This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0b6aac96-cdd0-4d29-9080-eeb348efc9e6.cer File: 0b6aac96-cdd0-4d29-9080-eeb348efc9e6.cer (raw, json) Hash identifier: M6HwN7sK6D0Qu6B0mdkOoAvZvX7El12mVDjbjO+u2zM= Subject key identifier: A0:26:3E:0E:BF:E5:87:6D:DF:DB:8B:E0:2C:41:FD:CA:54:E5:A2:A6 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848EC8EE1116E71EDD0F23E5880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0b6aac96-cdd0-4d29-9080-eeb348efc9e6/0b6aac96-cdd0-4d29-9080-eeb348efc9e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0b6aac96-cdd0-4d29-9080-eeb348efc9e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 13:45:32 +0000 Certificate not after: Mon 24 May 2027 12:45:32 +0000 Subordinate resources: IP: 204.122.17.0/24 Validation: Failed, certificate revoked on Mon 27 Oct 2025 18:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:8e:e1:11:6e:71:ed:d0:f2:3e:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 18 13:45:32 2025 GMT Not After : May 24 12:45:32 2027 GMT Subject: CN=0b6aac96-cdd0-4d29-9080-eeb348efc9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:10:b2:8a:95:8a:d8:c1:e2:ff:ef:7c:5f: cd:5d:d0:37:59:f9:44:a6:42:1a:73:55:b2:82:11: fc:63:c4:29:4d:ad:37:a5:32:4a:6d:7b:4a:8e:2b: 2b:57:6d:e0:fd:3a:bb:86:e9:39:bd:fc:51:ec:81: 9d:ea:fa:8c:85:2d:f7:6e:b7:c2:82:6b:f9:09:fb: b6:3c:34:b8:1e:71:7c:27:8e:6c:1e:a0:d6:b9:ac: 5d:a5:e3:55:f6:8d:2a:e7:1a:9e:14:75:1d:c1:f8: 43:ed:8d:67:e7:37:ec:f7:f0:47:cc:e8:b1:f3:d8: 9d:e9:40:19:29:09:07:20:d0:1b:64:bc:83:85:0a: 5c:01:3b:2f:25:f8:d2:69:3d:aa:72:c7:0b:f0:18: 96:40:97:25:0b:94:16:3e:bb:35:f3:51:c0:2e:99: d7:ef:62:3d:9c:07:91:02:da:e5:f9:21:11:4e:da: c0:aa:54:50:2d:2d:3c:e4:86:52:45:39:55:9a:02: 1e:fd:38:d6:bd:68:3b:3b:c7:af:29:f5:bd:8c:12: d3:41:88:2f:17:f8:43:79:70:13:c6:7c:88:a8:48: b9:a5:63:6d:db:ab:81:3f:6d:89:c7:f9:26:01:d7: b3:ae:1c:e3:84:9d:6d:10:8a:93:8a:d6:4c:fa:a4: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:26:3E:0E:BF:E5:87:6D:DF:DB:8B:E0:2C:41:FD:CA:54:E5:A2:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0b6aac96-cdd0-4d29-9080-eeb348efc9e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0b6aac96-cdd0-4d29-9080-eeb348efc9e6/0b6aac96-cdd0-4d29-9080-eeb348efc9e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.122.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:95:0a:bd:33:7d:44:3c:b2:91:06:d5:14:9a:e2:56:38:4f: bc:42:9c:d0:16:45:1d:77:63:b8:6b:db:fc:e6:59:b8:91:1c: 8a:83:e6:6d:7c:ad:ac:8f:14:14:2d:9d:b0:c7:8f:e0:18:f6: 8f:91:30:ae:a4:2c:1c:71:c3:34:83:75:15:3e:e2:25:2d:b6: 06:5f:f4:5b:38:e0:84:c1:20:91:47:f0:cc:cc:6e:2e:b1:53: dd:c7:c5:ac:d5:49:c0:13:7f:86:27:3e:25:b1:f0:08:03:7d: 89:15:ff:24:5f:ce:e9:de:c6:f4:8c:70:00:c9:9b:3b:9e:20: 9d:bc:0f:d0:10:4e:1e:a6:48:a8:89:e3:e1:16:10:24:71:fe: b4:e9:85:5f:f7:86:d0:bf:6a:85:28:96:92:08:4d:73:44:69: 68:dc:83:37:95:35:2f:2e:63:b0:07:18:0a:33:4b:3e:a7:6f: b9:05:d5:62:62:d2:4f:aa:0c:f2:fa:71:02:f2:31:58:c5:d4: 84:1d:19:cd:ef:3d:d9:04:ea:ca:24:71:5b:61:e8:0f:9d:74: d9:5e:f8:ad:44:f5:1a:3f:09:97:d3:86:77:40:ae:c0:af:b4: 27:f9:f5:1c:ea:b7:b0:69:ab:94:15:b6:55:72:87:38:b5:13: 54:d0:a8:64 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEjsjuERbnHt0PI+WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxODEzNDUzMloXDTI3MDUyNDEyNDUzMlowLzEtMCsGA1UEAxMk MGI2YWFjOTYtY2RkMC00ZDI5LTkwODAtZWViMzQ4ZWZjOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8kQsoqVitjB4v/vfF/NXdA3WflEpkIac1Wy ghH8Y8QpTa03pTJKbXtKjisrV23g/Tq7huk5vfxR7IGd6vqMhS33brfCgmv5Cfu2 PDS4HnF8J45sHqDWuaxdpeNV9o0q5xqeFHUdwfhD7Y1n5zfs9/BHzOix89id6UAZ KQkHINAbZLyDhQpcATsvJfjSaT2qcscL8BiWQJclC5QWPrs181HALpnX72I9nAeR Atrl+SERTtrAqlRQLS085IZSRTlVmgIe/TjWvWg7O8evKfW9jBLTQYgvF/hDeXAT xnyIqEi5pWNt26uBP22Jx/kmAdezrhzjhJ1tEIqTitZM+qRtSwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKAmPg6/5Ydt39uL4CxB/cpU5aKmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w YjZhYWM5Ni1jZGQwLTRkMjktOTA4MC1lZWIzNDhlZmM5ZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzBiNmFhYzk2LWNkZDAtNGQyOS05 MDgwLWVlYjM0OGVmYzllNi8wYjZhYWM5Ni1jZGQwLTRkMjktOTA4MC1lZWIzNDhl ZmM5ZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMehEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXZUKvTN9RDyykQbVFJri VjhPvEKc0BZFHXdjuGvb/OZZuJEcioPmbXytrI8UFC2dsMeP4Bj2j5EwrqQsHHHD NIN1FT7iJS22Bl/0WzjghMEgkUfwzMxuLrFT3cfFrNVJwBN/hic+JbHwCAN9iRX/ JF/O6d7G9IxwAMmbO54gnbwP0BBOHqZIqInj4RYQJHH+tOmFX/eG0L9qhSiWkghN c0RpaNyDN5U1Ly5jsAcYCjNLPqdvuQXVYmLST6oM8vpxAvIxWMXUhB0Zze892QTq yiRxW2HoD5102V74rUT1Gj8Jl9OGd0CuwK+0J/n1HOq3sGmrlBW2VXKHOLUTVNCo ZA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:19:38 2025 by rpki-client