:57:c8:75:aa:fc:ca:35:97:e6:cd: 38:78:f1:b8:71:a3:d5:06:4a:62:f6:8a:5c:15:1e:ef:d9:9e: ee:41:3d:79:5f:12:cc:e5:db:36:32:1b:40:dc:43:ef:36:52: f5:65:b1:e4:7d:53:c3:68:30:eb:e0:12:e1:b9:fc:0e:05:cd: cc:91:d3:93:b4:e8:9f:35:96:d0:e1:c2:97:f7:bd:4f:7d:44: 39:0f:a7:34:1e:61:51:9b:4b:29:ae:dc:ba:5b:17:2f:8a:6a: 10:7c:1c:23:40:b3:20:c3:5e:a9:72:a1:af:d6:56:da:12:58: f0:62:69:68 -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWEwt4/2JHvVZ3sFBaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTIxNDAxNDUyM1oXDTI4MDMxODAwNDUyM1owLzEtMCsGA1UEAxMk ODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0Mzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cT8zwydc7J+sSCWX4BKXnepoTjb7luw6MnW 0kB4AWO7RlK9cogflv6MWrgbc7KV1CHQYXPZTuy5uP2LB0xbugpU7E8XpyOvaq8h kdsnl0Q5IEhYXd633dzHZczdrfd3dWJfXc7IQXiQxne7PpKHKTElLQJoDmRRRKGF 5hd5rX3wWt6YbGWdtSOA3bJEXlyXLo1ZtP02c4sPEwpAEiuxZxTRV9LkP8M35Y/r PWm3Znymzf8xKDTDjfcr/qh+iERWnYfkr3qXv4Z4sfBNOk9/GI/j4+xtMVdLHqNn dj55GTS47poszePRHcqJCEV0DzUllI/Dn9y2SYBdeW0vJU43fQIDAQABo4IETjCC BEowHQYDVR0OBBYEFAh0ijEJPCxJRKEuitZcnpIEAc8WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1Lzg2ZmVhNDcwLWIzODAtNDVjMC05 ZjZiLTAzM2I3ZDg4NDM4OC84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4 ODQzODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MB4EAgABMBgDBAVD3EADBAREqBADBARFKtADBAS6vtAwGwQCAAIw FQMFACYHO0ADBQAmB/WgAwUAJgf/2DAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJC mAIDAII1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAFsD3UhbH9DKcF2rVYv6d3PqUoUMgJsL4DvfzNKmR4iV Ywk520e2qdug3e5DMlPdZUV2GlLl1H1YpRj24YssEiDSJ5J6rRpRcLc7ttj2gSvu 5Xk66ysh54PsI+StMzS+2Y6Roe4HEmamVvmS5eK9lPQrjPpe+cGnAhjaIfd2KXXn LRvNjKidV8h1qvzKNZfmzTh48bhxo9UGSmL2ilwVHu/Znu5BPXlfEszl2zYyG0Dc Q+82UvVlseR9U8NoMOvgEuG5/A4FzcyR05O06J81ltDhwpf3vU99RDkPpzQeYVGb Symu3LpbFy+KahB8HCNAsyDDXqlyoa/WVtoSWPBiaWg= -----END CERTIFICATE-----Generated at Sat Dec 20 13:17:14 2025 by rpki-client