This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer File: 3d21f741-fd91-4158-8853-7388dab3b3e3.cer (raw, json) Hash identifier: rARA7MFaUWVkUUKGlb9bPwLakDSIT+ErJyqyu15qvEw= Subject key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584BC3CDFFE01B7E4401B0CE5280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Nov 2025 01:45:23 +0000 Certificate not after: Wed 09 Feb 2028 01:45:23 +0000 Subordinate resources: AS: 53274 IP: 162.255.168.0/22 IP: 199.168.200.0/21 IP: 204.48.56.0/22 IP: 2602:ff8f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:cd:ff:e0:1b:7e:44:01:b0:ce:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 6 01:45:23 2025 GMT Not After : Feb 9 01:45:23 2028 GMT Subject: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:7e:99:cb:90:d9:b3:57:98:e8:84:70:49: aa:eb:2a:a9:aa:fe:3b:fc:85:09:40:ac:2e:3e:3c: 3a:17:34:53:33:bd:5c:19:95:9c:e0:85:f4:19:3a: fb:56:be:ef:d2:8b:5b:72:02:fd:0a:19:79:12:dd: 9a:28:41:2d:ff:cc:bb:f6:c0:b0:63:38:11:dc:3a: 1b:89:fa:33:7f:35:33:c4:76:6b:60:89:e3:ca:7b: 4e:2d:fb:0d:f3:fb:93:dd:06:49:51:e4:7b:5b:8f: 5e:1a:3b:ea:db:85:9c:7c:cf:72:b7:9a:65:15:16: 29:a9:99:3b:72:bf:20:d8:4f:ec:94:8c:1c:bf:5a: 17:91:e8:38:48:79:54:46:9d:c5:7c:7c:34:0a:33: 24:4d:bc:58:dd:21:31:a3:86:41:e9:bd:a5:08:94: 00:ac:87:0f:d0:b5:c4:fe:ea:e9:73:6a:4a:16:a8: 0c:d6:7e:02:00:6b:f3:54:17:6f:77:1a:f9:26:08: 93:bd:d3:8e:0c:72:f8:9c:ed:bd:3e:d7:85:f8:3e: fe:22:26:34:85:05:5d:64:fb:31:ce:d1:b2:9a:97: 05:d5:bf:08:ab:28:89:66:18:ae:b0:30:71:cd:53: 9a:2c:b4:98:6f:ef:57:b8:4a:ff:ae:46:29:e1:e1: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 162.255.168.0/22 199.168.200.0/21 204.48.56.0/22 IPv6: 2602:ff8f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53274 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:04:98:43:b0:e7:49:1b:18:2a:ae:ed:02:40:64:94:32:cf: 03:25:c4:28:70:0f:34:4c:ed:1b:f6:aa:64:22:0a:7a:7d:3c: 75:73:e1:01:88:aa:6f:48:d5:9e:dd:aa:fa:61:b5:ca:35:bf: 8d:cf:83:0f:58:fb:60:1c:ce:d5:3a:a0:77:59:76:20:1c:26: 8b:aa:00:63:2b:89:dc:1e:07:e9:6b:7c:53:10:9e:a3:fc:16: 14:d2:c2:df:bb:38:40:d3:5d:4f:ce:7e:80:ef:cf:9c:ef:6e: a8:00:f4:da:ed:ac:6f:2c:c9:04:a3:f3:f9:a1:27:e4:a3:29: 0c:f5:20:2b:e7:2a:d7:44:77:17:4c:86:d4:dc:01:f5:a0:b7: f0:d8:78:5d:fc:21:92:19:13:19:2c:c3:df:e5:3a:23:12:09: bc:27:cd:0b:e4:9f:b0:aa:a2:f3:7b:a0:d4:7f:ef:a6:7a:3c: ec:11:1f:c9:64:ad:74:4a:69:7e:57:1d:bd:15:a4:6c:89:4f: d0:de:40:47:f8:42:0e:e1:09:36:43:6f:0e:97:c2:04:2f:b7: f9:75:f1:14:f3:dd:2d:69:d7:0d:b5:1b:eb:ca:de:06:76:10: 43:49:aa:10:58:32:c1:61:75:d1:ef:c1:27:5e:4b:0b:10:61: f4:d0:81:1a -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEvDzf/gG35EAbDOUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTEwNjAxNDUyM1oXDTI4MDIwOTAxNDUyM1owLzEtMCsGA1UEAxMk M2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNiM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5x+mcuQ2bNXmOiEcEmq6yqpqv47/IUJQKwu Pjw6FzRTM71cGZWc4IX0GTr7Vr7v0otbcgL9Chl5Et2aKEEt/8y79sCwYzgR3Dob ifozfzUzxHZrYInjyntOLfsN8/uT3QZJUeR7W49eGjvq24WcfM9yt5plFRYpqZk7 cr8g2E/slIwcv1oXkeg4SHlURp3FfHw0CjMkTbxY3SExo4ZB6b2lCJQArIcP0LXE /urpc2pKFqgM1n4CAGvzVBdvdxr5JgiTvdOODHL4nO29PteF+D7+IiY0hQVdZPsx ztGympcF1b8IqyiJZhiusDBxzVOaLLSYb+9XuEr/rkYp4eFb9wIDAQABo4IENzCC BDMwHQYDVR0OBBYEFKevv+FiOa+Xm1alB744CTB/874UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z ZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNkMjFmNzQxLWZkOTEtNDE1OC04 ODUzLTczODhkYWIzYjNlMy8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFi M2IzZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAKi/6gDBAPHqMgDBALMMDgwDgQCAAIwCAMGBCYC /48AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDQGjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtBJhDsOdJ Gxgqru0CQGSUMs8DJcQocA80TO0b9qpkIgp6fTx1c+EBiKpvSNWe3ar6YbXKNb+N z4MPWPtgHM7VOqB3WXYgHCaLqgBjK4ncHgfpa3xTEJ6j/BYU0sLfuzhA011Pzn6A 78+c726oAPTa7axvLMkEo/P5oSfkoykM9SAr5yrXRHcXTIbU3AH1oLfw2Hhd/CGS GRMZLMPf5TojEgm8J80L5J+wqqLze6DUf++mejzsER/JZK10Sml+Vx29FaRsiU/Q 3kBH+EIO4Qk2Q28Ol8IEL7f5dfEU890tadcNtRvryt4GdhBDSaoQWDLBYXXR78En XksLEGH00IEa -----END CERTIFICATE-----Generated at Mon Nov 24 20:45:10 2025 by rpki-client