This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer File: d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer (raw, json) Hash identifier: y/jcwP3SvBkh/BRa2yXqieJk0sI58nP2+I0AMzrnkD8= Subject key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584C1078FD78B2F52089FED63B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Dec 2025 12:51:21 +0000 Certificate not after: Sat 01 Jan 2028 13:45:24 +0000 Subordinate resources: AS: 1426 AS: 12029 AS: 29798 AS: 54184 AS: 401199 IP: 66.163.223.0/24 IP: 103.246.186.0/24 IP: 104.204.252.0/23 IP: 123.100.246.0/24 IP: 203.11.72.0/24 IP: 2620:ca:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:78:fd:78:b2:f5:20:89:fe:d6:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Dec 3 12:51:21 2025 GMT Not After : Jan 1 13:45:24 2028 GMT Subject: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cb:df:0f:13:85:47:0a:e5:63:b3:f6:47:d0: 2e:41:c4:8d:f2:08:79:a0:0d:7b:d1:72:6f:b2:85: ea:69:68:d8:fc:bf:ff:4b:a1:ba:1e:fc:71:8a:8b: 3e:58:c1:c0:dd:ad:e3:b8:84:93:96:c2:a2:0a:eb: 74:0d:c4:a8:d9:0f:f1:2e:09:fb:72:3a:5c:b7:78: e2:dc:d6:54:53:59:b7:24:9f:9f:72:15:98:78:7e: 1f:48:f1:8e:50:74:8d:12:6d:08:b7:2c:23:78:a5: 93:73:3e:0e:a9:cc:db:a2:90:1a:b3:98:b2:6c:e7: dc:11:4d:7f:81:cb:86:cd:db:84:1d:0b:fc:ad:1d: dd:7b:a9:09:95:44:2c:57:2d:da:13:1e:c5:02:d4: 8b:14:b0:d6:16:bb:25:1a:e4:10:0d:e3:1e:ce:81: d1:da:0e:8d:61:44:c3:25:8c:b2:58:ae:58:1c:f0: f9:4e:09:d9:a9:c9:01:46:31:3e:8e:71:4c:84:24: ef:57:7d:42:90:3d:4d:d9:31:26:7d:36:3a:8b:46: 98:33:e4:b9:c5:d1:14:dd:8c:4a:83:e1:5b:b7:fa: e6:48:5d:9f:3f:9c:c4:58:d7:c5:f7:95:ec:a0:9f: 71:5a:f4:be:d3:51:f8:3c:5f:41:00:17:af:f9:de: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 66.163.223.0/24 103.246.186.0/24 104.204.252.0/23 123.100.246.0/24 203.11.72.0/24 IPv6: 2620:ca:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1426 12029 29798 54184 401199 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f5:0c:ca:17:17:9b:17:2f:71:03:4c:b3:54:a0:71:56:8f: 2c:19:9f:bb:9b:83:84:ea:96:c4:62:2e:3d:7c:90:4b:46:4d: 41:09:37:92:ae:98:66:c5:91:f3:fc:63:fe:8f:41:b6:ea:03: ab:86:ab:a2:c1:d0:dc:5e:4d:62:47:74:42:ba:16:5d:0f:16: f4:71:66:4b:fe:61:f0:9f:05:c7:3f:30:0c:27:9f:da:03:66: cb:47:9c:45:e9:11:e5:96:5f:8e:5e:c3:e3:a7:b8:36:61:06: f7:b6:bb:c9:b1:46:be:b6:cc:1d:a6:45:08:1b:bf:16:36:7b: 03:19:66:e0:c7:3d:0a:c2:f6:e1:dd:c9:9f:a1:a7:0a:58:a3: 98:f1:97:e6:8a:43:7a:e0:7a:65:93:35:25:b4:4a:01:da:29: 39:92:4a:29:9e:04:bf:3c:0f:26:ef:eb:bb:a0:ff:3b:2a:39: be:16:58:81:64:a7:1b:dc:39:35:ea:ce:2b:44:c1:c5:77:da: e7:b0:cc:52:40:fd:79:fc:90:c2:82:c9:c2:f0:d5:f1:b0:57: c8:b8:3d:71:e8:dc:81:a0:2a:24:43:ae:38:23:97:95:88:48: 2a:06:86:f6:3b:be:c3:43:57:6a:45:e4:43:34:6d:15:4f:b8: f8:4e:a5:88 -----BEGIN CERTIFICATE----- MIIHQzCCBiugAwIBAgIUAQ0Mn0MoWEwQeP14svUgif7WO2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTIwMzEyNTEyMVoXDTI4MDEwMTEzNDUyNFowLzEtMCsGA1UEAxMk ZDM5ZTZhMWQtYjdkYy00YjZmLWE5NWEtYjVlNDMyY2ZlYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsvfDxOFRwrlY7P2R9AuQcSN8gh5oA170XJv soXqaWjY/L//S6G6Hvxxios+WMHA3a3juISTlsKiCut0DcSo2Q/xLgn7cjpct3ji 3NZUU1m3JJ+fchWYeH4fSPGOUHSNEm0ItywjeKWTcz4OqczbopAas5iybOfcEU1/ gcuGzduEHQv8rR3de6kJlUQsVy3aEx7FAtSLFLDWFrslGuQQDeMezoHR2g6NYUTD JYyyWK5YHPD5TgnZqckBRjE+jnFMhCTvV31CkD1N2TEmfTY6i0aYM+S5xdEU3YxK g+Fbt/rmSF2fP5zEWNfF95XsoJ9xWvS+01H4PF9BABev+d7vgwIDAQABo4IEVTCC BFEwHQYDVR0OBBYEFBmjXWlLij5byrx0SXx+loSEzjUjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k MzllNmExZC1iN2RjLTRiNmYtYTk1YS1iNWU0MzJjZmVhZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QzOWU2YTFkLWI3ZGMtNGI2Zi1h OTVhLWI1ZTQzMmNmZWFlNi9kMzllNmExZC1iN2RjLTRiNmYtYTk1YS1iNWU0MzJj ZmVhZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCQEAgABMB4DBABCo98DBABn9roDBAFozPwDBAB7ZPYDBADLC0gw DwQCAAIwCQMHACYgAMqgADArBggrBgEFBQcBCAEB/wQcMBqgGDAWAgIFkgICLv0C AnRmAgMA06gCAwYfLzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB19QzKFxebFy9xA0yzVKBxVo8sGZ+7m4OE 6pbEYi49fJBLRk1BCTeSrphmxZHz/GP+j0G26gOrhquiwdDcXk1iR3RCuhZdDxb0 cWZL/mHwnwXHPzAMJ5/aA2bLR5xF6RHlll+OXsPjp7g2YQb3trvJsUa+tswdpkUI G78WNnsDGWbgxz0Kwvbh3cmfoacKWKOY8ZfmikN64HplkzUltEoB2ik5kkopngS/ PA8m7+u7oP87Kjm+FliBZKcb3Dk16s4rRMHFd9rnsMxSQP15/JDCgsnC8NXxsFfI uD1x6NyBoCokQ644I5eViEgqBob2O77DQ1dqReRDNG0VT7j4TqWI -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:45 2025 by rpki-client