This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer File: b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer (raw, json) Hash identifier: SZCtSCdThaCF6EO0JTT0EgCoQGO2pfXUrrydViq6PaI= Subject key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584C4942DC1C26C50E2AFD0DDD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Dec 2025 21:03:22 +0000 Certificate not after: Tue 07 Dec 2027 14:03:06 +0000 Subordinate resources: AS: 33165 AS: 62943 IP: 64.111.32.0 -- 64.111.34.255 IP: 64.111.36.0/24 IP: 64.111.40.0/24 IP: 64.111.46.0/24 IP: 64.111.48.0/21 IP: 64.111.57.0/24 IP: 64.111.62.0/24 IP: 65.255.131.0/24 IP: 65.255.139.0/24 IP: 65.255.141.0 -- 65.255.143.255 IP: 67.221.192.0/24 IP: 67.221.199.0/24 IP: 67.221.207.0/24 IP: 67.221.217.0/24 IP: 67.221.219.0 -- 67.221.223.255 IP: 69.27.196.0/24 IP: 69.27.198.0/24 IP: 69.27.201.0 -- 69.27.205.255 IP: 69.27.207.0/24 IP: 69.27.217.0 -- 69.27.223.255 IP: 69.55.128.0/19 IP: 104.192.156.0/22 IP: 104.255.109.0 -- 104.255.111.255 IP: 137.239.160.0/19 IP: 162.219.60.0/22 IP: 162.253.60.0 -- 162.253.62.255 IP: 170.52.48.0 -- 170.52.59.255 IP: 192.190.136.0/21 IP: 199.21.92.0/23 IP: 207.174.224.0/23 IP: 207.174.228.0 -- 207.174.233.255 IP: 209.152.131.0 -- 209.152.134.255 IP: 209.152.136.0/24 IP: 209.152.138.0 -- 209.152.141.255 IP: 209.152.144.0/24 IP: 209.152.146.0/23 IP: 209.152.149.0/24 IP: 209.152.151.0/24 IP: 209.152.158.0/23 IP: 216.145.136.0 -- 216.145.142.255 IP: 216.145.144.0/24 IP: 216.145.147.0/24 IP: 216.145.156.0/24 IP: 216.146.248.0/24 IP: 216.213.32.0/20 IP: 2604:2980::/32 IP: 2607:f4f8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:49:42:dc:1c:26:c5:0e:2a:fd:0d:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Dec 23 21:03:22 2025 GMT Not After : Dec 7 14:03:06 2027 GMT Subject: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:98:1d:86:9d:13:cb:12:9a:2c:10:69:2f: 81:13:1c:53:a4:55:0f:3a:6e:45:e2:19:b8:ba:6f: 92:fa:b2:00:a5:e6:d7:f3:ae:e3:e9:76:d1:c2:6d: 85:a1:a4:74:c8:71:1c:9f:d6:58:07:24:c9:a4:06: 89:3a:66:56:7b:61:34:d7:3d:ea:5c:fa:4f:75:e0: 50:ea:08:5b:26:c8:c9:a8:c9:61:e8:86:a9:5f:13: 89:ca:e4:be:26:fa:71:fd:27:8a:44:07:41:f0:e2: 20:6c:ef:ed:bf:9a:63:e3:ba:4c:b7:44:81:69:6b: 82:ff:80:9e:2e:5c:74:2d:0c:82:42:7e:84:c4:59: 7f:6d:1d:35:54:88:49:97:16:fc:f1:8b:e6:8f:94: 11:4e:90:a2:8c:72:88:d9:36:fd:0c:30:8d:a5:ca: 5f:a8:e8:30:5d:06:76:2a:79:67:e1:53:e1:74:4d: 2e:42:08:70:00:28:b0:b3:fd:77:d3:26:9a:ce:93: ae:e1:66:b4:ee:86:62:a9:e0:16:78:4f:5b:fe:7c: fa:5d:aa:7c:3b:f7:67:e0:4f:77:37:b5:1e:1e:ce: d3:14:75:01:08:e9:42:99:4d:4d:35:e8:d3:93:2c: 61:b2:ea:bf:3e:f6:30:1e:c3:ab:9b:87:4f:70:ee: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 64.111.32.0-64.111.34.255 64.111.36.0/24 64.111.40.0/24 64.111.46.0/24 64.111.48.0/21 64.111.57.0/24 64.111.62.0/24 65.255.131.0/24 65.255.139.0/24 65.255.141.0-65.255.143.255 67.221.192.0/24 67.221.199.0/24 67.221.207.0/24 67.221.217.0/24 67.221.219.0-67.221.223.255 69.27.196.0/24 69.27.198.0/24 69.27.201.0-69.27.205.255 69.27.207.0/24 69.27.217.0-69.27.223.255 69.55.128.0/19 104.192.156.0/22 104.255.109.0-104.255.111.255 137.239.160.0/19 162.219.60.0/22 162.253.60.0-162.253.62.255 170.52.48.0-170.52.59.255 192.190.136.0/21 199.21.92.0/23 207.174.224.0/23 207.174.228.0-207.174.233.255 