This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer File: 4215bba6-51b0-41f8-9185-dda3367a8df5.cer (raw, json) Hash identifier: Js50BFUFy/IfBiCSepmrN3p4xIJLaiwbXYJVV1VMWSk= Subject key identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C565EEADD79E6137072236A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Dec 2025 13:45:24 +0000 Certificate not after: Sat 01 Apr 2028 12:45:24 +0000 Subordinate resources: AS: 11071 AS: 36143 AS: 40603 AS: 393299 IP: 64.37.0.0/20 IP: 64.255.80.0/20 IP: 70.34.0.0/20 IP: 74.120.32.0/21 IP: 74.123.12.0/22 IP: 104.152.60.0/22 IP: 104.192.200.0/22 IP: 148.59.162.0/23 IP: 162.246.100.0/22 IP: 192.136.36.0/24 IP: 192.238.0.0/24 IP: 195.85.106.0/23 IP: 198.181.62.0/23 IP: 199.66.116.0/22 IP: 204.17.177.0/24 IP: 204.52.243.0/24 IP: 204.130.209.0/24 IP: 206.81.76.0/22 IP: 207.50.144.0/20 IP: 208.65.0.0/22 IP: 208.66.32.0/21 IP: 208.88.8.0/22 IP: 209.33.192.0/18 IP: 2604:2540::/32 IP: 2604:2c00::/32 IP: 2606:5980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:5e:ea:dd:79:e6:13:70:72:23:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 28 13:45:24 2025 GMT Not After : Apr 1 12:45:24 2028 GMT Subject: CN=4215bba6-51b0-41f8-9185-dda3367a8df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:1a:34:b5:86:a4:c5:3c:5d:e3:77:9a:dd: 3c:b3:b9:f9:10:60:2f:17:1c:19:42:db:c8:f0:5a: f4:36:3d:e1:5e:4d:68:5a:24:63:fb:3a:25:6c:91: 64:3d:96:a1:e8:99:fb:a0:3c:c5:ee:7a:29:03:99: 8c:30:2d:c7:44:e8:4d:99:9e:32:31:67:1f:17:43: 3b:2b:c1:45:40:76:d3:d8:2f:45:56:6c:44:da:b8: 37:ae:80:5f:7a:88:c6:ac:82:dc:44:6d:91:58:a4: 6f:c5:4f:61:05:2e:14:64:cc:8d:e3:53:f9:d4:02: ba:20:b8:29:9e:d1:a6:eb:b0:d8:a8:89:a4:b4:3d: c3:6f:0e:e0:b0:c4:32:ca:5b:5d:90:58:a4:e3:15: 69:34:74:a0:17:06:9c:cc:f4:fe:2d:3f:0f:81:64: e6:c7:50:ea:99:bf:01:ae:55:d7:89:d7:95:84:68: 69:2e:5d:b3:6c:bc:42:0b:9c:33:9b:d5:9d:0a:35: 1a:ea:20:cc:bf:19:2e:67:f5:83:55:fe:bc:7f:42: a3:31:52:f6:1a:bf:1f:3f:bb:57:86:60:09:3a:a7: 02:df:3f:52:ea:af:4e:01:8a:b1:0c:1a:19:98:94: f1:9b:47:0c:87:1b:90:a3:5c:c2:0a:55:82:4f:82: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.37.0.0/20 64.255.80.0/20 70.34.0.0/20 74.120.32.0/21 74.123.12.0/22 104.152.60.0/22 104.192.200.0/22 148.59.162.0/23 162.246.100.0/22 192.136.36.0/24 192.238.0.0/24 195.85.106.0/23 198.181.62.0/23 199.66.116.0/22 204.17.177.0/24 204.52.243.0/24 204.130.209.0/24 206.81.76.0/22 207.50.144.0/20 208.65.0.0/22 208.66.32.0/21 208.88.8.0/22 209.33.192.0/18 IPv6: 2604:2540::/32 2604:2c00::/32 2606:5980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11071 36143 40603 393299 