This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b.cer File: a84de681-fe45-480a-a775-c78ed66cd40b.cer (raw, json) Hash identifier: KEpFENHKIkm7MYU0pzXrp0hAyR5QrtzQUZEg/D9k8m4= Subject key identifier: 20:2A:0D:8A:35:58:D9:37:5C:B5:1D:24:FB:4C:95:F8:BD:BF:0D:3C Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BEF139A90E962C0B42AB1F000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/a84de681-fe45-480a-a775-c78ed66cd40b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Nov 2025 13:45:23 +0000 Certificate not after: Thu 24 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 396302 IP: 23.156.160.0/24 IP: 2604:4140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:13:9a:90:e9:62:c0:b4:2a:b1:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 21 13:45:23 2025 GMT Not After : Feb 24 13:45:23 2028 GMT Subject: CN=a84de681-fe45-480a-a775-c78ed66cd40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:79:53:95:08:b7:e4:62:9a:0d:34:89:18: f4:f9:6d:2d:fe:09:fc:c1:2f:36:dc:69:9f:6c:00: 0c:d3:5c:93:53:c0:06:d1:1f:93:14:48:23:39:5d: ff:21:56:6a:50:5f:74:10:c6:27:c1:96:d0:30:43: cc:e6:a0:0e:68:fa:63:b0:23:0f:26:ec:67:19:b1: 95:63:be:c6:f4:3d:8a:4a:51:b6:39:58:3b:fc:97: b6:9f:18:ce:d5:90:8b:c2:76:1e:20:b4:4f:e8:d0: 58:29:af:be:6c:fd:f9:71:03:8f:12:5c:53:f9:57: c7:ab:7a:37:7c:14:95:19:c1:ed:be:99:d0:87:ba: b0:b7:43:82:6a:e8:c1:a2:69:a5:01:33:03:17:ba: 37:d6:e1:9f:37:c9:3e:95:85:71:25:0a:11:b0:2e: 0b:08:8a:8c:e9:f0:83:52:a2:46:56:e1:d0:cd:35: c0:a0:7f:23:f2:46:bc:0b:64:80:53:fe:d4:a9:dc: 81:9f:46:e6:5a:90:93:c4:ae:95:a2:56:eb:1d:e4: ef:c6:a3:cf:18:c8:39:50:db:21:da:e1:b5:bd:97: 43:99:bb:53:e1:28:02:c4:b9:24:3b:48:dd:7a:d5: ad:9d:0c:2f:eb:fd:d5:97:1f:74:fb:ec:3c:86:9e: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2A:0D:8A:35:58:D9:37:5C:B5:1D:24:FB:4C:95:F8:BD:BF:0D:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/a84de681-fe45-480a-a775-c78ed66cd40b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.156.160.0/24 IPv6: 2604:4140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396302 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bd:26:ea:bb:04:53:a4:9c:92:b2:3c:ed:e8:b0:97:3b:8b: 12:19:cc:18:18:41:4e:1f:cf:65:43:46:ed:8f:3e:9f:62:bf: 2c:66:62:e1:c0:44:11:1a:66:41:12:97:2c:fa:ba:1b:16:c1: 0b:8a:82:4b:53:da:66:81:ea:26:50:ad:1b:1e:85:69:b0:6c: a1:96:ec:af:65:12:93:30:81:be:36:76:2e:2b:17:aa:ca:d9: 53:cc:9b:d0:4e:33:ce:25:0f:f5:9c:08:ae:92:1b:63:7e:92: 86:04:6f:b4:5f:e7:07:f9:4d:d5:72:7d:c4:a5:eb:15:0e:53: 2d:b6:66:af:7e:1c:c2:0c:7a:be:70:2f:eb:e5:b4:86:c9:16: c3:35:fb:49:e6:81:fc:f2:44:09:42:dd:6c:89:22:79:9c:19: 78:54:c5:dd:3b:98:2d:5c:95:ea:74:ab:14:88:4a:4f:34:d3: 5f:86:09:3c:0e:99:cc:1a:fc:0a:38:19:a5:c9:4b:6c:dd:b2: 3c:ad:db:0b:5d:d4:ee:1e:79:be:48:7f:5d:94:58:e6:e6:3f: 63:2d:66:d1:a4:0d:7c:e8:3a:8b:a8:7e:bb:f3:f7:e2:72:92: 36:8c:8d:b4:f3:72:63:e7:55:dc:7e:e9:a2:80:77:20:ed:fc: 1f:40:b8:4c -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEvvE5qQ6WLAtCqx8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTEyMTEzNDUyM1oXDTI4MDIyNDEzNDUyM1owLzEtMCsGA1UEAxMk YTg0ZGU2ODEtZmU0NS00ODBhLWE3NzUtYzc4ZWQ2NmNkNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs95U5UIt+Rimg00iRj0+W0t/gn8wS823Gmf bAAM01yTU8AG0R+TFEgjOV3/IVZqUF90EMYnwZbQMEPM5qAOaPpjsCMPJuxnGbGV Y77G9D2KSlG2OVg7/Je2nxjO1ZCLwnYeILRP6NBYKa++bP35cQOPElxT+VfHq3o3 fBSVGcHtvpnQh7qwt0OCaujBommlATMDF7o31uGfN8k+lYVxJQoRsC4LCIqM6fCD UqJGVuHQzTXAoH8j8ka8C2SAU/7UqdyBn0bmWpCTxK6VolbrHeTvxqPPGMg5UNsh 2uG1vZdDmbtT4SgCxLkkO0jdetWtnQwv6/3Vlx90++w8hp62pQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCAqDYo1WNk3XLUdJPtMlfi9vw08MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9h ODRkZTY4MS1mZTQ1LTQ4MGEtYTc3NS1jNzhlZDY2Y2Q0MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2E4NGRlNjgxLWZlNDUtNDgwYS1h Nzc1LWM3OGVkNjZjZDQwYi9hODRkZTY4MS1mZTQ1LTQ4MGEtYTc3NS1jNzhlZDY2 Y2Q0MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXnKAwDQQCAAIwBwMFACYEQUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgwOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEy9Juq7BFOknJKyPO3osJc7ixIZ zBgYQU4fz2VDRu2PPp9ivyxmYuHARBEaZkESlyz6uhsWwQuKgktT2maB6iZQrRse hWmwbKGW7K9lEpMwgb42di4rF6rK2VPMm9BOM84lD/WcCK6SG2N+koYEb7Rf5wf5 TdVyfcSl6xUOUy22Zq9+HMIMer5wL+vltIbJFsM1+0nmgfzyRAlC3WyJInmcGXhU xd07mC1clep0qxSISk8001+GCTwOmcwa/Ao4GaXJS2zdsjyt2wtd1O4eeb5If12U WObmP2MtZtGkDXzoOouofrvz9+JykjaMjbTzcmPnVdx+6aKAdyDt/B9AuEw= -----END CERTIFICATE-----Generated at Sun Nov 23 23:10:29 2025 by rpki-client