This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.cer File: 4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.cer (raw, json) Hash identifier: 6/hq7VV8lYg0T5MEjXI5/634GBNE4O/+0MoEYT47TKA= Subject key identifier: 53:3D:C8:D5:05:9E:04:3E:F8:66:08:B5:AC:3B:BA:95:6F:E6:DB:42 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C05691429EC5F09819452CFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 29 Nov 2025 13:45:24 +0000 Certificate not after: Fri 03 Mar 2028 13:45:24 +0000 Subordinate resources: IP: 192.160.5.0 -- 192.160.7.255 IP: 192.207.23.0/24 IP: 192.231.48.0/24 IP: 192.245.102.0/24 IP: 198.17.148.0/24 IP: 198.151.197.0 -- 198.151.198.255 IP: 198.175.147.0/24 IP: 198.205.32.0/19 IP: 199.89.141.0 -- 199.89.143.255 IP: 199.89.161.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:69:14:29:ec:5f:09:81:94:52:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 29 13:45:24 2025 GMT Not After : Mar 3 13:45:24 2028 GMT Subject: CN=4329caf6-7e2a-4a02-a21f-b6259ecf6b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:0e:38:0a:9c:d0:07:9d:32:5b:e4:ab:9b: d6:45:87:5b:55:c3:5e:15:03:de:11:6e:36:b0:3d: 32:de:8f:77:75:7b:a1:c6:32:9c:dd:ae:ad:d9:fc: 32:24:d4:70:f7:29:02:e5:24:b5:b4:ec:01:64:52: 34:fd:93:75:ea:df:f5:f6:c7:c6:ad:f9:42:b6:eb: 6c:cd:48:a3:bd:51:59:77:74:17:74:29:9e:71:c9: 85:11:e8:f9:c1:2a:99:ea:6c:57:5a:6b:d8:a1:c9: 92:a5:00:54:98:79:c7:d4:21:93:76:08:43:21:94: d0:c1:6d:9a:f4:17:33:77:04:2f:43:f9:da:da:d3: bf:c5:5a:24:b4:7f:5c:db:b9:f7:51:74:2a:5c:84: 54:19:2d:90:a0:3c:b6:a8:ed:a3:b3:76:ee:fc:4e: 60:10:42:93:a4:7c:73:bd:f7:c1:da:30:46:11:3d: 3f:6c:1e:58:6c:ec:2f:da:f0:b7:87:d1:c6:7e:a7: 83:7b:25:52:da:b1:58:4f:5e:a4:60:be:91:fd:85: c0:73:8e:ba:1d:2b:db:0f:a1:2f:4d:5e:ab:15:92: bb:e8:a5:e0:cc:13:c2:d8:7e:b0:8b:94:d4:5e:24: dd:a4:c7:4d:5d:70:9e:de:43:7c:5e:62:d8:c6:ad: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3D:C8:D5:05:9E:04:3E:F8:66:08:B5:AC:3B:BA:95:6F:E6:DB:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.160.5.0-192.160.7.255 192.207.23.0/24 192.231.48.0/24 192.245.102.0/24 198.17.148.0/24 198.151.197.0-198.151.198.255 198.175.147.0/24 198.205.32.0/19 199.89.141.0-199.89.143.255 199.89.