This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer File: adf336cd-e30b-4fd4-a132-8eede3026803.cer (raw, json) Hash identifier: xnRoHd+gV24oLe2QLBQR+YGnWnk3GTvsy9Brsa1IGGM= Subject key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584C18F3DDA768F3BEFFABA27680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 06 Dec 2025 13:45:24 +0000 Certificate not after: Fri 10 Mar 2028 13:45:24 +0000 Subordinate resources: AS: 46 AS: 11094 IP: 128.6.0.0/16 IP: 130.219.0.0/16 IP: 165.230.0.0/16 IP: 192.12.88.0/24 IP: 192.26.148.0/24 IP: 198.151.130.0/24 IP: 204.52.215.0/24 IP: 2620:0:d60::/46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:f3:dd:a7:68:f3:be:ff:ab:a2:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 6 13:45:24 2025 GMT Not After : Mar 10 13:45:24 2028 GMT Subject: CN=adf336cd-e30b-4fd4-a132-8eede3026803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:cf:ce:e6:f5:54:d0:5e:c4:67:5a:24:75: 7a:8c:7e:0b:61:5d:0a:5d:6c:d0:01:a1:de:70:d4: 8e:de:17:31:5d:7b:3b:05:88:24:12:b7:7c:2d:d4: 31:8b:21:f3:27:23:07:c1:d9:4b:90:a2:d0:70:39: 7c:05:a7:ab:5c:0d:30:69:ce:a4:a4:01:d4:33:0c: ae:11:8a:58:11:c5:d8:91:dd:cd:3d:3a:3d:9d:9f: dd:1d:af:46:3f:ed:2e:e5:8e:14:73:89:60:22:90: 63:6b:dd:7a:42:e2:87:52:9c:bf:52:e3:d6:4b:0c: 28:84:ee:e3:21:66:2e:ca:b1:8d:b0:95:79:a1:84: 99:01:a2:d5:20:b6:8c:2f:c2:9d:7c:c4:94:f4:e7: 9a:cf:86:fd:da:1b:c9:8d:ed:33:b6:16:c7:dc:ae: 2a:31:73:60:b3:93:22:9d:93:08:ee:a8:d6:73:63: 58:7a:1b:34:5f:80:5a:8c:13:5f:53:a0:81:3f:b7: 77:82:6f:ab:a1:1b:8e:6a:da:5c:22:f2:56:0e:29: fe:72:64:4a:e5:40:3a:45:4c:e5:7a:2f:c1:10:cc: 6d:5e:ad:8c:44:f3:b6:4c:f7:b3:ce:bf:7d:ed:3f: 0f:c0:22:3c:2f:2b:73:de:f1:58:13:7d:34:58:00: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 128.6.0.0/16 130.219.0.0/16 165.230.0.0/16 192.12.88.0/24 192.26.148.0/24 198.151.130.0/24 204.52.215.0/24 IPv6: 2620:0:d60::/46 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46 11094 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:74:6a:28:81:1a:f4:15:5c:f9:74:34:ee:f9:8d:20:be:e1: ff:4c:79:db:88:a4:b6:1d:19:9c:de:76:0b:1c:41:36:59:52: f7:c4:8b:e6:7f:53:ae:e8:94:1c:8a:c7:2e:71:98:f4:1c:49: 6b:ee:62:68:50:6e:ab:a0:85:c0:ac:af:a3:7c:1c:b5:ce:66: a6:c8:96:7e:3d:7e:c2:36:b2:db:c6:e8:52:3c:7e:42:ac:ad: e5:35:d2:95:8a:f0:34:0e:13:2a:05:1e:21:36:4c:a2:50:c5: e1:8b:65:ff:ac:60:68:c9:c8:7b:ed:89:2b:8d:d8:dc:5f:c1: e7:c8:11:23:fb:8c:a6:23:4d:e5:84:95:89:8b:a0:af:f2:c1: b7:63:72:4f:f4:ee:75:ec:05:0b:bd:09:0c:f5:40:79:45:27: 9e:60:9c:c9:df:d8:f4:06:11:2a:1a:db:84:c5:b0:d4:d5:81: 5f:b2:75:e4:27:6f:c2:92:ca:d3:61:6d:b8:86:71:01:36:ed: fb:a8:2d:3a:72:d6:5d:fd:7c:3c:b3:28:b8:a9:4b:94:46:5a: 26:ac:d0:bd:95:91:29:71:0e:fa:89:94:a3:b2:48:1e:1a:18: 5a:49:6c:a3:7c:9f:2d:6c:2a:3d:35:5f:96:bf:f2:8e:b2:4a: 38:f6:00:aa -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWEwY892naPO+/6uidoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTIwNjEzNDUyNFoXDTI4MDMxMDEzNDUyNFowLzEtMCsGA1UEAxMk YWRmMzM2Y2QtZTMwYi00ZmQ0LWExMzItOGVlZGUzMDI2ODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsabPzub1VNBexGdaJHV6jH4LYV0KXWzQAaHe cNSO3hcxXXs7BYgkErd8LdQxiyHzJyMHwdlLkKLQcDl8BaerXA0wac6kpAHUMwyu EYpYEcXYkd3NPTo9nZ/dHa9GP+0u5Y4Uc4lgIpBja916QuKHUpy/UuPWSwwohO7j IWYuyrGNsJV5oYSZAaLVILaML8KdfMSU9Oeaz4b92hvJje0zthbH3K4qMXNgs5Mi nZMI7qjWc2NYehs0X4BajBNfU6CBP7d3gm+roRuOatpcIvJWDin+cmRK5UA6RUzl ei/BEMxtXq2MRPO2TPezzr997T8PwCI8Lytz3vFYE300WADE6wIDAQABo4IETzCC BEswHQYDVR0OBBYEFEMTx/pRZpHb/J/7b+XHFxAhSlaNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h ZGYzMzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVkZTMwMjY4MDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2FkZjMzNmNkLWUzMGItNGZkNC1h MTMyLThlZWRlMzAyNjgwMy9hZGYzMzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVkZTMw MjY4MDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwUQYIKwYBBQUH AQcBAf8EQjBAMC0EAgABMCcDAwCABgMDAILbAwMApeYDBADADFgDBADAGpQDBADG l4IDBADMNNcwDwQCAAIwCQMHAiYgAAANYDAcBggrBgEFBQcBCAEB/wQNMAugCTAH AgEuAgIrVjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAedGoogRr0FVz5dDTu+Y0gvuH/THnbiKS2HRmc3nYL HEE2WVL3xIvmf1Ou6JQciscucZj0HElr7mJoUG6roIXArK+jfBy1zmamyJZ+PX7C NrLbxuhSPH5CrK3lNdKVivA0DhMqBR4hNkyiUMXhi2X/rGBoych77YkrjdjcX8Hn yBEj+4ymI03lhJWJi6Cv8sG3Y3JP9O517AULvQkM9UB5RSeeYJzJ39j0BhEqGtuE xbDU1YFfsnXkJ2/CksrTYW24hnEBNu37qC06ctZd/Xw8syi4qUuURlomrNC9lZEp cQ76iZSjskgeGhhaSWyjfJ8tbCo9NV+Wv/KOsko49gCq -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:43 2025 by rpki-client