This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer File: 37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer (raw, json) Hash identifier: fLCSQ1p//LrDzD399n+B7dsTfWKRt+L46J2VnQ8pPS0= Subject key identifier: 2B:91:ED:DC:2E:8C:FC:19:63:EA:4E:59:69:E8:3A:E9:AE:89:AB:B8 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584C522EE2250D0B895BF9845800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Dec 2025 01:45:23 +0000 Certificate not after: Fri 31 Mar 2028 00:45:23 +0000 Subordinate resources: AS: 31989 IP: 23.155.168.0/24 IP: 66.179.68.0/22 IP: 2601:f000::/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:2e:e2:25:0d:0b:89:5b:f9:84:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 27 01:45:23 2025 GMT Not After : Mar 31 00:45:23 2028 GMT Subject: CN=37bfcea0-cd68-469f-9e84-ccc3f1f40b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:06:74:dc:64:2b:ce:fd:0f:ea:0d:97:2f:4d: fa:82:a8:7b:81:d8:46:40:d6:f3:1c:84:29:fa:78: 3d:fc:ed:7b:f8:be:6c:53:57:01:fa:48:c1:a2:d5: c7:6b:ce:d3:1a:b9:40:61:c9:a5:91:d9:90:3c:0f: b3:f4:f3:6e:4c:13:08:26:9c:de:95:2b:de:38:93: c1:92:66:52:81:5e:5a:da:68:f3:48:b4:7c:7e:d9: 83:31:d2:82:51:0b:0c:ba:37:9a:7e:78:15:c7:0f: d0:c3:94:63:9f:e2:8e:9a:f6:21:38:89:e7:a7:e8: e8:c3:c2:d3:92:cf:e5:fd:0f:10:7f:ff:db:95:11: 44:5e:c1:5d:07:6d:dd:f1:2d:67:0b:22:33:d0:28: 08:36:8e:36:41:0a:c4:6d:f1:de:68:63:7e:5b:91: d2:79:73:c2:c1:e9:a6:6f:ac:7b:30:9f:14:0f:71: ef:aa:9f:0a:6e:90:fd:41:e7:87:47:41:f4:aa:7e: e3:e1:2a:5e:05:17:ac:54:2f:13:8b:38:39:69:32: d4:82:d8:d2:63:33:13:03:30:ef:ee:c4:25:2e:54: 02:87:0e:e4:d0:49:bf:ed:6d:71:d3:0d:25:63:28: 50:9a:f0:0a:a8:9c:93:50:ee:98:9d:50:b3:91:d6: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:91:ED:DC:2E:8C:FC:19:63:EA:4E:59:69:E8:3A:E9:AE:89:AB:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.155.168.0/24 66.179.68.0/22 IPv6: 2601:f000::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31989 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:86:c6:95:c0:32:99:3b:27:56:03:9f:d1:7f:b4:4d:15:ce: 67:2e:fe:64:b9:25:b4:1a:1c:ae:8b:ab:93:da:81:49:9a:d9: f7:7e:62:a0:43:e2:b2:fe:6f:1b:84:6c:ef:9f:a2:4a:8f:82: 4b:fb:62:8e:8a:ce:78:92:51:db:97:41:49:25:37:61:27:47: 98:00:0c:e5:fb:8a:01:7f:e2:c0:fe:ee:e7:58:c4:97:35:3b: 11:e9:c8:bf:db:3e:a5:7d:16:42:27:19:6f:94:f4:ac:30:47: f6:b0:38:1a:9e:aa:8c:56:67:44:bd:93:97:8b:41:73:69:5a: 2f:c7:e1:44:f3:99:6d:fe:1b:29:c0:06:3e:82:f0:9f:68:3c: c7:d2:e3:02:65:ca:78:9d:bb:9b:ed:6e:ae:c8:2b:fe:67:90: 1f:fb:ec:c4:61:29:0b:dc:db:38:d4:45:02:5f:9c:42:8c:6d: a7:c1:26:ee:2e:5b:95:73:0d:46:88:8d:21:32:bd:3e:26:87: 18:db:e3:75:ce:ac:8d:ce:fb:5c:5c:88:bc:7d:59:f7:67:fe: b5:fd:e0:ff:9e:6f:74:0d:a7:27:00:5c:6f:5d:d3:9e:57:93: 23:e6:3a:66:cd:13:55:89:02:6d:d4:fe:20:ff:11:5c:5a:0c: 59:e2:65:0f -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWExSLuIlDQuJW/mEWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTIyNzAxNDUyM1oXDTI4MDMzMTAwNDUyM1owLzEtMCsGA1UEAxMk MzdiZmNlYTAtY2Q2OC00NjlmLTllODQtY2NjM2YxZjQwYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQZ03GQrzv0P6g2XL036gqh7gdhGQNbzHIQp +ng9/O17+L5sU1cB+kjBotXHa87TGrlAYcmlkdmQPA+z9PNuTBMIJpzelSveOJPB kmZSgV5a2mjzSLR8ftmDMdKCUQsMujeafngVxw/Qw5Rjn+KOmvYhOInnp+jow8LT ks/l/Q8Qf//blRFEXsFdB23d8S1nCyIz0CgINo42QQrEbfHeaGN+W5HSeXPCwemm b6x7MJ8UD3Hvqp8KbpD9QeeHR0H0qn7j4SpeBResVC8Tizg5aTLUgtjSYzMTAzDv 7sQlLlQChw7k0Em/7W1x0w0lYyhQmvAKqJyTUO6YnVCzkdae9QIDAQABo4IELjCC BCowHQYDVR0OBBYEFCuR7dwujPwZY+pOWWnoOumuiau4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z N2JmY2VhMC1jZDY4LTQ2OWYtOWU4NC1jY2MzZjFmNDBiNDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzM3YmZjZWEwLWNkNjgtNDY5Zi05 ZTg0LWNjYzNmMWY0MGI0Mi8zN2JmY2VhMC1jZDY4LTQ2OWYtOWU4NC1jY2MzZjFm NDBiNDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMBIEAgABMAwDBAAXm6gDBAJCs0QwDAQCAAIwBgMEACYB8DAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgJ89TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJhsaVwDKZOydWA5/Rf7RN Fc5nLv5kuSW0Ghyui6uT2oFJmtn3fmKgQ+Ky/m8bhGzvn6JKj4JL+2KOis54klHb l0FJJTdhJ0eYAAzl+4oBf+LA/u7nWMSXNTsR6ci/2z6lfRZCJxlvlPSsMEf2sDga nqqMVmdEvZOXi0FzaVovx+FE85lt/hspwAY+gvCfaDzH0uMCZcp4nbub7W6uyCv+ Z5Af++zEYSkL3Ns41EUCX5xCjG2nwSbuLluVcw1GiI0hMr0+JocY2+N1zqyNzvtc XIi8fVn3Z/61/eD/nm90DacnAFxvXdOeV5Mj5jpmzRNViQJt1P4g/xFcWgxZ4mUP -----END CERTIFICATE-----Generated at Thu Jan 8 01:44:03 2026 by rpki-client