This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer File: 8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer (raw, json) Hash identifier: SCQCVhnJXZO/dy5dSWWfu7vD/62GDvyJx9Ifzj/u0d4= Subject key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BFD6A035AE63FAC7A841F9D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Nov 2025 17:00:49 +0000 Certificate not after: Thu 16 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 5079 AS: 6614 AS: 10728 AS: 11461 AS: 13644 AS: 16586 AS: 17133 AS: 18933 AS: 21928 AS: 22140 AS: 23044 AS: 25877 AS: 27442 AS: 32997 AS: 393494 IP: 23.18.0.0/16 IP: 24.221.0.0/16 IP: 50.28.192.0/18 IP: 52.144.16.0/21 IP: 64.13.0.0/17 IP: 64.133.0.0/16 IP: 65.76.0.0/16 IP: 66.1.0.0/16 IP: 66.87.0.0/16 IP: 66.94.0.0/19 IP: 66.233.0.0/16 IP: 67.215.108.0/22 IP: 68.24.0.0/13 IP: 70.0.0.0/13 IP: 70.10.0.0 -- 70.13.255.255 IP: 71.20.0.0/14 IP: 72.6.0.0/15 IP: 72.57.32.0/19 IP: 72.250.0.0/17 IP: 74.60.0.0/15 IP: 75.92.0.0/14 IP: 75.122.0.0/15 IP: 96.24.0.0 -- 96.26.255.255 IP: 100.128.0.0/9 IP: 104.152.20.0/22 IP: 107.24.0.0/13 IP: 108.96.0.0/11 IP: 142.255.128.0/18 IP: 144.227.0.0/16 IP: 144.231.0.0/16 IP: 148.52.128.0/19 IP: 162.160.0.0/11 IP: 165.27.0.0/16 IP: 166.181.0.0 -- 166.182.255.255 IP: 166.221.0.0 -- 166.229.255.255 IP: 166.231.0.0 -- 166.236.255.255 IP: 167.20.0.0/16 IP: 168.73.0.0/16 IP: 170.206.0.0/16 IP: 172.32.0.0/11 IP: 173.4.0.0/14 IP: 173.96.0.0 -- 173.159.255.255 IP: 174.141.208.0/20 IP: 174.144.0.0/12 IP: 198.8.8.0/21 IP: 198.57.16.0 -- 198.57.25.255 IP: 198.100.32.0 -- 198.100.41.255 IP: 198.227.0.0/16 IP: 198.229.0.0 -- 198.229.123.255 IP: 198.230.192.0/18 IP: 206.29.160.0/19 IP: 207.52.0.0/16 IP: 207.167.160.0/19 IP: 208.54.0.0 -- 208.54.159.255 IP: 216.155.160.0/20 IP: 2600:2200::/28 IP: 2606:300::/32 IP: 2607:7700::/32 IP: 2607:f880::/32 IP: 2607:fb90::/28 IP: 2607:fc20::/32 IP: 2620:f5:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:6a:03:5a:e6:3f:ac:7a:84:1f:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 26 17:00:49 2025 GMT Not After : Dec 16 01:45:25 2027 GMT Subject: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:81:bb:42:f5:2e:c1:b6:a6:ee:6e:c0:24:04: 73:0f:02:28:1d:82:7f:09:e5:e4:98:11:e2:61:72: 93:29:be:93:34:49:8f:8d:da:c1:01:4d:f5:f8:87: a2:d7:93:4a:0b:90:32:ac:31:78:e4:57:99:82:ba: 8d:97:6b:9d:3e:50:f3:c3:12:9c:26:37:92:98:8c: 