This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a.cer File: b4c30032-490a-4e49-8e1d-48d69c85212a.cer (raw, json) Hash identifier: 270tRUxylLOduIZWkujAmKz9JIkTIbmiozhTZCUlL+w= Subject key identifier: 96:82:23:C5:CB:7D:B1:E4:BB:5C:D7:0F:21:B2:5B:2D:D6:22:64:14 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C364409F761B6A1F37183B180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/b4c30032-490a-4e49-8e1d-48d69c85212a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Dec 2025 01:45:22 +0000 Certificate not after: Tue 21 Mar 2028 00:45:22 +0000 Subordinate resources: AS: 3922 AS: 4523 AS: 4979 AS: 6524 IP: 192.190.184.0/22 IP: 192.207.230.0/24 IP: 192.231.184.0/23 IP: 192.245.120.0/24 IP: 198.133.249.0 -- 198.133.254.255 IP: 198.147.170.0 -- 198.147.174.255 IP: 198.147.177.0 -- 198.147.178.255 IP: 198.151.185.0 -- 198.151.186.255 IP: 198.151.229.0/24 IP: 198.178.252.0/23 IP: 198.180.197.0/24 IP: 199.89.201.0/24 IP: 199.181.248.0/23 IP: 199.245.70.0/24 IP: 204.90.128.0/17 IP: 2605:f80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:36:44:09:f7:61:b6:a1:f3:71:83:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 17 01:45:22 2025 GMT Not After : Mar 21 00:45:22 2028 GMT Subject: CN=b4c30032-490a-4e49-8e1d-48d69c85212a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:26:90:e6:66:0a:a9:00:25:79:58:30:9d: 13:08:86:36:32:5e:e6:a4:2c:59:70:e3:98:95:f7: 83:e2:10:c6:2c:0d:7f:04:46:71:44:48:c9:2e:9a: d1:3f:cb:59:f8:4c:6d:47:92:f1:3a:8b:fb:7f:d6: f1:db:09:66:c2:1c:bc:d6:ff:d4:2c:6f:64:d0:6f: e5:b6:3e:e5:a2:1b:3f:b9:ee:43:8c:21:ff:09:43: 9c:33:13:64:4c:49:cf:77:74:e2:91:78:27:ad:aa: 53:e2:66:58:50:83:22:4d:90:78:b8:8f:34:bf:30: e2:99:2d:4f:57:2c:3b:d8:1f:b9:20:b0:d0:17:5c: 52:0b:49:c9:13:5e:e9:4a:0e:8a:e5:c7:b1:04:0a: b3:3b:81:41:bd:81:d8:5a:e4:28:18:25:bb:05:90: 70:f2:d8:ac:3b:ad:37:b3:a0:a5:c2:cf:42:62:72: 0a:fa:8c:18:45:51:79:79:73:95:d5:00:ee:01:3c: 1a:5e:64:73:5e:2b:68:92:71:ff:b7:b1:41:2e:24: 4d:1c:60:f7:f3:fa:65:57:45:9c:aa:ca:d8:d8:87: c7:e1:3e:b5:d5:f5:5d:f1:3c:90:9f:b1:a9:25:43: 20:54:14:80:fd:cc:08:83:b7:f6:5b:12:25:ce:45: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:82:23:C5:CB:7D:B1:E4:BB:5C:D7:0F:21:B2:5B:2D:D6:22:64:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/b4c30032-490a-4e49-8e1d-48d69c85212a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.190.184.0/22 192.207.230.0/24 192.231.184.0/23 192.245.120.0/24 198.133.249.0-198.133.254.255 198.147.170.0-198.147.174.255 198.147.177.0-198.147.178.255 198.151.185.0-198.151.186.255 198.151.229.0/24 198.178.252.0/23 198.180.197.0/24 199.89.201.0/24 199.181.248.0/23 199.245.70.0/24 204.90.128.0/17 IPv6: 