This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer File: 958d43d9-c341-46e7-b131-b154f01666e6.cer (raw, json) Hash identifier: vKlxIr+x8HHcqpfNHtRbvMlCmf8ejKJqKA44/xbs5Xc= Subject key identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BD9459EA9943B629A9BCB6440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Nov 2025 18:18:23 +0000 Certificate not after: Wed 16 Feb 2028 18:18:23 +0000 Subordinate resources: AS: 399687 IP: 23.189.240.0/24 IP: 146.19.2.0/24 IP: 2606:77c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d9:45:9e:a9:94:3b:62:9a:9b:cb:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 13 18:18:23 2025 GMT Not After : Feb 16 18:18:23 2028 GMT Subject: CN=958d43d9-c341-46e7-b131-b154f01666e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:eb:59:db:5e:f1:3c:ba:d5:e6:dc:b5:f8: 39:93:0e:4b:87:8c:9f:66:f1:ef:87:aa:b4:d2:07: 2e:31:4c:ae:cc:a6:27:29:bc:d8:b6:ab:3b:19:c3: f0:62:ce:bc:9e:c5:69:3b:07:42:b4:49:52:b4:9c: 13:1f:03:70:dd:ca:f2:e6:87:a3:19:7d:dc:f9:73: 57:cd:8f:30:5d:4d:97:f6:6c:02:fb:75:c1:c7:8a: 8a:27:0c:13:81:8d:23:fa:bf:16:81:be:81:87:ce: 4c:cf:38:c9:38:60:4c:39:d7:93:bb:1a:20:0f:80: 93:29:33:8a:35:5e:d8:70:75:11:cb:03:6f:47:af: 9a:11:fe:f2:5c:2c:1b:bc:ee:7e:c3:ea:15:63:b5: 1f:ed:35:23:55:6d:94:ad:12:4c:57:ec:85:21:6c: 82:6d:85:d5:8d:49:47:04:75:ff:8d:e5:bb:8f:4a: 1d:a0:d3:21:7c:04:2a:fd:50:a4:b7:71:9f:ef:38: 14:1e:f9:55:94:22:d9:03:3f:ff:01:1b:74:b8:20: 47:e7:0d:c6:82:b7:ba:64:27:26:b4:e8:f5:d7:04: 7c:bb:e4:28:1f:50:59:86:ac:b5:f3:82:0d:ba:57: 25:d8:72:55:d6:11:fa:d8:ec:4a:7e:af:02:ef:19: c0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.189.240.0/24 146.19.2.0/24 IPv6: 2606:77c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399687 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1f:e6:9d:2d:fc:0a:6e:21:f4:fa:36:f5:dc:08:fe:fb:bf: d3:22:57:78:c6:33:8f:db:58:d9:cf:87:42:b8:1a:ba:24:b5: 2d:db:79:2d:22:9f:71:c5:a0:4d:d0:0e:d7:91:cb:43:21:d4: c1:3e:e9:69:81:3d:0f:6d:87:36:75:39:81:0f:84:56:04:b5: e4:47:d0:52:7d:74:ed:f3:de:43:be:10:2b:76:ea:f0:af:21: 8b:f2:99:bb:65:aa:14:36:ae:4a:99:d3:39:76:58:b3:e7:03: 27:39:37:0a:ef:1c:0e:19:ee:4a:6f:21:24:1d:df:88:4f:19: d8:14:0d:0c:32:a0:d2:60:f1:42:3e:60:0c:69:d1:a9:84:80: 84:ea:e2:4a:e2:79:0e:86:05:25:11:2f:65:80:c8:14:60:1b: 91:12:3e:60:a2:4f:fb:59:15:cb:c0:ca:9d:8e:94:ef:67:a3: 7a:cb:27:94:6d:42:0f:c0:9f:d1:97:44:a8:fa:57:00:4f:6b: a1:03:0f:ad:26:01:09:e2:00:be:0d:63:ee:f2:42:a2:1b:17: d3:a9:ab:30:5c:c9:01:21:a9:d7:ad:13:09:c9:96:c0:d4:00: 7d:83:2a:d4:e6:59:0d:66:87:92:22:3c:89:cc:9a:84:f2:3c: 01:8b:98:cd -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEvZRZ6plDtimpvLZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTExMzE4MTgyM1oXDTI4MDIxNjE4MTgyM1owLzEtMCsGA1UEAxMk OTU4ZDQzZDktYzM0MS00NmU3LWIxMzEtYjE1NGYwMTY2NmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu7rWdte8Ty61ebctfg5kw5Lh4yfZvHvh6q0 0gcuMUyuzKYnKbzYtqs7GcPwYs68nsVpOwdCtElStJwTHwNw3cry5oejGX3c+XNX zY8wXU2X9mwC+3XBx4qKJwwTgY0j+r8Wgb6Bh85MzzjJOGBMOdeTuxogD4CTKTOK NV7YcHURywNvR6+aEf7yXCwbvO5+w+oVY7Uf7TUjVW2UrRJMV+yFIWyCbYXVjUlH BHX/jeW7j0odoNMhfAQq/VCkt3Gf7zgUHvlVlCLZAz//ARt0uCBH5w3Ggre6ZCcm tOj11wR8u+QoH1BZhqy184INulcl2HJV1hH62OxKfq8C7xnAjQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOSP8/yVHPqAbQN13+mrNcCOWigVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 NThkNDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0ZjAxNjY2ZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzk1OGQ0M2Q5LWMzNDEtNDZlNy1i MTMxLWIxNTRmMDE2NjZlNi85NThkNDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0ZjAx NjY2ZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXvfADBACSEwIwDQQCAAIwBwMFACYGd8AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhlHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHwf5p0t/ApuIfT6NvXc CP77v9MiV3jGM4/bWNnPh0K4GroktS3beS0in3HFoE3QDteRy0Mh1ME+6WmBPQ9t hzZ1OYEPhFYEteRH0FJ9dO3z3kO+ECt26vCvIYvymbtlqhQ2rkqZ0zl2WLPnAyc5 NwrvHA4Z7kpvISQd34hPGdgUDQwyoNJg8UI+YAxp0amEgITq4krieQ6GBSURL2WA yBRgG5ESPmCiT/tZFcvAyp2OlO9no3rLJ5RtQg/An9GXRKj6VwBPa6EDD60mAQni AL4NY+7yQqIbF9OpqzBcyQEhqdetEwnJlsDUAH2DKtTmWQ1mh5IiPInMmoTyPAGL mM0= -----END CERTIFICATE-----Generated at Sun Nov 23 23:08:59 2025 by rpki-client