This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer File: d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer (raw, json) Hash identifier: rqK6tWVd2PLcCiPo3YNJRMqedzF7g7xrP/8Egs2i65M= Subject key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C3A741198A8D4B24575EC3080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Dec 2025 13:45:23 +0000 Certificate not after: Wed 22 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 14141 AS: 20093 AS: 22384 AS: 27494 AS: 36202 AS: 40426 AS: 46562 AS: 54856 IP: 66.71.240.0/20 IP: 66.115.128.0/18 IP: 68.71.240.0/20 IP: 69.50.128.0/20 IP: 74.119.144.0/22 IP: 98.142.208.0/20 IP: 104.37.132.0/22 IP: 104.200.128.0/19 IP: 107.152.96.0/20 IP: 107.181.160.0/19 IP: 142.54.224.0/20 IP: 162.216.44.0/22 IP: 162.253.68.0/22 IP: 172.83.40.0/21 IP: 172.98.64.0/19 IP: 173.0.64.0/20 IP: 173.45.160.0 -- 173.45.169.255 IP: 173.45.171.0 -- 173.45.173.255 IP: 184.170.240.0/20 IP: 192.40.56.0/22 IP: 192.111.128.0/20 IP: 192.252.208.0/20 IP: 198.8.80.0/20 IP: 198.147.20.0/22 IP: 199.36.220.0/22 IP: 199.58.184.0/22 IP: 199.102.104.0/22 IP: 199.116.112.0/21 IP: 199.187.208.0/22 IP: 199.189.144.0/22 IP: 199.229.248.0/21 IP: 204.15.248.0/21 IP: 205.196.16.0/21 IP: 206.220.172.0/22 IP: 208.78.40.0/22 IP: 208.84.152.0/22 IP: 208.93.192.0/22 IP: 216.201.80.0/20 IP: 2604:2880::/32 IP: 2604:8e40::/32 IP: 2607:5700::/32 IP: 2607:f458::/32 IP: 2607:f7a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:74:11:98:a8:d4:b2:45:75:ec:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 18 13:45:23 2025 GMT Not After : Mar 22 12:45:23 2028 GMT Subject: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:22:39:1c:3f:3e:55:44:27:86:e7:ea:d5: e1:cc:e7:0b:43:98:05:cf:cc:9f:d0:a5:94:be:9a: dc:53:88:4c:b3:b7:63:a7:4f:57:87:76:52:3d:9c: a3:b9:38:b5:67:08:cd:10:82:55:d1:7d:a5:c6:fe: a7:00:7d:52:89:c3:66:20:37:36:58:5e:ec:c6:c5: b7:31:25:36:3d:f3:f5:8b:10:f0:e4:2b:24:da:a2: 28:2c:f7:81:02:d9:5d:35:60:51:27:8a:de:0f:56: b4:17:17:a5:f0:b0:fd:31:99:7d:33:97:6e:12:d6: 0d:11:ff:75:bc:5a:4f:de:63:54:bb:4c:2e:86:d5: 62:5d:65:c3:43:01:01:6d:1b:00:23:80:ca:f5:e6: 8b:ce:00:99:5d:75:49:8d:24:32:9a:31:0d:83:31: 63:d7:2e:14:20:ae:fb:b1:dd:48:2c:cb:86:32:37: 82:4b:5f:00:7a:27:2c:b0:4c:cd:f7:c2:dd:dd:ba: 78:b5:00:3d:7b:be:6b:0d:6b:86:13:b4:c7:cd:3b: b4:0f:1c:09:5c:e7:71:ef:9b:d2:86:0b:3c:a3:8e: 80:b2:13:a4:00:35:88:c8:c0:4c:23:30:9f:12:50: f0:e6:47:97:25:c6:bb:28:d0:30:6c:3d:d6:79:ad: 3c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.71.240.0/20 66.115.128.0/18 68.71.240.0/20 69.50.128.0/20 74.119.144.0/22 98.142.208.0/20 104.37.132.0/22 104.200.128.0/19 107.152.96.0/20 107.181.160.0/19 142.54.224.0/20 162.216.44.0/22 162.253.68.0/22 172.83.40.0/21 172.98.64.0/19 173.0.64.0/20 173.45.160.0-173.45.169.255 173.45.171.0-173.45.173.255 184.170.240.0/20 192.40.56.0/22 192.111.128.0/20 192.252.208.0/20 198.8.80.0/20 198.147.20.0/22 199.36.220.0/22 199.58.184.0/22 199.102.104.0/22 199.116.112.0/21 199.187.208.0/22 199.189.144.0/22 199.229.248.0/21 204.15.248.0/21 205.196.16.0/21 206.220.172.0/22 