209.152.131.0-209.152.134.255 209.152.136.0/24 209.152.138.0-209.152.141.255 209.152.144.0/24 209.152.146.0/23 209.152.149.0/24 209.152.151.0/24 209.152.158.0/23 216.145.136.0-216.145.142.255 216.145.144.0/24 216.145.147.0/24 216.145.156.0/24 216.146.248.0/24 216.213.32.0/20 IPv6: 2604:2980::/32 2607:f4f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33165 62943 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ad:79:d6:5a:1c:9e:8b:5d:b4:c6:e4:f5:64:6d:b0:6e:10: 0a:84:13:ec:3e:1a:b4:5b:94:c0:9c:0e:c8:e3:18:18:76:8f: 50:72:fe:c0:5f:d4:f9:3c:61:e4:24:78:a8:87:8f:c9:dd:80: d2:41:83:fc:95:cb:c4:1f:01:16:3b:d2:5d:6e:f3:32:f5:82: 1b:28:f5:95:10:a6:01:d9:c7:15:9f:b7:23:1a:93:55:51:a8: c4:b1:bc:41:18:21:0e:90:65:ea:0c:8e:2a:2a:ff:85:72:84: a8:24:0e:d3:7e:24:b4:fd:a5:3c:0c:12:f9:43:9b:40:35:a1: d0:b9:06:5d:be:94:de:d8:65:d2:81:56:db:fe:5d:d1:46:28: da:fa:96:35:c3:19:3d:9f:14:87:f0:ca:db:f8:63:83:d9:3f: e5:8d:27:cf:77:ea:a4:2c:cb:d7:60:a7:dc:6a:85:30:43:62: e8:32:b2:61:af:ee:32:e3:07:08:53:db:8c:43:06:a2:a4:7c: 9b:e3:47:b2:99:0b:6f:a1:56:56:b2:b0:10:12:69:d8:47:38: eb:c0:08:df:9a:71:96:a2:2a:94:03:1f:02:44:89:0c:ac:77: 7a:58:f1:fd:95:dc:7c:e5:e3:dc:86:2c:35:eb:cb:36:2f:c6: b9:49:a8:1f -----BEGIN CERTIFICATE----- MIIIljCCB36gAwIBAgIUAQ0Mn0MoWExJQtwcJsUOKv0N3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTIyMzIxMDMyMloXDTI3MTIwNzE0MDMwNlowLzEtMCsGA1UEAxMk YjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2YyYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj6YHYadE8sSmiwQaS+BExxTpFUPOm5F4hm4 um+S+rIApebX867j6XbRwm2FoaR0yHEcn9ZYByTJpAaJOmZWe2E01z3qXPpPdeBQ 6ghbJsjJqMlh6IapXxOJyuS+Jvpx/SeKRAdB8OIgbO/tv5pj47pMt0SBaWuC/4Ce Llx0LQyCQn6ExFl/bR01VIhJlxb88Yvmj5QRTpCijHKI2Tb9DDCNpcpfqOgwXQZ2 Knln4VPhdE0uQghwACiws/130yaazpOu4Wa07oZiqeAWeE9b/nz6Xap8O/dn4E93 N7UeHs7TFHUBCOlCmU1NNejTkyxhsuq/PvYwHsOrm4dPcO4R1QIDAQABo4IFqDCC BaQwHQYDVR0OBBYEFKr0L19XCgKh9mAqlg5+bZGU/DYeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i N2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2I3ZTQzNTdlLTE3MGYtNGZiOS04 ODQ5LTNjODQyNTdmMmFkMi9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3 ZjJhZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwggGlBggrBgEF BQcBBwEB/wSCAZQwggGQMIIBdgQCAAEwggFuMAwDBAVAbyADBABAbyIDBABAbyQD BABAbygDBABAby4DBANAbzADBABAbzkDBABAbz4DBABB/4MDBABB/4swDAMEAEH/ jQMEBEH/gAMEAEPdwAMEAEPdxwMEAEPdzwMEAEPd2TAMAwQAQ93bAwQFQ93AAwQA RRvEAwQARRvGMAwDBABFG8kDBAFFG8wDBABFG88wDAMEAEUb2QMEBUUbwAMEBUU3 gAMEAmjAnDAMAwQAaP9tAwQEaP9gAwQFie+gAwQCots8MAwDBAKi/TwDBACi/T4w DAMEBKo0MAMEAqo0OAMEA8C+iAMEAccVXAMEAc+u4DAMAwQCz67kAwQBz67oMAwD BADRmIMDBADRmIYDBADRmIgwDAMEAdGYigMEAdGYjAMEANGYkAMEAdGYkgMEANGY lQMEANGYlwMEAdGYnjAMAwQD2JGIAwQA2JGOAwQA2JGQAwQA2JGTAwQA2JGcAwQA 2JL4AwQE2NUgMBQEAgACMA4DBQAmBCmAAwUAJgf0+DAfBggrBgEFBQcBCAEB/wQQ MA6gDDAKAgMAgY0CAwD13zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2rXnWWhyei120xuT1ZG2wbhAKhBPs Phq0W5TAnA7I4xgYdo9Qcv7AX9T5PGHkJHioh4/J3YDSQYP8lcvEHwEWO9JdbvMy 9YIbKPWVEKYB2ccVn7cjGpNVUajEsbxBGCEOkGXqDI4qKv+FcoSoJA7TfiS0/aU8 DBL5Q5tANaHQuQZdvpTe2GXSgVbb/l3RRija+pY1wxk9nxSH8Mrb+GOD2T/ljSfP d+qkLMvXYKfcaoUwQ2LoMrJhr+4y4wcIU9uMQwaipHyb40eymQtvoVZWsrAQEmnY RzjrwAjfmnGWoiqUAx8CRIkMrHd6WPH9ldx85ePchiw168s2L8a5Sagf -----END CERTIFICATE-----Generated at Thu Jan 8 00:15:07 2026 by rpki-client