This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer File: de57fd18-3c65-43a3-96c1-a6fe61028c72.cer (raw, json) Hash identifier: 6dXDP8OShNYVffKgSKjV03K3M9vtYC4PAeXkSPyoF94= Subject key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584C3214041CEFDE4A3BF4E64C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Dec 2025 13:45:23 +0000 Certificate not after: Sun 19 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 400304 IP: 23.147.152.0/23 IP: 167.17.72.0/21 IP: 193.149.164.0/24 IP: 216.181.107.0/24 IP: 2606:a8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:14:04:1c:ef:de:4a:3b:f4:e6:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 15 13:45:23 2025 GMT Not After : Mar 19 12:45:23 2028 GMT Subject: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:78:81:30:14:98:fb:7b:30:8a:da:68:ad:81: a3:7a:d4:2f:4c:37:56:60:54:6d:2d:e3:ae:9f:22: c2:2c:e6:47:7b:eb:1e:a3:9f:1b:03:a4:ae:52:44: d2:4a:67:ee:88:93:02:a2:85:70:39:0d:91:78:23: b7:10:3c:6a:db:ae:7f:28:9d:65:bf:16:36:04:a8: ac:30:30:16:3f:6a:58:a2:30:ec:12:35:23:c9:75: ae:cb:2e:05:41:45:8e:6a:74:54:36:ec:43:ff:b6: 8c:24:93:aa:8a:cd:6c:e3:84:5d:6a:97:1d:44:82: e5:d0:d8:38:32:6b:e6:e8:b2:70:cc:45:43:48:c9: 9f:b1:77:11:02:58:a6:ea:3f:c4:c3:87:96:41:d8: 7e:1e:ff:5e:bd:78:ca:3e:99:a6:2c:80:e5:4f:b0: 76:63:04:62:2b:75:13:ad:6e:10:5a:27:83:15:c9: 45:5d:85:a7:96:18:2b:8e:6d:9b:37:d4:1e:ac:de: 7f:8d:d8:ae:24:6b:d3:d9:5c:de:c0:13:93:3d:ea: 94:c6:1f:65:aa:73:01:9c:12:93:e9:ac:b0:fa:9e: bf:86:57:6a:d0:3b:be:28:97:e6:19:ad:b2:fa:ea: ce:30:5a:72:bb:c6:00:fa:50:da:83:e9:a4:da:90: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.152.0/23 167.17.72.0/21 193.149.164.0/24 216.181.107.0/24 IPv6: 2606:a8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400304 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c3:82:2b:4b:3d:5d:81:94:68:df:9f:d0:0d:7c:2b:6f:c0: d7:aa:14:a3:fc:4e:1a:cf:be:e9:34:c6:07:4b:7c:69:9c:54: ea:87:8d:d5:62:af:ab:c8:92:7a:71:74:6a:fc:a7:05:d3:1b: aa:90:0f:d8:1e:73:ff:b5:bd:ee:f1:b3:35:18:5c:08:01:ba: 21:92:b9:a2:20:7c:97:9a:0e:5a:a7:e1:d7:6d:44:11:cc:bd: 3d:02:dc:aa:60:30:d5:e9:7a:6e:3d:83:50:38:94:e7:ad:d2: 87:44:5d:80:ac:6f:43:84:80:1d:70:e3:3c:e2:b7:ea:cb:b6: 1e:c4:c3:6e:82:04:2d:1b:3f:43:c8:30:57:0a:69:91:a8:38: e5:3b:9c:cf:15:84:e2:72:de:46:9f:6d:f4:ee:ef:78:69:c7: 39:2a:29:d6:4f:16:31:c9:d1:56:3c:64:b9:f3:d2:52:83:31: 09:c2:c6:ea:6d:46:b5:cd:9c:90:6d:85:31:2a:6d:0a:bc:bf: 79:ff:65:9c:c8:0c:64:3e:38:0d:39:fb:0e:b9:ac:ed:80:eb: d4:f1:eb:ff:ba:0f:b3:f2:14:ea:ae:c3:2d:41:c4:f0:4f:20: 6d:cc:90:5e:47:82:51:02:f3:cc:69:4f:fc:fe:be:a9:2c:1b: cb:df:d8:74 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEwyFAQc795KO/TmTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTIxNTEzNDUyM1oXDTI4MDMxOTEyNDUyM1owLzEtMCsGA1UEAxMk ZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4YzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XiBMBSY+3switporYGjetQvTDdWYFRtLeOu nyLCLOZHe+seo58bA6SuUkTSSmfuiJMCooVwOQ2ReCO3EDxq265/KJ1lvxY2BKis MDAWP2pYojDsEjUjyXWuyy4FQUWOanRUNuxD/7aMJJOqis1s44RdapcdRILl0Ng4 Mmvm6LJwzEVDSMmfsXcRAlim6j/Ew4eWQdh+Hv9evXjKPpmmLIDlT7B2YwRiK3UT rW4QWieDFclFXYWnlhgrjm2bN9QerN5/jdiuJGvT2VzewBOTPeqUxh9lqnMBnBKT 6ayw+p6/hldq0Du+KJfmGa2y+urOMFpyu8YA+lDag+mk2pAsDwIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFMi8G/UvUulPlct6/BgMAmRATII9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k ZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2RlNTdmZDE4LTNjNjUtNDNhMy05 NmMxLWE2ZmU2MTAyOGM3Mi9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEw MjhjNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAEXk5gDBAOnEUgDBADBlaQDBADYtWswDQQCAAIw BwMFACYGqMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhuwMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE7D gitLPV2BlGjfn9ANfCtvwNeqFKP8ThrPvuk0xgdLfGmcVOqHjdVir6vIknpxdGr8 pwXTG6qQD9gec/+1ve7xszUYXAgBuiGSuaIgfJeaDlqn4ddtRBHMvT0C3KpgMNXp em49g1A4lOet0odEXYCsb0OEgB1w4zzit+rLth7Ew26CBC0bP0PIMFcKaZGoOOU7 nM8VhOJy3kafbfTu73hpxzkqKdZPFjHJ0VY8ZLnz0lKDMQnCxuptRrXNnJBthTEq bQq8v3n/ZZzIDGQ+OA05+w65rO2A69Tx6/+6D7PyFOquwy1BxPBPIG3MkF5HglEC 88xpT/z+vqksG8vf2HQ= -----END CERTIFICATE-----Generated at Sat Dec 20 20:49:05 2025 by rpki-client