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:2e:6d:60:5e:6e:0f:f4:b6:2c:ce:24:af:5e:eb:22:27:eb: 72:61:70:ef:da:70:46:74:e8:a8:cd:6f:08:7f:bc:f7:52:35: 85:3f:ba:fd:4d:68:8d:8d:97:d5:fb:b1:a5:ac:38:e6:ea:a5: dc:70:6f:9c:48:26:25:67:3f:5b:74:40:54:9d:00:1f:ee:e8: 96:d4:b1:2a:20:ea:0d:a3:86:a5:2c:9c:0b:c2:69:59:e5:ab: 6e:9f:9d:88:10:a7:0b:81:df:08:7b:ff:98:07:14:0a:c9:b0: 93:d1:5d:ad:0f:2b:ab:57:b6:e1:9a:fe:b0:f2:c5:9d:84:29: 63:79:be:70:3b:c1:f0:c8:ca:09:97:3e:d1:50:74:bd:6c:4b: 1f:9c:cc:0f:5a:d0:4c:d2:91:65:94:a6:8b:de:27:8a:d7:5a: 58:eb:3e:a9:2a:e2:b1:7a:52:ea:71:01:0f:75:eb:c7:6f:b1: f8:42:27:c3:9a:00:98:3d:4c:f2:46:93:58:2b:09:71:8d:c6: 43:11:88:41:de:88:1c:a5:bd:48:c1:9b:9e:b0:99:36:d6:8f: a1:75:6a:1e:61:9f:0e:09:3d:42:41:32:7c:59:08:29:14:d2: 0b:5c:28:8f:25:1a:91:ad:94:fe:8c:3f:19:84:32:44:f5:3a: 1b:20:1a:06 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEwFaRQp7F8JgZRSz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTEyOTEzNDUyNFoXDTI4MDMwMzEzNDUyNFowLzEtMCsGA1UEAxMk NDMyOWNhZjYtN2UyYS00YTAyLWEyMWYtYjYyNTllY2Y2YjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mwOOAqc0AedMlvkq5vWRYdbVcNeFQPeEW42 sD0y3o93dXuhxjKc3a6t2fwyJNRw9ykC5SS1tOwBZFI0/ZN16t/19sfGrflCtuts zUijvVFZd3QXdCmeccmFEej5wSqZ6mxXWmvYocmSpQBUmHnH1CGTdghDIZTQwW2a 9BczdwQvQ/na2tO/xVoktH9c27n3UXQqXIRUGS2QoDy2qO2js3bu/E5gEEKTpHxz vffB2jBGET0/bB5YbOwv2vC3h9HGfqeDeyVS2rFYT16kYL6R/YXAc466HSvbD6Ev TV6rFZK76KXgzBPC2H6wi5TUXiTdpMdNXXCe3kN8XmLYxq3zbwIDAQABo4IETTCC BEkwHQYDVR0OBBYEFFM9yNUFngQ++GYItaw7upVv5ttCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80 MzI5Y2FmNi03ZTJhLTRhMDItYTIxZi1iNjI1OWVjZjZiOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzQzMjljYWY2LTdlMmEtNGEwMi1h MjFmLWI2MjU5ZWNmNmI5ZC80MzI5Y2FmNi03ZTJhLTRhMDItYTIxZi1iNjI1OWVj ZjZiOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwbQYIKwYBBQUH AQcBAf8EXjBcMFoEAgABMFQwDAMEAMCgBQMEA8CgAAMEAMDPFwMEAMDnMAMEAMD1 ZgMEAMYRlDAMAwQAxpfFAwQAxpfGAwQAxq+TAwQFxs0gMAwDBADHWY0DBATHWYAD BADHWaEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAQi5tYF5uD/S2LM4kr17rIifrcmFw79pwRnToqM1vCH+8 91I1hT+6/U1ojY2X1fuxpaw45uql3HBvnEgmJWc/W3RAVJ0AH+7oltSxKiDqDaOG pSycC8JpWeWrbp+diBCnC4HfCHv/mAcUCsmwk9FdrQ8rq1e24Zr+sPLFnYQpY3m+ cDvB8MjKCZc+0VB0vWxLH5zMD1rQTNKRZZSmi94nitdaWOs+qSrisXpS6nEBD3Xr x2+x+EInw5oAmD1M8kaTWCsJcY3GQxGIQd6IHKW9SMGbnrCZNtaPoXVqHmGfDgk9 QkEyfFkIKRTSC1wojyUaka2U/ow/GYQyRPU6GyAaBg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:34:08 2025 by rpki-client