This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer File: 7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer (raw, json) Hash identifier: w8ROR8Cwfmw1C6ac5Fk+xLHfu2Rp7mNuRKqw4K74P1Y= Subject key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C Authority key identifier: 0E:A8:54:9E:2A:E8:58:8A:5C:54:9E:0B:BE:FF:1B:A6:D6:C3:8C:F0 Certificate issuer: /CN=f0e3e332-2e13-47b7-be3c-bd2f40db6864 Certificate serial: 010D0C9F4328584C3D99D2049B07E0D040A50D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer Manifest: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft caRepository: rsync://rpki.nellicus.net/repo/nellicus/3/ Notify URL: https://rpki.nellicus.net/rrdp/notification.xml Certificate not before: Fri 19 Dec 2025 16:48:53 +0000 Certificate not after: Thu 23 Mar 2028 15:48:53 +0000 Subordinate resources: IP: 23.151.132.0/24 IP: 2602:f48b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:99:d2:04:9b:07:e0:d0:40:a5:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0e3e332-2e13-47b7-be3c-bd2f40db6864 Validity Not Before: Dec 19 16:48:53 2025 GMT Not After : Mar 23 15:48:53 2028 GMT Subject: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:7c:50:fc:c4:cf:26:e1:2a:fe:38:67:e6: 47:c5:8b:bd:7e:49:0a:48:b5:32:ea:96:5d:a4:e0: a0:1e:a8:cb:71:18:f3:38:01:af:a8:64:22:8a:3e: 51:42:9e:52:77:6e:cd:72:9e:f5:a1:06:99:56:11: d0:e4:97:c7:2f:b1:c3:0b:41:bc:30:6f:80:67:cf: 0c:4f:37:47:49:d7:db:ba:b2:ac:13:bc:e8:c8:7f: 76:95:69:f6:55:6f:59:66:13:b2:b3:6f:2d:3c:e9: a6:f8:2e:dc:e8:b0:a5:7c:8a:5c:db:94:5c:41:89: d5:90:1f:57:da:c9:e0:46:97:55:37:df:f0:f9:02: 94:90:5d:af:73:1e:4c:ec:ae:e3:88:3b:a6:73:09: 8a:86:2a:05:66:e8:b1:59:06:e4:4b:fd:33:9e:e3: 70:c5:04:ca:82:8c:53:df:fd:9c:7b:ca:c4:be:42: eb:a8:93:63:5e:4c:64:26:24:d4:6b:c7:a6:a5:cd: 13:08:72:f5:09:db:ea:32:7c:f8:24:9f:6c:54:27: c3:09:a0:8d:08:90:81:ff:80:19:63:d2:a2:d5:f8: 5d:e1:60:b9:9d:3f:ab:76:a7:23:7c:5c:70:6b:5e: 35:a3:2e:e4:5c:7f:fc:57:77:64:8c:8a:68:84:fb: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C Subject Information Access: CA Repository - URI:rsync://rpki.nellicus.net/repo/nellicus/3/ RPKI Manifest - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft RPKI Notify - URI:https://rpki.nellicus.net/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl X509v3 Authority Key Identifier: keyid:0E:A8:54:9E:2A:E8:58:8A:5C:54:9E:0B:BE:FF:1B:A6:D6:C3:8C:F0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer sbgp-ipAddrBlock: critical IPv4: 23.151.132.0/24 IPv6: 2602:f48b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:75:e3:82:fb:de:ba:8c:a4:89:cb:e7:d7:29:37:64:25:08: 2e:88:8a:3d:0b:ec:bb:aa:c3:57:01:38:f9:f1:38:c0:e6:bd: 8f:6f:71:87:8c:25:0f:13:20:1b:be:61:a3:a1:90:d6:2f:31: c3:51:47:17:88:1a:c2:ca:fb:e5:d8:12:64:d6:c0:c5:52:39: 