This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer File: 32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer (raw, json) Hash identifier: cSr7L7Uva7CY7IPmD/oUHkc8G+GvDI+io/ILUUWei3Y= Subject key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584C18F3DDBC0226041F6B275A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 06 Dec 2025 13:45:24 +0000 Certificate not after: Fri 10 Mar 2028 13:45:24 +0000 Subordinate resources: IP: 199.33.230.0 -- 199.33.233.255 IP: 2001:503:ff40::/46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:f3:dd:bc:02:26:04:1f:6b:27:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 6 13:45:24 2025 GMT Not After : Mar 10 13:45:24 2028 GMT Subject: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:1e:29:20:52:d8:06:fd:5f:17:54:de:3a: a1:db:6e:6b:8a:42:98:be:a8:11:c3:54:84:46:47: 41:e1:ff:11:4e:37:e8:0b:f6:d7:93:50:f8:45:2c: c7:6b:c6:f2:a0:bf:4d:ac:47:90:17:f8:a1:29:2f: 3a:56:c6:30:91:cd:6d:0f:d2:41:7b:43:f4:9b:ee: 77:29:df:15:99:0b:ef:26:6f:48:aa:b3:d1:0a:d2: 60:df:51:82:81:cd:60:6d:8c:86:87:b9:a9:e7:46: ce:8e:16:be:00:59:7b:b6:07:95:e7:eb:48:55:be: 93:14:10:a5:3f:5d:50:fb:35:dc:68:5d:f8:0d:82: 52:d7:5a:7f:4d:99:22:af:0d:36:7b:a3:cb:cf:95: b5:01:33:27:98:b8:90:5a:65:44:20:17:41:56:65: 24:4d:22:fc:38:ba:69:fa:0d:0b:9c:1b:e0:bd:16: 07:0a:5d:98:b4:9f:7e:71:a4:e0:40:b2:ae:c8:ba: e9:b8:e7:16:44:08:66:74:ed:91:70:f7:0e:72:85: f1:85:0b:97:cb:35:8c:bb:1a:a5:36:8a:a4:d5:82: 24:29:ba:bc:a4:d0:83:96:14:7a:1f:0b:7a:97:8c: 39:c4:87:0c:da:11:b0:ff:9b:88:0f:52:2c:60:55: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.33.230.0-199.33.233.255 IPv6: 2001:503:ff40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d7:dc:59:37:17:0e:34:23:44:ce:21:36:93:e3:fb:88:a2: 47:cb:e3:c4:8b:95:fd:0b:04:91:08:80:61:3b:fe:64:33:b0: fd:ba:00:10:4d:93:d0:2b:e5:fd:4e:b8:4b:d0:b2:9e:b2:01: 9b:5d:5c:5a:7a:9f:6f:98:a6:52:03:98:38:18:cf:25:94:66: 32:41:93:c2:7b:81:d6:37:8e:16:38:a6:f7:dc:88:5f:96:3f: 5f:eb:06:1e:b6:ae:b7:09:ae:8d:28:ff:33:9b:9b:5d:d3:a6: da:f0:03:f7:ed:19:a6:a6:0d:09:8c:f5:be:c6:84:15:c9:5f: 0e:81:fb:56:79:b9:83:65:21:40:3e:e6:61:99:ee:76:a7:89: fe:5e:29:c1:ae:74:6a:26:36:74:20:91:0c:ed:e2:ba:4d:52: fd:0b:57:77:3d:98:c2:8d:18:b0:8d:68:9d:05:78:ba:be:18: af:ce:cf:2d:63:fd:31:95:88:5f:c4:4c:a4:86:b5:72:0e:b3: a9:5c:59:35:df:60:db:aa:2d:ef:74:62:16:bc:9a:d0:74:4e: a4:8e:44:9d:7e:4f:96:25:67:fe:bc:bf:4e:e4:a3:09:b1:52: bd:e9:de:8e:33:1d:11:56:ca:d1:45:c4:2d:0e:2b:61:4b:8c: 56:c3:1e:0d -----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgIUAQ0Mn0MoWEwY8928AiYEH2snWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTIwNjEzNDUyNFoXDTI4MDMxMDEzNDUyNFowLzEtMCsGA1UEAxMk MzJkOWI2YTctMmVkNS00NDhiLTliY2ItOGQyNjJhY2MzZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU4eKSBS2Ab9XxdU3jqh225rikKYvqgRw1SE RkdB4f8RTjfoC/bXk1D4RSzHa8byoL9NrEeQF/ihKS86VsYwkc1tD9JBe0P0m+53 Kd8VmQvvJm9IqrPRCtJg31GCgc1gbYyGh7mp50bOjha+AFl7tgeV5+tIVb6TFBCl P11Q+zXcaF34DYJS11p/TZkirw02e6PLz5W1ATMnmLiQWmVEIBdBVmUkTSL8OLpp +g0LnBvgvRYHCl2YtJ9+caTgQLKuyLrpuOcWRAhmdO2RcPcOcoXxhQuXyzWMuxql Noqk1YIkKbq8pNCDlhR6Hwt6l4w5xIcM2hGw/5uID1IsYFVVjwIDAQABo4IEGDCC BBQwHQYDVR0OBBYEFD9/qne/r+crKrPK0h6sTBABHaQqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z MmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFjYzNmNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzMyZDliNmE3LTJlZDUtNDQ4Yi05 YmNiLThkMjYyYWNjM2Y3Ni8zMmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFj YzNmNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMBQEAgABMA4wDAMEAcch5gMEAcch6DAPBAIAAjAJAwcCIAEFA/9A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACzX3Fk3Fw40I0TOITaT4/uIokfL48SLlf0LBJEIgGE7/mQzsP26 ABBNk9Ar5f1OuEvQsp6yAZtdXFp6n2+YplIDmDgYzyWUZjJBk8J7gdY3jhY4pvfc iF+WP1/rBh62rrcJro0o/zObm13TptrwA/ftGaamDQmM9b7GhBXJXw6B+1Z5uYNl IUA+5mGZ7nanif5eKcGudGomNnQgkQzt4rpNUv0LV3c9mMKNGLCNaJ0FeLq+GK/O zy1j/TGViF/ETKSGtXIOs6lcWTXfYNuqLe90Yha8mtB0TqSORJ1+T5YlZ/68v07k owmxUr3p3o4zHRFWytFFxC0OK2FLjFbDHg0= -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:28 2025 by rpki-client