This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer File: 19d9b9bc-a20d-4235-acc5-045fb91a3837.cer (raw, json) Hash identifier: pUqt3yo2HgiHv3z8n6ZQO57cZjsnY+AYDM0RqWTmzos= Subject key identifier: DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BF1DE4840490CEC1B16AA0700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Nov 2025 13:45:23 +0000 Certificate not after: Fri 25 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 32354 IP: 162.244.56.0/21 IP: 172.81.188.0/22 IP: 173.239.64.0/20 IP: 204.11.104.0/22 IP: 208.64.184.0/22 IP: 208.71.156.0/22 IP: 208.76.28.0/22 IP: 208.80.116.0/22 IP: 208.87.216.0/21 IP: 2607:f640::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:de:48:40:49:0c:ec:1b:16:aa:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 22 13:45:23 2025 GMT Not After : Feb 25 13:45:23 2028 GMT Subject: CN=19d9b9bc-a20d-4235-acc5-045fb91a3837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:b4:93:81:b9:da:af:77:cc:89:cc:3e:58: 91:2d:ca:ac:ef:7f:c8:6d:8d:d4:38:9e:ad:2f:4b: 10:30:27:42:7f:7c:a0:12:80:52:11:a4:a6:5d:fd: 05:60:d0:a1:1e:44:7f:a3:06:63:8c:9d:6e:88:2c: da:23:7c:e8:27:a3:93:f5:28:08:33:02:9f:cf:5f: 46:7c:3f:b9:87:98:8e:e7:3a:f8:fa:58:27:db:00: a7:2f:9f:1b:92:7a:91:72:77:1f:bb:73:ea:f9:1f: 6e:ca:f1:96:81:f4:cd:5f:6d:4e:f9:9a:1d:4d:c0: 2a:93:5b:6f:f3:74:9e:36:64:2a:2c:e5:a3:cc:83: 91:3b:6b:3a:73:44:ff:bd:87:e7:6f:ca:9d:49:6c: b5:58:61:93:6c:a9:8f:09:92:13:de:a4:d7:04:d3: c7:70:ec:d5:14:cb:c8:c4:0b:f3:3f:f0:d8:32:33: c6:85:c7:ac:e0:9e:35:a9:ac:17:e2:12:a4:c3:79: 1c:71:32:93:19:01:4f:14:1f:25:e7:45:0d:f2:74: d4:57:b8:26:ef:75:42:6d:ea:09:5f:98:15:b7:ed: 6a:ef:9a:6e:7e:e9:b5:58:c0:3f:ad:af:07:ae:03: 8f:7b:cf:73:e1:b6:d5:11:e9:1f:07:cd:42:13:45: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.244.56.0/21 172.81.188.0/22 173.239.64.0/20 204.11.104.0/22 208.64.184.0/22 208.71.156.0/22 208.76.28.0/22 208.80.116.0/22 208.87.216.0/21 IPv6: 2607:f640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32354 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0c:62:ad:1d:0b:a1:1b:5f:89:ad:e7:d1:a1:0f:6a:ad:6b: da:40:70:8a:21:d5:f5:28:7b:dd:a0:39:09:c6:af:20:f6:95: 8c:97:18:6a:04:3b:dc:5b:ba:28:d5:15:9f:23:e7:3c:81:65: 10:ee:1a:7e:3e:8d:35:31:12:f6:8c:3c:d6:eb:3b:ea:c0:0b: a5:f5:07:26:94:38:c9:db:aa:b9:a4:41:fc:dc:c5:7f:25:57: c2:a9:aa:a9:52:42:2e:ef:ad:49:d9:9d:8e:72:33:44:21:24: b1:ba:d9:c9:55:bc:35:d7:cb:76:0b:d5:32:a0:34:3f:f6:fa: ed:74:3e:92:c4:35:15:38:02:6f:01:ae:26:df:97:2a:19:7a: a8:72:ae:05:9b:8f:e2:1d:aa:cd:9b:35:f3:93:c9:97:2b:bb: bd:dd:f0:00:50:87:58:45:24:7c:9d:4a:fc:b6:1d:6a:6c:2b: 8d:20:2e:08:d2:ae:d0:b2:3c:2f:40:79:ca:4e:47:06:c2:b4: fc:c8:ac:46:32:5b:7f:7d:39:43:9d:45:77:7a:30:04:b9:0a: 69:c3:71:d2:46:a8:2a:fe:2a:a2:c7:42:4a:cb:62:de:1c:8a: 08:58:cc:4b:de:e2:f6:d4:cb:36:9a:2a:b2:f0:c3:7d:a6:a1: 9e:b2:3a:3a -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWEvx3khASQzsGxaqBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTEyMjEzNDUyM1oXDTI4MDIyNTEzNDUyM1owLzEtMCsGA1UEAxMk MTlkOWI5YmMtYTIwZC00MjM1LWFjYzUtMDQ1ZmI5MWEzODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoa0k4G52q93zInMPliRLcqs73/IbY3UOJ6t L0sQMCdCf3ygEoBSEaSmXf0FYNChHkR/owZjjJ1uiCzaI3zoJ6OT9SgIMwKfz19G fD+5h5iO5zr4+lgn2wCnL58bknqRcncfu3Pq+R9uyvGWgfTNX21O+ZodTcAqk1tv 83SeNmQqLOWjzIORO2s6c0T/vYfnb8qdSWy1WGGTbKmPCZIT3qTXBNPHcOzVFMvI xAvzP/DYMjPGhces4J41qawX4hKkw3kccTKTGQFPFB8l50UN8nTUV7gm73VCbeoJ X5gVt+1q75pufum1WMA/ra8HrgOPe89z4bbVEekfB81CE0XNhQIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFN+H6Hd/pJRi1Gj0rst77qrORg3RMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x OWQ5YjliYy1hMjBkLTQyMzUtYWNjNS0wNDVmYjkxYTM4MzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzE5ZDliOWJjLWEyMGQtNDIzNS1h Y2M1LTA0NWZiOTFhMzgzNy8xOWQ5YjliYy1hMjBkLTQyMzUtYWNjNS0wNDVmYjkx YTM4MzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBAOi9DgDBAKsUbwDBASt70ADBALMC2gDBALQQLgD BALQR5wDBALQTBwDBALQUHQDBAPQV9gwDQQCAAIwBwMFACYH9kAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfmIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIQxirR0LoRtfia3n0aEPaq1r2kBw iiHV9Sh73aA5CcavIPaVjJcYagQ73Fu6KNUVnyPnPIFlEO4afj6NNTES9ow81us7 6sALpfUHJpQ4yduquaRB/NzFfyVXwqmqqVJCLu+tSdmdjnIzRCEksbrZyVW8NdfL dgvVMqA0P/b67XQ+ksQ1FTgCbwGuJt+XKhl6qHKuBZuP4h2qzZs185PJlyu7vd3w AFCHWEUkfJ1K/LYdamwrjSAuCNKu0LI8L0B5yk5HBsK0/MisRjJbf305Q51Fd3ow BLkKacNx0kaoKv4qosdCSsti3hyKCFjMS97i9tTLNpoqsvDDfaahnrI6Og== -----END CERTIFICATE-----Generated at Sun Nov 23 23:10:53 2025 by rpki-client