This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer File: 16d5d923-fd34-409d-8f77-22c6014e6e1b.cer (raw, json) Hash identifier: KjvJNQQNxLRdNzO1oEhTTkWz094mL0xPrFFcioJI38M= Subject key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584BE6CD2D3FD05C3851DB80A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Nov 2025 14:37:02 +0000 Certificate not after: Mon 21 Feb 2028 14:37:02 +0000 Subordinate resources: IP: 66.179.76.0/22 IP: 72.11.192.0/19 IP: 192.226.64.0/18 IP: 199.15.200.0/21 IP: 216.194.0.0/18 IP: 2604:85c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:cd:2d:3f:d0:5c:38:51:db:80:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Nov 18 14:37:02 2025 GMT Not After : Feb 21 14:37:02 2028 GMT Subject: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:b2:02:5a:d0:6f:3a:38:7f:47:8a:61:16: c7:7c:a3:b0:5b:db:40:eb:fb:bc:45:84:7d:fa:52: 86:28:43:e9:3c:75:75:84:a2:c7:6c:b0:a0:66:dc: fd:77:fd:12:6e:f9:92:05:47:54:0f:1e:12:d1:c1: ed:d4:56:4e:79:78:dd:64:b0:7c:63:64:0c:2b:6e: 84:d0:f0:d5:f2:33:bd:54:8a:a0:90:21:54:c4:2f: d8:74:84:60:ef:63:de:a2:aa:29:ff:85:94:14:04: 21:5d:f7:11:69:7d:af:5f:1f:51:b4:15:c0:35:aa: 7c:11:8c:28:dc:5c:60:cc:6e:0a:b9:04:6b:95:9c: 2b:86:f7:14:b6:91:87:ba:35:1e:ce:35:eb:68:c2: 9f:c1:16:ef:04:58:0b:ff:32:fe:bf:a1:ac:4d:4e: bf:da:e8:55:d3:24:9b:2f:d6:86:fd:13:35:79:3a: bf:86:d5:57:ae:76:da:3a:ca:c9:19:61:b7:27:5a: 03:e4:fb:29:31:20:95:0d:6d:f9:5d:de:e7:e8:2b: c8:e6:53:3e:91:59:a2:90:b6:af:9b:10:c8:c1:7b: 16:82:51:c9:e4:10:50:c1:98:d2:c9:c2:19:71:4d: 55:a9:c9:a3:85:df:45:77:88:34:f5:b2:8a:65:f3: 47:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 66.179.76.0/22 72.11.192.0/19 192.226.64.0/18 199.15.200.0/21 216.194.0.0/18 IPv6: 2604:85c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f1:02:db:24:bd:f0:ce:cc:6b:26:be:44:0b:9e:1d:ad:2c: 88:49:4f:a6:39:81:37:2b:57:f2:21:7a:cd:80:a4:36:7d:df: 58:6b:5d:01:17:b0:fa:b7:5a:6c:d7:5c:91:2a:90:3f:aa:d0: 92:c7:e0:42:28:e3:8b:3b:55:cf:c5:05:84:c0:b4:7f:d2:3c: 04:bd:9e:d1:41:5a:0c:ea:60:6d:72:63:d2:5f:71:08:cc:1b: fd:5c:55:07:34:46:83:53:2b:7c:cf:88:3c:ef:3c:ab:1e:c7: 19:b7:bf:bd:53:fe:6d:d3:47:2a:4a:9c:8c:e3:26:05:cb:bd: e0:f5:da:dc:14:34:06:fb:06:20:58:ad:0b:88:ae:99:9f:9e: 75:43:44:26:d2:00:a1:3f:30:7b:1d:9e:52:ec:e4:2c:2f:ae: 00:f4:ab:5a:26:7a:88:8d:88:e5:e7:d9:09:0d:24:74:5c:3f: ac:e2:c9:7b:45:4b:57:7f:ca:d0:86:9c:26:19:5e:a3:11:7e: f8:57:28:fb:f0:a7:2d:c4:15:d8:83:f5:c4:67:22:79:75:2d: 54:5f:7a:4d:6e:80:ba:e8:21:81:3d:37:f8:85:92:e4:f5:c7: b1:62:ae:de:0d:ef:6d:0f:84:86:48:7f:14:a3:62:bc:5e:fc: 84:6e:59:f5 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEvmzS0/0Fw4UduApoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTExODE0MzcwMloXDTI4MDIyMTE0MzcwMlowLzEtMCsGA1UEAxMk MTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlKyAlrQbzo4f0eKYRbHfKOwW9tA6/u8RYR9 +lKGKEPpPHV1hKLHbLCgZtz9d/0SbvmSBUdUDx4S0cHt1FZOeXjdZLB8Y2QMK26E 0PDV8jO9VIqgkCFUxC/YdIRg72Peoqop/4WUFAQhXfcRaX2vXx9RtBXANap8EYwo 3FxgzG4KuQRrlZwrhvcUtpGHujUezjXraMKfwRbvBFgL/zL+v6GsTU6/2uhV0ySb L9aG/RM1eTq/htVXrnbaOsrJGWG3J1oD5PspMSCVDW35Xd7n6CvI5lM+kVmikLav mxDIwXsWglHJ5BBQwZjSycIZcU1Vqcmjhd9Fd4g09bKKZfNHJwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFJgmJBC8WT3YyIIrRjM2/N2k7/tdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x NmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzE2ZDVkOTIzLWZkMzQtNDA5ZC04 Zjc3LTIyYzYwMTRlNmUxYi8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0 ZTZlMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAJCs0wDBAVIC8ADBAbA4kADBAPHD8gDBAbYwgAw DQQCAAIwBwMFACYEhcAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG/EC2yS98M7Maya+RAueHa0siElPpjmB NytX8iF6zYCkNn3fWGtdARew+rdabNdckSqQP6rQksfgQijjiztVz8UFhMC0f9I8 BL2e0UFaDOpgbXJj0l9xCMwb/VxVBzRGg1MrfM+IPO88qx7HGbe/vVP+bdNHKkqc jOMmBcu94PXa3BQ0BvsGIFitC4iumZ+edUNEJtIAoT8wex2eUuzkLC+uAPSrWiZ6 iI2I5efZCQ0kdFw/rOLJe0VLV3/K0IacJhleoxF++Fco+/CnLcQV2IP1xGcieXUt VF96TW6AuughgT03+IWS5PXHsWKu3g3vbQ+Ehkh/FKNivF78hG5Z9Q== -----END CERTIFICATE-----Generated at Sat Nov 22 21:04:11 2025 by rpki-client