This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer File: 12e1088c-ebe4-47cb-a051-5344b3551a83.cer (raw, json) Hash identifier: GMKP8Q3i7/jXYXxE29AiVibyQvM+9uK22vHDRgxq76k= Subject key identifier: 8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584C18F3DE0E6657BFAC0B030440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 06 Dec 2025 13:45:24 +0000 Certificate not after: Fri 10 Mar 2028 13:45:24 +0000 Subordinate resources: AS: 13621 IP: 104.128.78.0/23 IP: 104.204.232.0/22 IP: 198.190.171.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:f3:de:0e:66:57:bf:ac:0b:03:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 6 13:45:24 2025 GMT Not After : Mar 10 13:45:24 2028 GMT Subject: CN=12e1088c-ebe4-47cb-a051-5344b3551a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:88:e8:86:18:52:4e:35:4a:01:df:79:da: b6:ed:f7:b9:ec:9d:0d:d8:85:e0:f1:6c:1d:44:ea: 09:c6:28:3a:c8:3c:56:c8:00:87:c2:f4:33:19:98: a2:9f:ed:0a:d2:d2:2b:91:2a:88:9a:32:a5:d5:cd: a9:0a:d4:e9:a3:73:d4:f6:cc:59:34:81:8e:b8:e3: f9:19:1d:4e:28:a8:31:ca:23:dc:37:c0:48:bb:ed: e0:10:ea:2c:d9:df:e0:70:e7:ef:53:af:f4:cc:fb: 73:4c:5a:56:70:74:26:23:8f:8a:2a:bd:6b:9c:15: e1:6e:f7:48:00:8a:ef:9a:3d:cc:83:d2:4c:49:c2: 4f:f5:36:2c:49:e9:cf:9a:d6:b0:e4:89:5e:d6:ec: 1d:9a:f9:65:72:b9:84:f5:2f:cb:7e:77:f5:c5:38: 97:a0:2f:33:a1:e4:18:56:59:9d:48:6d:55:e2:96: 2b:19:ee:44:9c:f3:e2:a1:3f:d0:08:f9:5b:a6:52: 7b:b3:a7:d0:73:33:09:5f:c8:e9:b6:98:f2:06:fb: f4:41:02:30:9d:42:df:ee:53:b6:9a:a9:9c:a2:d6: 76:f6:53:d9:d9:1d:be:23:f9:55:75:79:78:5a:ba: 6a:ec:d0:cc:0f:64:a7:b3:3e:71:75:ec:a5:6a:cf: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 104.128.78.0/23 104.204.232.0/22 198.190.171.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13621 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6a:32:1a:78:a0:2f:3a:9c:4f:a5:da:54:9e:cd:99:0d:9a: 74:c8:91:86:3c:89:bc:44:b9:c3:12:4e:ef:ba:df:d9:00:66: 19:9a:26:c1:88:06:3b:2e:76:9e:c3:41:6f:a4:93:9a:c8:26: 52:d1:9c:ae:82:5e:af:d1:30:49:1d:72:13:f9:54:10:60:f2: c6:7d:84:ae:e7:38:bd:67:76:da:48:41:86:29:23:c1:da:47: 8c:ba:23:a6:9c:4d:7f:7a:0c:c1:e7:db:04:cd:cc:dc:33:26: a2:cc:23:5d:7f:7f:3e:26:54:88:78:a6:52:ef:7e:f1:c9:ee: 53:fa:74:78:9a:06:11:e5:6b:a0:c0:63:68:27:97:ac:81:72: 9c:52:ec:e3:01:fb:f8:5e:66:67:8b:72:bb:c1:73:5f:74:89: 85:cb:dc:d5:9c:be:af:42:25:59:e4:6e:e6:6a:52:f8:6e:89: 47:ae:6e:45:66:b2:19:29:19:d0:73:83:cf:4f:20:b1:87:d1: 32:51:b0:48:73:ac:61:32:26:98:ab:7f:43:50:95:d0:2a:5a: 06:fa:e7:85:2b:ca:1d:18:87:cc:f3:7a:99:ac:6d:07:71:38: ff:b3:97:d3:39:49:cd:23:95:9e:5f:2a:35:44:86:44:e4:05: e1:7d:82:19 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEwY894OZle/rAsDBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTIwNjEzNDUyNFoXDTI4MDMxMDEzNDUyNFowLzEtMCsGA1UEAxMk MTJlMTA4OGMtZWJlNC00N2NiLWEwNTEtNTM0NGIzNTUxYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYKI6IYYUk41SgHfedq27fe57J0N2IXg8Wwd ROoJxig6yDxWyACHwvQzGZiin+0K0tIrkSqImjKl1c2pCtTpo3PU9sxZNIGOuOP5 GR1OKKgxyiPcN8BIu+3gEOos2d/gcOfvU6/0zPtzTFpWcHQmI4+KKr1rnBXhbvdI AIrvmj3Mg9JMScJP9TYsSenPmtaw5Ile1uwdmvllcrmE9S/Lfnf1xTiXoC8zoeQY VlmdSG1V4pYrGe5EnPPioT/QCPlbplJ7s6fQczMJX8jptpjyBvv0QQIwnULf7lO2 mqmcotZ29lPZ2R2+I/lVdXl4Wrpq7NDMD2Snsz5xdeylas/6VwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFIoDwvnPJpUAgXm8C4XMRJ+7xbXOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x MmUxMDg4Yy1lYmU0LTQ3Y2ItYTA1MS01MzQ0YjM1NTFhODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzEyZTEwODhjLWViZTQtNDdjYi1h MDUxLTUzNDRiMzU1MWE4My8xMmUxMDg4Yy1lYmU0LTQ3Y2ItYTA1MS01MzQ0YjM1 NTFhODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAFogE4DBAJozOgDBADGvqswGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICNTUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAU2oyGnigLzqcT6XaVJ7NmQ2adMiRhjyJ vES5wxJO77rf2QBmGZomwYgGOy52nsNBb6STmsgmUtGcroJer9EwSR1yE/lUEGDy xn2Eruc4vWd22khBhikjwdpHjLojppxNf3oMwefbBM3M3DMmoswjXX9/PiZUiHim Uu9+8cnuU/p0eJoGEeVroMBjaCeXrIFynFLs4wH7+F5mZ4tyu8FzX3SJhcvc1Zy+ r0IlWeRu5mpS+G6JR65uRWayGSkZ0HODz08gsYfRMlGwSHOsYTImmKt/Q1CV0Cpa BvrnhSvKHRiHzPN6maxtB3E4/7OX0zlJzSOVnl8qNUSGROQF4X2CGQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:07:40 2025 by rpki-client