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bc:40:df:1b:b9:39:b8:46:f5:04:55:a9:bd:3b:fe:af:5d: f5:6b:36:e6:98:45:52:76:f2:b6:ae:32:f8:19:07:45:fa:c3: df:b1:a6:99:74:65:05:d2:1b:0a:00:0d:c2:9c:de:0f:b7:4b: d2:ce:7f:34:f4:65:7c:76:0b:66:35:23:e2:5e:54:48:6f:29: a0:4f:5a:88:16:ce:6d:b5:28:27:ed:f1:5c:30:e3:18:fb:fd: eb:9a:f4:bd:83:bc:69:4d:c5:e9:2c:89:ce:3b:40:e0:5c:6c: ee:2c:3d:1d:0b:27:49:78:51:a7:0f:b6:29:75:4a:a1:43:71: 86:7a:19:98:34:a5:29:55:ae:56:3f:18:da:73:52:b4:da:ab: 5d:d9:d2:a4:0f:f0:a6:7a:4e:34:81:31:34:c2:7b:7b:95:11: 9d:b9:77:ed:25:da:9a:84:c2:72:4d:69:c7:af:41:fa:b3:40: 74:6f:d3:1c:15:df:39:99:b0:06:d3:a2:51:35:08:b2:95:81: 7e:35:ab:6a:7b:6e:dd:9e:19:a5:98:6c:f2:8a:f8:5a:5d:d8: c5:41:1c:ef:81:ee:62:77:31:cc:d8:4f:48:58:fd:bb:56:ba: 27:94:04:5b:4a:19:76:d7:44:61:ab:ee:e4:72:e4:b9:b2:c3: 2e:a1:4d:39 -----BEGIN CERTIFICATE----- MIIHvTCCBqWgAwIBAgIUAQ0Mn0MoWExWXurdeeYTcHIjaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTIyODEzNDUyNFoXDTI4MDQwMTEyNDUyNFowLzEtMCsGA1UEAxMk NDIxNWJiYTYtNTFiMC00MWY4LTkxODUtZGRhMzM2N2E4ZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYcaNLWGpMU8XeN3mt08s7n5EGAvFxwZQtvI 8Fr0Nj3hXk1oWiRj+zolbJFkPZah6Jn7oDzF7nopA5mMMC3HROhNmZ4yMWcfF0M7 K8FFQHbT2C9FVmxE2rg3roBfeojGrILcRG2RWKRvxU9hBS4UZMyN41P51AK6ILgp ntGm67DYqImktD3Dbw7gsMQyyltdkFik4xVpNHSgFwaczPT+LT8PgWTmx1Dqmb8B rlXXideVhGhpLl2zbLxCC5wzm9WdCjUa6iDMvxkuZ/WDVf68f0KjMVL2Gr8fP7tX hmAJOqcC3z9S6q9OAYqxDBoZmJTxm0cMhxuQo1zCClWCT4Ky6wIDAQABo4IEzzCC BMswHQYDVR0OBBYEFCTIwxRN2GbOI+Y5SKvKxEVizzH+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 MjE1YmJhNi01MWIwLTQxZjgtOTE4NS1kZGEzMzY3YThkZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQyMTViYmE2LTUxYjAtNDFmOC05 MTg1LWRkYTMzNjdhOGRmNS80MjE1YmJhNi01MWIwLTQxZjgtOTE4NS1kZGEzMzY3 YThkZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgcQGCCsGAQUF BwEHAQH/BIG0MIGxMIGRBAIAATCBigMEBEAlAAMEBED/UAMEBEYiAAMEA0p4IAME Akp7DAMEAmiYPAMEAmjAyAMEAZQ7ogMEAqL2ZAMEAMCIJAMEAMDuAAMEAcNVagME Aca1PgMEAsdCdAMEAMwRsQMEAMw08wMEAMyC0QMEAs5RTAMEBM8ykAMEAtBBAAME A9BCIAMEAtBYCAMEBtEhwDAbBAIAAjAVAwUAJgQlQAMFACYELAADBQAmBlmAMCgG CCsGAQUFBwEIAQH/BBkwF6AVMBMCAis/AgMAjS8CAwCemwIDBgBTMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AG+8QN8buTm4RvUEVam9O/6vXfVrNuaYRVJ28rauMvgZB0X6w9+xppl0ZQXSGwoA DcKc3g+3S9LOfzT0ZXx2C2Y1I+JeVEhvKaBPWogWzm21KCft8Vww4xj7/eua9L2D vGlNxeksic47QOBcbO4sPR0LJ0l4UacPtil1SqFDcYZ6GZg0pSlVrlY/GNpzUrTa q13Z0qQP8KZ6TjSBMTTCe3uVEZ25d+0l2pqEwnJNacevQfqzQHRv0xwV3zmZsAbT olE1CLKVgX41q2p7bt2eGaWYbPKK+Fpd2MVBHO+B7mJ3MczYT0hY/btWuieUBFtK GXbXRGGr7uRy5Lmywy6hTTk= -----END CERTIFICATE-----Generated at Thu Jan 1 18:39:49 2026 by rpki-client