This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer File: 8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer (raw, json) Hash identifier: HwFrNom3gmUVhCCoVXesC0uYFtVoftTFWBROI2EP0B0= Subject key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C42D41E969A897FBD9E19DD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 21 Dec 2025 13:45:23 +0000 Certificate not after: Sat 25 Mar 2028 12:45:23 +0000 Subordinate resources: IP: 192.203.166.0/24 IP: 204.79.137.0 -- 204.79.140.255 IP: 204.79.172.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:d4:1e:96:9a:89:7f:bd:9e:19:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 21 13:45:23 2025 GMT Not After : Mar 25 12:45:23 2028 GMT Subject: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ab:9d:4f:ca:64:f4:a0:92:07:c6:03:f6:43: 53:cd:e2:32:39:ed:25:d2:c1:8f:21:80:20:5f:97: 66:b2:03:7f:75:50:da:ba:56:0f:2f:1c:90:c7:a4: 75:d3:7d:46:3f:b8:2a:42:1c:74:8a:f5:5e:e4:dd: 67:21:f0:35:ba:e8:1e:17:4a:61:1c:49:f5:61:0e: 1e:b2:03:1d:5f:79:6d:90:9d:64:b1:8e:7b:dc:75: c7:8d:9e:1d:9e:6c:9b:ea:a8:a1:b3:47:d4:24:bf: 95:11:f3:fb:69:61:7f:51:70:f8:08:f6:98:48:8c: 5a:dd:b0:86:f1:fb:f4:5c:52:09:58:54:b9:26:59: 67:bf:1c:da:6a:57:71:48:32:1b:e0:d3:c9:c3:5d: b2:cc:3b:23:04:14:df:57:35:82:e8:c4:15:b1:00: 40:ac:4d:cd:66:a1:00:29:7a:0d:d9:e1:45:46:7c: 90:73:21:c1:05:7a:d4:20:be:e8:20:b2:00:d8:2a: 52:ec:9a:c5:cc:88:00:06:05:1b:93:8a:f5:a5:b2: 30:85:40:88:9d:81:d3:ad:15:2f:a1:0a:a7:70:50: cb:e9:93:c4:19:cf:10:7f:d6:bf:7a:66:51:bf:13: 09:68:61:af:e0:52:00:82:7d:a5:ea:f6:11:74:69: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.203.166.0/24 204.79.137.0-204.79.140.255 204.79.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0d:fb:5b:4a:9d:16:9b:ed:be:07:fe:72:6e:6d:7d:9f:50: 71:87:f3:d9:1c:68:c6:dc:6d:36:04:59:e5:20:2f:75:5a:fb: cf:c7:52:9d:39:09:cc:9e:75:6b:c9:6e:1f:1a:f9:0c:c1:be: 87:aa:c0:65:85:ed:e7:17:a2:76:07:6f:0f:e8:26:07:83:5a: 7c:7e:ff:75:8f:88:ba:f1:44:1a:a5:f4:19:92:44:7a:0b:73: 7b:02:5e:43:5b:12:eb:40:6f:0c:f6:b4:e3:47:cf:5b:3c:84: 7a:15:74:74:c2:71:02:05:e7:94:1e:01:09:77:36:f8:05:97: 95:77:ec:68:66:59:fa:b1:b3:47:64:5d:32:b7:6a:3d:9f:58: a2:24:ee:0b:52:ae:57:28:2f:ee:2e:22:68:4d:50:d2:5c:5a: 06:00:51:5f:c8:23:01:1c:7f:79:61:cf:cc:32:c7:a2:f9:51: f6:4f:e2:8f:45:46:d4:19:dc:06:8f:36:cf:37:3b:40:d1:00: 18:f5:dc:37:10:c7:e6:7a:d6:d9:92:eb:16:45:92:5e:61:c6: ca:5f:75:cb:1c:11:53:7c:5e:66:15:a7:e8:89:97:f8:18:e0: 86:96:63:94:24:7a:a3:0a:8d:58:c0:3e:2b:6a:ab:28:16:dc: 5a:5e:f8:6a -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWExC1B6Wmol/vZ4Z3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTIyMTEzNDUyM1oXDTI4MDMyNTEyNDUyM1owLzEtMCsGA1UEAxMk OGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3ZjdjMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6udT8pk9KCSB8YD9kNTzeIyOe0l0sGPIYAg X5dmsgN/dVDaulYPLxyQx6R1031GP7gqQhx0ivVe5N1nIfA1uugeF0phHEn1YQ4e sgMdX3ltkJ1ksY573HXHjZ4dnmyb6qihs0fUJL+VEfP7aWF/UXD4CPaYSIxa3bCG 8fv0XFIJWFS5JllnvxzaaldxSDIb4NPJw12yzDsjBBTfVzWC6MQVsQBArE3NZqEA KXoN2eFFRnyQcyHBBXrUIL7oILIA2CpS7JrFzIgABgUbk4r1pbIwhUCInYHTrRUv oQqncFDL6ZPEGc8Qf9a/emZRvxMJaGGv4FIAgn2l6vYRdGnbWQIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFE9LOI1fXYTn0ZEEjtRH6wV0sz4TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzhmMTRmOGQ3LTU0MGItNGE0YS1i NWFlLTBhZjE0N2Y3YzFlNC84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdm N2MxZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBADAy6YwDAMEAMxPiQMEAMxPjAMEAMxPrDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQA8DftbSp0Wm+2+B/5ybm19n1Bxh/PZHGjG3G02BFnlIC91WvvPx1KdOQnM nnVryW4fGvkMwb6HqsBlhe3nF6J2B28P6CYHg1p8fv91j4i68UQapfQZkkR6C3N7 Al5DWxLrQG8M9rTjR89bPIR6FXR0wnECBeeUHgEJdzb4BZeVd+xoZln6sbNHZF0y t2o9n1iiJO4LUq5XKC/uLiJoTVDSXFoGAFFfyCMBHH95Yc/MMsei+VH2T+KPRUbU GdwGjzbPNztA0QAY9dw3EMfmetbZkusWRZJeYcbKX3XLHBFTfF5mFafoiZf4GOCG lmOUJHqjCo1YwD4raqsoFtxaXvhq -----END CERTIFICATE-----Generated at Tue Dec 23 05:34:38 2025 by rpki-client