This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer File: 4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer (raw, json) Hash identifier: JU0qYN2OSJhp8EXT5HQ/jw5ZRSchNG+UjeEnPxA4V7Y= Subject key identifier: AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584BD970C4C6DD62215591C8A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Nov 2025 19:45:20 +0000 Certificate not after: Wed 05 May 2027 12:13:02 +0000 Subordinate resources: AS: 401637 IP: 23.149.164.0/24 IP: 2602:f71a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d9:70:c4:c6:dd:62:21:55:91:c8:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Nov 13 19:45:20 2025 GMT Not After : May 5 12:13:02 2027 GMT Subject: CN=4b13bba8-5260-44f5-8f00-3cdfc8b95aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:bf:db:66:8a:a9:19:80:7a:1d:8a:af:b0: 65:65:a0:bc:37:ee:e8:6c:06:cb:a9:4d:6e:b5:b2: 2f:c6:50:c0:4c:3e:dc:b7:0f:53:be:ca:5f:4b:90: 3b:be:95:ec:8e:24:b5:14:82:87:e4:d9:60:3f:6b: 16:6f:f6:82:d4:ca:23:bd:81:f3:56:08:16:6b:bb: 1f:8c:f2:40:61:60:d1:13:2b:bc:dc:2c:50:68:22: c2:a5:0f:ef:67:46:c1:7c:b2:1e:2c:03:6e:d9:33: e7:e2:7e:be:c4:c0:00:03:8f:95:21:44:26:6e:78: a6:a3:d5:74:23:52:a9:36:dc:4a:51:94:e7:ca:e9: a1:50:21:b6:78:74:59:f0:2b:84:05:89:a5:63:3f: 50:cf:fa:98:68:2c:21:64:67:7c:a4:47:ef:96:b3: bf:91:77:b8:19:b9:01:ce:93:1f:8c:f6:f1:eb:16: 2b:ed:2a:fe:fc:6c:4d:39:8e:2d:c8:55:d6:6c:d1: 68:79:ec:89:c9:c6:1c:c5:7f:bb:1c:45:26:7e:27: 41:3f:78:c5:60:0a:09:71:35:14:63:89:27:4a:e3: 6f:f3:9f:10:ba:39:fa:51:ef:a7:ea:83:4d:43:72: 60:1f:12:f0:47:72:1b:b5:c5:b5:d9:33:9a:d4:fd: 7e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.149.164.0/24 IPv6: 2602:f71a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401637 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:35:67:71:d5:97:5c:9c:5f:03:da:7f:17:48:54:61:9c:0c: ae:c9:90:ba:d3:b7:a4:cb:42:aa:d4:89:e2:9a:0f:87:b6:14: 66:df:87:70:85:30:6b:d3:88:18:9a:5d:78:b8:35:0a:63:76: 14:d3:b4:f0:31:86:43:ce:22:2b:e3:50:74:f8:90:91:f7:f7: ed:15:28:a3:cc:20:2b:9b:4e:52:f0:ce:ce:cc:6e:df:a9:dc: 49:17:66:cb:0b:b3:4c:27:b2:8c:89:8f:c8:04:59:ff:28:60: 0a:fe:bb:2c:5a:5e:c4:17:8d:1b:3a:d8:dd:00:e0:06:76:9b: 29:ce:74:50:10:e3:64:30:60:4b:24:b8:76:43:8d:76:9a:bd: 8e:6e:59:df:54:0b:df:e6:dd:f6:a8:ba:0a:3b:4f:a9:0a:c0: 35:df:4b:8c:5a:f5:f5:0a:c5:b9:86:50:f2:02:bf:bb:a5:e0: 58:57:bc:23:8c:b0:86:30:26:65:8a:a8:b6:b5:cd:a9:54:91: 89:9a:d9:78:87:55:28:6d:7e:58:31:44:73:86:98:68:65:a5: d1:75:c0:7f:cf:af:82:74:df:6b:40:3c:08:02:b6:71:92:e9: e7:2c:9b:43:3a:e5:62:83:a4:5c:b0:9a:da:76:31:9d:22:7d: 95:1a:af:32 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEvZcMTG3WIhVZHIqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTExMzE5NDUyMFoXDTI3MDUwNTEyMTMwMlowLzEtMCsGA1UEAxMk NGIxM2JiYTgtNTI2MC00NGY1LThmMDAtM2NkZmM4Yjk1YWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0i/22aKqRmAeh2Kr7BlZaC8N+7obAbLqU1u tbIvxlDATD7ctw9TvspfS5A7vpXsjiS1FIKH5NlgP2sWb/aC1MojvYHzVggWa7sf jPJAYWDREyu83CxQaCLCpQ/vZ0bBfLIeLANu2TPn4n6+xMAAA4+VIUQmbnimo9V0 I1KpNtxKUZTnyumhUCG2eHRZ8CuEBYmlYz9Qz/qYaCwhZGd8pEfvlrO/kXe4GbkB zpMfjPbx6xYr7Sr+/GxNOY4tyFXWbNFoeeyJycYcxX+7HEUmfidBP3jFYAoJcTUU Y4knSuNv858Qujn6Ue+n6oNNQ3JgHxLwR3IbtcW12TOa1P1+eQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKu47e5udNtLtUTbNEsjfV96WE4zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 YjEzYmJhOC01MjYwLTQ0ZjUtOGYwMC0zY2RmYzhiOTVhYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzRiMTNiYmE4LTUyNjAtNDRmNS04 ZjAwLTNjZGZjOGI5NWFhZS80YjEzYmJhOC01MjYwLTQ0ZjUtOGYwMC0zY2RmYzhi OTVhYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlaQwDgQCAAIwCAMGBCYC9xoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYg5TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtNWdx1ZdcnF8D2n8XSFRhnAyu yZC607eky0Kq1Inimg+HthRm34dwhTBr04gYml14uDUKY3YU07TwMYZDziIr41B0 +JCR9/ftFSijzCArm05S8M7OzG7fqdxJF2bLC7NMJ7KMiY/IBFn/KGAK/rssWl7E F40bOtjdAOAGdpspznRQEONkMGBLJLh2Q412mr2OblnfVAvf5t32qLoKO0+pCsA1 30uMWvX1CsW5hlDyAr+7peBYV7wjjLCGMCZliqi2tc2pVJGJmtl4h1UobX5YMURz hphoZaXRdcB/z6+CdN9rQDwIArZxkunnLJtDOuVig6RcsJradjGdIn2VGq8y -----END CERTIFICATE-----Generated at Tue Nov 25 05:03:29 2025 by rpki-client