This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.cer (raw, json) Hash identifier: b4nrxkBc+vjuQ2n0TuMkFV9h5CYWp5l5+67Z3npDMcw= Subject key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584C0AFE72A9F32A04DCE177E900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Dec 2025 13:45:24 +0000 Certificate not after: Sun 05 Mar 2028 13:45:24 +0000 Subordinate resources: AS: 397627 IP: 192.203.253.0/24 IP: 2607:4540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0a:fe:72:a9:f3:2a:04:dc:e1:77:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 1 13:45:24 2025 GMT Not After : Mar 5 13:45:24 2028 GMT Subject: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:ef:de:fa:81:ce:8e:a7:5e:2d:28:c4:82: 10:fc:0b:80:fc:b8:10:44:e4:69:96:d7:1f:27:01: f4:68:31:9f:90:d9:33:81:a8:6b:39:f6:43:67:04: b1:f7:ef:39:c5:9b:00:82:b4:c3:dc:f5:66:54:65: 31:19:d1:06:27:09:ba:52:c2:4a:3d:37:b5:9a:e1: b9:c3:ef:5f:ff:bf:93:86:e4:7f:f1:8b:7e:01:ee: 03:3e:56:87:c6:d8:ba:dc:64:bf:1c:5f:f5:0c:0d: a0:6a:d9:15:dc:e3:2b:69:ea:6d:71:2f:d1:d9:a1: d3:78:a8:0b:99:3c:b6:7a:72:6c:6b:b6:99:83:e4: 80:c7:ce:8e:c1:3b:69:b9:af:d3:bf:66:7d:c8:b8: ed:23:f5:9a:28:82:0f:fb:df:af:b5:c2:9f:e7:10: 2a:ba:1a:ac:94:1e:c3:96:93:68:e0:e1:42:9e:8d: 10:bc:93:b8:16:77:bb:63:84:56:38:04:1f:3c:54: 19:28:7a:66:82:77:7b:9e:bd:2c:c8:7b:ad:7c:6a: b0:7c:b3:27:25:23:8a:01:40:ce:2f:0f:d9:d7:2a: 01:71:5f:10:6d:4b:36:06:af:78:4b:9c:84:f4:de: a1:ec:33:f6:8c:ad:5b:3f:ec:e4:62:79:0e:0f:68: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.203.253.0/24 IPv6: 2607:4540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397627 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f2:d7:87:75:cd:3c:c2:a2:4b:8f:dc:8f:fe:93:4e:13:2f: 09:32:a9:21:cf:03:38:ba:c0:68:4d:48:1d:42:6d:be:43:47: 3d:8a:85:e9:23:0f:26:9e:5c:97:5f:ac:af:8b:c6:d8:1d:ff: c2:75:06:50:9c:38:27:8c:52:5d:e4:b1:b8:03:d2:ad:02:91: 34:1e:f3:76:eb:c6:4c:81:60:f6:15:e7:79:51:10:49:d0:e9: 5e:dc:ba:56:24:27:2e:bb:d3:7e:c0:91:6c:de:35:da:f4:a9: 1c:0a:74:84:d6:a0:7b:c5:c2:e2:51:2f:7b:05:e7:05:ea:be: b6:2a:c2:42:cc:29:ac:3d:d8:7e:b2:77:69:e9:6c:33:12:98: b9:c7:67:b7:4e:b3:ac:87:4a:97:11:bf:4e:af:4d:aa:55:14: fb:d6:7c:fd:24:30:3c:a1:5c:96:07:96:13:ae:18:4d:72:0a: 9e:8d:f3:53:a7:a3:fc:c8:9d:98:b8:52:83:4e:fd:13:6c:3f: f9:7b:09:72:5c:c5:cb:79:15:21:b7:ce:bc:e0:9e:93:da:f3: 7f:6c:51:62:7a:d1:ee:dd:e4:f6:b2:35:73:19:ac:d0:a8:b1: c5:dd:8b:3e:4a:5b:c1:33:8f:06:cf:bc:13:c1:77:ea:7f:b0: b5:e8:32:92 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEwK/nKp8yoE3OF36QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTIwMTEzNDUyNFoXDTI4MDMwNTEzNDUyNFowLzEtMCsGA1UEAxMk MGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0MjcxZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaDv3vqBzo6nXi0oxIIQ/AuA/LgQRORpltcf JwH0aDGfkNkzgahrOfZDZwSx9+85xZsAgrTD3PVmVGUxGdEGJwm6UsJKPTe1muG5 w+9f/7+ThuR/8Yt+Ae4DPlaHxti63GS/HF/1DA2gatkV3OMraeptcS/R2aHTeKgL mTy2enJsa7aZg+SAx86OwTtpua/Tv2Z9yLjtI/WaKIIP+9+vtcKf5xAquhqslB7D lpNo4OFCno0QvJO4Fne7Y4RWOAQfPFQZKHpmgnd7nr0syHutfGqwfLMnJSOKAUDO Lw/Z1yoBcV8QbUs2Bq94S5yE9N6h7DP2jK1bP+zkYnkOD2j64QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJFHDNvfyxrPub4vgpcAd4yW5S1kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w YWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzBhZjIxZGUwLTJjYWUtNDVmNy1i NDJjLTk1OThjNDI3MWVmMC8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQy NzFlZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADAy/0wDQQCAAIwBwMFACYHRUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhE7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEvy14d1zTzCokuP3I/+k04TLwky qSHPAzi6wGhNSB1Cbb5DRz2KhekjDyaeXJdfrK+Lxtgd/8J1BlCcOCeMUl3ksbgD 0q0CkTQe83brxkyBYPYV53lREEnQ6V7culYkJy67037AkWzeNdr0qRwKdITWoHvF wuJRL3sF5wXqvrYqwkLMKaw92H6yd2npbDMSmLnHZ7dOs6yHSpcRv06vTapVFPvW fP0kMDyhXJYHlhOuGE1yCp6N81Ono/zInZi4UoNO/RNsP/l7CXJcxct5FSG3zrzg npPa839sUWJ60e7d5PayNXMZrNCoscXdiz5KW8EzjwbPvBPBd+p/sLXoMpI= -----END CERTIFICATE-----Generated at Sat Dec 6 07:37:18 2025 by rpki-client