This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer File: 3aeb4dac-8911-4f44-9f24-1f5081193043.cer (raw, json) Hash identifier: /6Z5A7X+w2H1O0h/yOt5Qig0xJ6m5BijHsbfAuDIHf4= Subject key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C390EB9DA00B0D6E248D178D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Dec 2025 01:45:23 +0000 Certificate not after: Wed 22 Mar 2028 00:45:23 +0000 Subordinate resources: AS: 33175 AS: 55077 IP: 23.128.208.0/24 IP: 103.25.230.0/24 IP: 104.36.4.0/22 IP: 198.44.204.0/22 IP: 206.83.142.0/24 IP: 2602:ff31::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:0e:b9:da:00:b0:d6:e2:48:d1:78:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 18 01:45:23 2025 GMT Not After : Mar 22 00:45:23 2028 GMT Subject: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:32:19:f9:91:61:4a:2f:f8:5f:b9:24:b4: 17:8a:7a:cc:14:fc:c4:e5:1e:cd:dc:9b:2b:fe:c9: 53:5a:c2:b3:92:04:5c:23:b5:04:72:4b:6e:52:e5: c6:58:00:bb:58:b8:88:36:7d:49:95:77:07:1c:20: dc:be:f2:19:d3:80:6d:c4:f1:fe:7e:06:ad:27:48: 91:70:31:ee:2c:2a:34:f8:a3:84:86:5c:c0:5a:c1: 66:34:bc:be:90:66:71:11:62:c1:bb:c9:40:60:f6: 74:75:bd:64:25:79:7d:36:43:88:f0:c8:9e:eb:08: 3d:a5:1e:14:8a:35:76:df:fa:7c:74:fa:99:be:15: 06:86:38:2d:02:f2:4c:8d:0a:79:27:40:dd:8d:13: ce:18:3b:02:f6:c0:7b:38:8e:34:1e:d2:0a:cc:7e: 37:64:d1:2c:34:3d:cc:81:06:16:09:a6:62:63:10: 86:6f:73:80:2f:8c:41:43:a1:4c:97:eb:5b:e2:95: 29:93:87:16:d8:22:06:c1:37:43:08:a2:59:40:9d: 23:71:5d:9f:42:c3:53:f9:ad:19:ea:40:04:1d:27: dc:d7:6f:a6:fe:ab:00:91:7f:d5:10:07:c8:e4:46: ad:7b:62:a1:90:db:6b:73:87:d9:a8:3a:4b:0e:70: 97:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.128.208.0/24 103.25.230.0/24 104.36.4.0/22 198.44.204.0/22 206.83.142.0/24 IPv6: 2602:ff31::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33175 55077 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1d:6b:fd:9a:77:c7:41:93:4f:76:07:9c:6e:36:b7:f2:47: d4:ec:e5:b7:1a:13:12:17:0c:07:f0:f7:50:ba:1c:13:1b:e7: f3:9c:be:bb:5d:22:e4:0c:63:6a:fd:74:56:8b:ba:f6:05:86: ae:4d:90:a9:56:d6:2d:de:4d:ef:9d:64:ef:82:01:fe:a4:6b: df:55:1f:ff:21:09:ed:2a:17:e5:da:42:f3:27:42:63:39:84: e0:55:9a:cd:07:df:e2:06:99:75:5c:7b:cd:c0:cf:66:00:60: 75:40:93:84:12:c0:73:1b:45:76:34:56:d8:8a:be:c9:f0:07: a9:73:96:9d:69:32:27:23:15:83:f1:7c:51:e2:db:01:81:3c: 4c:ba:59:10:0f:e8:14:a9:68:4e:97:53:f7:5c:6b:30:d7:a0: c1:11:35:46:c7:7b:e8:40:e1:5b:dc:b6:b0:e0:6a:92:67:1d: 64:9d:ba:1d:a4:f3:1c:92:9c:53:6d:b0:9a:ae:56:7f:e6:99: 38:af:3b:c3:31:26:ce:36:0a:d2:16:d7:2d:05:86:bf:9f:3a: d6:46:5d:72:62:6d:22:cd:57:e7:4d:66:9d:14:c3:d6:f4:e0: 1e:c6:8e:4f:cd:99:65:17:02:04:a0:2a:82:3a:de:79:1c:02: 32:b2:ab:ce -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEw5DrnaALDW4kjReNYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTIxODAxNDUyM1oXDTI4MDMyMjAwNDUyM1owLzEtMCsGA1UEAxMk M2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkzMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVwyGfmRYUov+F+5JLQXinrMFPzE5R7N3Jsr /slTWsKzkgRcI7UEcktuUuXGWAC7WLiINn1JlXcHHCDcvvIZ04BtxPH+fgatJ0iR cDHuLCo0+KOEhlzAWsFmNLy+kGZxEWLBu8lAYPZ0db1kJXl9NkOI8Mie6wg9pR4U ijV23/p8dPqZvhUGhjgtAvJMjQp5J0DdjRPOGDsC9sB7OI40HtIKzH43ZNEsND3M gQYWCaZiYxCGb3OAL4xBQ6FMl+tb4pUpk4cW2CIGwTdDCKJZQJ0jcV2fQsNT+a0Z 6kAEHSfc12+m/qsAkX/VEAfI5Eate2KhkNtrc4fZqDpLDnCXnQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFJb/MXkkteE6dLAATVBWw20SR16dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z YWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNhZWI0ZGFjLTg5MTEtNGY0NC05 ZjI0LTFmNTA4MTE5MzA0My8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODEx OTMwNDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAAXgNADBABnGeYDBAJoJAQDBALGLMwDBADOU44w DgQCAAIwCAMGBCYC/zEAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCBlwIDANcl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGcda/2ad8dBk092B5xuNrfyR9Ts5bcaExIXDAfw91C6HBMb5/Oc vrtdIuQMY2r9dFaLuvYFhq5NkKlW1i3eTe+dZO+CAf6ka99VH/8hCe0qF+XaQvMn QmM5hOBVms0H3+IGmXVce83Az2YAYHVAk4QSwHMbRXY0VtiKvsnwB6lzlp1pMicj FYPxfFHi2wGBPEy6WRAP6BSpaE6XU/dcazDXoMERNUbHe+hA4VvctrDgapJnHWSd uh2k8xySnFNtsJquVn/mmTivO8MxJs42CtIW1y0Fhr+fOtZGXXJibSLNV+dNZp0U w9b04B7Gjk/NmWUXAgSgKoI63nkcAjKyq84= -----END CERTIFICATE-----Generated at Wed Jan 7 14:42:42 2026 by rpki-client