This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer File: 4e95a28e-27fe-479a-b086-2cc9809d54f6.cer (raw, json) Hash identifier: vofEDfvh8rYkp+YMj+kLMw6r9kL59sTU84AMoFZv/7o= Subject key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BC7CE570D558D3D6593F4FC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Nov 2025 12:09:19 +0000 Certificate not after: Thu 30 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 6161 AS: 7015 -- 7016 AS: 7725 AS: 7757 AS: 7853 AS: 7922 AS: 11025 AS: 13367 AS: 13385 AS: 14668 AS: 16748 AS: 20214 AS: 21508 AS: 22258 AS: 22909 AS: 23253 AS: 23266 AS: 33287 AS: 33351 AS: 33489 -- 33491 AS: 33542 AS: 33650 -- 33668 AS: 36196 AS: 36377 AS: 36732 -- 36733 AS: 53297 AS: 393232 AS: 395974 AS: 395976 AS: 395980 AS: 396017 AS: 396019 AS: 396021 AS: 396415 IP: 23.24.0.0/15 IP: 23.30.0.0/15 IP: 23.68.0.0/14 IP: 24.0.0.0 -- 24.23.255.255 IP: 24.30.0.0/17 IP: 24.34.0.0/16 IP: 24.40.0.0 -- 24.40.79.255 IP: 24.60.0.0/14 IP: 24.91.0.0/16 IP: 24.98.0.0/15 IP: 24.104.0.0 -- 24.104.159.255 IP: 24.118.0.0/16 IP: 24.124.128.0 -- 24.129.127.255 IP: 24.130.0.0/15 IP: 24.147.0.0/16 IP: 24.149.128.0/17 IP: 24.153.64.0/19 IP: 24.218.0.0/16 IP: 24.245.0.0/18 IP: 50.73.0.0/16 IP: 50.76.0.0/14 IP: 50.128.0.0/9 IP: 64.56.32.0/19 IP: 64.78.64.0/18 IP: 64.139.64.0/19 IP: 64.235.160.0/19 IP: 65.34.128.0/17 IP: 65.96.0.0 -- 65.97.31.255 IP: 66.30.0.0/15 IP: 66.41.0.0/16 IP: 66.56.0.0/18 IP: 66.176.0.0/15 IP: 66.208.192.0/18 IP: 66.229.0.0/16 IP: 66.240.0.0/18 IP: 67.160.0.0/11 IP: 68.32.0.0/11 IP: 68.80.0.0/13 IP: 69.136.0.0/13 IP: 69.180.0.0/15 IP: 69.240.0.0/12 IP: 70.88.0.0/14 IP: 71.24.0.0/14 IP: 71.56.0.0/13 IP: 71.192.0.0/12 IP: 71.224.0.0/12 IP: 72.55.0.0/17 IP: 73.0.0.0/8 IP: 74.16.0.0/12 IP: 74.81.128.0/19 IP: 74.92.0.0/14 IP: 75.64.0.0 -- 75.75.191.255 IP: 75.144.0.0/13 IP: 76.16.0.0/12 IP: 76.96.0.0 -- 76.159.255.255 IP: 96.64.0.0 -- 96.124.255.255 IP: 96.128.0.0 -- 96.223.255.255 IP: 98.32.0.0/11 IP: 98.192.0.0/10 IP: 107.0.0.0 -- 107.5.255.255 IP: 108.171.224.0/20 IP: 162.17.0.0/16 IP: 162.148.0.0/14 IP: 169.152.0.0/16 IP: 172.244.0.0/16 IP: 173.8.0.0/13 IP: 173.160.0.0/13 IP: 174.48.0.0/12 IP: 174.160.0.0/11 IP: 184.108.0.0 -- 184.127.255.255 IP: 198.0.0.0/16 IP: 198.137.252.0/23 IP: 204.11.116.0/22 IP: 207.223.0.0/20 IP: 208.39.128.0/18 IP: 208.110.192.0/19 IP: 209.23.192.0/18 IP: 216.45.128.0/17 IP: 2001:558::/29 IP: 2601::/20 IP: 2603:2000:: -- 2603:30ff:ffff:ffff:ffff:ffff:ffff:ffff IP: 2604:6a00::/32 IP: 2620:fd:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c7:ce:57:0d:55:8d:3d:65:93:f4:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 7 12:09:19 2025 GMT Not After : Dec 30 01:45:25 2027 GMT Subject: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:8c:51:3c:d3:13:61:77:7f:4c:f9:9f:74: 