This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer File: f5b47d91-eb0d-4085-9bc2-452042c0b313.cer (raw, json) Hash identifier: ctGizvNkbPYH0IXx9I3AUxalk71wwDGd6lUQq5WfW3Q= Subject key identifier: DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C48ADF4033BBD2194414C3600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Dec 2025 16:03:20 +0000 Certificate not after: Tue 01 Feb 2028 01:45:23 +0000 Subordinate resources: AS: 31775 AS: 394868 IP: 23.174.0.0 -- 23.174.4.255 IP: 64.201.232.0/22 IP: 104.153.28.0/22 IP: 104.244.192.0/22 IP: 115.84.192.0/19 IP: 149.76.32.0/19 IP: 162.0.160.0/19 IP: 199.241.26.0/23 IP: 2605:9480::/32 IP: 2606:e780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:ad:f4:03:3b:bd:21:94:41:4c:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 23 16:03:20 2025 GMT Not After : Feb 1 01:45:23 2028 GMT Subject: CN=f5b47d91-eb0d-4085-9bc2-452042c0b313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:4d:38:5e:0f:c0:3f:7a:85:02:07:2c:58: fc:37:5f:ee:5e:74:cd:57:ca:11:bd:ae:17:44:27: bb:81:fa:08:89:57:81:d9:df:2b:59:b7:15:b3:df: 7a:e9:06:53:2c:d9:6a:9d:55:51:48:1b:51:55:8b: 60:7f:27:22:95:fa:a8:aa:95:84:81:20:ec:72:64: 70:44:f4:b8:59:fc:52:01:9e:a9:bd:d0:ce:23:1f: 28:16:47:89:32:b1:7a:e3:7a:8e:d2:f1:63:b1:c4: 0e:69:67:0d:a3:84:65:98:2d:00:dd:22:93:cf:b1: d2:36:68:7a:70:2e:e8:30:e5:b4:42:15:d3:92:27: d8:29:7a:5f:d0:11:79:ba:a9:c9:e7:0d:a4:1e:88: 47:14:29:02:80:24:b0:9d:81:00:40:93:62:f5:f9: d7:aa:bb:d9:99:09:05:30:a5:69:7c:cd:75:10:31: 4b:f8:ea:45:4a:18:f7:04:60:b0:65:16:35:ce:41: 0a:d5:36:82:37:8f:bd:89:16:91:fd:f3:df:9a:92: bb:2f:54:11:c0:22:58:14:00:6e:5e:60:80:f3:f6: 82:2d:c0:98:ed:49:46:c5:cd:5e:b4:68:60:fa:48: a0:34:5f:ba:9d:c9:41:ef:b0:53:22:29:e4:6d:5e: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.174.0.0-23.174.4.255 64.201.232.0/22 104.153.28.0/22 104.244.192.0/22 115.84.192.0/19 149.76.32.0/19 162.0.160.0/19 199.241.26.0/23 IPv6: 2605:9480::/32 2606:e780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31775 394868 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:55:77:81:e1:75:c1:4a:93:35:37:37:1e:4d:16:c9:42:50: ba:a2:fc:19:db:26:66:b6:dd:30:0f:f8:6e:8c:ed:e2:25:3c: 91:2a:d7:2f:03:b2:5d:21:01:2d:9c:04:58:49:a5:75:c7:62: 7d:6b:7f:da:a2:a5:b9:26:28:1c:af:13:54:1e:92:3a:f4:ee: d8:41:fb:9f:40:bb:e9:a0:9b:b6:dd:f1:9a:08:0e:2d:33:de: 46:c1:eb:7d:4c:02:83:a1:56:15:67:aa:6c:87:9c:0d:73:3c: 32:5c:50:b4:06:94:2c:d4:86:5c:f6:a7:1f:08:d1:32:7e:d7: fa:82:9a:45:bb:e0:53:0e:bc:df:8d:d7:3a:fd:fb:b5:13:68: fb:2d:f9:21:ea:83:a5:6f:26:92:6b:ab:22:a8:47:43:17:f4: 83:c1:42:92:3b:45:f1:12:33:09:09:0e:4e:f8:35:b0:9c:1a: d3:17:d0:c7:f2:2c:ef:34:c4:47:45:fb:7a:be:d1:c6:ce:90: 3f:a8:ef:91:ac:56:a8:c9:e9:ad:92:58:62:23:46:4b:c4:83: 35:28:98:43:9c:24:77:a4:99:3b:f5:17:62:eb:03:29:d4:7d: 63:44:e2:bf:67:03:f8:91:27:8a:06:62:8b:6a:2f:fb:27:bd: 94:81:06:fd -----BEGIN CERTIFICATE----- MIIHVDCCBjygAwIBAgIUAQ0Mn0MoWExIrfQDO70hlEFMNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTIyMzE2MDMyMFoXDTI4MDIwMTAxNDUyM1owLzEtMCsGA1UEAxMk ZjViNDdkOTEtZWIwZC00MDg1LTliYzItNDUyMDQyYzBiMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPBNOF4PwD96hQIHLFj8N1/uXnTNV8oRva4X RCe7gfoIiVeB2d8rWbcVs9966QZTLNlqnVVRSBtRVYtgfycilfqoqpWEgSDscmRw RPS4WfxSAZ6pvdDOIx8oFkeJMrF643qO0vFjscQOaWcNo4RlmC0A3SKTz7HSNmh6 cC7oMOW0QhXTkifYKXpf0BF5uqnJ5w2kHohHFCkCgCSwnYEAQJNi9fnXqrvZmQkF MKVpfM11EDFL+OpFShj3BGCwZRY1zkEK1TaCN4+9iRaR/fPfmpK7L1QRwCJYFABu XmCA8/aCLcCY7UlGxc1etGhg+kigNF+6nclB77BTIinkbV6MjwIDAQABo4IEZjCC BGIwHQYDVR0OBBYEFN6/AzzSozv5hka97a/cLiH1AMJwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m NWI0N2Q5MS1lYjBkLTQwODUtOWJjMi00NTIwNDJjMGIzMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Y1YjQ3ZDkxLWViMGQtNDA4NS05 YmMyLTQ1MjA0MmMwYjMxMy9mNWI0N2Q5MS1lYjBkLTQwODUtOWJjMi00NTIwNDJj MGIzMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwZgYIKwYBBQUH AQcBAf8EVzBVMD0EAgABMDcwCwMDAReuAwQAF64EAwQCQMnoAwQCaJkcAwQCaPTA AwQFc1TAAwQFlUwgAwQFogCgAwQBx/EaMBQEAgACMA4DBQAmBZSAAwUAJgbngDAe BggrBgEFBQcBCAEB/wQPMA2gCzAJAgJ8HwIDBgZ0MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHxVd4HhdcFK kzU3Nx5NFslCULqi/BnbJma23TAP+G6M7eIlPJEq1y8Dsl0hAS2cBFhJpXXHYn1r f9qipbkmKByvE1Qekjr07thB+59Au+mgm7bd8ZoIDi0z3kbB631MAoOhVhVnqmyH nA1zPDJcULQGlCzUhlz2px8I0TJ+1/qCmkW74FMOvN+N1zr9+7UTaPst+SHqg6Vv JpJrqyKoR0MX9IPBQpI7RfESMwkJDk74NbCcGtMX0MfyLO80xEdF+3q+0cbOkD+o 75GsVqjJ6a2SWGIjRkvEgzUomEOcJHekmTv1F2LrAynUfWNE4r9nA/iRJ4oGYotq L/snvZSBBv0= -----END CERTIFICATE-----Generated at Tue Dec 30 08:49:58 2025 by rpki-client