This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer File: d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer (raw, json) Hash identifier: k8eghsQPMx6aHMARa/c6nWkaQjifW1vahzE56PPu4PU= Subject key identifier: 41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C2C7EA7D73F9F23D5A4456880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 13 Dec 2025 13:45:24 +0000 Certificate not after: Fri 17 Mar 2028 12:45:24 +0000 Subordinate resources: IP: 23.187.104.0/24 IP: 130.12.56.0/22 IP: 2602:f833::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2c:7e:a7:d7:3f:9f:23:d5:a4:45:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 13 13:45:24 2025 GMT Not After : Mar 17 12:45:24 2028 GMT Subject: CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:44:21:8b:28:aa:47:dc:43:5a:02:a5:2d: 5e:9d:6f:17:aa:b5:74:ea:71:72:1e:84:a6:13:9f: 5f:0f:6a:52:0d:7d:ce:aa:e9:ae:be:c6:b8:7d:be: 64:f1:d2:73:7e:fc:f1:fd:a8:16:3d:eb:f3:ec:d8: 04:44:10:22:d5:80:72:48:61:1d:fe:85:5f:c7:a9: 3b:53:77:2b:9d:86:ee:a8:b9:df:c1:3b:06:bc:70: bc:11:18:f1:6a:cb:e8:20:44:a0:5c:16:cb:01:77: 68:e2:b7:56:61:e3:e4:eb:16:36:f8:f3:ed:bc:15: 32:a3:41:38:3d:4e:24:9e:3e:c9:83:15:31:aa:3b: 95:72:3c:85:6f:60:6c:05:59:b0:27:e5:54:49:77: 6e:cd:f7:2b:1c:94:79:cf:a4:69:9f:7b:3c:7d:26: 1c:c2:9a:36:c6:de:e1:da:ac:0d:8f:19:76:0c:01: 46:b5:81:c3:cf:18:95:f2:fc:0f:4a:28:83:b9:5d: 54:a8:81:50:a8:f2:86:42:12:6f:4f:67:17:23:e3: 87:0f:8f:07:2b:33:3d:a1:2c:af:bb:c3:32:73:7b: 34:2b:04:46:e1:b0:db:bf:8a:f5:bc:c1:61:49:73: 3d:41:df:9a:a1:08:ad:c6:d9:f3:7a:ed:89:3d:9a: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.187.104.0/24 130.12.56.0/22 IPv6: 2602:f833::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2c:85:ed:ae:82:82:e8:a7:ef:41:f9:29:54:13:04:ae:af: 41:e4:69:b5:d5:ab:51:95:3f:96:4a:26:54:50:b4:d1:a2:d7: c8:f8:14:56:63:b1:7b:11:44:fa:47:32:d5:ec:ab:14:d0:48: 6b:aa:ac:1a:14:c3:89:e4:c7:20:4d:b4:ff:65:79:9e:07:da: 82:55:25:7c:3b:f1:20:0c:47:5b:00:b1:3d:bf:05:7f:43:6c: 19:c9:99:4d:58:a4:1d:cb:a1:11:06:f4:f2:df:71:e4:72:d2: af:b2:d4:80:51:c0:47:2f:93:dd:46:bf:87:b4:3b:70:0c:70: ae:de:a8:20:cd:91:22:25:f9:18:93:18:a4:a4:25:8c:f4:04: f2:0d:b5:46:e6:04:6c:f5:00:8b:b7:56:66:24:67:61:2c:52: 87:04:f0:fc:f4:c9:5e:6b:a7:36:13:70:11:ab:5c:73:64:78: b2:5a:9d:f7:08:ab:51:83:8e:29:a4:b1:70:95:1a:a0:9d:58: 56:93:14:84:37:c0:11:2b:bc:42:c6:f0:2f:f1:54:09:e3:91: 78:be:69:02:90:17:cc:59:cb:c9:61:d7:1d:57:a0:b8:9b:3d: 60:c8:6d:c2:7f:2a:e0:9f:f2:f7:27:8e:83:c5:44:da:88:7b: e3:58:70:a0 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEwsfqfXP58j1aRFaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTIxMzEzNDUyNFoXDTI4MDMxNzEyNDUyNFowLzEtMCsGA1UEAxMk ZDE4YTIyMDYtYmIyZC00OGNkLTliZDgtNzgwNjc4MmUxYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXNEIYsoqkfcQ1oCpS1enW8XqrV06nFyHoSm E59fD2pSDX3Oqumuvsa4fb5k8dJzfvzx/agWPevz7NgERBAi1YBySGEd/oVfx6k7 U3crnYbuqLnfwTsGvHC8ERjxasvoIESgXBbLAXdo4rdWYePk6xY2+PPtvBUyo0E4 PU4knj7JgxUxqjuVcjyFb2BsBVmwJ+VUSXduzfcrHJR5z6Rpn3s8fSYcwpo2xt7h 2qwNjxl2DAFGtYHDzxiV8vwPSiiDuV1UqIFQqPKGQhJvT2cXI+OHD48HKzM9oSyv u8Myc3s0KwRG4bDbv4r1vMFhSXM9Qd+aoQitxtnzeu2JPZozmwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFEHv/ysmv5iKrrBdRFr8noerrU9aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k MThhMjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2NzgyZTFjNDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2QxOGEyMjA2LWJiMmQtNDhjZC05 YmQ4LTc4MDY3ODJlMWM0Ni9kMThhMjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2Nzgy ZTFjNDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXu2gDBAKCDDgwDgQCAAIwCAMGACYC+DMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoshe2ugoLop+9B+SlUEwSur0HkabXVq1GVP5ZKJlRQtNGi18j4FFZj sXsRRPpHMtXsqxTQSGuqrBoUw4nkxyBNtP9leZ4H2oJVJXw78SAMR1sAsT2/BX9D bBnJmU1YpB3LoREG9PLfceRy0q+y1IBRwEcvk91Gv4e0O3AMcK7eqCDNkSIl+RiT GKSkJYz0BPINtUbmBGz1AIu3VmYkZ2EsUocE8Pz0yV5rpzYTcBGrXHNkeLJanfcI q1GDjimksXCVGqCdWFaTFIQ3wBErvELG8C/xVAnjkXi+aQKQF8xZy8lh1x1XoLib PWDIbcJ/KuCf8vcnjoPFRNqIe+NYcKA= -----END CERTIFICATE-----Generated at Sat Dec 20 06:40:46 2025 by rpki-client