1f:32:cf:0a:89:fa:5c:a0:ad:59:ab:4a:02:8d:45: 03:03:f4:98:3a:19:1e:a0:06:7b:16:8a:28:f0:00: 11:71:10:87:3e:78:50:6d:f8:54:1f:a1:02:b4:33: e1:43:64:4e:0c:5c:94:53:d6:14:b0:bb:a9:2e:f6: 95:1d:12:54:76:26:1c:90:01:00:2f:df:ed:7f:0a: 68:bb:e5:e9:dc:c6:41:92:a1:85:67:46:47:a9:ef: b0:cb:1e:a4:77:be:d5:d4:13:41:be:63:67:c6:76: 9f:bf:11:df:75:58:9f:93:00:0e:07:7c:99:e8:ba: 22:6d:00:62:47:fa:fa:92:21:5e:9f:e0:23:4b:15: a5:14:21:92:ba:a7:d4:a9:f8:7e:d5:0f:1b:31:4f: a5:ca:d6:6e:75:97:ff:e5:0d:e7:a2:c6:9c:1d:70: 05:9e:47:ac:18:eb:23:23:31:4f:e9:5c:f2:10:1d: e0:f6:26:cc:86:e4:44:90:ed:89:89:68:e0:0c:04: f7:80:d2:96:17:2b:c9:08:a3:4e:d3:9d:4a:87:bb: 68:3a:35:2e:e5:f9:9d:b9:8b:46:a6:fe:3d:bd:d3: 73:4f:dc:ec:93:92:dc:a5:d1:8c:a8:66:79:7c:b9: 8e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.24.0.0/15 23.30.0.0/15 23.68.0.0/14 24.0.0.0-24.23.255.255 24.30.0.0/17 24.34.0.0/16 24.40.0.0-24.40.79.255 24.60.0.0/14 24.91.0.0/16 24.98.0.0/15 24.104.0.0-24.104.159.255 24.118.0.0/16 24.124.128.0-24.129.127.255 24.130.0.0/15 24.147.0.0/16 24.149.128.0/17 24.153.64.0/19 24.218.0.0/16 24.245.0.0/18 50.73.0.0/16 50.76.0.0/14 50.128.0.0/9 64.56.32.0/19 64.78.64.0/18 64.139.64.0/19 64.235.160.0/19 65.34.128.0/17 65.96.0.0-65.97.31.255 66.30.0.0/15 66.41.0.0/16 66.56.0.0/18 66.176.0.0/15 66.208.192.0/18 66.229.0.0/16 66.240.0.0/18 67.160.0.0/11 68.32.0.0/11 68.80.0.0/13 69.136.0.0/13 69.180.0.0/15 69.240.0.0/12 70.88.0.0/14 71.24.0.0/14 71.56.0.0/13 71.192.0.0/12 71.224.0.0/12 72.55.0.0/17 73.0.0.0/8 74.16.0.0/12 74.81.128.0/19 74.92.0.0/14 75.64.0.0-75.75.191.255 75.144.0.0/13 76.16.0.0/12 76.96.0.0-76.159.255.255 96.64.0.0-96.124.255.255 96.128.0.0-96.223.255.255 98.32.0.0/11 98.192.0.0/10 107.0.0.0-107.5.255.255 108.171.224.0/20 162.17.0.0/16 162.148.0.0/14 169.152.0.0/16 172.244.0.0/16 173.8.0.0/13 173.160.0.0/13 174.48.0.0/12 174.160.0.0/11 184.108.0.0-184.127.255.255 198.0.0.0/16 198.137.252.0/23 204.11.116.0/22 207.223.0.0/20 208.39.128.0/18 208.110.192.0/19 209.23.192.0/18 216.45.128.0/17 IPv6: 2001:558::/29 2601::/20 2603:2000::-2603:30ff:ffff:ffff:ffff:ffff:ffff:ffff 2604:6a00::/32 2620:fd:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6161 7015-7016 7725 7757 7853 7922 11025 13367 13385 14668 16748 20214 21508 22258 22909 23253 23266 33287 33351 33489-33491 33542 33650-33668 36196 36377 36732-36733 53297 393232 395974 395976 395980 396017 396019 396021 396415 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b8:9a:09:95:cd:c8:20:f5:f1:59:54:8d:ba:9a:35:bf:e2: 66:f5:f3:ee:47:3a:74:85:95:57:bc:78:cb:9c:55:2d:16:3a: 5a:db:30:89:b8:07:13:b1:c8:6b:62:d5:ca:21:3f:47:39:e4: b8:69:8c:78:17:b8:0f:a5:92:4f:f0:ae:f8:f6:58:f3:a5:2f: 2e:d5:1b:72:5d:63:1f:1f:15:ed:e0:84:88:d5:ea:ce:d3:07: 33:8c:81:64:0e:ae:15:e8:b6:c5:e3:12:20:89:d7:73:77:79: 21:1c:4b:d1:88:55:d1:81:ef:a9:2f:4f:a0:e0:8e:40:99:91: 