This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer File: cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer (raw, json) Hash identifier: OsjHpeyYcykIKWJw2gvn3QwOK02xo7tHd+4jkK5EWic= Subject key identifier: A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584C4DFEDBA7FB525B91C46E5680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 25 Dec 2025 13:45:23 +0000 Certificate not after: Wed 29 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 11614 AS: 11889 -- 11890 IP: 216.49.192.0/20 IP: 216.168.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4d:fe:db:a7:fb:52:5b:91:c4:6e:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Dec 25 13:45:23 2025 GMT Not After : Mar 29 12:45:23 2028 GMT Subject: CN=cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:11:03:01:6e:e1:bd:f8:7b:a9:c3:18:de: 29:12:c6:b3:26:3e:a0:5c:fb:8c:95:e0:33:ac:20: 96:97:a7:95:bc:13:b8:84:56:cd:26:d1:0b:fd:30: 05:ce:a4:7c:a0:45:87:4f:94:53:93:6f:9f:9b:cb: e0:75:36:79:e6:98:66:88:d8:40:bb:1f:c2:8f:5b: 42:a8:8a:b6:05:67:9d:dc:1d:c4:92:d3:10:de:19: 3c:f6:2f:98:f8:88:ca:10:f5:de:13:89:34:f2:7a: 99:a8:9a:d1:6c:f0:2d:11:0d:a1:db:83:d8:16:25: fd:75:24:49:0c:d7:d7:f1:3f:40:30:96:db:22:e4: c9:8c:1a:30:84:69:9a:3b:4e:ec:e7:4a:f7:ce:d2: 38:6f:6e:77:9b:7b:54:82:69:76:bf:7f:3e:5f:85: 9c:c9:b5:bf:59:7c:45:f6:a2:aa:0c:36:8e:b2:55: 0a:f8:3c:22:71:7d:37:d4:c4:c0:59:e9:2b:1a:68: 79:72:e8:5b:43:5c:30:1f:11:16:95:ce:b8:e2:55: b2:dc:a5:61:76:07:f7:94:13:35:e1:97:a0:31:67: 69:8c:01:9c:93:31:ea:2a:1a:6f:2e:a4:7b:5a:50: 7e:8b:61:85:46:3b:31:1d:de:2a:06:fa:4a:cc:6b: 7b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 216.49.192.0/20 216.168.160.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11614 11889-11890 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e3:a0:1b:c0:c0:7e:73:89:81:71:a7:b4:2b:d1:05:6c:c9: d6:14:d9:90:4a:a9:18:1d:b7:25:ea:4b:e6:41:f5:e5:cf:f6: d7:33:35:28:39:42:2d:75:84:09:13:d7:8d:bc:fc:3e:93:7b: 52:bc:42:62:a0:d7:85:07:c7:c6:0d:d7:f5:c6:97:eb:e1:96: b0:03:97:ac:ef:1b:6b:f5:fd:2c:d3:c5:a0:5f:a9:cc:0e:4d: ff:38:e5:29:74:d9:8c:b2:71:9f:82:8d:b9:7a:92:ca:d8:8e: 6b:8c:39:f4:1d:81:f9:5a:f5:d3:e4:22:1a:d9:22:13:33:9b: 05:a7:28:69:46:e2:31:80:41:62:bb:b4:f4:9d:f7:95:78:89: e9:e1:9e:b4:3b:7f:c8:ee:8a:b8:34:04:57:c7:00:95:f1:35: 17:be:d1:66:28:4b:6d:8b:49:86:60:12:d6:90:7e:2c:b4:9d: b3:34:4d:c7:4d:93:0e:16:88:3b:ce:46:3d:ed:a0:ca:fc:8d: b6:3e:6e:08:92:7d:ad:16:bb:86:0e:11:d5:f5:e8:a4:4a:3f: 29:3e:d9:9f:a0:5e:55:2e:24:3b:52:6a:e8:9a:00:c7:1f:b8: 47:0f:8e:64:2b:8b:d0:f7:91:f6:f4:8b:61:e6:d1:2f:43:37: da:5c:a8:28 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWExN/tun+1JbkcRuVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTIyNTEzNDUyM1oXDTI4MDMyOTEyNDUyM1owLzEtMCsGA1UEAxMk Y2JkN2QyOWItMmM4NS00YWJmLWE0ZDYtNjc5NzhkN2FlN2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/MRAwFu4b34e6nDGN4pEsazJj6gXPuMleAz rCCWl6eVvBO4hFbNJtEL/TAFzqR8oEWHT5RTk2+fm8vgdTZ55phmiNhAux/Cj1tC qIq2BWed3B3EktMQ3hk89i+Y+IjKEPXeE4k08nqZqJrRbPAtEQ2h24PYFiX9dSRJ DNfX8T9AMJbbIuTJjBowhGmaO07s50r3ztI4b253m3tUgml2v38+X4WcybW/WXxF 9qKqDDaOslUK+DwicX031MTAWekrGmh5cuhbQ1wwHxEWlc644lWy3KVhdgf3lBM1 4ZegMWdpjAGckzHqKhpvLqR7WlB+i2GFRjsxHd4qBvpKzGt7lQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKKH57rcOzrNITHdTDnUjc3+pjqoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9j YmQ3ZDI5Yi0yYzg1LTRhYmYtYTRkNi02Nzk3OGQ3YWU3ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2NiZDdkMjliLTJjODUtNGFiZi1h NGQ2LTY3OTc4ZDdhZTdlZi9jYmQ3ZDI5Yi0yYzg1LTRhYmYtYTRkNi02Nzk3OGQ3 YWU3ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBATYMcADBAXYqKAwIwYIKwYBBQUHAQgBAf8EFDAS oBAwDgICLV4wCAICLnECAi5yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACrjoBvAwH5ziYFxp7Qr0QVsydYU 2ZBKqRgdtyXqS+ZB9eXP9tczNSg5Qi11hAkT1428/D6Te1K8QmKg14UHx8YN1/XG l+vhlrADl6zvG2v1/SzTxaBfqcwOTf845Sl02YyycZ+Cjbl6ksrYjmuMOfQdgfla 9dPkIhrZIhMzmwWnKGlG4jGAQWK7tPSd95V4ienhnrQ7f8juirg0BFfHAJXxNRe+ 0WYoS22LSYZgEtaQfiy0nbM0TcdNkw4WiDvORj3toMr8jbY+bgiSfa0Wu4YOEdX1 6KRKPyk+2Z+gXlUuJDtSauiaAMcfuEcPjmQri9D3kfb0i2Hm0S9DN9pcqCg= -----END CERTIFICATE-----Generated at Fri Jan 9 21:10:54 2026 by rpki-client