This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59ecce5e-20f7-4fb7-8290-277e767e2d88.cer File: 59ecce5e-20f7-4fb7-8290-277e767e2d88.cer (raw, json) Hash identifier: ZQXTvxI/JlihLq/ND+Guer1jNjFSHS+MWMGNIS6ZEF8= Subject key identifier: DE:E5:C6:F5:13:FF:BA:1C:F2:94:54:EE:51:12:96:14:39:3E:67:1F Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584C24CC6957F0F4E4DD8EF6BE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59ecce5e-20f7-4fb7-8290-277e767e2d88/59ecce5e-20f7-4fb7-8290-277e767e2d88.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59ecce5e-20f7-4fb7-8290-277e767e2d88/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Dec 2025 19:35:36 +0000 Certificate not after: Tue 14 Mar 2028 18:35:36 +0000 Subordinate resources: IP: 168.127.0.0/16 IP: 2602:fcaf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:cc:69:57:f0:f4:e4:dd:8e:f6:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Dec 10 19:35:36 2025 GMT Not After : Mar 14 18:35:36 2028 GMT Subject: CN=59ecce5e-20f7-4fb7-8290-277e767e2d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fb:c1:3b:07:72:5e:79:ea:75:22:bc:d1:52: e7:1f:8b:b6:d2:42:fa:55:d9:8a:ff:24:d2:92:88: 78:1d:49:b8:0b:b4:51:3a:4f:3f:45:ec:a0:94:a7: 37:bf:c7:8d:28:b0:a3:2e:54:6e:1c:69:bb:2f:2f: 9d:21:ac:ac:80:49:82:18:95:1d:96:2d:fa:af:fe: 4e:fd:9b:d4:1d:e2:2d:45:d0:c7:13:43:44:ca:95: e3:cf:6d:f1:bf:98:6f:fd:0a:57:25:85:4f:8b:f1: 33:14:46:ca:76:4e:66:b7:6d:da:82:03:78:a5:7e: 14:86:7e:5c:fa:a4:d0:5e:1f:78:4b:60:82:52:71: 5c:05:22:be:d3:d2:1e:94:84:d5:af:32:5e:86:c2: 06:2d:a0:0f:65:9c:0b:f1:23:28:14:d5:58:01:d6: 93:7e:ee:ff:ee:d8:92:64:f9:93:47:de:87:af:38: d1:d3:12:8e:7a:76:a5:10:8b:b9:1c:9c:57:76:fe: 4f:e5:11:49:71:5d:f0:7e:bb:d6:84:f9:be:ed:98: eb:63:cd:b6:e4:78:51:1f:f7:e6:2a:a4:d8:02:ac: 9d:17:bb:48:ed:e9:26:8f:06:d4:e2:de:11:53:ef: 69:7d:7b:96:31:95:ed:f6:5b:e6:ce:6f:69:58:31: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E5:C6:F5:13:FF:BA:1C:F2:94:54:EE:51:12:96:14:39:3E:67:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59ecce5e-20f7-4fb7-8290-277e767e2d88/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59ecce5e-20f7-4fb7-8290-277e767e2d88/59ecce5e-20f7-4fb7-8290-277e767e2d88.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 168.127.0.0/16 IPv6: 2602:fcaf::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:7e:73:ed:de:75:a8:9e:27:a2:78:07:0f:9f:dc:51:3a:36: 2e:0a:76:8f:bb:48:92:ae:23:35:63:83:8a:8a:cd:d4:be:49: 74:24:a6:84:50:c1:c0:a2:a7:6d:05:7b:cc:37:79:a5:ee:06: 48:c0:63:27:fc:84:03:34:f3:36:71:b4:7c:c9:32:63:b9:5d: 48:3e:6d:73:20:3b:16:be:9a:e4:83:32:ce:83:77:24:32:6d: 67:3b:8e:35:1b:b2:30:88:76:c6:0f:69:d7:69:c4:86:29:2c: 0e:29:6c:5c:e0:f5:e0:d1:63:7d:e7:98:62:70:e2:65:73:6e: cb:5a:d2:3b:57:3f:b6:20:ad:4e:80:4d:07:b4:96:c1:b9:2d: 27:8b:af:a5:75:09:f3:65:0a:05:9b:c9:13:bb:fe:e9:4b:ae: 5a:9c:d8:b3:73:20:a9:94:f8:d4:28:74:e4:fb:06:be:53:d9: ae:bb:be:91:51:39:3c:8d:cc:e8:19:70:6e:34:d2:a8:60:bf: 30:71:cf:f6:30:2b:f1:7f:34:d3:23:ea:5d:39:10:29:f3:e3: ae:5a:38:23:86:1c:31:eb:d2:4c:01:d2:dc:77:ae:58:8b:27: 5c:ce:30:e1:7c:a6:3f:f4:bb:34:62:c5:5d:45:50:0c:1a:5b: 81:cd:d4:0b -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEwkzGlX8PTk3Y72voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTIxMDE5MzUzNloXDTI4MDMxNDE4MzUzNlowLzEtMCsGA1UEAxMk NTllY2NlNWUtMjBmNy00ZmI3LTgyOTAtMjc3ZTc2N2UyZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPvBOwdyXnnqdSK80VLnH4u20kL6VdmK/yTS koh4HUm4C7RROk8/ReyglKc3v8eNKLCjLlRuHGm7Ly+dIaysgEmCGJUdli36r/5O /ZvUHeItRdDHE0NEypXjz23xv5hv/QpXJYVPi/EzFEbKdk5mt23aggN4pX4Uhn5c +qTQXh94S2CCUnFcBSK+09IelITVrzJehsIGLaAPZZwL8SMoFNVYAdaTfu7/7tiS ZPmTR96HrzjR0xKOenalEIu5HJxXdv5P5RFJcV3wfrvWhPm+7ZjrY8225HhRH/fm KqTYAqydF7tI7ekmjwbU4t4RU+9pfXuWMZXt9lvmzm9pWDH4XQIDAQABo4IEDjCC BAowHQYDVR0OBBYEFN7lxvUT/7oc8pRU7lESlhQ5PmcfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 OWVjY2U1ZS0yMGY3LTRmYjctODI5MC0yNzdlNzY3ZTJkODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzU5ZWNjZTVlLTIwZjctNGZiNy04 MjkwLTI3N2U3NjdlMmQ4OC81OWVjY2U1ZS0yMGY3LTRmYjctODI5MC0yNzdlNzY3 ZTJkODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAsEAgABMAUDAwCofzAOBAIAAjAIAwYEJgL8rwAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA AH5z7d51qJ4nongHD5/cUTo2Lgp2j7tIkq4jNWODiorN1L5JdCSmhFDBwKKnbQV7 zDd5pe4GSMBjJ/yEAzTzNnG0fMkyY7ldSD5tcyA7Fr6a5IMyzoN3JDJtZzuONRuy MIh2xg9p12nEhiksDilsXOD14NFjfeeYYnDiZXNuy1rSO1c/tiCtToBNB7SWwbkt J4uvpXUJ82UKBZvJE7v+6UuuWpzYs3MgqZT41Ch05PsGvlPZrru+kVE5PI3M6Blw bjTSqGC/MHHP9jAr8X800yPqXTkQKfPjrlo4I4YcMevSTAHS3HeuWIsnXM4w4Xym P/S7NGLFXUVQDBpbgc3UCw== -----END CERTIFICATE-----Generated at Sun Dec 14 15:55:17 2025 by rpki-client