This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer File: 214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer (raw, json) Hash identifier: SxktIRJ86WkdJ0SOHSELnqqG2wGslZo5SoRyU8vgUy4= Subject key identifier: F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584C16292D63C1CDF86F9A679580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Dec 2025 13:45:23 +0000 Certificate not after: Thu 09 Mar 2028 13:45:23 +0000 Subordinate resources: AS: 22023 AS: 394506 AS: 394600 AS: 394959 AS: 399072 IP: 104.254.132.0/22 IP: 155.94.112.0/20 IP: 207.154.128.0/18 IP: 208.78.84.0/23 IP: 2620:2e:40c0::/44 IP: 2620:34:6000::/44 IP: 2620:dc:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:29:2d:63:c1:cd:f8:6f:9a:67:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Dec 5 13:45:23 2025 GMT Not After : Mar 9 13:45:23 2028 GMT Subject: CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:aa:9d:9e:13:25:a4:c8:a3:7f:2b:14:e5: 5f:3e:28:21:53:98:9d:e4:5b:a7:fb:cf:7b:59:ed: eb:03:d6:68:35:67:a6:8f:d7:4f:26:cf:d8:7c:3b: 27:73:ce:90:67:6c:1a:92:de:f2:29:1a:84:e0:9f: 81:e9:6d:7f:03:79:98:3d:39:ff:9f:d8:cb:ea:5d: 2e:29:d9:33:62:ed:14:57:df:d3:81:bd:ed:95:6a: fc:76:c0:f3:66:e2:53:7c:cb:43:21:98:89:91:34: d2:cf:ae:4e:9a:48:96:2d:59:ef:ce:f3:2c:a8:b7: 8b:14:24:8a:f3:d6:b5:e1:f5:a3:ad:de:7f:d9:2d: 27:69:84:38:15:fa:49:72:0d:d7:3c:d0:c9:4c:71: 83:82:87:ea:3c:1e:63:0f:11:e4:64:bb:6b:cd:05: e6:dd:74:04:3a:9f:4c:b3:e5:de:16:27:54:fc:2b: 8c:cb:43:7e:93:19:08:67:a6:72:91:2d:29:17:13: ec:32:5c:5e:3f:16:a3:8a:e8:4c:1f:4c:20:2b:a4: 7e:02:aa:a2:ab:a7:dc:44:bb:3f:8a:c1:31:a4:08: ed:2d:37:3f:58:68:1a:99:cb:c7:6f:56:75:05:95: a6:22:1a:90:0f:90:c2:8e:43:ba:9b:af:2d:f0:2f: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 104.254.132.0/22 155.94.112.0/20 207.154.128.0/18 208.78.84.0/23 IPv6: 2620:2e:40c0::/44 2620:34:6000::/44 2620:dc:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22023 394506 394600 394959 399072 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e9:bb:1f:f1:67:42:cf:fe:97:f6:43:29:96:25:aa:7d:5f: 3b:63:c3:2e:ca:32:5b:d3:14:c4:f4:bf:59:53:f7:98:23:b3: 6e:ce:a4:a1:77:ce:af:28:f1:d7:56:9d:a0:ce:fb:67:30:09: 52:31:99:5f:84:0e:10:d4:d0:eb:0f:4c:0d:e9:fe:73:08:a9: cb:dd:fd:20:c2:ec:09:45:b3:5f:37:a5:af:20:80:a1:c1:f3: 38:8f:9c:06:76:84:d2:1e:4d:e2:da:8c:0e:e1:aa:da:92:cb: 96:ee:0c:56:a3:96:eb:1e:df:a5:66:5d:be:22:88:cf:26:45: ec:1a:e5:9d:93:f1:d4:f5:d6:16:43:b7:79:38:96:de:4f:05: 35:28:a6:8a:e0:a6:80:21:21:f1:c0:c0:07:09:e0:a5:62:79: 3c:cb:c1:09:1f:27:6c:76:43:0b:c7:6d:30:a1:9d:44:90:ad: a2:f2:f0:53:b3:2e:0c:31:d2:91:f8:f0:d3:a9:08:0d:f3:ab: c2:61:93:31:06:c3:63:36:b2:8a:ff:be:1f:27:a0:7c:6d:2b: 9e:90:4a:8b:25:c7:71:2d:51:6a:09:7a:ea:77:38:50:69:1e: 18:ca:be:47:10:22:e5:8c:dc:4d:8a:92:18:a8:70:2a:f9:7e: 93:1c:30:cd -----BEGIN CERTIFICATE----- MIIHUDCCBjigAwIBAgIUAQ0Mn0MoWEwWKS1jwc34b5pnlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MTIwNTEzNDUyM1oXDTI4MDMwOTEzNDUyM1owLzEtMCsGA1UEAxMk MjE0ZGU5MWQtYjVkYi00YWEzLWFhYjktMmE3ZjJjMDA3NWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lmqnZ4TJaTIo38rFOVfPighU5id5Fun+897 We3rA9ZoNWemj9dPJs/YfDsnc86QZ2wakt7yKRqE4J+B6W1/A3mYPTn/n9jL6l0u KdkzYu0UV9/Tgb3tlWr8dsDzZuJTfMtDIZiJkTTSz65OmkiWLVnvzvMsqLeLFCSK 89a14fWjrd5/2S0naYQ4FfpJcg3XPNDJTHGDgofqPB5jDxHkZLtrzQXm3XQEOp9M s+XeFidU/CuMy0N+kxkIZ6ZykS0pFxPsMlxePxajiuhMH0wgK6R+Aqqiq6fcRLs/ isExpAjtLTc/WGgamcvHb1Z1BZWmIhqQD5DCjkO6m68t8C9S5wIDAQABo4IEYjCC BF4wHQYDVR0OBBYEFPe3mVx7GjAYzJkKBC1T3IC+ArAdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y MTRkZTkxZC1iNWRiLTRhYTMtYWFiOS0yYTdmMmMwMDc1YjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzIxNGRlOTFkLWI1ZGItNGFhMy1h YWI5LTJhN2YyYzAwNzViNi8yMTRkZTkxZC1iNWRiLTRhYTMtYWFiOS0yYTdmMmMw MDc1YjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwUwYIKwYBBQUH AQcBAf8ERDBCMB4EAgABMBgDBAJo/oQDBASbXnADBAbPmoADBAHQTlQwIAQCAAIw GgMHBCYgAC5AwAMHBCYgADRgAAMGACYgANxAMC0GCCsGAQUFBwEIAQH/BB4wHKAa MBgCAlYHAgMGBQoCAwYFaAIDBgbPAgMGFuAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYem7H/FnQs/+l/ZD KZYlqn1fO2PDLsoyW9MUxPS/WVP3mCOzbs6koXfOryjx11adoM77ZzAJUjGZX4QO ENTQ6w9MDen+cwipy939IMLsCUWzXzelryCAocHzOI+cBnaE0h5N4tqMDuGq2pLL lu4MVqOW6x7fpWZdviKIzyZF7BrlnZPx1PXWFkO3eTiW3k8FNSimiuCmgCEh8cDA BwngpWJ5PMvBCR8nbHZDC8dtMKGdRJCtovLwU7MuDDHSkfjw06kIDfOrwmGTMQbD Yzayiv++HyegfG0rnpBKiyXHcS1Ragl66nc4UGkeGMq+RxAi5YzcTYqSGKhwKvl+ kxwwzQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:11:55 2025 by rpki-client