This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer File: c3b90f7d-2bc6-4942-a304-98a91a506d72.cer (raw, json) Hash identifier: n0TO8kvGAnltfJByB+zxvK++BoCHCbaAQo/VgZ2wmaQ= Subject key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C10CF5A44A31CDFF793A405C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Dec 2025 15:45:22 +0000 Certificate not after: Sun 20 Feb 2028 01:45:22 +0000 Subordinate resources: AS: 13483 AS: 14356 AS: 396137 IP: 159.172.0.0/16 IP: 165.217.0.0 -- 165.217.95.255 IP: 165.217.100.0/22 IP: 165.217.112.0 -- 165.217.255.255 IP: 198.102.215.0 -- 198.102.216.255 IP: 207.54.32.0/19 IP: 2604:ba80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:cf:5a:44:a3:1c:df:f7:93:a4:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 3 15:45:22 2025 GMT Not After : Feb 20 01:45:22 2028 GMT Subject: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bf:68:d3:42:53:3c:60:cb:03:7f:7c:b5:b8: 44:35:44:cb:63:f7:c2:33:51:e8:89:e3:60:14:7f: fc:ce:72:d6:75:54:3e:ec:87:a1:84:79:2d:8e:b7: 33:f2:49:20:bc:c7:a9:b1:8d:46:ae:c5:52:c2:d8: 5a:44:b6:88:c0:76:ab:18:60:b4:8a:1d:02:85:77: 89:57:dc:82:9e:6a:3b:9a:fb:ad:ee:4f:9b:5e:8e: 84:57:7d:60:ce:a7:5f:0d:8c:db:df:fa:5d:20:5d: 72:26:6c:cb:20:a9:bc:44:57:04:9d:86:f0:b8:c5: d6:dc:a0:e4:4f:12:06:bd:fc:6d:c4:76:31:b1:d4: 70:c1:70:1a:3d:a3:50:b0:fa:1a:d8:7c:66:7f:44: 3b:51:09:38:c2:32:70:3f:c7:6a:f6:ad:2d:71:36: 28:8c:f1:a4:ab:90:76:59:4a:7f:6b:96:f0:66:b6: 83:e4:43:e1:f3:32:ee:07:56:0e:46:1b:6e:5c:20: 0d:e2:d1:c2:f7:89:e9:44:c2:a5:f4:a9:ab:f9:b9: c5:45:30:ed:a6:bd:14:08:77:9f:2f:81:21:c5:9b: 1c:90:50:1d:f2:7a:5f:d2:9b:bc:bd:f3:38:c5:e8: 60:ba:4b:17:96:85:28:84:31:0d:a9:c3:3d:b9:85: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 159.172.0.0/16 165.217.0.0-165.217.95.255 165.217.100.0/22 165.217.112.0-165.217.255.255 198.102.215.0-198.102.216.255 207.54.32.0/19 IPv6: 2604:ba80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13483 14356 396137 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d1:5e:11:72:1e:db:b2:52:4f:f6:fa:5f:a3:b7:6c:8e:e3: 28:7b:48:4a:6e:c6:ed:1f:21:48:69:15:8a:a4:d4:ee:fc:bd: 38:e5:0b:54:09:99:7e:fa:ff:40:08:7c:2e:10:6e:22:11:9a: 52:63:fe:54:b3:a9:99:eb:5f:8e:c3:9d:d2:db:9d:0a:11:2b: 1e:ed:20:6e:98:0b:e5:d9:3c:4b:64:d2:67:9a:8a:5b:bb:bc: 45:ba:af:72:b5:c6:60:8f:37:69:dd:a0:f5:72:6b:69:88:7e: 7c:cc:f2:32:35:37:1b:11:ff:bb:9c:01:40:4e:3a:1e:c5:7e: ea:7a:94:b9:57:44:32:c4:38:62:ff:01:f2:17:96:2f:70:59: 13:42:00:2f:e1:38:12:67:a9:5c:d2:f3:50:03:7d:5e:8c:37: 6a:1a:7b:a8:22:f7:29:0c:ce:67:a8:93:af:7f:3c:c3:12:c2: 7e:1f:d3:b1:77:90:10:60:96:26:39:81:3f:f6:6b:49:8a:2f: e2:9f:ab:99:26:1a:66:a0:d4:37:af:70:e4:de:31:71:9e:89: c1:53:89:21:0a:7a:bb:d7:05:c2:15:8c:a3:f2:97:6e:ff:57: 37:df:dc:c1:79:80:b1:e2:d4:ad:f7:9a:03:4f:c1:66:9d:38: 79:67:23:87 -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEwQz1pEoxzf95OkBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTIwMzE1NDUyMloXDTI4MDIyMDAxNDUyMlowLzEtMCsGA1UEAxMk YzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2ZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib9o00JTPGDLA398tbhENUTLY/fCM1HoieNg FH/8znLWdVQ+7IehhHktjrcz8kkgvMepsY1GrsVSwthaRLaIwHarGGC0ih0ChXeJ V9yCnmo7mvut7k+bXo6EV31gzqdfDYzb3/pdIF1yJmzLIKm8RFcEnYbwuMXW3KDk TxIGvfxtxHYxsdRwwXAaPaNQsPoa2Hxmf0Q7UQk4wjJwP8dq9q0tcTYojPGkq5B2 WUp/a5bwZraD5EPh8zLuB1YORhtuXCAN4tHC94npRMKl9Kmr+bnFRTDtpr0UCHef L4EhxZsckFAd8npf0pu8vfM4xehguksXloUohDENqcM9uYVw9QIDAQABo4IEZTCC BGEwHQYDVR0OBBYEFHSjh5btLayRicgijxTj1wA3NdjSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9j M2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2MzYjkwZjdkLTJiYzYtNDk0Mi1h MzA0LTk4YTkxYTUwNmQ3Mi9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1 MDZkNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwYQYIKwYBBQUH AQcBAf8EUjBQMD8EAgABMDkDAwCfrDALAwMApdkDBAWl2UADBAKl2WQwCwMEBKXZ cAMDAaXYMAwDBADGZtcDBADGZtgDBAXPNiAwDQQCAAIwBwMFACYEuoAwIgYIKwYB BQUHAQgBAf8EEzARoA8wDQICNKsCAjgUAgMGC2kwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARNFeEXIe27JS T/b6X6O3bI7jKHtISm7G7R8hSGkViqTU7vy9OOULVAmZfvr/QAh8LhBuIhGaUmP+ VLOpmetfjsOd0tudChErHu0gbpgL5dk8S2TSZ5qKW7u8RbqvcrXGYI83ad2g9XJr aYh+fMzyMjU3GxH/u5wBQE46HsV+6nqUuVdEMsQ4Yv8B8heWL3BZE0IAL+E4Emep XNLzUAN9Xow3ahp7qCL3KQzOZ6iTr388wxLCfh/TsXeQEGCWJjmBP/ZrSYov4p+r mSYaZqDUN69w5N4xcZ6JwVOJIQp6u9cFwhWMo/KXbv9XN9/cwXmAseLUrfeaA0/B Zp04eWcjhw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:44 2025 by rpki-client