This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.cer File: 9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.cer (raw, json) Hash identifier: HFRqo12mrI7AU5d6eYxgif2PtHI5+CVgqx0V6OiDcoA= Subject key identifier: CC:B7:8F:43:D1:10:D5:D3:38:2B:9A:6E:B7:22:B1:98:9A:9C:13:34 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584BE996055F85A8F8434EFCA1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Nov 2025 14:33:19 +0000 Certificate not after: Thu 06 Jan 2028 20:05:27 +0000 Subordinate resources: AS: 395869 IP: 23.146.204.0/24 IP: 131.143.84.0/22 IP: 2602:f531::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e9:96:05:5f:85:a8:f8:43:4e:fc:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Nov 19 14:33:19 2025 GMT Not After : Jan 6 20:05:27 2028 GMT Subject: CN=9a798c1c-9f1e-43d6-a5e9-09da6d32b31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:95:0f:61:7d:16:6b:59:89:8a:2f:52:f1: 8c:87:86:79:19:09:ba:82:2c:c6:bc:c6:b5:27:92: e9:c5:1f:b2:42:e9:94:99:0b:ca:74:2c:b7:aa:01: 48:7d:42:6c:4a:a8:be:8d:80:bf:5e:c7:6e:bd:1f: 34:5c:a4:bd:f6:86:81:1e:30:fb:1e:aa:9a:b8:ef: 8c:ed:69:31:95:6a:15:80:b3:43:90:95:e9:be:5a: eb:fe:b1:90:2a:35:75:a7:9d:6d:83:60:66:e9:95: a2:5a:cb:25:cc:f2:d0:4e:b4:fd:8f:95:82:8b:5b: ec:aa:5f:e2:14:cd:07:2f:a2:39:dd:2e:a5:0b:ba: c4:fd:19:51:84:dd:0e:10:55:0a:3e:9e:19:8e:1c: f6:fc:d2:16:1b:ef:f6:fc:26:e0:a9:35:fd:24:61: ef:3a:55:67:25:ba:ec:19:18:ae:0a:14:a5:b4:39: 7a:9d:01:0d:74:08:6d:2b:36:fa:f2:50:64:e0:0e: 29:45:77:7d:50:56:d9:bc:24:82:db:30:39:42:75: 49:b8:f8:51:73:ab:76:e2:28:20:fc:8e:cf:5a:0f: 4a:be:a7:94:3d:5d:3d:34:23:db:ec:74:cb:61:0d: 91:8e:b6:af:7b:e8:1e:fc:38:6b:68:df:3a:e6:ea: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B7:8F:43:D1:10:D5:D3:38:2B:9A:6E:B7:22:B1:98:9A:9C:13:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.146.204.0/24 131.143.84.0/22 IPv6: 2602:f531::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395869 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:bc:c9:d0:c4:7d:8d:40:06:02:07:36:0b:c9:e9:a0:72:4a: 5e:7c:ba:99:ed:da:6f:a6:ee:9e:23:8e:02:ea:7c:21:55:62: dd:a3:64:1d:b2:95:ce:29:a7:3a:b5:45:47:f0:20:a3:42:b8: 27:d5:a8:e5:2e:d2:58:af:be:6d:83:66:5e:49:fa:c8:58:48: 81:08:31:a3:89:c3:c4:9c:63:bd:2c:9e:56:7f:cb:3f:29:5e: 3b:99:94:04:67:98:6b:ef:9b:e4:b9:e5:09:aa:05:22:d3:50: 19:f9:ab:0b:b3:d3:13:42:83:11:90:ca:2e:23:ec:d3:79:80: f7:6f:a3:25:2c:82:f5:1c:a3:30:35:c9:58:29:31:2a:80:d1: a1:c7:ae:13:f7:d2:c1:0c:fc:71:c6:a7:d8:ca:2b:d0:b4:d4: 9e:be:68:7d:58:37:48:a5:61:35:97:98:46:9b:74:6c:f2:19: 8c:b1:c5:16:c0:db:df:bc:39:18:97:51:0d:bd:d3:a7:78:39: 84:43:3b:f1:40:4a:64:5f:64:b6:d2:59:c1:49:f1:0e:3f:e0: 2f:07:5b:bd:6d:91:81:8d:4a:ad:f8:b7:52:cb:d0:86:17:f0: b6:64:be:57:90:73:be:da:8a:cc:92:e3:6d:4f:fb:a2:79:96: d4:09:7c:7a -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEvplgVfhaj4Q078ocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTExOTE0MzMxOVoXDTI4MDEwNjIwMDUyN1owLzEtMCsGA1UEAxMk OWE3OThjMWMtOWYxZS00M2Q2LWE1ZTktMDlkYTZkMzJiMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ+VD2F9FmtZiYovUvGMh4Z5GQm6gizGvMa1 J5LpxR+yQumUmQvKdCy3qgFIfUJsSqi+jYC/XsduvR80XKS99oaBHjD7HqqauO+M 7WkxlWoVgLNDkJXpvlrr/rGQKjV1p51tg2Bm6ZWiWsslzPLQTrT9j5WCi1vsql/i FM0HL6I53S6lC7rE/RlRhN0OEFUKPp4Zjhz2/NIWG+/2/CbgqTX9JGHvOlVnJbrs GRiuChSltDl6nQENdAhtKzb68lBk4A4pRXd9UFbZvCSC2zA5QnVJuPhRc6t24igg /I7PWg9KvqeUPV09NCPb7HTLYQ2Rjrave+ge/DhraN865urjGQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFMy3j0PRENXTOCuabrcisZianBM0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 YTc5OGMxYy05ZjFlLTQzZDYtYTVlOS0wOWRhNmQzMmIzMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzlhNzk4YzFjLTlmMWUtNDNkNi1h NWU5LTA5ZGE2ZDMyYjMxZS85YTc5OGMxYy05ZjFlLTQzZDYtYTVlOS0wOWRhNmQz MmIzMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkswDBAKDj1QwDgQCAAIwCAMGBCYC9TEAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYKXTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBvMnQxH2NQAYCBzYL yemgckpefLqZ7dpvpu6eI44C6nwhVWLdo2QdspXOKac6tUVH8CCjQrgn1ajlLtJY r75tg2ZeSfrIWEiBCDGjicPEnGO9LJ5Wf8s/KV47mZQEZ5hr75vkueUJqgUi01AZ +asLs9MTQoMRkMouI+zTeYD3b6MlLIL1HKMwNclYKTEqgNGhx64T99LBDPxxxqfY yivQtNSevmh9WDdIpWE1l5hGm3Rs8hmMscUWwNvfvDkYl1ENvdOneDmEQzvxQEpk X2S20lnBSfEOP+AvB1u9bZGBjUqt+LdSy9CGF/C2ZL5XkHO+2orMkuNtT/uieZbU CXx6 -----END CERTIFICATE-----Generated at Sat Nov 22 21:06:07 2025 by rpki-client