2605:f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3922 4523 4979 6524 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b5:e2:f7:cd:71:91:1b:e6:ab:5e:33:53:ea:d2:a5:f3:b0: a3:b8:70:7c:9f:c9:17:fb:40:42:55:06:a5:a0:37:43:2d:fa: b0:99:4a:d1:f1:34:1d:4a:3f:91:76:80:0f:82:2a:94:de:f9: 8c:af:4d:36:63:08:5e:23:03:6c:65:96:ca:19:42:1b:1a:32: cf:14:5e:33:a6:05:af:ee:b2:57:29:46:94:cd:3f:6c:cf:55: fb:ae:3d:c9:a0:c3:76:56:d7:31:18:99:45:56:7b:be:72:ab: e8:12:9e:7d:36:dd:06:48:25:9c:cc:df:42:e4:af:61:9c:d2: 6e:57:ca:05:f4:ee:e7:e0:36:43:94:71:96:6a:1c:a8:ae:f0: 4e:56:3a:bf:82:97:a5:ab:38:76:87:ad:98:ba:51:fe:67:fd: a1:41:ce:77:27:d2:e1:2a:18:4a:b8:5c:27:a1:bc:65:a7:61: 16:44:3e:7b:97:ce:72:3c:db:77:c2:22:ae:b2:80:6d:50:3b: a3:5d:41:b3:cf:f9:d4:34:35:23:4e:df:d8:7e:09:c2:5e:8e: 04:82:f3:b0:49:09:c5:94:87:b3:d9:b9:12:17:d0:2f:78:e7: f4:81:35:d3:00:54:88:02:95:43:08:af:96:fc:05:5c:94:39: c0:ba:41:60 -----BEGIN CERTIFICATE----- MIIHmzCCBoOgAwIBAgIUAQ0Mn0MoWEw2RAn3Ybah83GDsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTIxNzAxNDUyMloXDTI4MDMyMTAwNDUyMlowLzEtMCsGA1UEAxMk YjRjMzAwMzItNDkwYS00ZTQ5LThlMWQtNDhkNjljODUyMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH4mkOZmCqkAJXlYMJ0TCIY2Ml7mpCxZcOOY lfeD4hDGLA1/BEZxREjJLprRP8tZ+ExtR5LxOov7f9bx2wlmwhy81v/ULG9k0G/l tj7lohs/ue5DjCH/CUOcMxNkTEnPd3TikXgnrapT4mZYUIMiTZB4uI80vzDimS1P Vyw72B+5ILDQF1xSC0nJE17pSg6K5cexBAqzO4FBvYHYWuQoGCW7BZBw8tisO603 s6Clws9CYnIK+owYRVF5eXOV1QDuATwaXmRzXitoknH/t7FBLiRNHGD38/plV0Wc qsrY2IfH4T611fVd8TyQn7GpJUMgVBSA/cwIg7f2WxIlzkUMMwIDAQABo4IErTCC BKkwHQYDVR0OBBYEFJaCI8XLfbHku1zXDyGyWy3WImQUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9i NGMzMDAzMi00OTBhLTRlNDktOGUxZC00OGQ2OWM4NTIxMmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2I0YzMwMDMyLTQ5MGEtNGU0OS04 ZTFkLTQ4ZDY5Yzg1MjEyYS9iNGMzMDAzMi00OTBhLTRlNDktOGUxZC00OGQ2OWM4 NTIxMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwgaUGCCsGAQUF BwEHAQH/BIGVMIGSMIGABAIAATB6AwQCwL64AwQAwM/mAwQBwOe4AwQAwPV4MAwD BADGhfkDBADGhf4wDAMEAcaTqgMEAMaTrjAMAwQAxpOxAwQAxpOyMAwDBADGl7kD BADGl7oDBADGl+UDBAHGsvwDBADGtMUDBADHWckDBAHHtfgDBADH9UYDBAfMWoAw DQQCAAIwBwMFACYFD4AwJQYIKwYBBQUHAQgBAf8EFjAUoBIwEAICD1ICAhGrAgIT cwICGXwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAf7Xi981xkRvmq14zU+rSpfOwo7hwfJ/JF/tAQlUGpaA3 Qy36sJlK0fE0HUo/kXaAD4IqlN75jK9NNmMIXiMDbGWWyhlCGxoyzxReM6YFr+6y VylGlM0/bM9V+649yaDDdlbXMRiZRVZ7vnKr6BKefTbdBkglnMzfQuSvYZzSblfK BfTu5+A2Q5RxlmocqK7wTlY6v4KXpas4doetmLpR/mf9oUHOdyfS4SoYSrhcJ6G8 ZadhFkQ+e5fOcjzbd8IirrKAbVA7o11Bs8/51DQ1I07f2H4Jwl6OBILzsEkJxZSH s9m5EhfQL3jn9IE10wBUiAKVQwivlvwFXJQ5wLpBYA== -----END CERTIFICATE-----Generated at Thu Jan 8 23:55:11 2026 by rpki-client