This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer File: 32262fda-73b9-4875-8f83-9733217ce893.cer (raw, json) Hash identifier: Y4P9OtmjLWbbNSCSTCmrWm9+QBIIWE1Ht7DT5c06o/8= Subject key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584C34DEB4B7E2044E5A888F9B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Dec 2025 13:45:23 +0000 Certificate not after: Mon 20 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 20278 IP: 64.44.0.0/16 IP: 96.9.192.0/18 IP: 104.200.48.0/20 IP: 104.237.192.0/19 IP: 167.88.0.0/20 IP: 172.93.128.0/17 IP: 2602:ffc8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:34:de:b4:b7:e2:04:4e:5a:88:8f:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 16 13:45:23 2025 GMT Not After : Mar 20 12:45:23 2028 GMT Subject: CN=32262fda-73b9-4875-8f83-9733217ce893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:06:78:1b:40:d6:23:1e:24:bd:16:e8:3c:96: 6c:af:47:99:ea:4d:01:05:e7:08:3f:5b:8a:7d:8a: a2:32:52:98:76:a1:0e:eb:e9:e2:48:6d:0c:55:84: 57:51:56:ac:cd:5b:4c:97:5b:d5:06:25:e5:0a:87: db:7f:ce:79:cb:8e:2e:10:97:dc:30:94:43:c7:67: 3c:83:3c:d3:c8:e5:5e:47:57:29:ac:cb:52:be:7d: ea:78:3c:1d:8c:55:4d:2e:22:54:9d:81:71:35:f6: 07:d0:32:7e:47:85:50:ae:ca:f0:57:9b:97:3f:16: 60:17:9f:8a:85:c2:58:c7:37:cb:21:95:1d:05:b1: 33:b1:86:ff:f3:9b:5f:9d:a0:98:7f:47:4b:aa:2f: c8:e8:6b:89:9a:13:82:77:1c:ba:3b:46:8c:d9:69: e1:31:2b:62:86:b6:e4:3d:51:71:39:eb:02:26:e2: 03:81:c7:46:13:b1:ea:a6:c1:5f:f7:3d:9d:be:54: 5f:4e:8b:ed:ff:50:c5:28:20:34:08:20:df:5b:99: a3:01:6c:f1:0f:b6:f7:de:c2:d0:86:91:34:a5:8d: 04:a5:13:1b:62:fb:a0:46:b7:fe:ab:2f:6e:31:44: ca:a8:9f:fb:7c:37:cc:45:87:02:ef:57:1f:2b:1a: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.44.0.0/16 96.9.192.0/18 104.200.48.0/20 104.237.192.0/19 167.88.0.0/20 172.93.128.0/17 IPv6: 2602:ffc8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20278 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:12:0a:0c:0f:fb:c0:03:98:65:00:d9:8c:30:28:03:37:e5: df:6f:fa:57:9f:c0:f1:0a:fb:0b:1e:64:2b:ed:80:06:97:1e: 05:f3:2a:21:48:16:0a:a1:05:31:b3:6b:3d:38:97:22:f1:88: 1e:04:4e:70:52:1b:1e:65:ca:e9:1c:3b:d9:ad:a5:ec:56:48: fd:b7:ed:3f:03:d2:57:10:45:d0:cf:93:67:3a:5e:65:22:92: de:9e:28:7f:07:05:b6:0c:16:5d:4a:04:21:8c:80:62:6f:13: 8a:3d:39:34:73:5c:48:34:f3:56:d7:d8:54:a6:83:b4:10:b5: 79:70:1e:ff:da:81:ac:fd:ab:ef:36:04:bc:09:cb:47:84:78: 4a:51:e3:66:fa:b9:3f:bb:36:87:38:8a:75:f4:1c:3a:5f:8b: 7d:1e:6c:df:58:e7:df:e3:dd:95:9c:e9:25:db:ab:e4:19:8b: 35:81:85:8c:44:4f:79:1d:67:62:3f:22:43:7e:12:89:c5:54: 0c:9f:0f:08:82:da:85:d7:f4:0d:b7:c1:21:9f:00:6f:d6:12: d4:8c:73:ad:2c:7e:25:95:94:af:08:38:36:cb:49:9b:5c:64: cb:54:13:50:b1:69:fa:b4:de:e8:c6:6e:03:80:3b:9e:51:df: 45:27:15:19 -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWEw03rS34gROWoiPm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTIxNjEzNDUyM1oXDTI4MDMyMDEyNDUyM1owLzEtMCsGA1UEAxMk MzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2NlODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigZ4G0DWIx4kvRboPJZsr0eZ6k0BBecIP1uK fYqiMlKYdqEO6+niSG0MVYRXUVaszVtMl1vVBiXlCofbf855y44uEJfcMJRDx2c8 gzzTyOVeR1cprMtSvn3qeDwdjFVNLiJUnYFxNfYH0DJ+R4VQrsrwV5uXPxZgF5+K hcJYxzfLIZUdBbEzsYb/85tfnaCYf0dLqi/I6GuJmhOCdxy6O0aM2WnhMStihrbk PVFxOesCJuIDgcdGE7HqpsFf9z2dvlRfTovt/1DFKCA0CCDfW5mjAWzxD7b33sLQ hpE0pY0EpRMbYvugRrf+qy9uMUTKqJ/7fDfMRYcC71cfKxpThQIDAQABo4IERjCC BEIwHQYDVR0OBBYEFJaKi/o4jnxWAh+Wq00gpE0b/xmtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z MjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMyMjYyZmRhLTczYjktNDg3NS04 ZjgzLTk3MzMyMTdjZTg5My8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3 Y2U4OTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwSwYIKwYBBQUH AQcBAf8EPDA6MCkEAgABMCMDAwBALAMEBmAJwAMEBGjIMAMEBWjtwAMEBKdYAAME B6xdgDANBAIAAjAHAwUAJgL/yDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJPNjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6EgoMD/vAA5hlANmMMCgDN+Xfb/pXn8DxCvsLHmQr7YAGlx4F8yoh SBYKoQUxs2s9OJci8YgeBE5wUhseZcrpHDvZraXsVkj9t+0/A9JXEEXQz5NnOl5l IpLenih/BwW2DBZdSgQhjIBibxOKPTk0c1xINPNW19hUpoO0ELV5cB7/2oGs/avv NgS8CctHhHhKUeNm+rk/uzaHOIp19Bw6X4t9HmzfWOff492VnOkl26vkGYs1gYWM RE95HWdiPyJDfhKJxVQMnw8IgtqF1/QNt8EhnwBv1hLUjHOtLH4llZSvCDg2y0mb XGTLVBNQsWn6tN7oxm4DgDueUd9FJxUZ -----END CERTIFICATE-----Generated at Sat Dec 20 08:12:42 2025 by rpki-client