This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer File: 5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer (raw, json) Hash identifier: i+OmmvtEpXs3kLNdTNWXVssDIYHvhoA41RKGvGoqvvY= Subject key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584BDFB8D57263B7350494A69C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Nov 2025 01:45:22 +0000 Certificate not after: Sat 19 Feb 2028 01:45:22 +0000 Subordinate resources: AS: 32507 AS: 399999 IP: 23.186.120.0/24 IP: 104.247.98.0/24 IP: 2602:f84c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:df:b8:d5:72:63:b7:35:04:94:a6:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 16 01:45:22 2025 GMT Not After : Feb 19 01:45:22 2028 GMT Subject: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:68:68:0e:7c:40:6b:01:61:67:b8:d3:ca: 65:50:46:7b:38:58:6a:eb:6b:f7:27:85:08:ae:8d: 31:7e:bf:12:2f:81:50:af:29:56:b1:63:72:65:4e: 06:13:fe:9b:fe:5a:74:bb:c4:12:b8:7e:64:09:7f: ef:54:2a:82:ae:f5:21:cb:2f:1d:0b:0a:1d:32:1d: 38:62:25:6e:32:b1:ae:79:00:52:94:29:7b:ff:d6: 0b:1d:11:9c:af:06:9f:a8:0b:cd:00:ab:4f:c8:4d: c6:f2:38:4a:7f:05:7d:bd:ff:b9:70:60:a0:02:11: ee:bd:74:c4:4f:d0:5b:5f:26:b0:fb:5c:15:d0:1a: 48:4f:60:10:3b:b6:30:4d:27:fb:97:17:dc:e6:44: a5:a0:22:0a:3a:44:19:f9:f5:19:00:0d:1a:a5:be: ef:db:fa:f9:84:a5:cf:b9:ae:05:49:f6:48:36:24: 70:50:2f:ba:8b:05:6d:0d:98:c4:71:04:ea:3b:db: 6e:35:9a:4f:00:d5:cc:ed:60:7e:b0:5b:31:ba:f4: 9b:f6:38:79:1f:7a:99:b4:88:27:19:92:46:43:7d: 13:7b:dd:4b:56:8f:4b:ec:60:b0:3c:1d:61:a0:b8: 46:a6:dc:ee:2a:6d:fb:45:02:6c:9b:61:b6:1f:a5: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.186.120.0/24 104.247.98.0/24 IPv6: 2602:f84c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32507 399999 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ee:4e:5c:dc:d5:09:6f:ac:6a:60:df:ca:f1:8b:2d:03:16: 26:72:79:15:36:e0:1d:c1:1c:d5:52:df:4a:9f:cd:1e:55:d8: bd:06:61:d8:5b:ee:d8:97:79:aa:e3:56:92:22:05:40:b9:54: f4:6f:be:8b:2c:fc:44:84:9b:c4:7e:bf:de:a4:70:d4:14:75: 51:b0:8c:80:c4:bc:81:8a:b5:9a:a1:0f:88:1f:a4:f3:3b:df: 22:44:02:18:63:03:fb:d5:1a:1e:09:81:5c:5c:3d:b5:15:c5: 39:81:d1:c2:61:f8:a9:76:85:ca:1e:23:6d:0c:71:18:a2:cd: 17:9c:d1:54:de:56:98:7e:bd:fb:c5:b5:67:bf:2d:4f:8a:ee: 17:e7:3c:3b:72:7d:45:f1:1b:16:cb:65:96:42:ec:be:0e:30: ab:30:c3:a3:98:0c:2f:b2:e5:4b:7a:56:e8:66:aa:7a:b0:75: f3:1f:84:eb:eb:dd:56:43:b5:e1:1c:d3:49:69:23:ab:d2:54: 96:61:21:4d:3d:ad:c3:05:cc:a4:e7:63:80:cf:a9:f2:22:e0: 5a:63:d8:13:d4:5b:31:47:d9:8d:8a:aa:cf:d7:87:c3:d4:7a: a5:11:27:2d:77:f9:f4:f6:32:d1:bb:16:55:eb:6c:fc:13:c1: 7a:2b:1d:bf -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEvfuNVyY7c1BJSmnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTExNjAxNDUyMloXDTI4MDIxOTAxNDUyMlowLzEtMCsGA1UEAxMk NWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5N2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5loaA58QGsBYWe408plUEZ7OFhq62v3J4UI ro0xfr8SL4FQrylWsWNyZU4GE/6b/lp0u8QSuH5kCX/vVCqCrvUhyy8dCwodMh04 YiVuMrGueQBSlCl7/9YLHRGcrwafqAvNAKtPyE3G8jhKfwV9vf+5cGCgAhHuvXTE T9BbXyaw+1wV0BpIT2AQO7YwTSf7lxfc5kSloCIKOkQZ+fUZAA0apb7v2/r5hKXP ua4FSfZINiRwUC+6iwVtDZjEcQTqO9tuNZpPANXM7WB+sFsxuvSb9jh5H3qZtIgn GZJGQ30Te91LVo9L7GCwPB1hoLhGptzuKm37RQJsm2G2H6WHDQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFAQNe9WDuIt2b0mIJExQcItMt4dVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzVjYWZiZDMyLTdkNmUtNDI5Ny05 YWM1LWRjMTIwYWFhOTdkYS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFh YTk3ZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXungDBABo92IwDgQCAAIwCAMGACYC+EwAMB4G CCsGAQUFBwEIAQH/BA8wDaALMAkCAn77AgMGGn8wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKe5OXNzVCW+s amDfyvGLLQMWJnJ5FTbgHcEc1VLfSp/NHlXYvQZh2Fvu2Jd5quNWkiIFQLlU9G++ iyz8RISbxH6/3qRw1BR1UbCMgMS8gYq1mqEPiB+k8zvfIkQCGGMD+9UaHgmBXFw9 tRXFOYHRwmH4qXaFyh4jbQxxGKLNF5zRVN5WmH69+8W1Z78tT4ruF+c8O3J9RfEb FstllkLsvg4wqzDDo5gML7LlS3pW6GaqerB18x+E6+vdVkO14RzTSWkjq9JUlmEh TT2twwXMpOdjgM+p8iLgWmPYE9RbMUfZjYqqz9eHw9R6pREnLXf59PYy0bsWVets /BPBeisdvw== -----END CERTIFICATE-----Generated at Sun Nov 23 19:24:36 2025 by rpki-client