This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer File: d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer (raw, json) Hash identifier: dIRrxtxjLrkuWkwXCHyjjkRlL5czGE5LbTtb543lHf0= Subject key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584C2153E832288932A93B7F1280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Dec 2025 13:45:22 +0000 Certificate not after: Mon 13 Mar 2028 12:45:22 +0000 Subordinate resources: AS: 62654 IP: 57.140.0.0/16 IP: 162.33.226.0/23 IP: 162.33.230.0/23 IP: 168.245.155.0/24 IP: 192.84.38.0/24 IP: 216.24.45.0/24 IP: 2606:3dc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:53:e8:32:28:89:32:a9:3b:7f:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 9 13:45:22 2025 GMT Not After : Mar 13 12:45:22 2028 GMT Subject: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:f6:05:64:60:4a:55:b0:d5:45:61:02:22: df:7e:9a:c3:71:09:c3:ee:ef:c4:bf:83:23:35:c7: 5e:4d:e5:80:74:43:7f:29:57:a8:f8:46:2e:b5:b8: 3d:0f:d8:f7:d0:db:5d:33:71:da:01:0e:e7:f7:4d: d1:7f:b8:27:85:e5:27:9a:c4:68:57:50:4a:67:47: bf:0d:72:ff:a7:8d:02:99:6e:f3:eb:98:02:8c:f6: 8f:dd:dd:a7:a2:d4:9d:b8:74:5a:54:78:2d:7c:c6: 72:a0:e9:23:8b:c0:5e:a2:00:8a:78:79:96:76:75: 1d:09:e1:e8:93:6d:f9:06:3b:bf:8d:2d:7b:ba:54: 36:0a:1b:49:66:f8:8f:e0:42:68:21:5b:c6:39:6f: fe:06:d9:f9:f4:10:e6:d9:03:12:07:d2:08:2c:13: 7f:fa:09:16:4c:08:c0:4a:c5:50:16:f6:37:a5:93: 5f:b0:94:26:f7:a8:80:f8:76:34:4d:b7:84:fa:0c: c5:6c:74:99:e9:9a:20:f4:cf:ea:53:86:3b:d4:de: ff:b8:f1:cf:61:1e:97:c6:1c:46:75:6b:52:89:f4: 65:ef:f8:9c:33:c1:23:41:57:48:fb:0e:a6:b9:bf: 6a:e7:95:fb:e0:32:d9:fe:49:a5:e7:04:8e:16:9b: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 57.140.0.0/16 162.33.226.0/23 162.33.230.0/23 168.245.155.0/24 192.84.38.0/24 216.24.45.0/24 IPv6: 2606:3dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62654 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c0:08:fb:54:02:0d:55:3d:31:9f:b4:a2:d6:14:70:c8:1f: 66:88:49:57:90:b3:f4:fa:4f:78:5a:c5:f4:f6:22:9d:d1:f6: 38:c6:09:f9:dd:05:2c:63:72:c8:ff:af:88:b4:27:29:f7:d0: 6a:a1:18:c1:da:d5:10:49:16:82:73:c1:ff:df:80:7d:0e:72: ad:09:c7:e6:0c:22:55:66:01:50:7d:3f:14:e4:6d:40:37:69: 27:8a:82:42:2b:f8:aa:29:79:49:86:b9:a9:a6:55:ad:cf:d1: 1d:21:c9:97:d4:dd:8a:9f:4b:c7:c9:85:58:b6:4f:60:b7:60: 98:15:5c:15:19:7b:44:29:a2:a5:de:48:ec:bd:c7:3c:9a:29: 1e:36:86:fe:fc:09:75:43:de:17:79:c6:70:5c:33:f5:47:36: b9:6f:a8:77:3e:28:2c:eb:87:75:ac:dc:02:e5:ba:e2:2b:de: f0:5a:d4:4a:f4:35:8e:63:2e:ab:61:e9:15:df:d5:0d:cf:c0: 9c:ee:ff:a7:68:09:43:cf:b1:ad:9b:e2:b0:cb:70:7b:25:01: 80:a9:48:d1:2d:71:9b:3f:df:6d:5f:99:ad:08:a7:c7:a0:49: 86:d2:79:71:cf:06:12:71:3f:bd:68:0d:ba:34:db:e7:ac:3f: d3:ae:2e:40 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEwhU+gyKIkyqTt/EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTIwOTEzNDUyMloXDTI4MDMxMzEyNDUyMlowLzEtMCsGA1UEAxMk ZDlmMjlhMTYtZTdiMS00MGM4LTg3YmMtMzRlMmM1NjI0ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv372BWRgSlWw1UVhAiLffprDcQnD7u/Ev4Mj NcdeTeWAdEN/KVeo+EYutbg9D9j30NtdM3HaAQ7n903Rf7gnheUnmsRoV1BKZ0e/ DXL/p40CmW7z65gCjPaP3d2notSduHRaVHgtfMZyoOkji8BeogCKeHmWdnUdCeHo k235Bju/jS17ulQ2ChtJZviP4EJoIVvGOW/+Btn59BDm2QMSB9IILBN/+gkWTAjA SsVQFvY3pZNfsJQm96iA+HY0TbeE+gzFbHSZ6Zog9M/qU4Y71N7/uPHPYR6XxhxG dWtSifRl7/icM8EjQVdI+w6mub9q55X74DLZ/kml5wSOFptHyQIDAQABo4IERzCC BEMwHQYDVR0OBBYEFNv6g/5tls3MbN46FbQgmJ1j17YzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k OWYyOWExNi1lN2IxLTQwYzgtODdiYy0zNGUyYzU2MjQ4NjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2Q5ZjI5YTE2LWU3YjEtNDBjOC04 N2JjLTM0ZTJjNTYyNDg2Mi9kOWYyOWExNi1lN2IxLTQwYzgtODdiYy0zNGUyYzU2 MjQ4NjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSwYIKwYBBQUH AQcBAf8EPDA6MCkEAgABMCMDAwA5jAMEAaIh4gMEAaIh5gMEAKj1mwMEAMBUJgME ANgYLTANBAIAAjAHAwUAJgY9wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA9L4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAisAI+1QCDVU9MZ+0otYUcMgfZohJV5Cz9PpPeFrF9PYindH2OMYJ +d0FLGNyyP+viLQnKffQaqEYwdrVEEkWgnPB/9+AfQ5yrQnH5gwiVWYBUH0/FORt QDdpJ4qCQiv4qil5SYa5qaZVrc/RHSHJl9Tdip9Lx8mFWLZPYLdgmBVcFRl7RCmi pd5I7L3HPJopHjaG/vwJdUPeF3nGcFwz9Uc2uW+odz4oLOuHdazcAuW64ive8FrU SvQ1jmMuq2HpFd/VDc/AnO7/p2gJQ8+xrZvisMtweyUBgKlI0S1xmz/fbV+ZrQin x6BJhtJ5cc8GEnE/vWgNujTb56w/064uQA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:05:56 2025 by rpki-client