This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer File: 4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer (raw, json) Hash identifier: L2UvzFgmInFVDA7QKV17CxMBnhIt9lpeLOqfjThp04Y= Subject key identifier: F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584C50C98B6300B10906D76CB420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Dec 2025 13:45:23 +0000 Certificate not after: Thu 30 Mar 2028 12:45:23 +0000 Subordinate resources: IP: 168.151.29.0/24 IP: 192.206.23.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:c9:8b:63:00:b1:09:06:d7:6c:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 26 13:45:23 2025 GMT Not After : Mar 30 12:45:23 2028 GMT Subject: CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7e:47:dd:e9:83:ce:76:3b:59:dc:d3:8e:d1: c7:95:ca:dd:cd:2d:48:3c:5e:67:81:c3:7b:45:50: 9d:13:c2:48:e6:77:53:91:fb:ee:dd:1b:e0:03:3c: 67:e4:49:44:c9:bb:34:eb:da:5b:4e:4e:43:6d:14: 2c:6a:fe:25:4a:2e:75:74:74:bf:5e:c9:97:7f:07: b4:70:21:89:f6:e6:be:2c:dd:4c:72:3f:59:44:53: e0:60:4f:5e:83:bd:6f:15:80:be:ea:f6:b8:37:34: 4d:66:2b:2c:3f:2f:be:6a:b5:3e:a9:29:55:ab:ca: 28:cd:0d:11:b5:dc:2d:8d:ba:a6:37:60:93:57:59: ac:86:a6:7b:db:a9:b3:23:99:67:2f:b2:2f:ce:0a: c0:e5:6b:b2:40:55:3a:09:60:ff:3e:db:0c:79:02: 3a:b3:66:79:bc:9e:54:81:1b:e5:dc:1d:55:ab:34: 92:99:d5:ee:3e:f1:95:2e:21:f4:64:9e:2f:20:ce: 95:42:8c:4f:7c:1c:89:7d:d8:2c:42:3f:ff:91:a3: fe:e3:e7:74:01:fd:f8:3d:f5:af:51:11:4c:a3:d4: 62:56:16:45:fd:fa:50:c8:ad:85:9e:4e:9d:16:84: 21:30:28:84:44:fb:3b:b3:38:4d:39:77:e7:bf:42: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 168.151.29.0/24 192.206.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8e:27:55:1b:53:2d:c9:c6:5a:82:ac:63:10:70:c0:4a:e1: 18:f3:b6:15:be:c1:5a:d3:bf:67:48:e9:60:78:1e:3f:ef:93: 4f:19:8c:e9:47:83:ff:a9:1a:e5:12:b0:f8:82:9c:9d:98:ab: 8f:bf:b0:e4:dc:b4:10:b0:e6:01:d5:61:5e:7a:7d:a3:1f:99: 97:70:30:3f:10:84:80:e2:ae:ea:f6:3b:a9:69:d8:03:ab:00: 18:10:0d:9f:f9:2f:81:52:12:b0:f7:0f:76:1d:e1:32:63:3a: d2:cc:bd:69:5e:c0:08:14:b0:46:cd:aa:df:88:37:5b:32:f1: e6:c2:12:4f:bf:39:d1:15:9d:0c:82:a3:83:67:17:15:39:ac: ee:41:92:21:4a:cc:13:69:a2:98:ed:7c:fa:5d:8a:64:10:e1: 38:0e:0c:1d:ce:cf:18:d8:b7:5c:4f:02:ad:36:0b:a6:94:7c: 09:6c:85:a2:17:98:19:77:1b:25:7a:68:43:1e:54:70:d1:b8: 78:c5:24:d3:fe:4d:67:9f:f3:48:76:3a:ea:87:09:80:8a:bb: b6:ac:83:82:c8:0c:4d:93:00:16:4f:8c:4b:2e:7a:68:b1:8a: 8b:38:a3:97:61:bc:ba:db:4a:a3:5a:18:21:81:ae:20:92:99: bc:7c:1c:bc -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWExQyYtjALEJBtdstCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTIyNjEzNDUyM1oXDTI4MDMzMDEyNDUyM1owLzEtMCsGA1UEAxMk NDEzMmJmOGMtNGFmNy00YjAxLTljZDYtZGZhMjE5M2QxMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA735H3emDznY7WdzTjtHHlcrdzS1IPF5ngcN7 RVCdE8JI5ndTkfvu3RvgAzxn5ElEybs069pbTk5DbRQsav4lSi51dHS/XsmXfwe0 cCGJ9ua+LN1Mcj9ZRFPgYE9eg71vFYC+6va4NzRNZissPy++arU+qSlVq8oozQ0R tdwtjbqmN2CTV1mshqZ726mzI5lnL7IvzgrA5WuyQFU6CWD/PtsMeQI6s2Z5vJ5U gRvl3B1VqzSSmdXuPvGVLiH0ZJ4vIM6VQoxPfByJfdgsQj//kaP+4+d0Af34PfWv URFMo9RiVhZF/fpQyK2Fnk6dFoQhMCiERPs7szhNOXfnv0KIUQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFPK8P2AVIw2La3zmUll4bnirIRdmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 MTMyYmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEyMTkzZDEyN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQxMzJiZjhjLTRhZjctNGIwMS05 Y2Q2LWRmYTIxOTNkMTI3ZC80MTMyYmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEyMTkz ZDEyN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAColx0DBADAzhcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKo4nVRtTLcnG WoKsYxBwwErhGPO2Fb7BWtO/Z0jpYHgeP++TTxmM6UeD/6ka5RKw+IKcnZirj7+w 5Ny0ELDmAdVhXnp9ox+Zl3AwPxCEgOKu6vY7qWnYA6sAGBANn/kvgVISsPcPdh3h MmM60sy9aV7ACBSwRs2q34g3WzLx5sIST7850RWdDIKjg2cXFTms7kGSIUrME2mi mO18+l2KZBDhOA4MHc7PGNi3XE8CrTYLppR8CWyFoheYGXcbJXpoQx5UcNG4eMUk 0/5NZ5/zSHY66ocJgIq7tqyDgsgMTZMAFk+MSy56aLGKizijl2G8uttKo1oYIYGu IJKZvHwcvA== -----END CERTIFICATE-----Generated at Fri Jan 9 01:23:21 2026 by rpki-client