This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5495f6bb-e0bd-4037-9f7a-4c4519532eda.cer File: 5495f6bb-e0bd-4037-9f7a-4c4519532eda.cer (raw, json) Hash identifier: l0bMvQVbSpvaKUeDqgVaOqvNGLt6spuGId9F7KwLn3g= Subject key identifier: F6:50:DA:FE:06:D6:A5:9E:E5:2B:FF:05:71:03:69:C8:2E:1D:DB:55 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BD9825F5D63BDE26C537C7700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5495f6bb-e0bd-4037-9f7a-4c4519532eda/5495f6bb-e0bd-4037-9f7a-4c4519532eda.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5495f6bb-e0bd-4037-9f7a-4c4519532eda/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Nov 2025 20:20:48 +0000 Certificate not after: Wed 16 Feb 2028 20:20:48 +0000 Subordinate resources: IP: 130.12.116.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d9:82:5f:5d:63:bd:e2:6c:53:7c:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 13 20:20:48 2025 GMT Not After : Feb 16 20:20:48 2028 GMT Subject: CN=5495f6bb-e0bd-4037-9f7a-4c4519532eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:b3:e0:17:af:0d:b1:9a:62:e4:8e:43:ec: f3:67:43:05:af:a5:06:13:48:81:dc:51:78:42:92: 2e:39:ce:27:8e:59:ba:11:4d:d1:df:de:3d:30:13: df:4f:37:65:01:69:fd:36:21:27:43:fa:d5:5c:15: 97:b9:7f:9d:da:4e:2f:1a:8b:0b:35:93:0f:b1:0e: a7:2a:48:1d:c7:ec:a2:0f:a6:68:24:a3:7c:17:7b: 38:94:49:1b:ba:7b:83:7a:fe:e4:bc:f4:a5:a3:39: 12:71:29:77:9d:1c:ed:3c:91:a1:6f:d9:86:7f:f3: fa:da:d3:d1:32:e8:60:5e:28:5b:b0:a1:f7:a8:2a: 6c:a4:d5:3f:5a:62:b8:9e:28:d5:75:46:64:93:08: 75:29:71:c0:11:14:90:94:1f:22:f3:c9:66:21:bd: 95:fb:72:7c:72:e1:ad:23:c9:a6:3f:4b:7e:a2:52: 32:00:bf:c8:66:1e:ed:e0:d7:80:e2:8a:90:04:96: 1a:c8:0d:0b:0c:d6:26:00:53:39:89:a9:70:e6:26: b6:34:26:c3:e1:bb:c7:48:ce:ae:0c:84:9b:2d:91: ec:5a:f5:da:d6:a7:cc:2c:9d:a6:89:d4:20:01:b3: 72:cb:94:b4:e7:30:dd:7f:01:54:42:6f:8c:4c:5e: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:50:DA:FE:06:D6:A5:9E:E5:2B:FF:05:71:03:69:C8:2E:1D:DB:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5495f6bb-e0bd-4037-9f7a-4c4519532eda/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5495f6bb-e0bd-4037-9f7a-4c4519532eda/5495f6bb-e0bd-4037-9f7a-4c4519532eda.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 130.12.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:69:02:69:5b:1b:8d:5a:47:cf:98:ee:9d:c2:92:cd:51:1a: 8b:c2:5a:5b:90:53:0b:c1:8f:d2:25:ae:0a:2f:41:c8:66:06: 4f:08:a6:57:2b:f5:8b:b3:cb:59:88:63:6c:9f:86:26:27:a2: d6:bb:e7:2f:74:21:64:4c:45:93:de:8d:4d:f0:38:9e:dd:18: ef:83:15:61:f2:00:3d:b6:2e:3a:ec:45:d1:89:99:d4:19:1a: 1f:28:98:12:ca:c7:76:d2:c2:95:4e:71:1f:20:85:51:7e:6d: 3e:61:cc:19:2c:ba:d3:82:d7:ab:91:06:e3:de:5a:f1:83:de: 0c:bf:31:4b:f8:56:f6:b3:c8:3e:da:53:46:cb:96:e9:46:69: 77:bd:9a:22:8d:72:bd:4f:18:c9:d0:e4:6c:0d:63:5e:dd:17: 2d:af:af:3d:30:35:87:df:7d:dd:70:12:b2:d1:61:2a:84:d9: 97:6f:ad:9d:ef:68:39:c2:e1:72:fa:eb:aa:d1:e6:48:9e:8e: e6:6e:71:07:c5:3c:5b:81:40:90:fd:62:31:e4:69:bc:5c:2f: 9c:30:35:72:a7:13:68:ac:a7:0a:1c:69:b5:f1:95:ba:f0:4b: e7:d8:ff:9b:07:27:0c:ae:74:3a:80:92:42:b0:f2:74:bc:5a: a9:13:53:6f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEvZgl9dY73ibFN8dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTExMzIwMjA0OFoXDTI4MDIxNjIwMjA0OFowLzEtMCsGA1UEAxMk NTQ5NWY2YmItZTBiZC00MDM3LTlmN2EtNGM0NTE5NTMyZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraqz4BevDbGaYuSOQ+zzZ0MFr6UGE0iB3FF4 QpIuOc4njlm6EU3R3949MBPfTzdlAWn9NiEnQ/rVXBWXuX+d2k4vGosLNZMPsQ6n Kkgdx+yiD6ZoJKN8F3s4lEkbunuDev7kvPSlozkScSl3nRztPJGhb9mGf/P62tPR MuhgXihbsKH3qCpspNU/WmK4nijVdUZkkwh1KXHAERSQlB8i88lmIb2V+3J8cuGt I8mmP0t+olIyAL/IZh7t4NeA4oqQBJYayA0LDNYmAFM5ialw5ia2NCbD4bvHSM6u DISbLZHsWvXa1qfMLJ2midQgAbNyy5S05zDdfwFUQm+MTF4AzwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPZQ2v4G1qWe5Sv/BXEDacguHdtVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 NDk1ZjZiYi1lMGJkLTQwMzctOWY3YS00YzQ1MTk1MzJlZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzU0OTVmNmJiLWUwYmQtNDAzNy05 ZjdhLTRjNDUxOTUzMmVkYS81NDk1ZjZiYi1lMGJkLTQwMzctOWY3YS00YzQ1MTk1 MzJlZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKCDHQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAh2kCaVsbjVpHz5juncKS zVEai8JaW5BTC8GP0iWuCi9ByGYGTwimVyv1i7PLWYhjbJ+GJiei1rvnL3QhZExF k96NTfA4nt0Y74MVYfIAPbYuOuxF0YmZ1BkaHyiYEsrHdtLClU5xHyCFUX5tPmHM GSy604LXq5EG495a8YPeDL8xS/hW9rPIPtpTRsuW6UZpd72aIo1yvU8YydDkbA1j Xt0XLa+vPTA1h9993XASstFhKoTZl2+tne9oOcLhcvrrqtHmSJ6O5m5xB8U8W4FA kP1iMeRpvFwvnDA1cqcTaKynChxptfGVuvBL59j/mwcnDK50OoCSQrDydLxaqRNT bw== -----END CERTIFICATE-----Generated at Tue Nov 25 14:25:55 2025 by rpki-client