This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer File: fa1ef48c-319b-4888-9b6e-efede6d159ca.cer (raw, json) Hash identifier: seqAtuKqFlDUPSHaYB4DKX6AEfidqLDdNfqBq260jLE= Subject key identifier: EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584BEAE392703DF6AA191ACF7B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Nov 2025 01:45:23 +0000 Certificate not after: Wed 23 Feb 2028 01:45:23 +0000 Subordinate resources: AS: 401323 IP: 23.187.56.0/24 IP: 2602:f83c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:e3:92:70:3d:f6:aa:19:1a:cf:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 20 01:45:23 2025 GMT Not After : Feb 23 01:45:23 2028 GMT Subject: CN=fa1ef48c-319b-4888-9b6e-efede6d159ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:66:d1:c4:ea:cb:ba:d3:56:f8:85:fe:1c: 09:e9:90:4a:a3:0a:e7:9a:bb:4e:c2:7a:45:87:c9: b7:e1:45:81:ae:51:26:85:7a:40:ef:35:3b:b6:79: a2:b4:3f:fb:b3:bf:91:b0:3e:0d:fd:5e:84:1f:37: e4:d0:e3:c6:bf:d6:78:a6:a7:39:27:c7:41:82:43: ff:aa:9e:bf:c9:a3:b9:05:4c:ad:c5:21:31:a5:a8: 28:a6:e8:3b:fc:57:7e:c9:5d:4e:99:19:3d:e0:1d: 3b:87:0a:f2:a4:fb:b8:fc:74:24:8e:be:08:d5:24: d5:1b:50:55:b0:8d:39:c9:a6:3e:e4:cf:56:04:ca: 53:33:09:c7:6e:73:3d:79:14:16:ed:f5:cc:0a:ad: 35:f4:40:55:cb:59:c8:09:a5:a9:0e:dd:64:62:6a: 7b:93:f1:e5:75:cc:19:b4:46:82:39:f3:41:16:2d: e9:06:14:c4:b1:17:af:f0:eb:a0:8e:e4:a3:c8:90: 3d:4f:ef:5e:65:db:c1:d6:e9:95:38:d7:40:a1:84: 31:45:b2:0f:0e:87:28:c1:a4:05:58:8b:4d:42:81: bb:24:67:d3:f9:24:a8:d9:d2:c4:82:7b:45:58:a0: 82:00:68:e0:cb:6f:68:ba:1b:b6:94:aa:86:30:6a: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.187.56.0/24 IPv6: 2602:f83c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401323 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f0:4c:8a:86:72:d3:d9:c9:19:57:55:27:86:3a:ae:c5:c3: 97:e9:d5:65:3c:32:00:d9:ac:b4:07:bd:64:49:a7:79:b9:40: b1:12:91:be:22:f8:af:55:c1:10:f8:2e:d5:76:fa:15:2f:a7: 0d:7b:22:59:62:50:2a:52:d1:25:6a:80:de:81:9a:34:5e:68: 2f:5e:85:2f:16:ff:b6:46:a2:5d:e0:bc:e9:b9:47:53:cb:15: fc:ee:64:85:5d:02:e4:d7:03:07:a4:f5:94:f4:a5:40:31:54: df:b5:d6:9d:de:80:6f:b6:a0:d6:bf:23:37:ec:7b:1a:6a:e5: de:09:cd:0d:43:94:c5:a2:18:42:62:de:9d:51:d2:05:4b:33: d3:21:9b:eb:04:a6:d9:fc:9a:24:50:a8:56:e8:79:76:a7:1c: 0e:65:b0:89:7c:af:3d:f3:36:eb:11:5b:07:60:ca:c2:45:b9: 79:44:a1:b5:df:9a:f3:88:5f:71:30:e6:81:96:0a:63:2e:15: 2e:21:d6:de:66:26:de:29:4e:5e:8e:af:af:c7:4c:ec:7f:7f: 2c:ec:dc:ae:08:f0:7f:41:7a:6b:84:84:6e:7c:25:88:62:5b: 34:2a:d5:6d:3b:b5:b9:44:0f:7b:bd:b2:76:ba:62:68:2f:08: b3:c9:05:aa -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEvq45JwPfaqGRrPe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTEyMDAxNDUyM1oXDTI4MDIyMzAxNDUyM1owLzEtMCsGA1UEAxMk ZmExZWY0OGMtMzE5Yi00ODg4LTliNmUtZWZlZGU2ZDE1OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0dm0cTqy7rTVviF/hwJ6ZBKowrnmrtOwnpF h8m34UWBrlEmhXpA7zU7tnmitD/7s7+RsD4N/V6EHzfk0OPGv9Z4pqc5J8dBgkP/ qp6/yaO5BUytxSExpagopug7/Fd+yV1OmRk94B07hwrypPu4/HQkjr4I1STVG1BV sI05yaY+5M9WBMpTMwnHbnM9eRQW7fXMCq019EBVy1nICaWpDt1kYmp7k/HldcwZ tEaCOfNBFi3pBhTEsRev8OugjuSjyJA9T+9eZdvB1umVONdAoYQxRbIPDocowaQF WItNQoG7JGfT+SSo2dLEgntFWKCCAGjgy29ouhu2lKqGMGoTHwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOvZ3wUTtSPi4690OYjRCyNjul6PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m YTFlZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVkZTZkMTU5Y2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2ZhMWVmNDhjLTMxOWItNDg4OC05 YjZlLWVmZWRlNmQxNTljYS9mYTFlZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVkZTZk MTU5Y2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXuzgwDgQCAAIwCAMGACYC+DwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfqzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBC8EyKhnLT2ckZV1UnhjquxcOX 6dVlPDIA2ay0B71kSad5uUCxEpG+IvivVcEQ+C7VdvoVL6cNeyJZYlAqUtElaoDe gZo0XmgvXoUvFv+2RqJd4LzpuUdTyxX87mSFXQLk1wMHpPWU9KVAMVTftdad3oBv tqDWvyM37HsaauXeCc0NQ5TFohhCYt6dUdIFSzPTIZvrBKbZ/JokUKhW6Hl2pxwO ZbCJfK898zbrEVsHYMrCRbl5RKG135rziF9xMOaBlgpjLhUuIdbeZibeKU5ejq+v x0zsf38s7NyuCPB/QXprhIRufCWIYls0KtVtO7W5RA97vbJ2umJoLwizyQWq -----END CERTIFICATE-----Generated at Sun Nov 23 19:25:44 2025 by rpki-client