This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer File: 467861ee-0aa8-4688-af94-7d540e2ddc56.cer (raw, json) Hash identifier: 1GMP+0aApkqUjf4yvBGWg3cTXofI87gecKuOYshuW7Q= Subject key identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584BF1DE47D352B5F093BEB642C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Nov 2025 13:45:23 +0000 Certificate not after: Fri 25 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 400529 IP: 23.161.168.0/23 IP: 45.45.236.0/22 IP: 2602:fabf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:de:47:d3:52:b5:f0:93:be:b6:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 22 13:45:23 2025 GMT Not After : Feb 25 13:45:23 2028 GMT Subject: CN=467861ee-0aa8-4688-af94-7d540e2ddc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:20:87:15:1f:0a:34:04:8a:22:29:40:6b: 30:35:bd:88:27:c3:43:2e:8f:70:d0:24:ad:73:db: 9c:27:2b:b9:15:2c:79:ee:f8:aa:8c:c7:9a:78:ab: fa:27:03:27:08:9e:ba:07:40:f6:c1:17:f2:36:2b: 81:d9:2a:6e:39:ce:e9:fe:fc:88:19:51:81:f9:84: 95:0d:0a:7c:e0:90:a6:07:99:d8:01:dd:c6:fb:28: 5d:78:a9:8a:9a:6c:73:b4:25:c3:5d:cf:ce:cf:d0: 97:f0:45:4d:4c:77:41:8a:fb:ac:3a:e2:d6:12:db: 00:7d:e5:2b:6b:d4:d2:28:20:77:b9:31:69:71:56: 44:89:0b:59:a8:cb:34:23:6a:f7:ea:b7:92:21:89: f8:f8:fe:0f:58:68:6e:88:ea:8d:ad:0e:d0:67:2f: 05:aa:29:56:13:69:df:1b:98:24:0d:55:30:70:12: 02:4d:30:04:35:e6:60:e1:4e:41:92:6c:e6:16:39: c4:b4:45:08:b4:40:56:07:fb:af:32:fd:3b:40:3d: 6e:f2:20:60:85:31:09:da:94:a4:b8:8b:8f:d8:77: 46:94:0d:c6:bf:ab:fe:07:67:96:d0:cf:51:d6:a0: 0b:eb:dc:da:a9:ba:e5:db:de:b5:5b:c6:f0:60:e7: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.161.168.0/23 45.45.236.0/22 IPv6: 2602:fabf::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400529 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b4:f9:57:a9:43:1a:06:e0:9a:83:66:0d:47:b2:c9:41:27: 0e:f9:37:d0:4a:db:68:55:09:02:ae:41:a9:fe:df:a9:eb:db: bd:45:65:2f:05:55:3e:14:f7:02:f6:5e:68:cd:58:1e:4b:83: 02:a0:5e:b7:51:73:2a:4c:0c:c8:83:3d:c3:40:8d:24:b9:d2: 38:14:2a:cd:14:0f:64:30:d3:ad:4e:81:dd:f6:c9:1b:3d:1b: d0:a9:cd:cc:93:4d:d8:6b:25:f7:cd:b7:33:06:20:96:b6:d5: 53:61:5a:04:b0:bc:37:81:a6:74:3e:a3:a8:37:c1:78:c2:74: ca:8b:95:bc:34:a6:85:25:84:e5:14:d9:44:63:6c:ff:3d:dd: a9:39:37:e7:c9:c8:c9:ba:e2:24:7b:09:b8:ee:40:43:25:c6: e9:6c:f6:75:e8:5b:b4:03:51:80:21:1f:31:b9:02:b3:ab:94: 36:20:d8:5d:4d:91:16:a8:f9:ef:9b:d1:11:ad:d3:59:41:76: 9d:2e:be:09:97:64:d1:95:49:f0:4d:8d:1f:6b:33:c3:79:9e: 40:0f:5a:4d:af:93:8f:a2:49:11:80:3c:27:2f:55:82:4a:bd: 20:53:92:61:a6:75:65:7d:57:7f:6b:73:09:82:42:1e:4d:7a: dc:cf:3e:51 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEvx3kfTUrXwk762QsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTEyMjEzNDUyM1oXDTI4MDIyNTEzNDUyM1owLzEtMCsGA1UEAxMk NDY3ODYxZWUtMGFhOC00Njg4LWFmOTQtN2Q1NDBlMmRkYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTYghxUfCjQEiiIpQGswNb2IJ8NDLo9w0CSt c9ucJyu5FSx57viqjMeaeKv6JwMnCJ66B0D2wRfyNiuB2SpuOc7p/vyIGVGB+YSV DQp84JCmB5nYAd3G+yhdeKmKmmxztCXDXc/Oz9CX8EVNTHdBivusOuLWEtsAfeUr a9TSKCB3uTFpcVZEiQtZqMs0I2r36reSIYn4+P4PWGhuiOqNrQ7QZy8FqilWE2nf G5gkDVUwcBICTTAENeZg4U5BkmzmFjnEtEUItEBWB/uvMv07QD1u8iBghTEJ2pSk uIuP2HdGlA3Gv6v+B2eW0M9R1qAL69zaqbrl2961W8bwYOcgcQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBMvDupitbfHqu8J1T5UW01T+v1NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 Njc4NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0MGUyZGRjNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ2Nzg2MWVlLTBhYTgtNDY4OC1h Zjk0LTdkNTQwZTJkZGM1Ni80Njc4NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0MGUy ZGRjNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXoagDBAItLewwDgQCAAIwCAMGBCYC+r8AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYckTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8tPlXqUMaBuCag2YN R7LJQScO+TfQSttoVQkCrkGp/t+p69u9RWUvBVU+FPcC9l5ozVgeS4MCoF63UXMq TAzIgz3DQI0kudI4FCrNFA9kMNOtToHd9skbPRvQqc3Mk03YayX3zbczBiCWttVT YVoEsLw3gaZ0PqOoN8F4wnTKi5W8NKaFJYTlFNlEY2z/Pd2pOTfnycjJuuIkewm4 7kBDJcbpbPZ16Fu0A1GAIR8xuQKzq5Q2INhdTZEWqPnvm9ERrdNZQXadLr4Jl2TR lUnwTY0fazPDeZ5AD1pNr5OPokkRgDwnL1WCSr0gU5JhpnVlfVd/a3MJgkIeTXrc zz5R -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:48 2025 by rpki-client