This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc.cer File: 686dfae3-1a9a-4471-9592-9f404f78a8dc.cer (raw, json) Hash identifier: iJHiCi+hPwmXjgA66lyXY45y08aAzbxNVnXx+YxVIGE= Subject key identifier: 67:B6:B0:66:11:44:C4:30:E2:59:D0:39:C8:AD:D9:F4:F6:33:BA:AF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BEEEB603AB0BB8421EF66C990 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Nov 2025 12:24:20 +0000 Certificate not after: Wed 16 Feb 2028 21:55:16 +0000 Subordinate resources: IP: 204.154.108.0/24 IP: 2602:f4ca::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ee:eb:60:3a:b0:bb:84:21:ef:66:c9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 21 12:24:20 2025 GMT Not After : Feb 16 21:55:16 2028 GMT Subject: CN=686dfae3-1a9a-4471-9592-9f404f78a8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:eb:8c:93:38:51:15:85:44:f2:7a:2b:37:30: 12:ef:b4:9a:bc:72:a0:e9:42:f5:58:77:32:6a:f7: 73:aa:d0:b3:ec:6c:cc:75:d0:56:8a:3d:43:ea:af: 50:85:26:31:79:4e:8f:75:c3:c4:5f:db:e6:00:f5: ce:0e:d6:ea:81:fb:34:e7:6b:b3:00:8a:be:85:ca: 18:58:53:26:b6:01:89:88:b4:b4:ea:20:64:86:46: 5f:56:29:51:ac:ca:12:8c:db:8d:dd:76:e2:21:d9: 60:eb:24:c9:d9:16:8a:58:bd:dd:9f:7a:bf:f2:5c: cc:21:29:3d:d4:ea:86:4b:bf:f5:c0:32:9f:9d:a8: 86:a4:98:b1:2b:49:d4:cc:42:a1:24:b9:86:81:b8: 43:3e:c3:e7:fb:84:24:2d:56:17:4c:34:cf:da:2d: be:53:98:59:6f:9d:db:a7:19:04:8a:50:24:b0:93: 4a:a9:3a:e3:50:fc:f1:35:33:2d:39:19:a1:bf:42: 70:f7:e6:ae:53:e0:4e:0e:3b:60:69:9f:b4:20:0b: 4e:f3:df:c7:a5:e5:06:55:15:82:5c:f5:b2:39:5e: ac:fa:f3:59:31:9d:ef:05:08:63:33:d5:49:b3:03: 39:95:ef:2c:1d:6d:12:c8:78:a1:51:68:31:f7:86: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B6:B0:66:11:44:C4:30:E2:59:D0:39:C8:AD:D9:F4:F6:33:BA:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.154.108.0/24 IPv6: 2602:f4ca::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fb:68:71:f8:4e:c4:b4:1f:2c:55:3c:e4:10:52:28:76:ef: 3d:5a:6c:18:c9:07:ec:1c:45:10:06:8f:35:1a:4f:70:eb:79: cf:ae:6b:33:ac:0d:38:4b:13:8d:ae:44:af:10:ad:1e:a2:ba: a3:2f:bb:d4:68:68:ff:51:18:cc:f4:46:da:b8:74:17:6b:87: 43:60:ec:dc:99:2d:c8:91:a6:e5:68:4a:4d:6d:af:15:a7:f9: 48:16:03:12:f0:38:1d:41:5e:d1:df:48:72:dc:98:88:34:46: df:15:50:02:f1:ca:c9:ba:a8:81:e7:83:4d:69:de:e2:97:e4: 9b:0b:89:fd:c4:2c:6d:43:aa:83:a8:dd:ad:0d:5d:eb:39:d9: 4c:8e:ef:3f:8b:4c:1d:c5:8e:19:c6:a9:4f:dc:7e:b7:27:75: ac:83:e1:68:04:6f:db:1e:ca:0e:11:f9:90:29:5a:cf:a1:41: ee:e6:96:7b:36:64:34:fa:74:81:c3:d0:d8:8d:96:c2:48:fc: a7:a9:2e:32:3a:a5:4a:13:21:7c:6c:a1:11:f1:70:5d:81:9a: d0:9f:f0:3e:90:79:fc:ab:a7:a0:88:d4:68:fe:78:3f:c9:d5: 4a:2a:e0:68:25:d1:16:32:68:8c:31:8a:7d:cd:d1:d3:9e:1e: 0b:7c:40:9e -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEvu62A6sLuEIe9myZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTEyMTEyMjQyMFoXDTI4MDIxNjIxNTUxNlowLzEtMCsGA1UEAxMk Njg2ZGZhZTMtMWE5YS00NDcxLTk1OTItOWY0MDRmNzhhOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uuMkzhRFYVE8norNzAS77SavHKg6UL1WHcy avdzqtCz7GzMddBWij1D6q9QhSYxeU6PdcPEX9vmAPXODtbqgfs052uzAIq+hcoY WFMmtgGJiLS06iBkhkZfVilRrMoSjNuN3XbiIdlg6yTJ2RaKWL3dn3q/8lzMISk9 1OqGS7/1wDKfnaiGpJixK0nUzEKhJLmGgbhDPsPn+4QkLVYXTDTP2i2+U5hZb53b pxkEilAksJNKqTrjUPzxNTMtORmhv0Jw9+auU+BODjtgaZ+0IAtO89/HpeUGVRWC XPWyOV6s+vNZMZ3vBQhjM9VJswM5le8sHW0SyHihUWgx94a/xwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFGe2sGYRRMQw4lnQOcit2fT2M7qvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82 ODZkZmFlMy0xYTlhLTQ0NzEtOTU5Mi05ZjQwNGY3OGE4ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4NmRmYWUzLTFhOWEtNDQ3MS05 NTkyLTlmNDA0Zjc4YThkYy82ODZkZmFlMy0xYTlhLTQ0NzEtOTU5Mi05ZjQwNGY3 OGE4ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADMmmwwDgQCAAIwCAMGACYC9MoAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGn7aHH4TsS0HyxVPOQQUih27z1abBjJB+wcRRAGjzUaT3Drec+uazOsDThLE42u RK8QrR6iuqMvu9RoaP9RGMz0Rtq4dBdrh0Ng7NyZLciRpuVoSk1trxWn+UgWAxLw OB1BXtHfSHLcmIg0Rt8VUALxysm6qIHng01p3uKX5JsLif3ELG1DqoOo3a0NXes5 2UyO7z+LTB3FjhnGqU/cfrcndayD4WgEb9seyg4R+ZApWs+hQe7mlns2ZDT6dIHD 0NiNlsJI/KepLjI6pUoTIXxsoRHxcF2BmtCf8D6Qefyrp6CI1Gj+eD/J1Uoq4Ggl 0RYyaIwxin3N0dOeHgt8QJ4= -----END CERTIFICATE-----Generated at Sun Nov 30 14:49:22 2025 by rpki-client