This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer File: 7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer (raw, json) Hash identifier: /J6swmaRBJWov5uBvHN2+zMvpRevllYM3vEk4x4mwZA= Subject key identifier: 3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BF773A8A7A131B3E3107929F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Nov 2025 13:45:24 +0000 Certificate not after: Sun 27 Feb 2028 13:45:24 +0000 Subordinate resources: AS: 10297 IP: 64.79.64.0/19 IP: 173.45.64.0/18 IP: 173.244.160.0/19 IP: 207.182.128.0/19 IP: 209.190.0.0/17 IP: 2001:1828::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:73:a8:a7:a1:31:b3:e3:10:79:29:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 24 13:45:24 2025 GMT Not After : Feb 27 13:45:24 2028 GMT Subject: CN=7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:ea:5d:3a:36:0d:23:55:f5:7c:d7:a2:51: 39:7f:c8:c9:40:64:43:d6:51:79:30:fe:26:5b:16: 87:a5:4e:25:64:f2:bf:5c:06:c2:57:c2:2f:8c:5a: f2:87:0e:bb:02:53:5e:27:99:4c:78:f8:c7:f3:d4: 4d:35:5e:8f:70:c6:22:88:98:b1:a1:69:49:fa:fb: d9:ee:88:3c:f6:05:5c:65:33:99:f9:d0:0e:1a:2d: 0d:9f:f1:2b:fa:e9:87:59:4e:2f:1a:d8:d0:5a:d5: b1:78:05:0a:e1:57:5b:70:ee:68:4f:54:52:bf:12: fa:b9:53:63:77:85:ed:33:b4:d8:35:0c:5e:42:b1: 07:0f:9a:12:42:8f:98:78:2b:c3:49:53:7d:c7:e9: a3:f9:7e:0a:33:7d:8b:38:f6:91:4d:70:d1:2b:e4: 01:c4:3e:e7:bc:1c:94:ae:dd:be:4f:fc:e6:80:ed: bd:a6:57:9a:d3:3d:0d:6f:86:c7:10:ec:fe:52:6e: 0f:d6:1f:fe:c7:b7:20:14:71:d5:5e:17:bf:55:8d: 2d:37:f7:52:fe:88:7e:ce:31:f5:d2:f1:6f:98:25: 17:79:99:36:a7:d8:ea:99:3f:3d:2f:8d:1a:63:96: fe:98:18:16:5b:df:13:9a:b0:bb:cf:70:d4:11:fe: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.79.64.0/19 173.45.64.0/18 173.244.160.0/19 207.182.128.0/19 209.190.0.0/17 IPv6: 2001:1828::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10297 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:52:43:cc:cd:8b:47:50:c0:83:58:e5:d4:82:e4:9d:a0:9a: 8b:7a:cc:9d:84:91:a7:4b:3a:b3:4c:75:ff:10:1a:51:6c:6b: 13:3e:ce:82:16:72:c7:f6:78:54:a9:7c:b0:16:35:aa:62:61: 8a:c5:3c:82:38:04:d2:aa:be:fc:c6:8b:5d:a2:7b:2d:fc:60: e9:a1:7e:e8:b4:e4:cd:9b:3c:12:f4:d8:ec:70:02:c6:51:77: 21:61:43:51:07:15:a7:55:4a:74:5d:17:0e:f5:50:8a:e7:f5: dd:18:e0:fb:ac:7e:f5:50:a6:d0:38:8c:01:ff:06:cf:10:b7: 8f:ef:76:cf:64:c4:83:40:a5:cb:ef:a4:22:5c:07:59:36:e7: 77:11:72:a0:f1:79:64:2a:61:98:04:f7:76:a9:c7:20:f7:8e: 3a:97:be:61:bd:47:d2:6e:d7:77:bb:e5:c1:c3:0b:b6:e0:4c: 19:b6:3a:b5:f6:bc:cc:8b:bd:f0:da:ef:e9:dd:7a:02:14:a8: 31:5f:aa:35:ab:39:53:c0:24:d3:75:78:72:3d:5b:7d:2b:5d: 27:31:a3:ae:4f:9d:bf:a0:89:8e:49:95:f9:d8:30:ca:d2:99: 9f:b4:bf:3c:4d:1d:95:9d:a6:52:f7:67:ae:95:85:9f:23:38: 79:29:fe:b5 -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEv3c6inoTGz4xB5KfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTEyNDEzNDUyNFoXDTI4MDIyNzEzNDUyNFowLzEtMCsGA1UEAxMk N2Y1ZTRjYWEtMmVhNy00NjAyLWEzYjAtNWM5ZmNkMmU1NGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rXqXTo2DSNV9XzXolE5f8jJQGRD1lF5MP4m WxaHpU4lZPK/XAbCV8IvjFryhw67AlNeJ5lMePjH89RNNV6PcMYiiJixoWlJ+vvZ 7og89gVcZTOZ+dAOGi0Nn/Er+umHWU4vGtjQWtWxeAUK4VdbcO5oT1RSvxL6uVNj d4XtM7TYNQxeQrEHD5oSQo+YeCvDSVN9x+mj+X4KM32LOPaRTXDRK+QBxD7nvByU rt2+T/zmgO29plea0z0Nb4bHEOz+Um4P1h/+x7cgFHHVXhe/VY0tN/dS/oh+zjH1 0vFvmCUXeZk2p9jqmT89L40aY5b+mBgWW98TmrC7z3DUEf6iRwIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFD34RfEmcaacVmzeQXo1KMWBr1JgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83 ZjVlNGNhYS0yZWE3LTQ2MDItYTNiMC01YzlmY2QyZTU0ZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzdmNWU0Y2FhLTJlYTctNDYwMi1h M2IwLTVjOWZjZDJlNTRlNi83ZjVlNGNhYS0yZWE3LTQ2MDItYTNiMC01YzlmY2Qy ZTU0ZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAVAT0ADBAatLUADBAWt9KADBAXPtoADBAfRvgAw DQQCAAIwBwMFACABGCgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICKDkwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAUlJDzM2LR1DAg1jl1ILknaCai3rMnYSRp0s6s0x1/xAaUWxrEz7OghZyx/Z4 VKl8sBY1qmJhisU8gjgE0qq+/MaLXaJ7Lfxg6aF+6LTkzZs8EvTY7HACxlF3IWFD UQcVp1VKdF0XDvVQiuf13Rjg+6x+9VCm0DiMAf8GzxC3j+92z2TEg0Cly++kIlwH WTbndxFyoPF5ZCphmAT3dqnHIPeOOpe+Yb1H0m7Xd7vlwcMLtuBMGbY6tfa8zIu9 8Nrv6d16AhSoMV+qNas5U8Ak03V4cj1bfStdJzGjrk+dv6CJjkmV+dgwytKZn7S/ PE0dlZ2mUvdnrpWFnyM4eSn+tQ== -----END CERTIFICATE-----Generated at Sun Nov 30 14:49:59 2025 by rpki-client