This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1.cer File: bffdabcb-09d5-4804-be56-5d34d53f6cf1.cer (raw, json) Hash identifier: rJc61KGxaVlMwM+0sFy/D54OrJE2Ia5fV5WO7jk/RVk= Subject key identifier: E9:BA:08:1A:5A:39:0B:9C:D1:4B:B3:27:DF:89:C5:94:8C:F1:0D:AE Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584AC2D949924DFA2DB9F5A72E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/bffdabcb-09d5-4804-be56-5d34d53f6cf1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 00:45:23 +0000 Certificate not after: Tue 09 Nov 2027 01:45:23 +0000 Subordinate resources: AS: 395277 IP: 192.101.143.0/24 Validation: Failed, certificate revoked on Tue 16 Sep 2025 21:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:d9:49:92:4d:fa:2d:b9:f5:a7:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 6 00:45:23 2025 GMT Not After : Nov 9 01:45:23 2027 GMT Subject: CN=bffdabcb-09d5-4804-be56-5d34d53f6cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:be:2d:14:aa:1a:4a:b3:78:2a:b6:f7:6b: e1:86:8a:d8:5b:cc:3c:f0:9d:fa:88:e6:39:22:a0: 6c:77:3f:4e:57:25:f9:ac:7f:0f:ee:07:e4:95:7f: ca:f7:b5:d9:8f:3a:82:fa:fb:ab:fa:84:ee:fc:0e: f6:57:9b:d3:95:bf:58:0c:ee:f9:a6:11:7e:12:d3: 85:d3:30:8b:fe:83:95:2f:bc:d1:22:7e:88:c3:be: 88:c4:17:bc:16:36:0f:6e:42:f9:9e:fe:eb:c4:87: 40:8f:13:9c:21:85:c0:2e:06:05:85:4a:f8:f2:43: c3:7b:f8:aa:a6:6b:31:4b:7e:52:a5:54:84:6d:5c: 8b:46:6a:fb:e7:c9:50:9d:dc:67:7c:6e:fd:e3:03: 0d:b7:69:c8:d0:00:12:44:4a:25:3e:a7:45:4b:52: b9:c8:7f:cd:36:f9:98:26:08:b4:9d:85:1a:ab:82: 3d:ef:c1:4c:0b:4a:18:9a:5c:db:e0:55:84:6b:d4: 0a:d9:6e:02:23:fc:2c:b6:fa:fc:22:3b:1e:10:99: 23:b2:59:6a:c0:9c:f3:f6:77:2b:63:57:c3:05:d9: aa:5a:3a:b4:af:98:6d:0a:a0:b3:cc:16:6e:a1:bd: 42:7a:8f:09:7e:d6:31:37:de:41:7a:63:dc:e7:7a: 2f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BA:08:1A:5A:39:0B:9C:D1:4B:B3:27:DF:89:C5:94:8C:F1:0D:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/bffdabcb-09d5-4804-be56-5d34d53f6cf1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.101.143.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395277 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b7:ae:78:df:17:06:d3:ce:f0:64:c3:51:3f:14:78:79:1b: 5e:5a:3f:4b:79:69:91:a1:74:89:dd:b8:71:8a:5f:8e:ce:f0: 68:79:ce:a8:f2:42:db:81:c1:df:f9:a5:ea:97:85:ea:73:4e: 7c:da:74:01:da:d5:2e:e1:3b:38:de:a0:be:17:ba:b2:0d:74: 92:7f:2d:51:63:9b:e7:ad:f5:eb:49:95:d4:7d:f1:55:12:3d: 41:80:ee:d6:e5:fa:48:53:2d:ae:f1:8d:a7:c9:02:b2:d3:4c: b8:b0:36:c4:e0:85:52:f8:b0:56:7f:8e:73:35:a8:1f:c8:cd: 62:7d:e6:96:81:2e:ba:22:5f:b5:0c:37:20:d5:0c:fe:c0:37: de:d3:11:ef:cf:dd:d1:fe:a6:43:ae:57:df:ba:36:e0:17:bf: 40:5d:b1:6f:80:5b:c6:96:65:8f:e5:87:da:32:34:ba:b4:f9: 42:06:54:b7:2c:7d:ec:5e:2e:fb:fa:cb:40:28:1b:e9:70:61: c0:89:db:b6:c6:6d:79:9d:54:c7:36:f8:09:30:f6:73:58:7a: 04:9b:98:cd:bf:03:cd:75:ed:5e:42:20:91:fe:71:0a:02:e3: b9:ea:26:ed:19:a8:f6:2f:41:38:d4:ca:13:c4:b2:22:8a:fb: 1d:41:b3:a0 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErC2UmSTfotufWnLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgwNjAwNDUyM1oXDTI3MTEwOTAxNDUyM1owLzEtMCsGA1UEAxMk YmZmZGFiY2ItMDlkNS00ODA0LWJlNTYtNWQzNGQ1M2Y2Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrq+LRSqGkqzeCq292vhhorYW8w88J36iOY5 IqBsdz9OVyX5rH8P7gfklX/K97XZjzqC+vur+oTu/A72V5vTlb9YDO75phF+EtOF 0zCL/oOVL7zRIn6Iw76IxBe8FjYPbkL5nv7rxIdAjxOcIYXALgYFhUr48kPDe/iq pmsxS35SpVSEbVyLRmr758lQndxnfG794wMNt2nI0AASREolPqdFS1K5yH/NNvmY Jgi0nYUaq4I978FMC0oYmlzb4FWEa9QK2W4CI/wstvr8IjseEJkjsllqwJzz9ncr Y1fDBdmqWjq0r5htCqCzzBZuob1Ceo8JftYxN95BemPc53ovewIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFOm6CBpaOQuc0UuzJ9+JxZSM8Q2uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i ZmZkYWJjYi0wOWQ1LTQ4MDQtYmU1Ni01ZDM0ZDUzZjZjZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2JmZmRhYmNiLTA5ZDUtNDgwNC1i ZTU2LTVkMzRkNTNmNmNmMS9iZmZkYWJjYi0wOWQ1LTQ4MDQtYmU1Ni01ZDM0ZDUz ZjZjZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAZY8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BggNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEC3rnjfFwbTzvBkw1E/FHh5G15aP0t5aZGhdInduHGKX47O 8Gh5zqjyQtuBwd/5peqXhepzTnzadAHa1S7hOzjeoL4XurINdJJ/LVFjm+et9etJ ldR98VUSPUGA7tbl+khTLa7xjafJArLTTLiwNsTghVL4sFZ/jnM1qB/IzWJ95paB LroiX7UMNyDVDP7AN97TEe/P3dH+pkOuV9+6NuAXv0BdsW+AW8aWZY/lh9oyNLq0 +UIGVLcsfexeLvv6y0AoG+lwYcCJ27bGbXmdVMc2+Akw9nNYegSbmM2/A8117V5C IJH+cQoC47nqJu0ZqPYvQTjUyhPEsiKK+x1Bs6A= -----END CERTIFICATE-----Generated at Fri Dec 19 15:09:13 2025 by rpki-client