This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a443e84-1fc4-4594-b009-7f67f5e3560a.cer File: 4a443e84-1fc4-4594-b009-7f67f5e3560a.cer (raw, json) Hash identifier: rTgJYYTWlqjCUSol62u39UfB3sjRe8N6f5HjrWjMzoY= Subject key identifier: 2F:C6:22:1B:9F:98:9C:59:A2:4C:8A:3B:53:62:87:BA:DD:AC:D2:4F Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584C26E947F39D804CDF8E5EAC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a443e84-1fc4-4594-b009-7f67f5e3560a/4a443e84-1fc4-4594-b009-7f67f5e3560a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a443e84-1fc4-4594-b009-7f67f5e3560a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Dec 2025 13:45:23 +0000 Certificate not after: Wed 15 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 398373 IP: 45.42.228.0/22 IP: 66.118.28.0/22 IP: 209.142.80.0/22 IP: 2606:2d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:e9:47:f3:9d:80:4c:df:8e:5e:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Dec 11 13:45:23 2025 GMT Not After : Mar 15 12:45:23 2028 GMT Subject: CN=4a443e84-1fc4-4594-b009-7f67f5e3560a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:52:3f:8a:21:64:90:90:5a:c3:c1:40:ac: 52:75:7f:72:0a:c6:7f:dd:39:3a:53:d7:ad:a5:6a: 99:47:07:bb:df:46:2c:5d:1e:7e:5b:5d:91:ab:8e: 55:cb:d6:bc:62:a7:4f:ee:f3:07:27:93:8f:ee:83: 8a:db:9d:0e:9c:cd:ff:f2:26:ed:ae:39:e8:e6:5e: d1:8d:ea:44:bb:29:93:19:a2:2c:14:d9:d4:6e:af: 9e:61:a8:a3:3b:b4:0f:b3:d6:5b:cb:10:42:c4:99: 09:f9:30:30:63:19:ba:4c:f9:75:de:27:29:7d:33: 8f:65:f1:e0:6f:50:69:5e:55:33:0e:97:b5:7e:7f: be:88:24:f3:fc:e1:23:ef:c3:0c:ec:d4:56:29:56: 1b:3b:f7:92:f3:f7:2f:19:2e:e7:84:cc:53:26:85: 67:4f:24:8d:f7:80:b9:3f:20:ec:1a:df:74:b5:d7: b7:7d:d7:1e:ec:e8:c1:bc:54:2b:fe:6a:68:34:cb: 33:69:90:69:ce:ae:57:91:0c:bd:69:9e:3d:4a:ea: 38:6b:3c:46:77:b1:5a:ea:a6:57:ea:94:11:e4:55: d9:f9:2b:96:97:4d:fd:28:5b:a2:2a:1e:0a:5f:ef: 83:6d:ad:2b:6c:92:26:8f:75:22:e2:cc:02:ba:aa: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C6:22:1B:9F:98:9C:59:A2:4C:8A:3B:53:62:87:BA:DD:AC:D2:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a443e84-1fc4-4594-b009-7f67f5e3560a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a443e84-1fc4-4594-b009-7f67f5e3560a/4a443e84-1fc4-4594-b009-7f67f5e3560a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 45.42.228.0/22 66.118.28.0/22 209.142.80.0/22 IPv6: 2606:2d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398373 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2d:b3:c4:63:56:7a:cb:10:36:a6:87:c0:77:0a:64:0e:df: fd:d1:21:e7:7f:77:65:11:17:41:1e:82:fd:bb:17:19:b5:56: 65:f2:ca:2e:6a:4f:9a:ff:7d:ac:93:96:c1:b1:de:64:7d:57: 6a:5b:9c:68:c5:b4:3c:d6:9f:4c:2d:b7:db:38:b7:e3:bb:63: 29:54:c9:45:f5:5a:f4:ce:1f:7f:99:ea:64:60:40:ae:25:53: f2:92:b7:bc:93:c7:ba:6d:6a:e1:8a:2d:93:68:10:73:31:2a: 82:85:4b:fc:0a:0e:5e:8e:9d:f4:78:9a:9d:b5:44:42:bc:aa: 2c:46:de:67:b1:7c:bc:48:3a:81:01:0c:47:66:c2:ef:31:e6: 6d:6b:ed:68:93:22:ce:e5:a6:8f:57:08:ae:f4:30:71:03:80: a2:14:95:05:ff:12:b6:07:44:2a:93:db:1f:06:21:75:33:48: 85:c5:08:a2:e3:7b:7f:5f:00:18:e8:46:ea:eb:8c:30:d0:6b: e0:6c:87:73:d6:0f:4d:c6:35:33:a3:90:3b:cb:70:6e:3d:4a: 09:e1:e0:7e:3d:45:f0:0a:75:c8:e5:e7:66:3f:05:55:81:cb: 43:b1:69:e2:fe:00:59:b4:57:9f:90:c6:d9:6b:d4:fc:69:07: 60:35:72:14 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEwm6UfznYBM345erAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTIxMTEzNDUyM1oXDTI4MDMxNTEyNDUyM1owLzEtMCsGA1UEAxMk NGE0NDNlODQtMWZjNC00NTk0LWIwMDktN2Y2N2Y1ZTM1NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mtSP4ohZJCQWsPBQKxSdX9yCsZ/3Tk6U9et pWqZRwe730YsXR5+W12Rq45Vy9a8YqdP7vMHJ5OP7oOK250OnM3/8ibtrjno5l7R jepEuymTGaIsFNnUbq+eYaijO7QPs9ZbyxBCxJkJ+TAwYxm6TPl13icpfTOPZfHg b1BpXlUzDpe1fn++iCTz/OEj78MM7NRWKVYbO/eS8/cvGS7nhMxTJoVnTySN94C5 PyDsGt90tde3fdce7OjBvFQr/mpoNMszaZBpzq5XkQy9aZ49Suo4azxGd7Fa6qZX 6pQR5FXZ+SuWl039KFuiKh4KX++Dba0rbJImj3Ui4swCuqr/BwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFC/GIhufmJxZokyKO1Nih7rdrNJPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80 YTQ0M2U4NC0xZmM0LTQ1OTQtYjAwOS03ZjY3ZjVlMzU2MGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzRhNDQzZTg0LTFmYzQtNDU5NC1i MDA5LTdmNjdmNWUzNTYwYS80YTQ0M2U4NC0xZmM0LTQ1OTQtYjAwOS03ZjY3ZjVl MzU2MGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAItKuQDBAJCdhwDBALRjlAwDQQCAAIwBwMFACYG LUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhQlMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGots8RjVnrL EDamh8B3CmQO3/3RIed/d2URF0Eegv27Fxm1VmXyyi5qT5r/fayTlsGx3mR9V2pb nGjFtDzWn0wtt9s4t+O7YylUyUX1WvTOH3+Z6mRgQK4lU/KSt7yTx7ptauGKLZNo EHMxKoKFS/wKDl6OnfR4mp21REK8qixG3mexfLxIOoEBDEdmwu8x5m1r7WiTIs7l po9XCK70MHEDgKIUlQX/ErYHRCqT2x8GIXUzSIXFCKLje39fABjoRurrjDDQa+Bs h3PWD03GNTOjkDvLcG49Sgnh4H49RfAKdcjl52Y/BVWBy0OxaeL+AFm0V5+Qxtlr 1PxpB2A1chQ= -----END CERTIFICATE-----Generated at Wed Dec 24 11:09:42 2025 by rpki-client