This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer File: 0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer (raw, json) Hash identifier: AiQG3KMHVuZfWmxbJNYsoc6PDanlVLLiV6VAtYsdmOM= Subject key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584C18F3DDD9CDAC99F38374D040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 06 Dec 2025 13:45:24 +0000 Certificate not after: Fri 10 Mar 2028 13:45:24 +0000 Subordinate resources: AS: 6250 AS: 14793 IP: 67.58.64.0/19 IP: 67.218.160.0/19 IP: 74.51.96.0/19 IP: 76.164.160.0/19 IP: 137.118.0.0/15 IP: 173.242.192.0/20 IP: 216.228.80.0/20 IP: 2001:408::/32 IP: 2620:69:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:f3:dd:d9:cd:ac:99:f3:83:74:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Dec 6 13:45:24 2025 GMT Not After : Mar 10 13:45:24 2028 GMT Subject: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:89:ef:29:84:e9:db:04:b1:c1:fe:db:34:a0: c6:a7:2f:c1:2f:aa:6d:ed:6b:e3:c6:46:5d:15:3f: 1b:46:69:45:88:d1:e3:2c:ca:bb:28:a2:8e:f6:43: 73:63:72:91:eb:39:68:6f:be:96:84:a5:d6:f1:77: f6:36:5b:17:1d:f2:c6:4d:37:0a:c7:a9:81:dd:30: fe:75:bd:0f:00:3f:57:9f:8b:63:36:e3:b9:59:1b: d7:33:b5:ac:00:56:f2:3e:7e:91:9a:02:94:f1:53: 7b:e9:47:89:a0:83:d0:27:f3:91:7f:f4:c1:7a:dd: ea:4c:69:5d:9a:25:f2:88:39:54:67:6b:ac:56:89: 97:67:cc:a9:61:cb:ef:52:d4:ca:16:69:38:f3:9e: 0c:88:4a:c3:4e:7d:5d:7e:26:84:61:7f:9d:5a:a6: bf:d7:29:5d:3f:9a:25:7b:79:09:85:14:88:54:35: 91:18:5e:03:58:51:c2:18:0a:0f:d4:fe:be:f3:b2: 57:1d:8d:ac:0f:08:bb:ea:ae:46:00:63:b6:98:3e: 2a:23:1b:be:48:2f:17:f4:49:ce:19:de:0e:60:ef: d7:db:8e:81:93:7f:47:cd:f5:3c:54:d6:7d:b6:3a: af:9c:da:5f:ed:0e:dc:1d:58:23:68:fe:78:93:af: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 67.58.64.0/19 67.218.160.0/19 74.51.96.0/19 76.164.160.0/19 137.118.0.0/15 173.242.192.0/20 216.228.80.0/20 IPv6: 2001:408::/32 2620:69:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6250 14793 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ff:6c:cd:9a:6b:3a:c1:00:37:66:80:a9:6a:38:6b:06:2e: 79:d9:b2:ec:7c:05:77:c1:5a:50:9c:2a:2e:0a:9c:2f:6f:c4: e4:10:fa:70:26:03:5d:36:53:55:5f:30:85:93:19:99:7d:ad: 3e:ab:19:b8:a4:bf:12:4f:88:f5:05:d5:5d:d5:e0:a5:b0:de: 34:fb:c6:95:fe:8e:96:03:9e:1c:d4:f9:77:1e:03:81:51:1c: 95:3c:d5:a8:51:f9:7a:d2:67:42:62:ec:07:92:e4:17:a8:a7: 40:b6:70:f8:d1:06:fc:67:51:bd:41:60:6e:77:5a:99:f0:4e: 9c:ce:bb:43:c5:25:e6:82:c6:70:c2:52:ce:8b:e4:c1:e0:df: 9c:95:50:84:50:42:88:5c:ab:b2:98:6d:f5:75:9f:2c:52:05: 7f:5c:fe:14:39:91:8e:f6:87:48:d2:b3:28:5e:68:d3:71:ad: 2a:06:52:92:ef:3a:6d:03:2f:d0:d2:b8:65:3a:ec:31:7a:38: e9:20:2b:58:54:42:5b:5b:f1:b9:a8:2b:2f:3b:fd:a1:b2:9e: 36:a5:ae:69:3a:99:05:61:eb:bd:17:34:8f:88:10:de:6e:bd: 9e:d4:18:f4:4d:da:97:01:40:95:08:72:65:fc:3f:8f:d3:b0: 03:2e:3a:ec -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWEwY893ZzayZ84N00EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTIwNjEzNDUyNFoXDTI4MDMxMDEzNDUyNFowLzEtMCsGA1UEAxMk MGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1YzdiMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiInvKYTp2wSxwf7bNKDGpy/BL6pt7WvjxkZd FT8bRmlFiNHjLMq7KKKO9kNzY3KR6zlob76WhKXW8Xf2NlsXHfLGTTcKx6mB3TD+ db0PAD9Xn4tjNuO5WRvXM7WsAFbyPn6RmgKU8VN76UeJoIPQJ/ORf/TBet3qTGld miXyiDlUZ2usVomXZ8ypYcvvUtTKFmk4854MiErDTn1dfiaEYX+dWqa/1yldP5ol e3kJhRSIVDWRGF4DWFHCGAoP1P6+87JXHY2sDwi76q5GAGO2mD4qIxu+SC8X9EnO Gd4OYO/X246Bk39HzfU8VNZ9tjqvnNpf7Q7cHVgjaP54k6+dXwIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFEKXLy9zWet69WFgDQ45V4U41hvJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8w ZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzBkMDM3OGE5LTEwM2MtNDVjYS04 NjlkLTdjOTExNWM3YjBmNi8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVj N2IwZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwWgYIKwYBBQUH AQcBAf8ESzBJMC8EAgABMCkDBAVDOkADBAVD2qADBAVKM2ADBAVMpKADAwGJdgME BK3ywAMEBNjkUDAWBAIAAjAQAwUAIAEECAMHACYgAGmAADAdBggrBgEFBQcBCAEB /wQOMAygCjAIAgIYagICOckwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWP9szZprOsEAN2aAqWo4awYuedmy 7HwFd8FaUJwqLgqcL2/E5BD6cCYDXTZTVV8whZMZmX2tPqsZuKS/Ek+I9QXVXdXg pbDeNPvGlf6OlgOeHNT5dx4DgVEclTzVqFH5etJnQmLsB5LkF6inQLZw+NEG/GdR vUFgbndamfBOnM67Q8Ul5oLGcMJSzovkweDfnJVQhFBCiFyrspht9XWfLFIFf1z+ FDmRjvaHSNKzKF5o03GtKgZSku86bQMv0NK4ZTrsMXo46SArWFRCW1vxuagrLzv9 obKeNqWuaTqZBWHrvRc0j4gQ3m69ntQY9E3alwFAlQhyZfw/j9OwAy467A== -----END CERTIFICATE-----Generated at Sun Dec 21 04:09:50 2025 by rpki-client