94:c4:1a:05:24:80:b6:9d:23:d0:f2:db:7d:df:47:0c:9c:c0: d4:be:4e:1e:d3:b2:48:ce:4d:2d:30:fb:a9:33:de:23:d1:cc: 08:1e:65:1f:07:d5:04:a2:b0:6c:8e:4f:30:71:76:5a:cd:cc: c1:0d:e3:6e:24:01:2a:35:91:ce:05:ad:b0:59:67:13:29:69: 7b:bb:1d:04:a6:4e:e7:9a:b2:ec:9f:bb:a5:ec:59:9c:6c:7b: 77:5d:98:b5:f2:51:2a:7a:58:66:9b:01:ed:c9:66:4d:12:c7: 2c:33:27:e1:63:ee:3d:eb:06:a5:41:6a:2a:04:75:35:b2:c6: e4:2a:5c:c3 -----BEGIN CERTIFICATE----- MIIJ4DCCCMigAwIBAgIUAQ0Mn0MoWEvHzlcNVY09ZZP0/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTEwNzEyMDkxOVoXDTI3MTIzMDAxNDUyNVowLzEtMCsGA1UEAxMk NGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lGMUTzTE2F3f0z5n3QfMs8KifpcoK1Zq0oC jUUDA/SYOhkeoAZ7Fooo8AARcRCHPnhQbfhUH6ECtDPhQ2RODFyUU9YUsLupLvaV HRJUdiYckAEAL9/tfwpou+Xp3MZBkqGFZ0ZHqe+wyx6kd77V1BNBvmNnxnafvxHf dVifkwAOB3yZ6LoibQBiR/r6kiFen+AjSxWlFCGSuqfUqfh+1Q8bMU+lytZudZf/ 5Q3nosacHXAFnkesGOsjIzFP6VzyEB3g9ibMhuREkO2JiWjgDAT3gNKWFyvJCKNO 051Kh7toOjUu5fmduYtGpv49vdNzT9zsk5LcpdGMqGZ5fLmO2QIDAQABo4IG8jCC Bu4wHQYDVR0OBBYEFFVDKDErohHpDGMqa8F+DdaSdj5hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRlOTVhMjhlLTI3ZmUtNDc5YS1i MDg2LTJjYzk4MDlkNTRmNi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5 ZDU0ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwggJABggrBgEF BQcBBwEB/wSCAi8wggIrMIIB9AQCAAEwggHsAwMBFxgDAwEXHgMDAhdEMAkDAgMY AwMDGBADBAcYHgADAwAYIjALAwMDGCgDBAQYKEADAwIYPAMDABhbAwMBGGIwCwMD AxhoAwQFGGiAAwMAGHYwDAMEBxh8gAMEBxiBAAMDARiCAwMAGJMDBAcYlYADBAUY mUADAwAY2gMEBhj1AAMDADJJAwMCMkwDAwcygAMEBUA4IAMEBkBOQAMEBUCLQAME BUDroAMEB0EigDALAwMFQWADBAVBYQADAwFCHgMDAEIpAwQGQjgAAwMBQrADBAZC 0MADAwBC5QMEBkLwAAMDBUOgAwMFRCADAwNEUAMDA0WIAwMBRbQDAwRF8AMDAkZY AwMCRxgDAwNHOAMDBEfAAwMER+ADBAdINwADAgBJAwMEShADBAVKUYADAwJKXDAL AwMGS0ADBAZLS4ADAwNLkAMDBEwQMAoDAwVMYAMDBUyAMAoDAwZgQAMDAGB8MAoD AwdggAMDBWDAAwMFYiADAwZiwDAJAwIAawMDAWsEAwQEbKvgAwMAohEDAwKilAMD AKmYAwMArPQDAwOtCAMDA62gAwMErjADAwWuoDAKAwMCuGwDAwe4AAMDAMYAAwQB xon8AwQCzAt0AwQEz98AAwQG0CeAAwQF0G7AAwQG0RfAAwQH2C2AMDEEAgACMCsD BQMgAQVYAwQEJgEAMAwDBAUmAyADBAAmAzADBQAmBGoAAwcAJiAA/YAAMIHNBggr BgEFBQcBCAEB/wSBvTCBuqCBtzCBtAICGBEwCAICG2cCAhtoAgIeLQICHk0CAh6t AgIe8gICKxECAjQ3AgI0SQICOUwCAkFsAgJO9gICVAQCAlbyAgJZfQICWtUCAlri AgMAggcCAwCCRzAKAgMAgtECAwCC0wIDAIMGMAoCAwCDcgIDAIOEAgMAjWQCAwCO GTAKAgMAj3wCAwCPfQIDANAxAgMGABACAwYKxgIDBgrIAgMGCswCAwYK8QIDBgrz AgMGCvUCAwYMfzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB+uJoJlc3IIPXxWVSNupo1v+Jm9fPuRzp0hZVX vHjLnFUtFjpa2zCJuAcTschrYtXKIT9HOeS4aYx4F7gPpZJP8K749ljzpS8u1Rty XWMfHxXt4ISI1erO0wczjIFkDq4V6LbF4xIgiddzd3khHEvRiFXRge+pL0+g4I5A mZGUxBoFJIC2nSPQ8tt930cMnMDUvk4e07JIzk0tMPupM94j0cwIHmUfB9UEorBs jk8wcXZazczBDeNuJAEqNZHOBa2wWWcTKWl7ux0Epk7nmrLsn7ul7FmcbHt3XZi1 8lEqelhmmwHtyWZNEscsMyfhY+496walQWoqBHU1ssbkKlzD -----END CERTIFICATE-----Generated at Sun Nov 23 23:09:19 2025 by rpki-client