02:f6:5c:60:78:8d:ce:b5:6d:b9:b6:25:ad:4a:13: cb:fe:9e:c2:91:8e:c5:9d:f3:58:29:0d:4e:b4:48: 1f:71:0f:0c:1f:36:eb:fc:49:69:ea:e5:32:91:f6: 08:40:7d:7a:86:78:b8:e7:8e:6d:f8:39:d4:96:cb: 28:dd:09:18:99:6d:14:c6:8b:c0:93:41:7d:60:7d: 8c:f6:1f:77:a4:5b:1c:36:6d:50:b3:21:41:d1:86: b8:c1:b6:7c:c8:c8:f9:fd:35:6e:9a:f3:bf:8d:3f: ca:9f:29:da:72:3a:42:54:76:13:35:de:73:a3:5b: d3:6e:e1:87:9e:a6:35:9f:4b:c3:5f:3e:a7:28:d7: 57:69:cf:0b:4b:69:55:97:cf:b7:a5:14:63:41:3d: 10:9a:7a:35:12:bb:f5:2c:12:98:b2:27:57:13:f2: f7:16:10:77:f0:5b:5e:9b:04:e2:9a:97:f8:b6:a9: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.18.0.0/16 24.221.0.0/16 50.28.192.0/18 52.144.16.0/21 64.13.0.0/17 64.133.0.0/16 65.76.0.0/16 66.1.0.0/16 66.87.0.0/16 66.94.0.0/19 66.233.0.0/16 67.215.108.0/22 68.24.0.0/13 70.0.0.0/13 70.10.0.0-70.13.255.255 71.20.0.0/14 72.6.0.0/15 72.57.32.0/19 72.250.0.0/17 74.60.0.0/15 75.92.0.0/14 75.122.0.0/15 96.24.0.0-96.26.255.255 100.128.0.0/9 104.152.20.0/22 107.24.0.0/13 108.96.0.0/11 142.255.128.0/18 144.227.0.0/16 144.231.0.0/16 148.52.128.0/19 162.160.0.0/11 165.27.0.0/16 166.181.0.0-166.182.255.255 166.221.0.0-166.229.255.255 166.231.0.0-166.236.255.255 167.20.0.0/16 168.73.0.0/16 170.206.0.0/16 172.32.0.0/11 173.4.0.0/14 173.96.0.0-173.159.255.255 174.141.208.0/20 174.144.0.0/12 198.8.8.0/21 198.57.16.0-198.57.25.255 198.100.32.0-198.100.41.255 198.227.0.0/16 198.229.0.0-198.229.123.255 198.230.192.0/18 206.29.160.0/19 207.52.0.0/16 207.167.160.0/19 208.54.0.0-208.54.159.255 216.155.160.0/20 IPv6: 2600:2200::/28 2606:300::/32 2607:7700::/32 2607:f880::/32 2607:fb90::/28 2607:fc20::/32 2620:f5:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5079 6614 10728 11461 13644 16586 17133 18933 21928 22140 23044 25877 27442 32997 393494 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:95:03:be:18:77:a2:d1:c8:64:c8:ce:93:97:7b:b3:fd:9e: 37:eb:38:cc:0c:50:30:dc:e0:12:83:9c:f6:a2:4d:92:8b:d8: 67:c4:62:4d:25:21:fd:72:08:8f:96:53:19:aa:b7:c9:cd:4a: 4a:c8:04:6f:71:79:69:fc:cd:95:77:ba:91:b0:b4:ab:48:22: c0:31:dd:b4:cd:fd:41:e8:24:68:aa:61:8d:68:eb:5f:21:d1: 82:ea:17:bb:07:6f:31:c5:15:1c:6a:49:f1:c1:cb:bf:41:bd: 1c:db:c2:18:96:64:6e:bd:8b:a7:b8:99:93:50:c0:26:e2:7c: a1:c5:ee:6e:ca:10:2b:17:88:be:50:ee:30:50:0e:2a:e4:56: 63:1e:19:d7:eb:fe:90:6f:2f:cb:f3:38:fc:db:c9:07:44:ff: a9:20:3b:9f:d8:88:5d:6e:96:77:5c:98:a6:58:68:89:07:d6: