This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer File: 25422be5-720b-40bc-8a4d-02579ec1bead.cer (raw, json) Hash identifier: Zdyck5E6el3/LvOGjYtK1qhlBHkk6/Lancn4bII4HuU= Subject key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C565EEAF29DDBB1D22DFE4440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Dec 2025 13:45:24 +0000 Certificate not after: Sat 01 Apr 2028 12:45:24 +0000 Subordinate resources: AS: 63447 IP: 104.245.200.0/22 IP: 204.107.204.0/24 IP: 2602:ff98::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:5e:ea:f2:9d:db:b1:d2:2d:fe:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 28 13:45:24 2025 GMT Not After : Apr 1 12:45:24 2028 GMT Subject: CN=25422be5-720b-40bc-8a4d-02579ec1bead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:d1:75:61:49:36:6a:a3:40:78:ec:13:74: fa:8a:95:4d:f8:32:47:a5:a2:17:84:33:61:43:9d: eb:6a:69:f1:cd:70:bc:9a:2d:09:68:b1:7b:16:46: 78:3c:5e:8c:37:64:fd:1d:35:4d:f6:04:6f:55:bd: 2a:8c:7d:6a:c6:77:95:74:8c:3b:1c:54:eb:5f:5d: d6:24:e4:76:b9:b3:34:5b:30:4f:c5:2b:06:61:9b: cb:96:89:54:45:ca:4e:7e:4c:45:c2:dc:f8:c3:a7: cc:95:26:fa:93:71:0f:48:8d:88:ac:74:90:d3:32: 24:5d:97:2a:68:ca:bb:31:f6:f5:9c:fe:66:65:5c: 1b:3b:c1:f8:e9:a0:cd:0f:3c:b0:5a:d9:48:dd:53: 95:f5:34:aa:fa:94:54:f7:da:80:11:06:ce:2e:57: 99:a5:21:31:15:95:48:e3:0a:12:2c:94:c2:13:d0: 86:ca:22:5a:fa:4c:2a:48:3a:bd:83:2b:64:1a:9d: 6c:84:56:c5:00:55:4c:99:c8:a6:b3:fb:5f:6e:33: 1a:67:c1:00:5c:1f:d3:27:92:c1:89:84:a6:09:df: 92:92:9b:fc:88:29:7b:26:61:db:e8:4c:07:3f:f2: 22:ec:d3:18:9f:4e:a7:ad:9a:b0:fe:4b:64:d8:7f: 21:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 104.245.200.0/22 204.107.204.0/24 IPv6: 2602:ff98::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63447 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1e:42:41:fc:b8:22:2c:79:ac:16:dd:8d:08:d5:8a:d0:ce: 55:a2:c2:2e:c2:b5:d8:48:de:b1:d3:ed:89:76:18:fe:1f:a4: de:01:ac:0b:88:2d:71:38:02:ff:ed:7e:06:9a:de:0a:4f:49: de:12:61:19:31:90:4d:27:f2:16:9e:63:25:0a:48:73:52:37: cf:f7:48:3d:9e:61:bd:e2:11:cb:cf:2b:4e:91:a9:93:90:a3: a4:42:ba:9a:18:4a:c0:5a:f3:59:e1:b5:a6:35:bb:83:82:d6: dd:c9:b4:8d:1a:a0:c7:0b:8b:9b:22:eb:7e:8a:47:1c:42:df: 75:04:dc:0e:2e:e8:b7:64:5f:2e:2e:80:a3:10:d5:86:b3:ac: 7f:9c:34:9f:19:c9:ac:04:7e:6b:8c:f6:e5:06:a8:b0:d1:be: ee:45:1f:65:80:a5:d2:8a:81:a0:23:5e:85:ee:61:96:65:98: 62:d7:43:61:e7:68:75:a6:8e:e5:c5:a1:21:b4:88:a6:f2:5d: 0a:0f:64:8b:4c:51:2f:1e:ae:ff:6e:d5:77:6d:ff:7f:92:a8: 5e:4e:b5:ed:f0:3b:06:50:1f:22:28:40:cc:f2:60:66:e7:8d: ec:77:2d:40:a8:d3:da:fe:e0:49:f6:99:38:79:40:5a:3c:98: d2:7f:f1:48 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWExWXuryndux0i3+REAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTIyODEzNDUyNFoXDTI4MDQwMTEyNDUyNFowLzEtMCsGA1UEAxMk MjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFiZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtnRdWFJNmqjQHjsE3T6ipVN+DJHpaIXhDNh Q53ramnxzXC8mi0JaLF7FkZ4PF6MN2T9HTVN9gRvVb0qjH1qxneVdIw7HFTrX13W JOR2ubM0WzBPxSsGYZvLlolURcpOfkxFwtz4w6fMlSb6k3EPSI2IrHSQ0zIkXZcq aMq7Mfb1nP5mZVwbO8H46aDNDzywWtlI3VOV9TSq+pRU99qAEQbOLleZpSExFZVI 4woSLJTCE9CGyiJa+kwqSDq9gytkGp1shFbFAFVMmcims/tfbjMaZ8EAXB/TJ5LB iYSmCd+Skpv8iCl7JmHb6EwHP/Ii7NMYn06nrZqw/ktk2H8hiQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFM7Sly1HK9T5wJAgcNusujvVYmNqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y NTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzI1NDIyYmU1LTcyMGItNDBiYy04 YTRkLTAyNTc5ZWMxYmVhZC8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVj MWJlYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAJo9cgDBADMa8wwDgQCAAIwCAMGBCYC/5gAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD31zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwHkJB/LgiLHmsFt2N CNWK0M5VosIuwrXYSN6x0+2Jdhj+H6TeAawLiC1xOAL/7X4Gmt4KT0neEmEZMZBN J/IWnmMlCkhzUjfP90g9nmG94hHLzytOkamTkKOkQrqaGErAWvNZ4bWmNbuDgtbd ybSNGqDHC4ubIut+ikccQt91BNwOLui3ZF8uLoCjENWGs6x/nDSfGcmsBH5rjPbl Bqiw0b7uRR9lgKXSioGgI16F7mGWZZhi10Nh52h1po7lxaEhtIim8l0KD2SLTFEv Hq7/btV3bf9/kqheTrXt8DsGUB8iKEDM8mBm543sdy1AqNPa/uBJ9pk4eUBaPJjS f/FI -----END CERTIFICATE-----Generated at Wed Dec 31 21:05:06 2025 by rpki-client