This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer File: 70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer (raw, json) Hash identifier: 29KhIkmXrUH74OcOGJsd5tLMaDPAE456DkTQsvyh9mY= Subject key identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584C2DE3FD1632B21D1383FDF780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 14 Dec 2025 01:45:23 +0000 Certificate not after: Sat 18 Mar 2028 00:45:23 +0000 Subordinate resources: AS: 397472 IP: 23.132.16.0/24 IP: 134.195.102.0/24 IP: 2602:fded::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2d:e3:fd:16:32:b2:1d:13:83:fd:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Dec 14 01:45:23 2025 GMT Not After : Mar 18 00:45:23 2028 GMT Subject: CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:54:49:f8:0e:d9:65:c8:6c:24:f6:e7:4e: 14:41:6a:fc:dd:c3:42:8e:68:36:15:bc:8b:e0:66: 26:73:97:b8:bb:10:42:14:3b:97:7b:e0:96:04:4e: 61:a4:a2:6f:be:e0:9e:e6:ca:33:a8:39:56:0a:22: cc:c1:5d:a4:5e:6f:b3:18:af:9b:fe:6b:18:d5:77: 6c:5e:14:09:f7:10:f8:ff:0d:35:1f:eb:d4:5b:06: da:73:f5:2e:96:da:db:c0:bf:27:3c:07:d7:09:48: 60:02:a2:a7:6c:57:3d:c9:7c:84:cc:0a:9e:98:04: d9:1b:16:5d:90:c4:12:3b:8f:03:03:41:08:cd:02: cd:dc:be:f1:69:53:a0:8a:e4:0d:c0:fb:e5:93:9a: 9c:09:3f:72:b2:18:a7:56:97:81:f9:fc:10:9c:45: 42:02:b0:86:a1:0c:ac:12:5a:ec:41:91:84:50:cb: b1:2d:da:26:42:aa:cb:10:9c:a8:61:57:e1:a6:a5: fc:b4:2a:34:d7:1c:8c:9d:c4:58:92:8c:5e:bc:6d: 48:81:64:a4:f0:1a:a8:4c:5d:32:20:1a:fa:b5:91: 16:9f:b1:ef:94:e9:66:8d:3d:e3:91:9f:93:46:78: 0a:ac:2a:6d:ee:57:1f:75:d0:f0:fe:27:42:db:ae: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.132.16.0/24 134.195.102.0/24 IPv6: 2602:fded::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397472 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:01:52:59:23:5b:f8:52:be:fa:c6:66:24:f2:8d:7e:7d:2c: d3:f6:25:30:4e:62:47:68:dc:78:c4:12:0c:15:fd:88:d9:0b: d5:81:f5:e5:6d:fe:07:97:e2:98:61:34:7a:f9:ab:7e:10:ee: 38:8a:21:db:72:c8:d6:55:da:66:98:7a:d9:5b:02:8f:a4:7b: 6a:0b:90:e1:bc:de:69:b8:ab:e8:e7:b6:81:3d:25:e4:ab:a2: a8:a8:ac:1f:f1:16:09:29:85:9f:8d:08:26:94:e8:96:93:8e: 66:bc:a5:aa:1f:99:26:0d:6b:73:d7:54:57:54:8c:81:04:37: 7f:eb:87:c1:23:6d:2f:6e:29:55:2c:01:80:10:fa:2b:c7:6a: dd:e1:59:52:4d:57:cc:89:5a:90:a8:88:29:cf:56:a8:af:03: 0b:02:52:f6:09:e2:e1:e5:30:de:bf:74:1a:a7:69:2c:85:7e: ca:ab:26:08:e6:bd:05:ee:38:37:09:bb:75:0e:a5:80:24:db: 87:ea:eb:c0:15:92:d0:93:68:5f:1c:b3:dc:f0:4b:88:dd:74: 29:be:00:9c:ac:8e:ff:78:14:ba:7f:89:95:2a:f8:5e:5c:02: 6d:2b:3a:23:3c:21:03:66:2c:e4:b4:31:a3:bb:2d:19:d9:fb: b4:e8:b8:3a -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEwt4/0WMrIdE4P994AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTIxNDAxNDUyM1oXDTI4MDMxODAwNDUyM1owLzEtMCsGA1UEAxMk NzBiY2JkNjgtNDFkNi00YTVhLThkMjgtMWI5YTlhNGM1ZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmRUSfgO2WXIbCT2504UQWr83cNCjmg2FbyL 4GYmc5e4uxBCFDuXe+CWBE5hpKJvvuCe5sozqDlWCiLMwV2kXm+zGK+b/msY1Xds XhQJ9xD4/w01H+vUWwbac/UultrbwL8nPAfXCUhgAqKnbFc9yXyEzAqemATZGxZd kMQSO48DA0EIzQLN3L7xaVOgiuQNwPvlk5qcCT9yshinVpeB+fwQnEVCArCGoQys ElrsQZGEUMuxLdomQqrLEJyoYVfhpqX8tCo01xyMncRYkoxevG1IgWSk8BqoTF0y IBr6tZEWn7HvlOlmjT3jkZ+TRngKrCpt7lcfddDw/idC2655zQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFKnfb1ZPEnvs7O1WnN+c1EOIVfTgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83 MGJjYmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlhOWE0YzVlYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzcwYmNiZDY4LTQxZDYtNGE1YS04 ZDI4LTFiOWE5YTRjNWVhOS83MGJjYmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlhOWE0 YzVlYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXhBADBACGw2YwDgQCAAIwCAMGBCYC/e0AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYQoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSAVJZI1v4Ur76xmYk 8o1+fSzT9iUwTmJHaNx4xBIMFf2I2QvVgfXlbf4Hl+KYYTR6+at+EO44iiHbcsjW VdpmmHrZWwKPpHtqC5DhvN5puKvo57aBPSXkq6KoqKwf8RYJKYWfjQgmlOiWk45m vKWqH5kmDWtz11RXVIyBBDd/64fBI20vbilVLAGAEPorx2rd4VlSTVfMiVqQqIgp z1aorwMLAlL2CeLh5TDev3Qap2kshX7KqyYI5r0F7jg3Cbt1DqWAJNuH6uvAFZLQ k2hfHLPc8EuI3XQpvgCcrI7/eBS6f4mVKvheXAJtKzojPCEDZizktDGjuy0Z2fu0 6Lg6 -----END CERTIFICATE-----Generated at Fri Dec 19 07:54:03 2025 by rpki-client