This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer File: e0927227-fbc8-4924-89af-1885637cb07c.cer (raw, json) Hash identifier: 72OksF3FCruWUtMwrue7/yaLwBibbYMcwoYyOAt0OGs= Subject key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C34DEB4609BE0896BA14C3F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Dec 2025 13:45:23 +0000 Certificate not after: Mon 20 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 843 AS: 36516 AS: 55002 AS: 397144 AS: 398349 IP: 23.158.32.0/24 IP: 72.19.3.0/24 IP: 107.162.0.0/16 IP: 2602:fa75::/36 IP: 2602:fe2b::/36 IP: 2604:e180::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:34:de:b4:60:9b:e0:89:6b:a1:4c:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 16 13:45:23 2025 GMT Not After : Mar 20 12:45:23 2028 GMT Subject: CN=e0927227-fbc8-4924-89af-1885637cb07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:5a:10:05:88:82:cb:2e:95:5a:8a:50:9a: f5:de:ec:e2:6f:73:87:5e:c7:e7:6d:71:19:73:91: b1:69:5b:88:4a:de:36:0f:c4:9c:01:37:22:d4:64: 4a:91:ee:31:59:fb:b2:20:e0:e8:3d:26:58:68:9b: 50:f9:b0:44:01:1d:ec:92:8f:2f:ca:94:6e:73:3e: 3a:52:52:cc:45:21:f1:0a:e7:0f:a0:7a:4a:29:65: de:d8:11:d0:64:c8:c5:05:33:aa:4d:84:ef:4c:f4: 29:42:58:ff:c3:cd:14:66:f7:8d:43:91:62:c9:90: 1c:98:ee:8a:de:05:48:d4:c9:37:c6:32:64:28:3c: 8a:64:23:6d:de:9d:11:b3:88:bb:ec:9f:97:c0:40: 92:7b:ba:f0:0e:85:f7:8f:d7:ef:21:6d:93:71:6a: 36:a7:f7:fe:fe:1d:a3:b0:11:9d:ae:74:12:5a:0c: 64:f1:ef:44:be:5c:ce:0e:c3:51:ec:80:c4:2d:26: 77:a5:a6:41:3b:e8:f7:68:5a:ff:f0:f0:a8:b0:10: bf:08:d3:3e:35:15:56:84:2e:5d:8c:22:ee:48:5f: 84:b0:c7:bf:a9:34:d6:26:f1:53:f6:38:2f:3d:1f: 0d:ae:2f:69:c1:60:e5:0a:0f:a8:91:66:5c:66:09: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.158.32.0/24 72.19.3.0/24 107.162.0.0/16 IPv6: 2602:fa75::/36 2602:fe2b::/36 2604:e180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 843 36516 55002 397144 398349 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:40:ae:6f:7e:ad:2d:69:c2:fe:08:83:20:96:4b:12:b5:23: 94:56:d4:e6:c7:00:ca:ec:01:d9:d4:47:34:fa:68:a1:d8:85: b3:33:6c:e7:1e:31:e6:aa:fa:c3:3d:90:ff:f7:53:6e:fe:c7: c3:39:32:3b:17:83:c5:04:62:11:40:c9:ac:62:67:43:2e:b6: 0c:27:91:ce:d8:ce:20:04:7f:5a:91:fc:ae:2f:d4:76:d0:aa: 53:2d:6a:54:0a:28:79:76:25:ff:08:45:c2:e6:32:b1:56:6f: 6a:a0:59:7b:c7:80:48:77:10:9c:db:8f:f4:fb:3f:29:3d:03: a2:be:6f:f2:7c:59:8d:98:15:d6:80:47:7d:af:dc:7f:e6:80: ce:2b:e0:6f:23:1e:bb:4e:cb:ba:47:57:23:27:e3:8e:a6:ca: 89:b5:82:89:c5:e7:ce:98:3c:5e:36:e2:86:fc:69:3d:72:4b: b7:5c:f8:a6:e8:2b:55:67:31:81:f6:3f:07:62:b5:8a:14:e3: 0f:3f:bc:1e:54:71:73:db:ad:ab:7d:08:7d:75:c8:16:e6:a9: 87:c2:01:e1:5a:4f:69:6a:c6:37:6f:25:cd:6b:44:4d:5c:b9: 95:9c:e5:02:cb:ea:b0:1b:d0:22:5e:31:5f:8e:33:43:0d:41: 96:18:3d:cd -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEw03rRgm+CJa6FMP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTIxNjEzNDUyM1oXDTI4MDMyMDEyNDUyM1owLzEtMCsGA1UEAxMk ZTA5MjcyMjctZmJjOC00OTI0LTg5YWYtMTg4NTYzN2NiMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVBaEAWIgssulVqKUJr13uzib3OHXsfnbXEZ c5GxaVuISt42D8ScATci1GRKke4xWfuyIODoPSZYaJtQ+bBEAR3sko8vypRucz46 UlLMRSHxCucPoHpKKWXe2BHQZMjFBTOqTYTvTPQpQlj/w80UZveNQ5FiyZAcmO6K 3gVI1Mk3xjJkKDyKZCNt3p0Rs4i77J+XwECSe7rwDoX3j9fvIW2TcWo2p/f+/h2j sBGdrnQSWgxk8e9EvlzODsNR7IDELSZ3paZBO+j3aFr/8PCosBC/CNM+NRVWhC5d jCLuSF+EsMe/qTTWJvFT9jgvPR8Nri9pwWDlCg+okWZcZgn8GQIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFELUwNarGe6BIle9wraIHKFxwH/MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l MDkyNzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1NjM3Y2IwN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2UwOTI3MjI3LWZiYzgtNDkyNC04 OWFmLTE4ODU2MzdjYjA3Yy9lMDkyNzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1NjM3 Y2IwN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MBcEAgABMBEDBAAXniADBABIEwMDAwBrojAdBAIAAjAXAwYEJgL6 dQADBgQmAv4rAAMFACYE4YAwLQYIKwYBBQUHAQgBAf8EHjAcoBowGAICA0sCAwCO pAIDANbaAgMGD1gCAwYUDTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsQK5vfq0tacL+CIMglksStSOUVtTm xwDK7AHZ1Ec0+mih2IWzM2znHjHmqvrDPZD/91Nu/sfDOTI7F4PFBGIRQMmsYmdD LrYMJ5HO2M4gBH9akfyuL9R20KpTLWpUCih5diX/CEXC5jKxVm9qoFl7x4BIdxCc 24/0+z8pPQOivm/yfFmNmBXWgEd9r9x/5oDOK+BvIx67Tsu6R1cjJ+OOpsqJtYKJ xefOmDxeNuKG/Gk9cku3XPim6CtVZzGB9j8HYrWKFOMPP7weVHFz262rfQh9dcgW 5qmHwgHhWk9pasY3byXNa0RNXLmVnOUCy+qwG9AiXjFfjjNDDUGWGD3N -----END CERTIFICATE-----Generated at Thu Dec 18 09:28:36 2025 by rpki-client