This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer File: db08c0ba-423d-4547-9dee-8ed97f061fff.cer (raw, json) Hash identifier: 0YqUOMEV8VUtXzmccWn1oRG054OhrwOxcmfgOYIaIMs= Subject key identifier: 55:07:FA:15:4C:2D:07:5F:22:A7:A7:AD:94:D7:53:B9:EF:E2:B3:40 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BEFC1C1712B4AD7E505F6A498 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Nov 2025 19:36:17 +0000 Certificate not after: Thu 24 Feb 2028 19:36:17 +0000 Subordinate resources: AS: 400268 IP: 66.129.32.0/21 IP: 140.106.32.0/20 IP: 160.79.96.0/21 IP: 2606:79c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:c1:c1:71:2b:4a:d7:e5:05:f6:a4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 21 19:36:17 2025 GMT Not After : Feb 24 19:36:17 2028 GMT Subject: CN=db08c0ba-423d-4547-9dee-8ed97f061fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:92:01:76:f0:cb:94:d9:34:6b:83:f4:33:fd: e5:f9:96:41:3e:f6:d3:f7:4a:8a:5f:2c:29:dc:97: d8:14:f8:b5:28:c0:96:93:4c:07:d1:62:96:88:2d: 1d:76:c1:0a:38:7c:4e:58:c1:51:ca:79:f9:ee:b8: 6e:a7:29:95:e3:44:c1:a6:96:9f:b4:f4:4f:2a:ad: b1:a5:cf:55:92:cc:b9:84:01:ce:af:2e:c8:81:96: a4:0f:2f:12:0b:08:98:09:66:38:35:91:53:e9:a7: c3:79:df:a1:9d:ad:05:75:4d:4b:24:4b:4d:77:49: e2:2c:1a:0e:f8:1e:75:92:68:ff:2a:7f:57:95:e1: b8:f7:13:d3:e6:c4:c5:53:bf:b3:e6:a1:74:8e:8a: 12:58:99:ed:de:f9:06:1c:c4:5c:82:dc:ee:a9:84: 9d:13:12:c0:2d:32:7e:af:c1:b7:b1:d0:23:54:1d: 9e:f3:56:ef:e4:f6:1e:a2:af:54:08:80:0b:9a:b6: 7b:d1:55:1a:98:57:df:ff:3b:cf:8e:c5:26:7a:ea: 9a:b6:e7:43:79:b1:cb:79:67:79:76:17:3e:53:5c: b7:dc:23:83:81:41:b2:b6:72:41:b0:e4:73:9b:62: 8d:3a:4f:89:42:7d:c0:cc:5a:12:b4:33:18:e8:f3: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:07:FA:15:4C:2D:07:5F:22:A7:A7:AD:94:D7:53:B9:EF:E2:B3:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.129.32.0/21 140.106.32.0/20 160.79.96.0/21 IPv6: 2606:79c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400268 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c7:6a:24:bc:3e:6b:35:a0:58:34:53:80:4e:f3:3d:f0:0d: be:39:b4:07:01:e9:2d:49:41:c7:48:04:f8:7c:cf:0c:60:5e: 8a:35:eb:4c:1b:9b:2d:b1:9d:3a:c0:6b:ce:70:9c:23:81:9e: 5d:88:d7:98:28:c3:53:a5:8f:94:8b:55:25:7d:0f:c0:2d:0a: 01:03:9d:f2:fe:ca:d8:ee:8d:94:f3:af:71:f3:67:5a:b3:64: 92:e1:82:7e:5b:27:7f:2f:b0:e4:49:87:98:5a:8c:e3:a3:f5: d9:e4:a7:df:91:43:c3:d6:af:5a:70:3a:95:e2:0e:9a:8f:4c: c5:7e:cf:95:8f:99:84:2e:be:77:c7:13:0b:6e:00:ec:50:1c: b2:e8:47:9d:27:70:f2:0b:df:84:b5:ef:0a:0f:ba:cc:dc:e8: 41:2c:99:93:e0:b6:c1:ae:d8:f9:93:ca:8c:bf:d4:8d:4a:1b: ec:40:da:61:52:c0:d9:5c:18:5f:34:eb:6f:c9:f2:e1:39:0f: 04:88:ad:ff:51:4d:dc:46:a1:61:e2:49:ef:e9:dd:34:40:a0: 6d:34:e0:ea:36:16:20:c0:4c:bd:0c:13:a6:d9:89:3e:92:87: ca:5f:89:7d:d3:13:91:a5:8d:d3:ea:b8:e0:c3:ee:8b:86:d5: c0:71:84:2b -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEvvwcFxK0rX5QX2pJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTEyMTE5MzYxN1oXDTI4MDIyNDE5MzYxN1owLzEtMCsGA1UEAxMk ZGIwOGMwYmEtNDIzZC00NTQ3LTlkZWUtOGVkOTdmMDYxZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pIBdvDLlNk0a4P0M/3l+ZZBPvbT90qKXywp 3JfYFPi1KMCWk0wH0WKWiC0ddsEKOHxOWMFRynn57rhupymV40TBppaftPRPKq2x pc9Vksy5hAHOry7IgZakDy8SCwiYCWY4NZFT6afDed+hna0FdU1LJEtNd0niLBoO +B51kmj/Kn9XleG49xPT5sTFU7+z5qF0jooSWJnt3vkGHMRcgtzuqYSdExLALTJ+ r8G3sdAjVB2e81bv5PYeoq9UCIALmrZ70VUamFff/zvPjsUmeuqatudDebHLeWd5 dhc+U1y33CODgUGytnJBsORzm2KNOk+JQn3AzFoStDMY6PNs2QIDAQABo4IENjCC BDIwHQYDVR0OBBYEFFUH+hVMLQdfIqenrZTXU7nv4rNAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k YjA4YzBiYS00MjNkLTQ1NDctOWRlZS04ZWQ5N2YwNjFmZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2RiMDhjMGJhLTQyM2QtNDU0Ny05 ZGVlLThlZDk3ZjA2MWZmZi9kYjA4YzBiYS00MjNkLTQ1NDctOWRlZS04ZWQ5N2Yw NjFmZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBANCgSADBASMaiADBAOgT2AwDQQCAAIwBwMFACYG ecAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhuMMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKLHaiS8Pms1 oFg0U4BO8z3wDb45tAcB6S1JQcdIBPh8zwxgXoo160wbmy2xnTrAa85wnCOBnl2I 15gow1Olj5SLVSV9D8AtCgEDnfL+ytjujZTzr3HzZ1qzZJLhgn5bJ38vsORJh5ha jOOj9dnkp9+RQ8PWr1pwOpXiDpqPTMV+z5WPmYQuvnfHEwtuAOxQHLLoR50ncPIL 34S17woPuszc6EEsmZPgtsGu2PmTyoy/1I1KG+xA2mFSwNlcGF8062/J8uE5DwSI rf9RTdxGoWHiSe/p3TRAoG004Oo2FiDATL0ME6bZiT6Sh8pfiX3TE5GljdPquODD 7ouG1cBxhCs= -----END CERTIFICATE-----Generated at Sun Nov 23 23:08:59 2025 by rpki-client