This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer File: ae85d24a-77d4-4cf7-80aa-c071199c2889.cer (raw, json) Hash identifier: d8dI+M3vAFMnvVU5yCG5JrsENMMnuLlogv0q2845gOQ= Subject key identifier: 7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584BC3CDFF9316E20DFEBBE3C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Nov 2025 01:45:23 +0000 Certificate not after: Wed 09 Feb 2028 01:45:23 +0000 Subordinate resources: AS: 395841 IP: 64.4.168.0/22 IP: 208.91.188.0/22 IP: 2604:7c0::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:cd:ff:93:16:e2:0d:fe:bb:e3:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 6 01:45:23 2025 GMT Not After : Feb 9 01:45:23 2028 GMT Subject: CN=ae85d24a-77d4-4cf7-80aa-c071199c2889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:62:3d:fa:dd:f6:91:a5:e7:23:2e:eb:fa: 6e:b8:b3:59:bc:16:e6:38:d9:ee:cc:9c:29:29:41: 7e:fb:1e:e4:ce:d6:19:82:42:af:6f:09:ff:b0:87: 3d:d4:fe:43:46:e3:bd:0d:f3:c6:c0:8a:1b:01:17: 89:e3:fd:11:7e:e6:27:c4:e1:40:5f:a5:bc:42:37: c1:27:b7:8a:65:32:c5:23:b5:bc:ab:9f:94:8a:ab: a2:3f:d3:5e:74:e1:8c:cd:90:01:fe:57:32:12:fd: ab:94:f3:ce:ec:8c:fe:2e:41:c6:34:f8:d1:ff:49: 8a:a2:20:27:df:12:36:51:18:ee:84:90:a8:3e:19: cb:1f:24:7d:fe:c5:f3:ac:31:79:b8:5d:bb:db:9b: a7:b2:c8:d5:3e:c1:5a:cf:13:9c:d6:62:8b:89:7f: 9f:88:24:a3:07:7a:f3:ff:80:70:b7:88:75:43:11: f0:46:ea:b7:80:28:16:c2:e5:e2:21:ff:6c:cc:66: 84:9f:8a:93:6f:f3:0f:9e:5f:72:90:25:60:9c:d1: 1f:2a:59:da:07:b2:94:c2:8b:48:a6:a3:d6:bf:c2: af:41:3a:ae:7e:dc:0f:97:bf:92:30:a5:69:df:46: 6e:87:ca:d8:93:94:09:ca:72:2b:34:49:2c:d1:23: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.4.168.0/22 208.91.188.0/22 IPv6: 2604:7c0::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395841 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:57:92:5c:d2:34:0f:00:10:ec:36:7b:06:c1:47:f2:da:55: fa:04:e4:3e:0c:d3:c9:7d:ee:61:ca:98:5a:6e:5f:2b:f5:f9: e2:a2:f1:a6:f4:77:be:8a:55:a6:c1:9f:12:1d:f6:43:31:12: 95:37:bf:69:9c:f3:3f:bd:de:61:62:b3:72:ed:bf:c3:35:15: ee:3a:a2:4c:6c:00:d3:83:c6:d5:6d:7e:84:b7:1b:97:4c:c3: 82:22:ee:df:be:8d:17:eb:92:ce:64:91:94:1e:d7:18:7c:06: c4:1b:2d:01:08:50:9d:a9:de:fb:59:a6:1f:ce:84:4e:fb:cb: 75:ab:ac:f0:d0:62:0f:83:52:49:49:a6:7a:8c:c5:b6:b9:f7: d7:db:e9:c8:48:6e:32:a8:86:10:92:bc:0b:2c:db:1e:e1:52: b0:8f:9d:06:76:d0:24:a5:93:f2:27:ed:57:42:ee:56:f9:db: 8a:65:39:82:b3:5b:9d:55:5c:30:2f:a6:25:34:d0:58:03:3a: 59:1b:2b:e1:a4:f1:a6:7d:0f:57:a9:5e:de:5a:2f:69:a0:e4: 46:fd:08:6e:3e:3c:aa:a6:71:09:81:bd:43:3f:04:f0:ec:54: fb:ce:a2:6e:f7:1e:ab:ec:32:97:b3:91:29:2e:4e:3a:2e:4a: 1d:0c:8b:e6 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEvDzf+TFuIN/rvjyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTEwNjAxNDUyM1oXDTI4MDIwOTAxNDUyM1owLzEtMCsGA1UEAxMk YWU4NWQyNGEtNzdkNC00Y2Y3LTgwYWEtYzA3MTE5OWMyODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuptiPfrd9pGl5yMu6/puuLNZvBbmONnuzJwp KUF++x7kztYZgkKvbwn/sIc91P5DRuO9DfPGwIobAReJ4/0RfuYnxOFAX6W8QjfB J7eKZTLFI7W8q5+UiquiP9NedOGMzZAB/lcyEv2rlPPO7Iz+LkHGNPjR/0mKoiAn 3xI2URjuhJCoPhnLHyR9/sXzrDF5uF2725unssjVPsFazxOc1mKLiX+fiCSjB3rz /4Bwt4h1QxHwRuq3gCgWwuXiIf9szGaEn4qTb/MPnl9ykCVgnNEfKlnaB7KUwotI pqPWv8KvQTquftwPl7+SMKVp30Zuh8rYk5QJynIrNEks0SMEPQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFH0m49UksgqxUz+FOHEKirKX3wceMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h ZTg1ZDI0YS03N2Q0LTRjZjctODBhYS1jMDcxMTk5YzI4ODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04 MGFhLWMwNzExOTljMjg4OS9hZTg1ZDI0YS03N2Q0LTRjZjctODBhYS1jMDcxMTk5 YzI4ODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAJABKgDBALQW7wwDgQCAAIwCAMGBCYEB8AAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYKQTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaV5Jc0jQPABDsNnsG wUfy2lX6BOQ+DNPJfe5hyphabl8r9fniovGm9He+ilWmwZ8SHfZDMRKVN79pnPM/ vd5hYrNy7b/DNRXuOqJMbADTg8bVbX6EtxuXTMOCIu7fvo0X65LOZJGUHtcYfAbE Gy0BCFCdqd77WaYfzoRO+8t1q6zw0GIPg1JJSaZ6jMW2uffX2+nISG4yqIYQkrwL LNse4VKwj50GdtAkpZPyJ+1XQu5W+duKZTmCs1udVVwwL6YlNNBYAzpZGyvhpPGm fQ9XqV7eWi9poORG/QhuPjyqpnEJgb1DPwTw7FT7zqJu9x6r7DKXs5EpLk46Lkod DIvm -----END CERTIFICATE-----Generated at Sat Dec 6 06:41:42 2025 by rpki-client