9f:f9:c0:21:21:ea:da:67:6c:7f:ec:65:bd:94:75:27:f9:f8: 1b:b3:91:34:c9:7a:a4:06:14:b0:52:45:d5:e3:91:79:2a:ec: 7c:e6:b9:53:f6:9b:fa:44:fb:18:4b:b7:e2:83:82:83:8a:48: c9:4b:92:9f:4b:c2:8c:d8:94:63:5a:2f:57:44:0f:72:2c:aa: ad:06:cb:3e:bf:ab:f4:aa:36:87:bc:ee:f7:3e:2c:72:ef:f2: 9f:9f:8f:7e:5d:87:94:0c:77:09:2d:d8:b7:f4:ea:1c:15:f3: 54:5d:c2:89:04:01:fd:63:a1:dc:f8:36:5f:a3:3a:c4:ad:7f: 63:91:94:82:86:3a:c7:d2:c1:f2:b9:e7:7d:44:62:b5:d8:6e: f2:04:53:33:4e:f7:83:32:bd:df:27:12:85:d7:7c:47:d5:8a: f5:1e:17:2d:c5:72:b3:81:85:1f:58:3c:2f:e5:55:c1:2b:bf: a9:55:7c:77 -----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWEw9mdIEmwfg0EClDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBlM2UzMzItMmUxMy00N2I3LWJlM2MtYmQyZjQwZGI2 ODY0MB4XDTI1MTIxOTE2NDg1M1oXDTI4MDMyMzE1NDg1M1owPTE7MDkGA1UEAxMy N2Y5YzA1NDIwYjU1YzNlZGU3MDM1MjFkMTRkODEzNzU4ODk4MDQyMjYwZjA3OGIy NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/nxQ/MTPJuEq/jhn 5kfFi71+SQpItTLqll2k4KAeqMtxGPM4Aa+oZCKKPlFCnlJ3bs1ynvWhBplWEdDk l8cvscMLQbwwb4BnzwxPN0dJ19u6sqwTvOjIf3aVafZVb1lmE7Kzby086ab4Ltzo sKV8ilzblFxBidWQH1fayeBGl1U33/D5ApSQXa9zHkzsruOIO6ZzCYqGKgVm6LFZ BuRL/TOe43DFBMqCjFPf/Zx7ysS+Quuok2NeTGQmJNRrx6alzRMIcvUJ2+oyfPgk n2xUJ8MJoI0IkIH/gBlj0qLV+F3hYLmdP6t2pyN8XHBrXjWjLuRcf/xXd2SMimiE +5wpAgMBAAGjggN6MIIDdjAdBgNVHQ4EFgQU3Rdb1Pt/HcI22xPNK0KmRZCv7Fww gekGCCsGAQUFBwELBIHcMIHZMDYGCCsGAQUFBzAFhipyc3luYzovL3Jwa2kubmVs bGljdXMubmV0L3JlcG8vbmVsbGljdXMvMy8wYgYIKwYBBQUHMAqGVnJzeW5jOi8v cnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8zL0REMTc1QkQ0RkI3RjFE QzIzNkRCMTNDRDJCNDJBNjQ1OTBBRkVDNUMubWZ0MDsGCCsGAQUFBzANhi9odHRw czovL3Jwa2kubmVsbGljdXMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAPBgNV HRMBAf8EBTADAQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jw a2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgw YS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVh LWU0OTA5ZWYxYjRlMi9mMGUzZTMzMi0yZTEzLTQ3YjctYmUzYy1iZDJmNDBkYjY4 NjQvZjBlM2UzMzItMmUxMy00N2I3LWJlM2MtYmQyZjQwZGI2ODY0LmNybDAfBgNV HSMEGDAWgBQOqFSeKuhYilxUngu+/xum1sOM8DAOBgNVHQ8BAf8EBAMCAQYwgcAG CCsGAQUFBwEBBIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll ZjFiNGUyL2YwZTNlMzMyLTJlMTMtNDdiNy1iZTNjLWJkMmY0MGRiNjg2NC5jZXIw LwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBAAXl4QwDgQCAAIwCAMGBCYC9IsA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFt144L73rqMpInL59cpN2QlCC6Iij0L7Luqw1cBOPnxOMDmvY9v cYeMJQ8TIBu+YaOhkNYvMcNRRxeIGsLK++XYEmTWwMVSOZ/5wCEh6tpnbH/sZb2U dSf5+BuzkTTJeqQGFLBSRdXjkXkq7HzmuVP2m/pE+xhLt+KDgoOKSMlLkp9LwozY lGNaL1dED3Isqq0Gyz6/q/SqNoe87vc+LHLv8p+fj35dh5QMdwkt2Lf06hwV81Rd wokEAf1jodz4Nl+jOsStf2ORlIKGOsfSwfK5531EYrXYbvIEUzNO94Myvd8nEoXX fEfVivUeFy3FcrOBhR9YPC/lVcErv6lVfHc= -----END CERTIFICATE-----Generated at Sat Dec 20 01:10:35 2025 by rpki-client