This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer File: 2ce98e57-da60-49a3-b167-e6998e0d2945.cer (raw, json) Hash identifier: aTDk8Bm1nWShNVFNqNpr/2onJeAxeK5JFMaMK8GvjXg= Subject key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584BE700EE6FDCEACDD726304600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Nov 2025 16:21:18 +0000 Certificate not after: Wed 05 Jan 2028 23:23:15 +0000 Subordinate resources: AS: 13716 IP: 192.251.177.0/24 IP: 204.152.232.0/21 IP: 2604:29a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e7:00:ee:6f:dc:ea:cd:d7:26:30:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Nov 18 16:21:18 2025 GMT Not After : Jan 5 23:23:15 2028 GMT Subject: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:e5:59:8c:53:ed:cf:5f:29:1b:a6:71:05: 87:ec:57:65:aa:b1:0d:9f:9e:9e:5d:91:13:45:5d: 5e:df:5b:00:6e:04:4f:df:ed:68:35:2d:2b:11:81: 9b:ec:6a:de:4c:70:27:c9:d3:26:fa:f1:7d:41:b3: de:8d:69:b8:be:08:c7:4f:97:78:14:32:f8:97:6f: cf:cb:cf:26:98:2b:14:88:88:a4:5f:a0:71:f8:6d: 6c:ab:ac:66:e9:17:48:9f:d5:11:d7:16:16:d7:ac: 48:2d:f7:05:ea:85:6f:b8:43:d1:c9:b7:85:71:fd: 47:a9:e3:9f:de:52:20:25:7c:70:b4:8e:dc:ff:41: 6e:30:80:eb:2e:0f:33:32:79:bc:73:8c:6c:ab:33: 62:ea:d4:ef:af:a3:cc:f4:43:93:2b:9f:9c:d4:38: 85:eb:17:0b:1f:fb:07:7f:87:3e:39:d5:4e:af:66: a7:66:f3:ff:e6:ce:8d:51:21:06:98:f5:45:6e:df: 1a:2a:3c:d6:3c:12:50:30:e9:21:72:1e:fe:a1:d6: 11:90:fa:43:17:5f:68:cf:63:70:3f:e3:1c:de:15: 8e:ae:b5:9e:fc:d0:c2:88:d3:92:3e:ea:f7:79:de: c3:f1:6b:bc:2f:f7:a6:95:a4:c3:7f:f1:22:2d:81: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.251.177.0/24 204.152.232.0/21 IPv6: 2604:29a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13716 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:b3:e9:02:9e:64:66:e5:24:62:d9:ff:ea:75:1d:18:42:f9: cf:67:05:54:45:04:90:f8:d3:89:e7:d5:66:ad:81:3b:c1:4d: 52:4b:06:b9:73:bb:34:bd:3b:71:19:02:d5:e8:83:59:fd:0d: ff:a6:ee:8c:d5:59:9e:ed:c9:95:0d:e1:a7:b8:1c:35:b7:ef: 43:75:fd:58:ac:6e:17:9e:4f:14:63:1c:bc:76:bc:ff:77:cc: c0:8f:3b:a8:96:86:78:d4:43:a3:6e:42:5c:09:0a:a6:a2:6f: 6c:b8:5c:8f:5c:36:8f:d4:30:79:87:e6:d1:26:40:cd:24:2e: f1:66:86:f5:95:98:60:53:98:dc:59:7b:e8:e5:37:38:95:66: 92:72:30:db:b3:25:fb:5c:21:88:8e:4f:dc:cd:b8:fe:12:16: 14:ac:6a:10:a5:e6:c8:25:3f:a7:65:e5:33:ba:3f:a5:01:5e: c7:54:39:6e:38:f3:ff:56:7d:da:be:cf:3c:3f:3d:29:56:a4: d1:75:2b:9b:b2:a7:de:0e:13:85:bc:ef:6c:be:43:4f:a7:9f: 51:29:11:93:56:0b:89:1e:e8:28:cb:7d:d9:09:33:dc:ce:3c: a6:ca:71:1f:e2:07:8c:65:18:e2:76:db:3d:2a:50:ec:99:2b: 8c:dc:95:07 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEvnAO5v3OrN1yYwRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTExODE2MjExOFoXDTI4MDEwNTIzMjMxNVowLzEtMCsGA1UEAxMk MmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQyOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zflWYxT7c9fKRumcQWH7FdlqrENn56eXZET RV1e31sAbgRP3+1oNS0rEYGb7GreTHAnydMm+vF9QbPejWm4vgjHT5d4FDL4l2/P y88mmCsUiIikX6Bx+G1sq6xm6RdIn9UR1xYW16xILfcF6oVvuEPRybeFcf1HqeOf 3lIgJXxwtI7c/0FuMIDrLg8zMnm8c4xsqzNi6tTvr6PM9EOTK5+c1DiF6xcLH/sH f4c+OdVOr2anZvP/5s6NUSEGmPVFbt8aKjzWPBJQMOkhch7+odYRkPpDF19oz2Nw P+Mc3hWOrrWe/NDCiNOSPur3ed7D8Wu8L/emlaTDf/EiLYGpoQIDAQABo4IELzCC BCswHQYDVR0OBBYEFEG6WZkHbx4H0O/m2MiIoNtAtT15MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y Y2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzJjZTk4ZTU3LWRhNjAtNDlhMy1i MTY3LWU2OTk4ZTBkMjk0NS8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUw ZDI5NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBADA+7EDBAPMmOgwDQQCAAIwBwMFACYEKaAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICNZQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAu7PpAp5kZuUkYtn/6nUd GEL5z2cFVEUEkPjTiefVZq2BO8FNUksGuXO7NL07cRkC1eiDWf0N/6bujNVZnu3J lQ3hp7gcNbfvQ3X9WKxuF55PFGMcvHa8/3fMwI87qJaGeNRDo25CXAkKpqJvbLhc j1w2j9QweYfm0SZAzSQu8WaG9ZWYYFOY3Fl76OU3OJVmknIw27Ml+1whiI5P3M24 /hIWFKxqEKXmyCU/p2XlM7o/pQFex1Q5bjjz/1Z92r7PPD89KVak0XUrm7Kn3g4T hbzvbL5DT6efUSkRk1YLiR7oKMt92Qkz3M48pspxH+IHjGUY4nbbPSpQ7JkrjNyV Bw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:05:15 2025 by rpki-client