This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer File: 69cd8bc4-5e3c-4cc8-941e-084043efb520.cer (raw, json) Hash identifier: SVzzzN1eE+w+tT/N5N3nw89L5H4X+rFyuEgk3vH6HUE= Subject key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C3214046A8000F81CCEE85C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Dec 2025 13:45:23 +0000 Certificate not after: Sun 19 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 3695 IP: 70.36.0.0/20 IP: 142.202.130.0/23 IP: 2604:ca40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:14:04:6a:80:00:f8:1c:ce:e8:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 15 13:45:23 2025 GMT Not After : Mar 19 12:45:23 2028 GMT Subject: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:c0:51:0e:3b:68:90:0a:5a:b7:ea:24:cf: 29:01:68:d8:15:ec:40:9a:a0:6d:d7:c7:44:06:f5: cb:4c:43:63:64:5c:4b:f9:63:d0:b4:1d:2d:da:ed: cf:57:bf:b3:bc:e1:e9:85:9e:d6:27:29:14:96:45: f3:5d:f0:a5:c4:56:e5:30:4a:22:6f:ec:8a:44:6c: 46:4a:94:88:35:2f:50:35:ef:76:7f:d9:f4:fe:32: 60:85:8f:26:81:dc:41:ed:f6:32:c9:06:4a:59:a7: f0:01:40:08:a2:c8:7e:8c:c7:c9:30:2e:b4:b3:20: d3:19:9e:e7:54:02:a7:57:6d:34:2d:b6:dd:f1:4c: ff:16:f0:10:12:53:49:9e:3a:4d:a4:4e:c0:99:33: a9:97:63:36:c2:da:b3:da:09:61:87:c5:6c:59:d4: 3c:65:b6:5a:d4:45:8a:43:f2:06:10:bf:80:41:30: d5:22:58:13:39:28:7a:87:ac:b1:d6:f3:79:c9:27: 79:ca:b7:b4:e5:71:fe:b2:15:c6:aa:d5:43:0e:bd: d4:a0:5c:9d:17:a7:4d:1b:73:eb:ae:95:7a:3f:fb: 0d:da:ce:5c:fd:3d:21:22:69:a0:bc:09:bf:9a:58: 39:d6:1d:ce:8d:63:52:67:bf:f2:e2:aa:96:d1:62: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 70.36.0.0/20 142.202.130.0/23 IPv6: 2604:ca40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3695 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:3f:c1:2e:61:6f:17:c2:a6:0b:e4:4b:ec:e0:4c:ce:a5:11: 43:91:69:7f:49:64:88:01:d3:54:e1:27:73:16:78:20:30:78: eb:15:cf:8e:31:16:64:de:73:d2:49:99:b3:c6:9c:6e:60:a4: 9b:e5:f7:e4:f3:66:13:0c:d7:77:84:bf:90:cf:2c:87:c5:c3: fb:35:8f:95:44:89:09:d4:7b:53:cb:74:a2:71:f9:21:33:3a: 35:0d:51:40:e9:81:9b:8f:61:7c:1a:56:31:cd:2c:19:be:d7: 34:aa:57:96:05:e9:91:84:c7:ad:62:bb:ff:28:c1:8b:5b:1b: 98:5e:81:b7:cc:c0:55:24:69:9c:ae:29:dc:a9:7b:06:b9:ad: 38:0d:70:0b:28:c7:de:b4:25:7d:c1:f0:7e:f7:79:bc:68:b1: c8:da:82:8b:fd:99:35:32:7e:d3:28:c0:12:a6:77:fe:df:cf: 31:6a:82:a2:ac:16:c7:a7:91:84:db:c7:53:8e:87:14:bd:3c: d1:41:50:f0:f7:44:f8:36:cb:13:1b:74:05:8a:e3:38:a1:6e: 2f:9b:fc:be:56:5d:15:b4:e2:54:d4:01:ca:10:91:10:a0:1d: 75:84:9f:75:da:a6:3b:91:3a:98:cb:19:3a:ae:84:12:74:ea: 57:58:9b:72 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEwyFARqgAD4HM7oXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTIxNTEzNDUyM1oXDTI4MDMxOTEyNDUyM1owLzEtMCsGA1UEAxMk NjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZiNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf7AUQ47aJAKWrfqJM8pAWjYFexAmqBt18dE BvXLTENjZFxL+WPQtB0t2u3PV7+zvOHphZ7WJykUlkXzXfClxFblMEoib+yKRGxG SpSINS9QNe92f9n0/jJghY8mgdxB7fYyyQZKWafwAUAIosh+jMfJMC60syDTGZ7n VAKnV200Lbbd8Uz/FvAQElNJnjpNpE7AmTOpl2M2wtqz2glhh8VsWdQ8ZbZa1EWK Q/IGEL+AQTDVIlgTOSh6h6yx1vN5ySd5yre05XH+shXGqtVDDr3UoFydF6dNG3Pr rpV6P/sN2s5c/T0hImmgvAm/mlg51h3OjWNSZ7/y4qqW0WLyhwIDAQABo4IELzCC BCswHQYDVR0OBBYEFPLuclZuB6wXKyQVkSKHNJgwb2CJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82 OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzY5Y2Q4YmM0LTVlM2MtNGNjOC05 NDFlLTA4NDA0M2VmYjUyMC82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNl ZmI1MjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARGJAADBAGOyoIwDQQCAAIwBwMFACYEykAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICDm8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaT/BLmFvF8KmC+RL7OBM zqURQ5Fpf0lkiAHTVOEncxZ4IDB46xXPjjEWZN5z0kmZs8acbmCkm+X35PNmEwzX d4S/kM8sh8XD+zWPlUSJCdR7U8t0onH5ITM6NQ1RQOmBm49hfBpWMc0sGb7XNKpX lgXpkYTHrWK7/yjBi1sbmF6Bt8zAVSRpnK4p3Kl7BrmtOA1wCyjH3rQlfcHwfvd5 vGixyNqCi/2ZNTJ+0yjAEqZ3/t/PMWqCoqwWx6eRhNvHU46HFL080UFQ8PdE+DbL Ext0BYrjOKFuL5v8vlZdFbTiVNQByhCREKAddYSfddqmO5E6mMsZOq6EEnTqV1ib cg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:42 2025 by rpki-client