This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer File: d9e22f6d-5551-4712-9f95-3008c51223ec.cer (raw, json) Hash identifier: uDuIxKkul5830CFjJpcT93oavIRrL7RZfl4THdxVoKU= Subject key identifier: 28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BF1DE47C057B04D2449454780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Nov 2025 13:45:23 +0000 Certificate not after: Fri 25 Feb 2028 13:45:23 +0000 Subordinate resources: IP: 131.95.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:de:47:c0:57:b0:4d:24:49:45:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 22 13:45:23 2025 GMT Not After : Feb 25 13:45:23 2028 GMT Subject: CN=d9e22f6d-5551-4712-9f95-3008c51223ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:ce:f2:8e:a7:e3:24:28:85:b8:e3:70:88: 74:07:4e:b3:df:87:3b:77:1e:c4:62:70:9e:e0:f4: 31:1e:92:91:45:57:42:1d:0f:09:68:fd:18:95:90: c2:59:4b:cf:8a:b3:0b:bb:7c:94:5b:cc:40:4c:7d: 7b:b7:7f:ed:06:56:eb:72:87:88:3a:19:6a:6b:c2: 78:84:c4:5b:1d:e3:84:50:55:6e:aa:cb:11:18:4c: e5:1a:94:27:0c:2a:12:fa:66:4e:b7:77:69:61:f0: 12:02:71:1b:5a:68:67:23:c4:6b:2d:28:80:38:eb: 9b:fb:af:84:35:1c:78:34:86:46:77:ac:eb:66:07: d5:cc:4c:aa:8c:b9:9e:fd:05:8b:0c:f2:4c:ae:63: 8d:07:f9:ba:37:48:81:92:66:74:b8:df:3c:7c:eb: 99:ae:67:1c:6a:bd:e2:bc:cc:43:8c:c8:31:52:a7: 95:b4:d0:cb:8c:08:0a:c7:11:96:2e:86:46:03:68: 84:4a:c5:2d:a6:6e:f8:f7:b6:26:a2:2b:0e:3c:05: 65:85:f9:82:1c:0a:c5:f6:37:04:01:56:0a:a0:d1: 19:09:e7:99:f5:dc:0c:6b:8c:d3:0b:8c:92:6a:bd: 29:8b:f6:44:ca:2c:c8:b0:db:1b:55:46:c3:5f:28: 97:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 131.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:05:fc:a8:b8:62:1c:75:30:d7:09:02:55:1c:f2:ad:fc:51: 95:e8:49:f1:a9:3d:d6:f9:fa:0c:87:11:36:57:6a:ed:d6:09: 63:af:4e:49:c0:b2:ec:a3:78:74:4d:b2:e9:e4:33:5e:05:14: ab:00:3e:ab:f6:a1:f3:96:d8:af:40:72:1d:39:a6:31:b9:14: c5:9f:28:3e:16:c9:aa:1d:d2:90:32:14:b0:be:ae:75:47:27: ac:ce:6a:44:3c:da:15:b8:a9:29:73:bd:82:87:c1:23:31:7b: 31:a4:a1:3b:04:00:7d:1e:f8:e8:81:34:38:20:9a:f5:79:5e: f7:89:85:d4:91:32:40:c1:6b:6f:33:a8:0e:99:94:0f:a3:e5: 41:7f:50:7c:83:81:a1:3e:59:89:bb:94:6d:ce:15:9f:d0:fc: 6d:39:a5:93:fb:89:46:7a:87:75:33:0b:4c:a2:e1:80:26:c6: 2d:ee:b1:37:c2:fb:78:33:c0:94:d3:02:49:cc:2d:85:8b:10: 9a:c9:e1:63:55:14:9a:2b:1f:23:d8:a8:49:cb:51:4e:8e:f5: d4:5a:2b:17:7a:77:65:78:84:3f:c2:b6:ec:a6:54:73:ce:77: d6:93:23:29:52:ea:41:b2:d4:74:9f:00:5a:95:cc:42:1d:34: e5:05:a9:06 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEvx3kfAV7BNJElFR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTEyMjEzNDUyM1oXDTI4MDIyNTEzNDUyM1owLzEtMCsGA1UEAxMk ZDllMjJmNmQtNTU1MS00NzEyLTlmOTUtMzAwOGM1MTIyM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp/O8o6n4yQohbjjcIh0B06z34c7dx7EYnCe 4PQxHpKRRVdCHQ8JaP0YlZDCWUvPirMLu3yUW8xATH17t3/tBlbrcoeIOhlqa8J4 hMRbHeOEUFVuqssRGEzlGpQnDCoS+mZOt3dpYfASAnEbWmhnI8RrLSiAOOub+6+E NRx4NIZGd6zrZgfVzEyqjLme/QWLDPJMrmONB/m6N0iBkmZ0uN88fOuZrmccar3i vMxDjMgxUqeVtNDLjAgKxxGWLoZGA2iESsUtpm7497YmoisOPAVlhfmCHArF9jcE AVYKoNEZCeeZ9dwMa4zTC4ySar0pi/ZEyizIsNsbVUbDXyiXrwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFCjIME292ErAHjuGHuVKMWW2t5d3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k OWUyMmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4YzUxMjIzZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2Q5ZTIyZjZkLTU1NTEtNDcxMi05 Zjk1LTMwMDhjNTEyMjNlYy9kOWUyMmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4YzUx MjIzZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCDXzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLBfyouGIcdTDXCQJVHPKt /FGV6EnxqT3W+foMhxE2V2rt1gljr05JwLLso3h0TbLp5DNeBRSrAD6r9qHzltiv QHIdOaYxuRTFnyg+FsmqHdKQMhSwvq51RyeszmpEPNoVuKkpc72Ch8EjMXsxpKE7 BAB9HvjogTQ4IJr1eV73iYXUkTJAwWtvM6gOmZQPo+VBf1B8g4GhPlmJu5RtzhWf 0PxtOaWT+4lGeod1MwtMouGAJsYt7rE3wvt4M8CU0wJJzC2FixCayeFjVRSaKx8j 2KhJy1FOjvXUWisXendleIQ/wrbsplRzznfWkyMpUupBstR0nwBalcxCHTTlBakG -----END CERTIFICATE-----Generated at Sun Nov 23 23:10:51 2025 by rpki-client