This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer File: 2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer (raw, json) Hash identifier: YSvsf0YIs3fJzblYHkh+sy19qrYtHKyNUIr43BTfVKQ= Subject key identifier: 91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584C48697F1D691184C65609D900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Dec 2025 13:45:24 +0000 Certificate not after: Mon 27 Mar 2028 12:45:24 +0000 Subordinate resources: IP: 172.99.250.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:69:7f:1d:69:11:84:c6:56:09:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 23 13:45:24 2025 GMT Not After : Mar 27 12:45:24 2028 GMT Subject: CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2e:6d:e1:56:a1:7c:b9:b3:04:54:d0:7a:a4: 33:92:5f:8d:0b:cf:a0:87:55:02:f9:e6:02:ef:36: 8d:59:c0:85:12:10:75:d6:5c:9d:65:56:d5:49:fc: c8:c7:b6:db:82:9c:70:82:24:c9:39:d7:0d:13:91: ad:7e:a6:16:1e:27:8e:6f:63:a3:a4:dd:1b:67:dc: 88:5d:9b:fc:df:15:9e:43:f0:7c:8c:91:46:21:11: 17:1d:4a:e6:bf:03:70:55:50:ec:77:ad:05:c4:34: 4c:c6:a0:8b:7d:e7:ca:5a:7e:59:43:e5:19:d5:0e: 2b:df:c4:74:37:40:99:16:a6:33:a5:2f:0b:11:dd: 90:8d:6a:42:9c:32:b3:0f:df:8c:38:ca:4a:fb:cc: 7a:90:50:03:a7:cd:09:27:2e:3d:77:1e:92:6f:b6: 13:a8:e7:47:1f:1e:14:ba:7b:7e:e2:62:09:8e:45: 02:ea:96:f6:41:77:f8:9a:61:84:7d:3d:07:cb:3e: 60:fa:23:55:82:de:b4:8a:72:53:96:32:fa:5c:29: 85:4d:c3:a9:36:61:8b:9b:de:a6:03:59:20:6f:bd: bc:20:c8:a8:38:97:e1:7b:a4:83:5f:3e:31:0a:e8: 8b:29:90:29:56:4b:c8:40:8d:00:44:54:c6:d4:19: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 172.99.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:cd:c3:ca:e3:15:67:39:ed:cb:4d:c1:ca:d5:13:ab:65:8a: 18:2e:bf:f4:55:3c:0d:da:ae:06:9c:88:72:09:61:94:05:91: 37:48:89:95:da:cb:cc:32:f7:74:68:2a:c7:cd:0e:3a:2f:95: 25:78:ef:f9:a5:b5:e1:12:2d:ed:40:26:74:f5:2b:1c:1d:4f: 2a:73:17:e3:f9:a6:52:2e:a7:2f:75:0d:ce:f3:4d:07:a2:2a: 46:62:65:5d:69:8f:ed:7e:45:d8:54:c7:cb:93:46:23:de:ff: 0c:25:f4:62:4d:0f:d0:ca:e7:7a:d8:cf:ed:c5:21:1c:e5:b0: e3:ef:05:69:18:b8:bf:5a:88:92:ee:49:7e:2f:5c:65:9e:f5: 69:d9:85:a9:0b:af:dd:82:fc:93:5a:9b:1c:7d:d9:c8:bd:b8: b7:58:86:b3:c7:b3:33:6c:00:3e:f2:00:d8:24:28:57:19:f2: 08:9f:fd:c1:a0:a2:a6:6c:ce:93:16:07:dd:c1:81:19:28:7a: 73:0f:db:b8:fa:bd:cd:16:66:a7:0c:cb:61:14:7b:52:8a:dd: 7e:80:26:51:f6:3b:60:43:28:1b:6c:c0:6b:29:e4:3b:f7:a2: 21:fe:89:3b:47:97:ac:28:db:9b:7d:53:c2:6e:af:c8:d1:fe: 85:11:1c:89 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWExIaX8daRGExlYJ2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTIyMzEzNDUyNFoXDTI4MDMyNzEyNDUyNFowLzEtMCsGA1UEAxMk MmY0ZGQ2MTUtNWE5ZS00MDU3LTk4ZDItYzA2OWRkMTZmNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC5t4VahfLmzBFTQeqQzkl+NC8+gh1UC+eYC 7zaNWcCFEhB11lydZVbVSfzIx7bbgpxwgiTJOdcNE5GtfqYWHieOb2OjpN0bZ9yI XZv83xWeQ/B8jJFGIREXHUrmvwNwVVDsd60FxDRMxqCLfefKWn5ZQ+UZ1Q4r38R0 N0CZFqYzpS8LEd2QjWpCnDKzD9+MOMpK+8x6kFADp80JJy49dx6Sb7YTqOdHHx4U unt+4mIJjkUC6pb2QXf4mmGEfT0Hyz5g+iNVgt60inJTljL6XCmFTcOpNmGLm96m A1kgb728IMioOJfhe6SDXz4xCuiLKZApVkvIQI0ARFTG1BlCpQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJEZr+yAn18hSJSht43mYeWLeMHQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y ZjRkZDYxNS01YTllLTQwNTctOThkMi1jMDY5ZGQxNmY0ZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzJmNGRkNjE1LTVhOWUtNDA1Ny05 OGQyLWMwNjlkZDE2ZjRmNy8yZjRkZDYxNS01YTllLTQwNTctOThkMi1jMDY5ZGQx NmY0ZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACsY/owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFs3DyuMVZznty03BytUT q2WKGC6/9FU8DdquBpyIcglhlAWRN0iJldrLzDL3dGgqx80OOi+VJXjv+aW14RIt 7UAmdPUrHB1PKnMX4/mmUi6nL3UNzvNNB6IqRmJlXWmP7X5F2FTHy5NGI97/DCX0 Yk0P0MrnetjP7cUhHOWw4+8FaRi4v1qIku5Jfi9cZZ71admFqQuv3YL8k1qbHH3Z yL24t1iGs8ezM2wAPvIA2CQoVxnyCJ/9waCipmzOkxYH3cGBGSh6cw/buPq9zRZm pwzLYRR7UordfoAmUfY7YEMoG2zAaynkO/eiIf6JO0eXrCjbm31Twm6vyNH+hREc iQ== -----END CERTIFICATE-----Generated at Sat Jan 10 02:43:21 2026 by rpki-client