ea:16:ec:04:88:b7:f7:7d:8c:12:ea:3c:ae:5e:a6:0b:cd:63: 7f:31:3e:07:ba:cb:f9:da:ae:ff:5d:d5:24:08:31:3c:a2:55: 03:ed:b6:ec:65:0a:45:2d:bf:79:d0:0e:69:93:96:3b:b7:56: 1c:c7:73:71:28:9d:01:4d:c9:b7:70:d7:6c:2e:b4:9a:1c:11: 0f:cc:60:c3 -----BEGIN CERTIFICATE----- MIII8DCCB9igAwIBAgIUAQ0Mn0MoWEv9agNa5j+seoQfnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTEyNjE3MDA0OVoXDTI3MTIxNjAxNDUyNVowLzEtMCsGA1UEAxMk OGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2VmMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/YG7QvUuwbam7m7AJARzDwIoHYJ/CeXkmBHi YXKTKb6TNEmPjdrBAU31+Iei15NKC5AyrDF45FeZgrqNl2udPlDzwxKcJjeSmIwC 9lxgeI3OtW25tiWtShPL/p7CkY7FnfNYKQ1OtEgfcQ8MHzbr/Elp6uUykfYIQH16 hni4545t+DnUlsso3QkYmW0UxovAk0F9YH2M9h93pFscNm1QsyFB0Ya4wbZ8yMj5 /TVumvO/jT/KnynacjpCVHYTNd5zo1vTbuGHnqY1n0vDXz6nKNdXac8LS2lVl8+3 pRRjQT0Qmno1Erv1LBKYsidXE/L3FhB38FtemwTimpf4tqk0vwIDAQABo4IGAjCC Bf4wHQYDVR0OBBYEFLS1bGRGPUfr3KUOy9B7mjNDVUBFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzhlMmYzMzUzLTgyYjktNDMyYi1i ZDk0LTAwMGJmNWNlZjBjMy84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVj ZWYwYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwggHLBggrBgEF BQcBBwEB/wSCAbowggG2MIIBdwQCAAEwggFvAwMAFxIDAwAY3QMEBjIcwAMEAzSQ EAMEB0ANAAMDAECFAwMAQUwDAwBCAQMDAEJXAwQFQl4AAwMAQukDBAJD12wDAwNE GAMDA0YAMAoDAwFGCgMDAUYMAwMCRxQDAwFIBgMEBUg5IAMEB0j6AAMDAUo8AwMC S1wDAwFLejAKAwMDYBgDAwBgGgMDB2SAAwQCaJgUAwMDaxgDAwVsYAMEBo7/gAMD AJDjAwMAkOcDBAWUNIADAwWioAMDAKUbMAoDAwCmtQMDAKa2MAoDAwCm3QMDAabk MAoDAwCm5wMDAKbsAwMApxQDAwCoSQMDAKrOAwMFrCADAwKtBDAKAwMFrWADAwWt gAMEBK6N0AMDBK6QAwQDxggIMAwDBATGORADBAHGORgwDAMEBcZkIAMEAcZkKAMD AMbjMAsDAwDG5QMEAsbleAMEBsbmwAMEBc4doAMDAM80AwQFz6egMAsDAwHQNgME BdA2gAMEBNiboDA5BAIAAjAzAwUEJgAiAAMFACYGAwADBQAmB3cAAwUAJgf4gAMF BCYH+5ADBQAmB/wgAwcAJiAA9cAAMFMGCCsGAQUFBwEIAQH/BEQwQqBAMD4CAhPX AgIZ1gICKegCAizFAgI1TAICQMoCAkLtAgJJ9QICVagCAlZ8AgJaBAICZRUCAmsy AgMAgOUCAwYBFjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4lQO+GHei0chkyM6Tl3uz/Z436zjMDFAw3OAS g5z2ok2Si9hnxGJNJSH9cgiPllMZqrfJzUpKyARvcXlp/M2Vd7qRsLSrSCLAMd20 zf1B6CRoqmGNaOtfIdGC6he7B28xxRUcaknxwcu/Qb0c28IYlmRuvYunuJmTUMAm 4nyhxe5uyhArF4i+UO4wUA4q5FZjHhnX6/6Qby/L8zj828kHRP+pIDuf2IhdbpZ3 XJimWGiJB9bqFuwEiLf3fYwS6jyuXqYLzWN/MT4Husv52q7/XdUkCDE8olUD7bbs ZQpFLb950A5pk5Y7t1Ycx3NxKJ0BTcm3cNdsLrSaHBEPzGDD -----END CERTIFICATE-----Generated at Sat Dec 6 06:51:17 2025 by rpki-client