This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0eb31bae-2f99-4bdc-a1e9-1c67a842f611.cer File: 0eb31bae-2f99-4bdc-a1e9-1c67a842f611.cer (raw, json) Hash identifier: 3BkExsmKGJCyLxD1xe9zL1XtPpVhqkBM+pkaC813sXs= Subject key identifier: 38:E7:19:58:27:E2:93:A3:5D:77:94:10:56:28:4B:7A:C8:2E:BB:3C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584BD758C89A6463AA0E32379D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0eb31bae-2f99-4bdc-a1e9-1c67a842f611/0eb31bae-2f99-4bdc-a1e9-1c67a842f611.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0eb31bae-2f99-4bdc-a1e9-1c67a842f611/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Nov 2025 01:45:23 +0000 Certificate not after: Wed 16 Feb 2028 01:45:23 +0000 Subordinate resources: AS: 14338 IP: 74.113.20.0/22 IP: 162.244.248.0/22 IP: 199.167.140.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:58:c8:9a:64:63:aa:0e:32:37:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 13 01:45:23 2025 GMT Not After : Feb 16 01:45:23 2028 GMT Subject: CN=0eb31bae-2f99-4bdc-a1e9-1c67a842f611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ae:f4:a9:45:90:a0:b6:3c:8d:24:60:5e:de: 2f:d1:35:50:69:fa:4b:4b:55:f3:20:54:ad:58:a7: 1e:7e:1e:ad:8b:90:00:58:c9:5a:dc:2d:23:74:06: 68:f3:65:f0:33:d9:61:c6:db:f3:85:ed:71:1f:19: 14:f2:1f:43:e1:e5:f6:35:45:21:88:0a:bf:6c:00: 70:67:20:7b:93:ad:e8:94:14:f9:5b:79:d9:8f:97: f3:c8:f7:8d:43:96:9b:e0:47:18:5c:e7:c7:b2:79: 94:b2:ac:65:79:8d:e5:76:30:42:ab:50:4a:01:3f: c6:c2:d8:89:15:7f:65:7d:dd:28:8e:8f:a7:0f:8a: 12:c2:7f:ae:63:f6:17:f9:24:af:84:b3:af:38:f3: 66:66:65:2c:85:09:74:e5:f3:d6:64:58:12:5a:0f: a8:78:21:79:e4:2b:6e:54:e2:99:38:c8:78:12:dc: 44:4c:95:2b:bf:f8:2d:f6:fa:cc:fb:eb:ba:4b:64: bc:25:c3:58:51:c8:c2:a5:ac:4b:98:e5:a1:11:82: 56:be:6f:74:bb:c4:8e:75:15:b3:27:8e:b8:8e:4a: 9c:4b:b3:f9:49:7c:45:e3:df:39:9d:50:60:1b:eb: b4:ea:9b:02:7c:8f:ae:da:ed:35:16:2c:c7:83:6c: 6b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E7:19:58:27:E2:93:A3:5D:77:94:10:56:28:4B:7A:C8:2E:BB:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0eb31bae-2f99-4bdc-a1e9-1c67a842f611/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0eb31bae-2f99-4bdc-a1e9-1c67a842f611/0eb31bae-2f99-4bdc-a1e9-1c67a842f611.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 74.113.20.0/22 162.244.248.0/22 199.167.140.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14338 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:16:ed:9e:80:13:19:ca:b6:07:76:8c:a1:ed:d7:b4:c9:06: 45:29:39:6b:b4:60:41:e3:4e:5d:46:8a:89:5a:3e:a5:5e:3e: 29:c1:6f:8a:b1:2f:af:c3:f5:37:42:ae:06:e6:a9:f1:a8:2b: fc:58:77:bb:d8:c0:a8:c6:18:f0:4c:1b:f0:d4:f7:18:12:6b: 0b:89:f4:72:94:06:c8:74:a7:07:d8:78:60:c7:3f:9d:17:83: 9b:ff:e4:7b:54:7e:ab:62:6a:6e:6e:0f:b5:1b:b5:00:d4:7e: 37:79:08:dc:7e:6d:34:c1:5a:cc:35:a8:31:50:17:15:4e:10: 31:14:67:50:46:a1:64:fd:5d:c6:02:fa:9c:a4:4a:3c:f3:6f: e6:cb:aa:39:ac:9a:98:b3:7e:f6:1b:50:8f:54:34:2a:e8:3b: 88:3e:8b:26:5b:14:14:aa:aa:9c:ce:9a:aa:c7:1a:a9:6f:f6: 82:90:b3:39:aa:a3:0b:cb:99:97:26:ce:d9:1f:84:cf:b5:ef: e0:57:bd:53:e4:1e:69:ba:a2:05:32:14:aa:ef:b7:a7:21:ff: 2b:b8:8d:7e:8d:e8:e1:b0:1e:eb:9f:12:c0:85:46:c2:2f:9b: b0:40:59:32:9f:0e:2f:20:bb:f0:e4:4f:4d:78:84:c5:fa:56: e0:cb:35:87 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEvXWMiaZGOqDjI3nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTExMzAxNDUyM1oXDTI4MDIxNjAxNDUyM1owLzEtMCsGA1UEAxMk MGViMzFiYWUtMmY5OS00YmRjLWExZTktMWM2N2E4NDJmNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk670qUWQoLY8jSRgXt4v0TVQafpLS1XzIFSt WKcefh6ti5AAWMla3C0jdAZo82XwM9lhxtvzhe1xHxkU8h9D4eX2NUUhiAq/bABw ZyB7k63olBT5W3nZj5fzyPeNQ5ab4EcYXOfHsnmUsqxleY3ldjBCq1BKAT/GwtiJ FX9lfd0ojo+nD4oSwn+uY/YX+SSvhLOvOPNmZmUshQl05fPWZFgSWg+oeCF55Ctu VOKZOMh4EtxETJUrv/gt9vrM++u6S2S8JcNYUcjCpaxLmOWhEYJWvm90u8SOdRWz J464jkqcS7P5SXxF4985nVBgG+u06psCfI+u2u01FizHg2xrPQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFDjnGVgn4pOjXXeUEFYoS3rILrs8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w ZWIzMWJhZS0yZjk5LTRiZGMtYTFlOS0xYzY3YTg0MmY2MTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzBlYjMxYmFlLTJmOTktNGJkYy1h MWU5LTFjNjdhODQyZjYxMS8wZWIzMWJhZS0yZjk5LTRiZGMtYTFlOS0xYzY3YTg0 MmY2MTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAJKcRQDBAKi9PgDBALHp4wwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICOAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWBbtnoATGcq2B3aMoe3XtMkGRSk5a7Rg QeNOXUaKiVo+pV4+KcFvirEvr8P1N0KuBuap8agr/Fh3u9jAqMYY8Ewb8NT3GBJr C4n0cpQGyHSnB9h4YMc/nReDm//ke1R+q2Jqbm4PtRu1ANR+N3kI3H5tNMFazDWo MVAXFU4QMRRnUEahZP1dxgL6nKRKPPNv5suqOayamLN+9htQj1Q0Kug7iD6LJlsU FKqqnM6aqscaqW/2gpCzOaqjC8uZlybO2R+Ez7Xv4Fe9U+QeabqiBTIUqu+3pyH/ K7iNfo3o4bAe658SwIVGwi+bsEBZMp8OLyC78ORPTXiExfpW4Ms1hw== -----END CERTIFICATE-----Generated at Mon Nov 24 19:15:58 2025 by rpki-client