This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer File: 5d42a494-a697-43ad-93a4-e9456779ed9a.cer (raw, json) Hash identifier: YKuZybG9USp05ubEd3Z+Xpk14lVNbQuu7K22N+MYcX4= Subject key identifier: D8:20:80:25:0E:59:5F:0E:FC:52:D3:76:D6:77:CB:AA:0F:2D:09:E2 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AE6DB06C8A8935039DEED5F08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 22:18:00 +0000 Certificate not after: Sun 21 Nov 2027 23:18:00 +0000 Subordinate resources: AS: 32086 IP: 204.115.254.0/23 IP: 2620:44:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:db:06:c8:a8:93:50:39:de:ed:5f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 18 22:18:00 2025 GMT Not After : Nov 21 23:18:00 2027 GMT Subject: CN=5d42a494-a697-43ad-93a4-e9456779ed9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:49:e1:6c:52:f8:12:22:9b:40:09:68:a0: fa:f4:d0:07:53:f7:e4:2a:f6:73:3f:8a:f6:6e:7b: a0:3b:64:b8:4c:a1:60:4f:99:af:43:14:8b:50:a6: e4:fc:a1:11:4b:ca:65:d5:0a:08:ea:1c:a4:ba:71: b4:83:83:89:78:ec:df:dc:75:ad:d9:1c:55:60:0b: d2:45:37:4a:fa:4a:80:38:74:05:fa:e1:b0:c1:27: ad:82:f4:84:3e:d4:09:2b:b9:87:a0:72:d6:1f:0b: 9c:e8:ce:82:81:7a:88:5c:6b:76:2c:0b:ec:a4:ec: 09:b9:e2:fd:b0:17:d0:d2:79:76:92:5e:57:a7:ee: 4e:77:4f:a8:87:7b:ea:54:9c:d6:43:44:99:ac:3a: 88:e9:5a:7f:6b:0a:69:b0:e2:37:e6:1a:aa:7e:1a: dd:7a:3d:c5:aa:ef:19:ca:f1:fc:a3:2e:6c:db:c3: 43:24:4c:33:18:6f:f5:22:e7:eb:01:63:4b:bb:2e: 8a:05:1d:33:93:c8:0c:a1:21:02:7a:fb:af:90:d8: 2e:4a:84:01:92:08:f0:ed:ad:c0:c1:d3:2e:3c:ab: 97:a9:81:e5:20:5f:84:f4:df:1b:6e:76:14:8a:fe: 87:62:05:1a:ca:47:41:fb:57:43:12:10:71:07:f3: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:20:80:25:0E:59:5F:0E:FC:52:D3:76:D6:77:CB:AA:0F:2D:09:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 204.115.254.0/23 IPv6: 2620:44:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32086 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:35:1d:11:69:a1:22:59:24:ef:03:5e:6e:c0:b6:ed:65:a3: 01:cc:98:5e:18:26:8e:ed:82:4c:40:88:5e:3d:63:2e:c1:28: ad:a9:26:46:97:f2:ee:cc:08:21:e7:a6:e5:b2:bb:e3:8a:2c: b5:d2:c1:2e:ef:3e:62:9f:3d:de:56:f8:22:37:f2:03:3d:09: 6e:ea:3d:db:e3:97:15:db:7e:28:f7:a7:af:e7:f1:75:8b:18: 1b:b5:f4:ab:0b:de:b4:5f:62:88:64:e1:b5:b2:19:dc:7f:03: 76:11:c0:7f:0a:1d:dd:c7:2b:6b:c4:9b:84:a2:28:fa:31:15: 62:dc:4e:8d:3b:16:16:a2:f9:04:8c:61:83:e2:fa:ed:ff:38: 94:80:1f:2e:7a:82:08:52:9d:3a:b8:d7:10:24:09:5b:44:9c: 41:1b:0d:19:b7:8b:cc:a5:08:bd:a4:89:30:4f:56:13:ea:40: 4e:3f:9a:61:03:dd:ea:10:c2:a6:a3:7f:6f:81:21:d1:ca:0d: 6c:43:09:59:c1:07:16:3f:cd:cc:57:82:ef:50:ac:38:68:1b: 28:10:a5:00:65:42:59:72:7c:2d:e8:75:fd:0e:f1:7e:7b:62: 3c:c7:30:d8:e1:38:a5:70:a5:52:9b:d6:16:a7:d2:a6:da:62: 28:25:0f:56 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErm2wbIqJNQOd7tXwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxODIyMTgwMFoXDTI3MTEyMTIzMTgwMFowLzEtMCsGA1UEAxMk NWQ0MmE0OTQtYTY5Ny00M2FkLTkzYTQtZTk0NTY3NzllZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArptJ4WxS+BIim0AJaKD69NAHU/fkKvZzP4r2 bnugO2S4TKFgT5mvQxSLUKbk/KERS8pl1QoI6hykunG0g4OJeOzf3HWt2RxVYAvS RTdK+kqAOHQF+uGwwSetgvSEPtQJK7mHoHLWHwuc6M6CgXqIXGt2LAvspOwJueL9 sBfQ0nl2kl5Xp+5Od0+oh3vqVJzWQ0SZrDqI6Vp/awppsOI35hqqfhrdej3Fqu8Z yvH8oy5s28NDJEwzGG/1IufrAWNLuy6KBR0zk8gMoSECevuvkNguSoQBkgjw7a3A wdMuPKuXqYHlIF+E9N8bbnYUiv6HYgUaykdB+1dDEhBxB/P1LQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNgggCUOWV8O/FLTdtZ3y6oPLQniMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 ZDQyYTQ5NC1hNjk3LTQzYWQtOTNhNC1lOTQ1Njc3OWVkOWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzVkNDJhNDk0LWE2OTctNDNhZC05 M2E0LWU5NDU2Nzc5ZWQ5YS81ZDQyYTQ5NC1hNjk3LTQzYWQtOTNhNC1lOTQ1Njc3 OWVkOWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAHMc/4wDwQCAAIwCQMHACYgAESAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJ9VjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6NR0RaaEiWSTvA15uwLbtZaMB zJheGCaO7YJMQIhePWMuwSitqSZGl/LuzAgh56blsrvjiiy10sEu7z5inz3eVvgi N/IDPQlu6j3b45cV234o96ev5/F1ixgbtfSrC960X2KIZOG1shncfwN2EcB/Ch3d xytrxJuEoij6MRVi3E6NOxYWovkEjGGD4vrt/ziUgB8ueoIIUp06uNcQJAlbRJxB Gw0Zt4vMpQi9pIkwT1YT6kBOP5phA93qEMKmo39vgSHRyg1sQwlZwQcWP83MV4Lv UKw4aBsoEKUAZUJZcnwt6HX9DvF+e2I8xzDY4TilcKVSm9YWp9Km2mIoJQ9W -----END CERTIFICATE-----Generated at Sat Nov 22 21:04:39 2025 by rpki-client