This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer File: 63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer (raw, json) Hash identifier: pctqmP4Cbhwrm8QLqXR1a4qEL9uj410LNM/uyBSJHp4= Subject key identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584C48697FA9CF444D30B1E4A900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Dec 2025 13:45:24 +0000 Certificate not after: Mon 27 Mar 2028 12:45:24 +0000 Subordinate resources: AS: 52210 AS: 401038 IP: 23.130.136.0/22 IP: 149.112.74.0/24 IP: 172.99.232.0/23 IP: 192.67.32.0/22 IP: 204.10.192.0/22 IP: 2001:504:132::/48 IP: 2602:fcd3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:69:7f:a9:cf:44:4d:30:b1:e4:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 23 13:45:24 2025 GMT Not After : Mar 27 12:45:24 2028 GMT Subject: CN=63f5ee71-32bc-44e4-a1cd-1226ea3c4797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:36:0a:38:5b:cc:00:34:eb:a3:ed:59:27: b4:e8:c2:c3:89:e3:e0:fb:ad:c7:50:b9:84:48:3b: f9:59:a3:74:57:b5:d6:ba:cf:64:87:9c:a1:f3:91: 6a:67:1d:47:92:5e:c6:90:b0:6f:43:70:85:20:f8: fa:d3:bc:63:6d:16:02:b1:32:2a:6e:6e:73:2d:c5: 15:70:81:23:b5:ee:56:92:11:7c:54:e4:3b:2f:2f: 10:85:4a:a2:32:c2:9a:40:fa:56:34:01:73:b2:39: 51:bc:11:90:6e:a0:c3:ba:ab:ad:25:2a:fa:90:d2: 22:86:3e:25:3d:18:ef:9c:6c:11:f5:2a:7b:39:89: 20:86:6e:67:9c:1c:1e:56:e9:16:8e:bf:20:33:b1: 5c:c8:af:c3:4d:f0:30:43:8f:1a:af:a2:b7:e7:42: 09:00:a3:8d:68:b7:37:b9:5a:60:40:0c:7d:2c:c2: a3:ff:17:f2:44:43:03:72:be:d2:36:f8:05:38:b1: 91:f4:b4:ae:cd:c3:78:9e:fd:9d:e8:78:4b:ca:79: e3:52:9b:70:8f:c9:c7:ff:4f:b5:97:68:25:a4:e7: 25:e0:0a:8e:5c:2a:e0:cc:43:74:78:cf:01:48:ee: ae:d9:b0:67:32:33:d7:a7:92:f4:6f:20:34:17:3b: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.130.136.0/22 149.112.74.0/24 172.99.232.0/23 192.67.32.0/22 204.10.192.0/22 IPv6: 2001:504:132::/48 2602:fcd3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52210 401038 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:85:26:c4:07:e5:79:2c:89:15:36:c9:53:1a:dd:e5:2b:2e: ce:ef:61:6a:6f:80:ea:d9:b9:00:ba:b3:0a:c7:51:a6:ac:42: be:ed:44:0a:26:d3:f9:89:41:e5:41:e5:59:1e:d1:14:77:1f: ef:3a:9a:ad:13:49:50:f8:3b:b8:07:a8:c1:1e:bb:ac:73:10: 36:57:45:42:5e:8b:87:68:db:18:dd:7d:5a:f4:f8:04:ae:99: 01:f9:34:39:71:f3:70:2c:3b:cf:4e:7a:b2:02:04:ab:cd:81: 48:be:9e:48:4b:2c:10:83:54:d9:b5:a6:8a:31:b3:48:29:30: 2c:06:09:55:17:b5:d6:22:ea:c9:82:94:68:f3:b7:3a:4b:75: ac:99:2d:1b:49:bb:fb:4a:71:07:f6:ce:73:a5:30:a1:21:2f: e9:1b:dc:6e:de:b2:13:5c:78:10:88:4e:49:d8:57:26:66:0d: a4:ef:40:16:ba:49:ed:b4:0c:f5:49:a2:11:9a:e9:32:92:af: 0c:1e:57:3d:6e:60:7f:cb:84:89:87:a2:77:60:5f:79:c7:9a: d4:2d:63:5e:e6:c6:73:07:f6:94:fb:77:d4:8d:77:d5:81:28: 7e:73:80:a8:00:42:8f:1f:40:1e:c2:1e:d7:a9:dc:8b:79:14: ef:56:9e:cd -----BEGIN CERTIFICATE----- MIIHPzCCBiegAwIBAgIUAQ0Mn0MoWExIaX+pz0RNMLHkqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTIyMzEzNDUyNFoXDTI4MDMyNzEyNDUyNFowLzEtMCsGA1UEAxMk NjNmNWVlNzEtMzJiYy00NGU0LWExY2QtMTIyNmVhM2M0Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLw2CjhbzAA066PtWSe06MLDiePg+63HULmE SDv5WaN0V7XWus9kh5yh85FqZx1Hkl7GkLBvQ3CFIPj607xjbRYCsTIqbm5zLcUV cIEjte5WkhF8VOQ7Ly8QhUqiMsKaQPpWNAFzsjlRvBGQbqDDuqutJSr6kNIihj4l PRjvnGwR9Sp7OYkghm5nnBweVukWjr8gM7FcyK/DTfAwQ48ar6K350IJAKONaLc3 uVpgQAx9LMKj/xfyREMDcr7SNvgFOLGR9LSuzcN4nv2d6HhLynnjUptwj8nH/0+1 l2glpOcl4AqOXCrgzEN0eM8BSO6u2bBnMjPXp5L0byA0FztyAwIDAQABo4IEUTCC BE0wHQYDVR0OBBYEFDKWuBloAAskortzDiHkKGxHdkvwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1h MWNkLTEyMjZlYTNjNDc5Ny82M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEz YzQ3OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwUAYIKwYBBQUH AQcBAf8EQTA/MCQEAgABMB4DBAIXgogDBACVcEoDBAGsY+gDBALAQyADBALMCsAw FwQCAAIwEQMHACABBQQBMgMGBCYC/NMAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC AwDL8gIDBh6OMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACOFJsQH5XksiRU2yVMa3eUrLs7vYWpvgOrZuQC6 swrHUaasQr7tRAom0/mJQeVB5Vke0RR3H+86mq0TSVD4O7gHqMEeu6xzEDZXRUJe i4do2xjdfVr0+ASumQH5NDlx83AsO89OerICBKvNgUi+nkhLLBCDVNm1pooxs0gp MCwGCVUXtdYi6smClGjztzpLdayZLRtJu/tKcQf2znOlMKEhL+kb3G7eshNceBCI TknYVyZmDaTvQBa6Se20DPVJohGa6TKSrwweVz1uYH/LhImHondgX3nHmtQtY17m xnMH9pT7d9SNd9WBKH5zgKgAQo8fQB7CHtep3It5FO9Wns0= -----END CERTIFICATE-----Generated at Fri Jan 9 13:28:34 2026 by rpki-client