This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer File: c3b90f7d-2bc6-4942-a304-98a91a506d72.cer (raw, json) Hash identifier: ZEsLdhMKdf+01pY/NgPBnNz9eC228DudqEZGRBWL3Gc= Subject key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C34CFCBEA74EF47C6D7FCA3A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Dec 2025 13:15:21 +0000 Certificate not after: Sun 20 Feb 2028 01:45:22 +0000 Subordinate resources: AS: 13483 AS: 14356 AS: 396137 IP: 159.172.0.0/16 IP: 165.217.0.0 -- 165.217.95.255 IP: 165.217.112.0/20 IP: 165.217.144.0 -- 165.217.255.255 IP: 198.102.215.0 -- 198.102.216.255 IP: 207.54.32.0/19 IP: 2604:ba80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:34:cf:cb:ea:74:ef:47:c6:d7:fc:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 16 13:15:21 2025 GMT Not After : Feb 20 01:45:22 2028 GMT Subject: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bf:68:d3:42:53:3c:60:cb:03:7f:7c:b5:b8: 44:35:44:cb:63:f7:c2:33:51:e8:89:e3:60:14:7f: fc:ce:72:d6:75:54:3e:ec:87:a1:84:79:2d:8e:b7: 33:f2:49:20:bc:c7:a9:b1:8d:46:ae:c5:52:c2:d8: 5a:44:b6:88:c0:76:ab:18:60:b4:8a:1d:02:85:77: 89:57:dc:82:9e:6a:3b:9a:fb:ad:ee:4f:9b:5e:8e: 84:57:7d:60:ce:a7:5f:0d:8c:db:df:fa:5d:20:5d: 72:26:6c:cb:20:a9:bc:44:57:04:9d:86:f0:b8:c5: d6:dc:a0:e4:4f:12:06:bd:fc:6d:c4:76:31:b1:d4: 70:c1:70:1a:3d:a3:50:b0:fa:1a:d8:7c:66:7f:44: 3b:51:09:38:c2:32:70:3f:c7:6a:f6:ad:2d:71:36: 28:8c:f1:a4:ab:90:76:59:4a:7f:6b:96:f0:66:b6: 83:e4:43:e1:f3:32:ee:07:56:0e:46:1b:6e:5c:20: 0d:e2:d1:c2:f7:89:e9:44:c2:a5:f4:a9:ab:f9:b9: c5:45:30:ed:a6:bd:14:08:77:9f:2f:81:21:c5:9b: 1c:90:50:1d:f2:7a:5f:d2:9b:bc:bd:f3:38:c5:e8: 60:ba:4b:17:96:85:28:84:31:0d:a9:c3:3d:b9:85: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 159.172.0.0/16 165.217.0.0-165.217.95.255 165.217.112.0/20 165.217.144.0-165.217.255.255 198.102.215.0-198.102.216.255 207.54.32.0/19 IPv6: 2604:ba80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13483 14356 396137 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:92:68:0d:16:c0:b6:2a:1c:89:ea:e2:4c:c2:65:06:e7:ce: fa:15:58:2f:f3:13:e0:71:08:a5:3b:25:a6:81:94:0a:f8:6f: 18:89:9c:3d:d9:b5:5e:6a:fc:e3:1d:8b:00:12:1d:50:30:dc: 71:71:b2:5b:b3:c1:66:54:e3:fc:8e:0a:0d:05:f9:2c:7a:3a: 2d:e1:18:62:6f:3a:db:bb:fe:96:bf:49:07:c4:72:ea:13:be: b5:f9:5e:af:4f:e8:ca:e2:24:81:f3:6a:de:f9:82:63:2b:c4: c4:96:17:6a:2a:34:e2:6d:a6:0e:63:f3:49:4b:0d:f0:8e:70: b9:ee:15:b7:89:cb:6f:d5:95:60:16:56:bc:f3:f8:b8:56:9a: 63:5a:cf:9e:58:0f:bd:46:c8:bd:eb:ea:8b:ab:20:a3:34:fe: 52:e7:ae:46:7f:ac:c3:51:8e:e7:8d:ff:c7:07:28:f1:ea:09: 18:7f:6b:0b:cf:46:0f:46:76:d1:d5:fb:28:48:d7:1c:5a:aa: 1a:f4:d4:b1:25:37:44:17:77:11:f8:dc:01:81:0f:ff:a2:03: 6b:78:cf:ab:cf:fc:d9:90:0a:36:c7:a0:d6:16:ef:37:3e:d1: fb:14:94:2b:c7:60:25:3b:38:1e:3c:64:e4:f0:43:d5:18:63: 05:cc:20:dd -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEw0z8vqdO9Hxtf8o6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTIxNjEzMTUyMVoXDTI4MDIyMDAxNDUyMlowLzEtMCsGA1UEAxMk YzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2ZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib9o00JTPGDLA398tbhENUTLY/fCM1HoieNg FH/8znLWdVQ+7IehhHktjrcz8kkgvMepsY1GrsVSwthaRLaIwHarGGC0ih0ChXeJ V9yCnmo7mvut7k+bXo6EV31gzqdfDYzb3/pdIF1yJmzLIKm8RFcEnYbwuMXW3KDk TxIGvfxtxHYxsdRwwXAaPaNQsPoa2Hxmf0Q7UQk4wjJwP8dq9q0tcTYojPGkq5B2 WUp/a5bwZraD5EPh8zLuB1YORhtuXCAN4tHC94npRMKl9Kmr+bnFRTDtpr0UCHef L4EhxZsckFAd8npf0pu8vfM4xehguksXloUohDENqcM9uYVw9QIDAQABo4IEZTCC BGEwHQYDVR0OBBYEFHSjh5btLayRicgijxTj1wA3NdjSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9j M2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2MzYjkwZjdkLTJiYzYtNDk0Mi1h MzA0LTk4YTkxYTUwNmQ3Mi9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1 MDZkNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwYQYIKwYBBQUH AQcBAf8EUjBQMD8EAgABMDkDAwCfrDALAwMApdkDBAWl2UADBASl2XAwCwMEBKXZ kAMDAaXYMAwDBADGZtcDBADGZtgDBAXPNiAwDQQCAAIwBwMFACYEuoAwIgYIKwYB BQUHAQgBAf8EEzARoA8wDQICNKsCAjgUAgMGC2kwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVJJoDRbAtioc ieriTMJlBufO+hVYL/MT4HEIpTslpoGUCvhvGImcPdm1Xmr84x2LABIdUDDccXGy W7PBZlTj/I4KDQX5LHo6LeEYYm8627v+lr9JB8Ry6hO+tfler0/oyuIkgfNq3vmC YyvExJYXaio04m2mDmPzSUsN8I5wue4Vt4nLb9WVYBZWvPP4uFaaY1rPnlgPvUbI vevqi6sgozT+UueuRn+sw1GO543/xwco8eoJGH9rC89GD0Z20dX7KEjXHFqqGvTU sSU3RBd3EfjcAYEP/6IDa3jPq8/82ZAKNseg1hbvNz7R+xSUK8dgJTs4Hjxk5PBD 1RhjBcwg3Q== -----END CERTIFICATE-----Generated at Thu Dec 18 12:52:03 2025 by rpki-client