This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer File: 3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer (raw, json) Hash identifier: 8Od4/Nz5HaVDcTDU8oOvikAY3E9kF9pQG3nLILZaoPI= Subject key identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584C5A8EEED34318C7820A8B88E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Dec 2025 01:45:22 +0000 Certificate not after: Mon 03 Apr 2028 00:45:22 +0000 Subordinate resources: AS: 394086 IP: 192.156.190.0/24 IP: 2607:d640::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:8e:ee:d3:43:18:c7:82:0a:8b:88:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 30 01:45:22 2025 GMT Not After : Apr 3 00:45:22 2028 GMT Subject: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7f:ae:8b:12:47:3b:50:16:6e:af:33:fc:49: 81:f0:d3:2b:79:68:c3:44:8c:e4:13:99:06:23:36: ea:12:06:b5:dc:ef:ff:80:b8:66:39:72:1b:b9:7f: 77:3d:39:ac:72:7e:c0:6a:7b:83:63:67:ff:50:76: 37:bb:42:2a:7b:e6:02:92:ed:64:56:c2:64:b1:44: 44:11:65:c2:d4:e0:e9:60:54:36:45:a7:69:f4:14: 68:96:1f:7d:b0:25:9e:13:bf:c3:36:35:0f:06:4e: d2:b4:85:04:ab:66:c1:56:df:c8:a8:2b:86:33:8a: 48:eb:f1:d7:dc:0b:5e:1b:33:fa:98:37:f4:45:b9: 7f:0e:48:df:d7:ea:f4:14:a4:af:a6:19:43:da:12: 58:a5:af:2b:53:cf:fa:40:3a:04:84:5e:2f:8f:55: b5:0e:ff:7d:1b:4e:c0:eb:3c:78:80:ec:03:6d:a5: 62:0f:75:13:3f:30:5e:c4:22:04:19:08:8d:58:8d: 96:51:fc:db:a1:2c:b1:97:62:cb:44:97:ea:f6:86: f0:0e:d6:b3:e4:4a:a4:51:9b:0f:15:67:6c:49:8c: 2d:99:8c:ab:f3:76:96:b6:c2:89:13:89:40:db:ed: ac:5c:84:26:cf:72:60:d3:fb:7b:03:7e:b5:41:58: 63:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.156.190.0/24 IPv6: 2607:d640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394086 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:66:ed:59:ab:20:27:78:10:9f:e7:84:e0:b6:0b:6a:29:49: 75:18:0c:6b:62:a2:d8:aa:7d:14:a1:f4:7d:70:a1:15:c7:65: 7d:59:5b:20:92:a4:ff:ba:31:61:5c:8f:7e:3e:0f:77:f0:34: d2:e4:5d:ae:5d:9d:1c:98:1c:ad:4d:d6:fa:a0:4a:3b:90:ae: 1a:25:6b:52:c0:19:67:13:47:d3:7d:24:13:0c:10:46:d5:ff: 99:52:d0:30:a1:36:96:04:3c:76:d3:e4:d4:58:53:d7:ef:0f: 6c:b3:31:05:ef:90:91:12:08:19:58:41:d1:47:1f:b5:26:89: 7f:06:75:01:41:8c:b0:c2:38:f5:0d:79:5b:2b:4d:0f:56:ba: 96:3e:d8:e0:81:99:d8:63:ed:c6:0c:2d:a3:ad:fa:1e:f1:61: 9a:b5:ab:8d:a5:0c:1c:5a:5b:96:c3:08:73:8b:0c:fb:9d:2e: ae:6f:85:24:0f:5c:79:c7:2d:ad:15:ea:d2:da:ae:a4:40:c2: 8c:cc:85:2d:e0:78:0d:37:25:ba:c1:f2:db:32:87:f2:c3:55: 4f:67:73:06:3e:90:6b:97:37:58:ea:21:34:48:9d:de:ba:fe: 58:ac:a5:22:be:5f:12:9a:23:d0:1a:7d:76:44:19:3f:67:79: 2b:3c:3b:6c -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWExaju7TQxjHggqLiOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTIzMDAxNDUyMloXDTI4MDQwMzAwNDUyMlowLzEtMCsGA1UEAxMk M2RjNjZjNWUtMjNhYi00NGNkLTg3OGEtNGU3NmNiMGQ3YjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn+uixJHO1AWbq8z/EmB8NMreWjDRIzkE5kG IzbqEga13O//gLhmOXIbuX93PTmscn7AanuDY2f/UHY3u0Iqe+YCku1kVsJksURE EWXC1ODpYFQ2Radp9BRolh99sCWeE7/DNjUPBk7StIUEq2bBVt/IqCuGM4pI6/HX 3AteGzP6mDf0Rbl/Dkjf1+r0FKSvphlD2hJYpa8rU8/6QDoEhF4vj1W1Dv99G07A 6zx4gOwDbaViD3UTPzBexCIEGQiNWI2WUfzboSyxl2LLRJfq9obwDtaz5EqkUZsP FWdsSYwtmYyr83aWtsKJE4lA2+2sXIQmz3Jg0/t7A361QVhjWQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFETYCL5lsj1U0CzqUFZQCbvY1X1hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z ZGM2NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2Y2IwZDdiNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNkYzY2YzVlLTIzYWItNDRjZC04 NzhhLTRlNzZjYjBkN2I0Zi8zZGM2NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2Y2Iw ZDdiNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADAnL4wDQQCAAIwBwMFACYH1kAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgNmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEZm7VmrICd4EJ/nhOC2C2opSXUY DGtiotiqfRSh9H1woRXHZX1ZWyCSpP+6MWFcj34+D3fwNNLkXa5dnRyYHK1N1vqg SjuQrhola1LAGWcTR9N9JBMMEEbV/5lS0DChNpYEPHbT5NRYU9fvD2yzMQXvkJES CBlYQdFHH7UmiX8GdQFBjLDCOPUNeVsrTQ9WupY+2OCBmdhj7cYMLaOt+h7xYZq1 q42lDBxaW5bDCHOLDPudLq5vhSQPXHnHLa0V6tLarqRAwozMhS3geA03JbrB8tsy h/LDVU9ncwY+kGuXN1jqITRInd66/lispSK+XxKaI9AafXZEGT9neSs8O2w= -----END CERTIFICATE-----Generated at Fri Jan 9 01:22:33 2026 by rpki-client