This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer File: afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer (raw, json) Hash identifier: Yv62348YHgZpvyh74GymokikbPOPcXOwNzIFPDgSbC0= Subject key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C1D23E294F2B4FDFD11A6A240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Dec 2025 01:45:23 +0000 Certificate not after: Sun 12 Mar 2028 01:45:23 +0000 Subordinate resources: AS: 36667 IP: 198.35.120.0/21 IP: 2620:c:8000::/48 IP: 2620:109:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:23:e2:94:f2:b4:fd:fd:11:a6:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 8 01:45:23 2025 GMT Not After : Mar 12 01:45:23 2028 GMT Subject: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:30:2e:04:f9:90:72:e2:ed:73:5a:6e:07: c3:8b:70:4d:e1:2a:eb:e8:05:d1:d4:4c:33:6c:81: ba:9b:48:51:f6:d4:1b:49:10:55:7c:e7:74:02:2c: a3:a9:f5:49:5c:8d:d6:bf:e3:82:74:3b:27:3d:07: 1d:14:7c:b1:83:d4:6a:7b:ab:01:07:53:f1:b2:09: fc:5e:8b:7b:4f:c0:f0:59:51:74:f2:0c:27:2a:e5: ed:fc:5d:71:30:b0:7f:b7:e6:62:7e:99:99:e2:ad: 88:45:9e:2b:bc:ed:66:29:49:54:d7:6c:0c:3b:0c: cf:21:b9:d2:df:b4:eb:cf:d8:da:09:0c:ca:35:a7: 9b:91:d5:9d:49:84:ba:7f:e7:5f:59:80:74:1f:b3: f0:74:d0:f9:d2:b7:f7:94:93:fe:9c:a6:c2:fa:83: d7:d2:62:ca:aa:fa:e1:ce:82:b3:9e:2c:5a:63:8c: 9b:bd:5d:03:eb:7a:09:a8:59:7c:be:5f:e0:f2:a2: 57:ba:7b:86:ff:b4:ad:e7:ac:bf:e5:26:08:c1:96: b9:ff:10:2f:71:d3:c8:8e:c1:9b:02:85:75:50:bf: a2:06:f0:23:08:c2:44:41:8d:c9:05:05:e1:41:30: 86:fa:22:f0:90:fe:85:3d:b5:2f:e5:67:22:f9:af: c1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 198.35.120.0/21 IPv6: 2620:c:8000::/48 2620:109:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36667 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c7:9d:77:07:d1:29:8b:1a:5e:04:42:8f:22:fc:6e:21:25: 87:ee:f4:7c:0b:ac:57:84:cb:5b:cc:11:fe:11:11:40:03:14: fe:42:a4:52:87:50:a0:a3:aa:15:a7:c6:0c:e3:0e:3d:d4:3b: c3:86:61:d3:e4:9a:79:66:0b:80:67:ea:43:fb:be:cd:22:63: a6:16:c9:33:ee:e4:4c:99:b6:3c:25:a1:ac:87:fa:8e:9c:9a: 60:ba:e6:98:c6:f0:41:83:59:a7:af:39:5d:ad:9f:62:5f:1e: f4:86:ab:5d:24:a8:66:85:db:7f:6e:07:2b:57:c0:e4:c8:74: b1:61:e0:c1:3e:56:8b:65:f7:f1:c8:56:d4:76:9f:5e:03:c2: 52:9f:78:35:4b:b8:c9:67:c1:59:35:7d:aa:a5:af:27:12:3b: 18:e8:3a:a5:cb:27:55:e1:bd:a4:a1:02:6d:95:5b:94:2f:19: 60:13:de:5e:20:a6:c3:54:5e:42:e7:30:f0:22:5e:6d:11:b0: c7:ae:d0:f1:07:8e:b7:1a:a6:26:61:c1:79:d1:c6:1c:e9:8e: 4a:0a:bf:1b:2c:8f:0a:fb:36:8e:7e:81:af:63:b2:75:cd:f6: d9:29:63:45:f9:24:0a:38:ea:ce:f4:36:23:1e:a5:bf:15:11: d4:04:59:5f -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEwdI+KU8rT9/RGmokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTIwODAxNDUyM1oXDTI4MDMxMjAxNDUyM1owLzEtMCsGA1UEAxMk YWZkMWZlM2ItN2UyNC00ZDI3LWJiMTAtYmViOWNlMmQ2OTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArywwLgT5kHLi7XNabgfDi3BN4Srr6AXR1Ewz bIG6m0hR9tQbSRBVfOd0AiyjqfVJXI3Wv+OCdDsnPQcdFHyxg9Rqe6sBB1Pxsgn8 Xot7T8DwWVF08gwnKuXt/F1xMLB/t+ZifpmZ4q2IRZ4rvO1mKUlU12wMOwzPIbnS 37Trz9jaCQzKNaebkdWdSYS6f+dfWYB0H7PwdND50rf3lJP+nKbC+oPX0mLKqvrh zoKznixaY4ybvV0D63oJqFl8vl/g8qJXunuG/7St56y/5SYIwZa5/xAvcdPIjsGb AoV1UL+iBvAjCMJEQY3JBQXhQTCG+iLwkP6FPbUv5Wci+a/BvQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFO+jLB5WNBDynzYzW+Fz3eZZxIkJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h ZmQxZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5Y2UyZDY5MjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2FmZDFmZTNiLTdlMjQtNGQyNy1i YjEwLWJlYjljZTJkNjkyMi9hZmQxZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5Y2Uy ZDY5MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMAwEAgABMAYDBAPGI3gwGAQCAAIwEgMHACYgAAyAAAMHBCYgAQlg ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAjzswVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUseddwfRKYsa XgRCjyL8biElh+70fAusV4TLW8wR/hERQAMU/kKkUodQoKOqFafGDOMOPdQ7w4Zh 0+SaeWYLgGfqQ/u+zSJjphbJM+7kTJm2PCWhrIf6jpyaYLrmmMbwQYNZp685Xa2f Yl8e9IarXSSoZoXbf24HK1fA5Mh0sWHgwT5Wi2X38chW1HafXgPCUp94NUu4yWfB WTV9qqWvJxI7GOg6pcsnVeG9pKECbZVblC8ZYBPeXiCmw1ReQucw8CJebRGwx67Q 8QeOtxqmJmHBedHGHOmOSgq/GyyPCvs2jn6Br2Oydc322SljRfkkCjjqzvQ2Ix6l vxUR1ARZXw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:08:46 2025 by rpki-client