This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer File: ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer (raw, json) Hash identifier: t8hDA6EEi7mCuklZRK2hby0vQmjiOwl2NjWtvi1hBxA= Subject key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C49CED4C94AF8A14342381B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Dec 2025 01:45:23 +0000 Certificate not after: Tue 28 Mar 2028 00:45:23 +0000 Subordinate resources: IP: 192.197.90.0/24 IP: 198.96.6.0/24 IP: 198.96.24.0 -- 198.96.28.255 IP: 199.71.96.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:49:ce:d4:c9:4a:f8:a1:43:42:38:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 24 01:45:23 2025 GMT Not After : Mar 28 00:45:23 2028 GMT Subject: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:e5:fd:9c:c1:0d:62:83:d8:8a:cf:46:42: 1a:24:d7:05:b0:a4:e4:4e:30:12:67:4b:f2:bd:94: e6:ef:34:b9:a5:93:87:ff:d8:35:f9:5b:ec:62:9a: fe:89:a1:94:c1:07:d6:d8:55:90:82:47:44:1b:de: 38:8c:ed:1c:30:89:13:03:63:b6:5d:3d:28:9e:1e: 83:09:a7:e7:45:3a:96:64:2a:b0:15:85:9f:67:83: 3a:f2:fa:c1:f5:88:4d:24:b3:04:5a:72:36:11:2a: c3:77:f9:43:39:47:0f:9d:cc:1e:c0:a4:77:bf:ae: a8:96:9c:62:72:97:45:a6:49:fe:70:c7:bb:06:92: 4d:1c:11:09:be:ea:d4:78:b0:b6:66:a1:70:e2:0b: 54:8a:b4:88:cb:0f:fd:d5:d0:8b:0b:79:9d:c2:55: 6c:8f:1f:a0:23:75:33:7e:e4:31:b6:98:23:25:d2: a0:ac:d4:1e:5d:ce:36:21:47:7a:f4:df:3d:fc:19: cc:12:e8:42:d3:7a:e3:c1:0e:9d:f3:82:e5:03:f1: 31:aa:ae:e0:c5:06:b8:d9:8c:49:13:4d:62:75:b0: 73:77:ca:7e:20:d0:dc:88:78:96:d6:75:a2:19:5d: 29:34:b6:bf:95:44:e6:1f:a9:b3:91:ee:e2:64:c2: 7a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.197.90.0/24 198.96.6.0/24 198.96.24.0-198.96.28.255 199.71.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b9:0c:d8:c7:6c:c1:6b:a0:82:2c:7c:4a:44:b3:4c:f1:bd: f5:a2:4b:c9:17:6f:6f:6b:9a:82:61:e2:32:57:56:c3:cc:8e: 84:23:46:9b:0e:38:e5:64:3c:5e:3d:6a:89:a9:a6:bc:26:81: 6b:82:98:75:8d:f6:f5:e3:a4:2f:f5:db:5f:ab:03:49:f0:ba: b6:c0:5b:38:31:39:a1:be:35:bc:6b:5b:2d:66:82:ef:9b:0c: 5a:a1:2c:89:f2:b7:bf:59:69:7c:ec:00:a3:47:86:25:d3:9c: 6a:52:7f:db:a9:3b:cb:97:49:d2:5e:28:f5:79:87:18:dd:67: 27:11:35:f5:40:97:96:e0:60:aa:c3:64:6a:29:dd:bb:79:5a: d8:a8:57:99:58:27:42:bc:1d:94:7a:bb:75:de:17:59:82:5f: 75:5b:8f:9d:11:84:4b:52:cf:fd:7b:e8:61:12:02:08:62:a6: 15:28:75:aa:a1:15:e4:a1:ff:de:7b:d4:50:8a:10:10:e5:e7: 16:60:e3:ec:c8:e4:1f:61:e2:66:a0:1f:e9:91:02:5b:08:3f: 28:a8:20:b8:d8:44:08:61:f5:c8:6d:a5:88:bd:b0:07:23:d4: 85:54:e1:41:39:7c:40:92:68:83:93:7b:ca:3b:94:b4:3a:f8: 4a:28:e5:51 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWExJztTJSvihQ0I4G0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTIyNDAxNDUyM1oXDTI4MDMyODAwNDUyM1owLzEtMCsGA1UEAxMk YmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2N2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Ll/ZzBDWKD2IrPRkIaJNcFsKTkTjASZ0vy vZTm7zS5pZOH/9g1+VvsYpr+iaGUwQfW2FWQgkdEG944jO0cMIkTA2O2XT0onh6D CafnRTqWZCqwFYWfZ4M68vrB9YhNJLMEWnI2ESrDd/lDOUcPncwewKR3v66olpxi cpdFpkn+cMe7BpJNHBEJvurUeLC2ZqFw4gtUirSIyw/91dCLC3mdwlVsjx+gI3Uz fuQxtpgjJdKgrNQeXc42IUd69N89/BnMEuhC03rjwQ6d84LlA/Exqq7gxQa42YxJ E01idbBzd8p+INDciHiW1nWiGV0pNLa/lUTmH6mzke7iZMJ6lQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFJGjIi2+i1iPtPsszYyR3haEDYgLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9i YTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2JhNTcwM2ZjLWIwZTItNGRkMy1h YmJjLTcxZDA4ZTFjNjdjNS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUx YzY3YzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADBADAxVoDBADGYAYwDAMEA8ZgGAMEAMZgHAMEA8dH YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCGuQzYx2zBa6CCLHxKRLNM8b31okvJF29va5qCYeIyV1bDzI6E I0abDjjlZDxePWqJqaa8JoFrgph1jfb146Qv9dtfqwNJ8Lq2wFs4MTmhvjW8a1st ZoLvmwxaoSyJ8re/WWl87ACjR4Yl05xqUn/bqTvLl0nSXij1eYcY3WcnETX1QJeW 4GCqw2RqKd27eVrYqFeZWCdCvB2Uert13hdZgl91W4+dEYRLUs/9e+hhEgIIYqYV KHWqoRXkof/ee9RQihAQ5ecWYOPsyOQfYeJmoB/pkQJbCD8oqCC42EQIYfXIbaWI vbAHI9SFVOFBOXxAkmiDk3vKO5S0OvhKKOVR -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:25 2025 by rpki-client