This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer File: d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer (raw, json) Hash identifier: EyMSSaKvGKuOoO2ff8N9QGvzmvPVcM2M5txGyCKI28k= Subject key identifier: BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584BC867B38BC3BC5A4884881980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Nov 2025 17:18:19 +0000 Certificate not after: Sat 11 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 396872 IP: 23.132.224.0/23 IP: 130.12.128.0/22 IP: 142.202.24.0/22 IP: 155.254.200.0/22 IP: 170.205.44.0/22 IP: 216.7.34.0 -- 216.7.63.255 IP: 216.39.236.0/22 IP: 2602:fe65::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:67:b3:8b:c3:bc:5a:48:84:88:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 7 17:18:19 2025 GMT Not After : Dec 11 01:45:25 2027 GMT Subject: CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d3:60:d5:d5:89:00:c1:4f:b6:d9:0a:48:e6: d1:de:f8:e7:9f:45:98:a2:46:5d:4a:3c:96:13:b6: cd:b0:43:1a:37:ab:7f:7f:ce:22:2d:94:2b:02:53: 29:19:81:c3:a4:a6:53:1e:a1:e9:57:ae:34:5e:c7: 35:a0:ba:d9:3f:8f:78:07:31:97:fc:de:52:2e:8f: af:df:78:1d:e7:8a:5c:68:e5:54:e3:29:64:1a:48: 1e:38:ea:75:7b:f4:1e:15:eb:6a:ef:0f:d1:b0:52: 2c:e8:f0:32:cd:20:71:2b:0e:ef:e7:70:4a:20:43: 9b:18:00:d7:4f:21:9c:2b:e1:6c:77:88:40:ac:e5: 08:4b:6b:e5:3f:43:61:13:ba:3a:7e:f8:2a:14:14: b6:f6:ad:bb:6d:0c:f6:f9:6b:4e:fc:96:8c:6b:af: d6:db:c2:cc:ae:33:a8:11:73:39:d8:ea:5d:69:b0: 85:b4:9e:c6:ee:c8:26:34:ae:2f:76:2c:34:b9:9e: b2:62:47:f1:8b:33:59:0f:f2:b7:17:0b:39:eb:b3: e5:10:62:4b:54:6b:54:c2:f4:55:03:87:82:84:09: 45:dc:b8:16:85:e9:c8:55:f4:f2:90:f3:e7:51:00: 2a:5e:93:78:65:2f:1f:da:c2:4c:f6:d9:e8:d2:ac: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.132.224.0/23 130.12.128.0/22 142.202.24.0/22 155.254.200.0/22 170.205.44.0/22 216.7.34.0-216.7.63.255 216.39.236.0/22 IPv6: 2602:fe65::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396872 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1d:c9:eb:1e:1f:e6:a2:22:43:79:2d:45:bd:b3:36:5b:88: a9:ff:91:c0:17:1a:c8:51:a6:69:33:02:d3:2f:2e:d9:df:d3: 79:ef:34:4a:c6:99:06:27:35:51:86:b4:6f:3a:77:df:25:b0: e1:48:6a:8f:65:82:59:84:7e:32:b3:7e:d7:b0:77:56:d0:d5: d5:22:6b:2c:da:07:41:b8:54:f0:04:99:3a:9e:d3:7d:14:7c: bf:30:92:f7:61:8b:49:27:44:ea:1e:36:0b:3d:ad:ff:c1:a7: d3:c7:43:fa:10:0b:d0:fb:c9:f5:53:a2:2c:aa:47:e0:60:89: 05:ec:2d:25:b4:b0:ff:1b:cd:62:5e:5a:3b:93:74:ec:12:c9: f2:e0:8d:77:dc:96:85:12:aa:9d:75:e8:f0:f4:1c:6e:e1:2a: 6d:24:68:73:6f:80:2b:4a:fb:ca:45:30:38:9c:fa:db:6c:18: 18:86:13:f4:be:a7:1c:05:0b:1a:7e:56:21:a8:7c:20:f1:d8: f5:1b:4e:be:c0:b1:c3:43:5b:01:ea:9e:2d:c4:49:35:78:1d: 5c:58:6b:37:35:03:0d:28:f6:cd:cf:eb:ee:b1:87:dc:91:86: 38:08:a5:6b:a6:bf:5d:a1:50:61:56:84:10:ff:3c:09:f5:4e: 15:07:e7:fa -----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIUAQ0Mn0MoWEvIZ7OLw7xaSISIGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTEwNzE3MTgxOVoXDTI3MTIxMTAxNDUyNVowLzEtMCsGA1UEAxMk ZDA4ZGU3Y2ItZTY3Zi00ZjZlLWFiZDUtNzczMjllN2RmZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59Ng1dWJAMFPttkKSObR3vjnn0WYokZdSjyW E7bNsEMaN6t/f84iLZQrAlMpGYHDpKZTHqHpV640Xsc1oLrZP494BzGX/N5SLo+v 33gd54pcaOVU4ylkGkgeOOp1e/QeFetq7w/RsFIs6PAyzSBxKw7v53BKIEObGADX TyGcK+Fsd4hArOUIS2vlP0NhE7o6fvgqFBS29q27bQz2+WtO/JaMa6/W28LMrjOo EXM52OpdabCFtJ7G7sgmNK4vdiw0uZ6yYkfxizNZD/K3Fws567PlEGJLVGtUwvRV A4eChAlF3LgWhenIVfTykPPnUQAqXpN4ZS8f2sJM9tno0qyGcQIDAQABo4IEVzCC BFMwHQYDVR0OBBYEFLskUcvXUO4XLDsxXb+MQf36lizKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k MDhkZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMyOWU3ZGZmZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QwOGRlN2NiLWU2N2YtNGY2ZS1h YmQ1LTc3MzI5ZTdkZmZkNS9kMDhkZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMyOWU3 ZGZmZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwWwYIKwYBBQUH AQcBAf8ETDBKMDgEAgABMDIDBAEXhOADBAKCDIADBAKOyhgDBAKb/sgDBAKqzSww DAMEAdgHIgMEBtgHAAMEAtgn7DAOBAIAAjAIAwYEJgL+ZQAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBg5IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEUdyeseH+aiIkN5LUW9szZbiKn/kcAX GshRpmkzAtMvLtnf03nvNErGmQYnNVGGtG86d98lsOFIao9lglmEfjKzftewd1bQ 1dUiayzaB0G4VPAEmTqe030UfL8wkvdhi0knROoeNgs9rf/Bp9PHQ/oQC9D7yfVT oiyqR+BgiQXsLSW0sP8bzWJeWjuTdOwSyfLgjXfcloUSqp116PD0HG7hKm0kaHNv gCtK+8pFMDic+ttsGBiGE/S+pxwFCxp+ViGofCDx2PUbTr7AscNDWwHqni3ESTV4 HVxYazc1Aw0o9s3P6+6xh9yRhjgIpWumv12hUGFWhBD/PAn1ThUH5/o= -----END CERTIFICATE-----Generated at Tue Nov 25 04:59:03 2025 by rpki-client