208.78.40.0/22 208.84.152.0/22 208.93.192.0/22 216.201.80.0/20 IPv6: 2604:2880::/32 2604:8e40::/32 2607:5700::/32 2607:f458::/32 2607:f7a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14141 20093 22384 27494 36202 40426 46562 54856 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:70:f1:b2:fc:c3:45:4f:44:d6:55:e6:07:a0:8d:df:22:d6: ce:f0:25:88:8e:c2:94:f3:44:2b:b2:2c:71:93:fe:89:78:d2: 8f:6b:6a:6a:21:12:5f:a4:8a:0a:f3:e7:32:2f:53:c8:44:bb: c4:f0:35:ff:c0:26:6d:d9:e1:b4:85:39:d5:83:f3:fd:55:25: 49:b2:43:c1:6a:25:40:aa:4e:6c:f1:a8:43:f2:a2:46:62:9a: 81:15:80:90:89:3a:f4:19:83:66:d8:11:67:09:38:32:26:b9: be:9a:37:15:7d:be:47:61:b8:41:a0:8b:c6:7d:2b:81:51:27: 3e:e1:da:d5:50:7f:8f:26:cf:db:17:c8:a6:e6:8d:d9:03:f9: 56:ce:68:5d:9b:ef:85:79:23:e3:09:cd:d9:a0:b2:fb:4e:3f: 7c:87:29:22:40:9f:e3:97:a6:ce:97:33:be:3c:28:c7:d6:28: a2:f7:9e:82:ec:7a:72:70:b0:dd:94:7e:c5:c2:90:fa:c7:74: db:8f:c1:e2:a7:c3:e3:83:52:31:bc:2e:ac:9c:fc:cd:e4:d9: 99:b3:37:f2:e8:82:2f:aa:c5:0e:fa:2c:5e:ce:01:28:c4:dc: d7:f7:45:bf:8f:b6:81:03:43:ed:9c:e7:d3:a3:c4:f5:0c:b9: 99:59:d9:be -----BEGIN CERTIFICATE----- MIIISTCCBzGgAwIBAgIUAQ0Mn0MoWEw6dBGYqNSyRXXsMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTIxODEzNDUyM1oXDTI4MDMyMjEyNDUyM1owLzEtMCsGA1UEAxMk ZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2ExMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqciORw/PlVEJ4bn6tXhzOcLQ5gFz8yf0KWU vprcU4hMs7djp09Xh3ZSPZyjuTi1ZwjNEIJV0X2lxv6nAH1SicNmIDc2WF7sxsW3 MSU2PfP1ixDw5Csk2qIoLPeBAtldNWBRJ4reD1a0Fxel8LD9MZl9M5duEtYNEf91 vFpP3mNUu0wuhtViXWXDQwEBbRsAI4DK9eaLzgCZXXVJjSQymjENgzFj1y4UIK77 sd1ILMuGMjeCS18AeicssEzN98Ld3bp4tQA9e75rDWuGE7THzTu0DxwJXOdx75vS hgs8o46AshOkADWIyMBMIzCfElDw5keXJca7KNAwbD3Wea08IQIDAQABo4IFWzCC BVcwHQYDVR0OBBYEFMg2N3P1Ksroy+uSGW5cryBV8Rq+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k NTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Q1MzIzZGFjLWExNWQtNGY4Mi1h NzBiLTMwZTFhNGNhMTI3OS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRj YTEyNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwggE+BggrBgEF BQcBBwEB/wSCAS0wggEpMIH7BAIAATCB9AMEBEJH8AMEBkJzgAMEBERH8AMEBEUy gAMEAkp3kAMEBGKO0AMEAmglhAMEBWjIgAMEBGuYYAMEBWu1oAMEBI424AMEAqLY LAMEAqL9RAMEA6xTKAMEBaxiQAMEBK0AQDAMAwQFrS2gAwQBrS2oMAwDBACtLasD BAGtLawDBAS4qvADBALAKDgDBATAb4ADBATA/NADBATGCFADBALGkxQDBALHJNwD BALHOrgDBALHZmgDBAPHdHADBALHu9ADBALHvZADBAPH5fgDBAPMD/gDBAPNxBAD BALO3KwDBALQTigDBALQVJgDBALQXcADBATYyVAwKQQCAAIwIwMFACYEKIADBQAm BI5AAwUAJgdXAAMFACYH9FgDBQAmB/egMDkGCCsGAQUFBwEIAQH/BCowKKAmMCQC Ajc9AgJOfQICV3ACAmtmAgMAjWoCAwCd6gIDALXiAgMA1kgwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf3Dx svzDRU9E1lXmB6CN3yLWzvAliI7ClPNEK7IscZP+iXjSj2tqaiESX6SKCvPnMi9T yES7xPA1/8AmbdnhtIU51YPz/VUlSbJDwWolQKpObPGoQ/KiRmKagRWAkIk69BmD ZtgRZwk4Mia5vpo3FX2+R2G4QaCLxn0rgVEnPuHa1VB/jybP2xfIpuaN2QP5Vs5o XZvvhXkj4wnN2aCy+04/fIcpIkCf45emzpczvjwox9Yooveegux6cnCw3ZR+xcKQ +sd024/B4qfD44NSMbwurJz8zeTZmbM38uiCL6rFDvosXs4BKMTc1/dFv4+2gQND 7Zzn06PE9Qy5mVnZvg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:59:42 2025 by rpki-client