This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.cer File: 3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.cer (raw, json) Hash identifier: qjvXYKvlZ4+iS06Hsez9xX6jqNJaMUCyMM8/EJR1wwE= Subject key identifier: 34:75:A4:CD:48:96:B4:D7:99:49:1A:2A:CA:81:36:F6:01:E8:67:20 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584BF773A815D9BADD4AD74A5700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Nov 2025 13:45:24 +0000 Certificate not after: Sun 27 Feb 2028 13:45:24 +0000 Subordinate resources: AS: 17015 IP: 23.153.152.0/24 IP: 130.51.79.0/24 IP: 2606:6bc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:73:a8:15:d9:ba:dd:4a:d7:4a:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 24 13:45:24 2025 GMT Not After : Feb 27 13:45:24 2028 GMT Subject: CN=3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:0c:d3:c4:3a:83:ec:a6:d8:cf:df:31:7a: 71:bd:f4:c3:f0:5e:d9:6c:37:02:f9:9c:7b:9b:f3: bb:1f:dd:b8:1c:f4:b5:68:d4:7e:a2:65:ea:8c:1f: e3:c2:54:09:f2:b8:90:5f:96:a4:2c:b8:ff:8e:21: b4:1a:f7:07:f5:7c:a9:b1:b2:df:b0:03:1d:cc:86: 2a:57:72:73:06:dd:4b:2a:ff:d5:9d:b1:31:92:9a: aa:c2:85:9c:e0:6b:f7:3e:3b:71:de:d5:77:59:60: ea:40:90:34:31:a6:23:4d:84:20:2c:ac:b1:4b:f4: c7:f0:8f:2f:32:9e:f6:9a:ab:9b:fe:66:b7:15:67: 69:0c:1f:c9:ce:6a:23:a1:72:b8:4c:6a:ce:25:c8: 9c:b5:12:8b:aa:b9:81:a6:bf:07:e0:0d:e1:5d:24: 5f:78:79:82:3c:3a:1e:77:f2:f8:c5:71:39:38:e7: 10:4a:ee:80:b2:89:4d:3a:a0:ae:a2:ac:fe:b8:eb: b3:73:57:88:19:76:ee:bf:42:4b:5d:96:c5:5d:d7: 6c:3f:cb:40:c8:fa:4b:ec:71:94:e2:47:1c:cb:cc: 26:c7:fc:32:95:3d:ab:b1:d7:b5:be:04:df:62:f0: ba:b6:d1:5e:cb:b1:2a:3b:3b:41:87:61:ec:24:fe: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:75:A4:CD:48:96:B4:D7:99:49:1A:2A:CA:81:36:F6:01:E8:67:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.153.152.0/24 130.51.79.0/24 IPv6: 2606:6bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17015 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ff:2a:2f:44:68:be:f5:fa:44:b7:d8:6c:a6:89:c4:da:70: 5f:a8:af:39:e8:f8:08:a9:18:7c:26:23:7d:c4:5c:37:ec:7e: 6d:30:c7:4f:0b:6b:da:51:46:b4:a7:b8:eb:c8:72:25:0f:8f: 0a:26:6b:ce:61:23:86:2f:eb:3b:ca:82:cc:bd:34:ff:ba:55: cb:22:cf:93:18:a9:44:28:be:a9:c1:93:a6:6e:2e:e4:df:2b: cc:f4:f0:c5:fb:2e:30:a2:9b:a5:df:7c:93:a5:8a:4a:f6:09: 8d:49:f8:0e:82:a4:1a:66:aa:c1:87:f0:00:5e:ae:18:d7:32: 97:5a:ee:ac:53:74:ba:b5:ec:23:ce:e5:bf:f3:d1:f0:6e:0b: 81:f7:cf:88:fa:88:8b:ea:8e:b6:c8:4f:17:ee:02:c8:e6:44: 75:4d:d1:53:95:f1:b5:df:27:cf:53:a2:81:28:6a:9c:c6:cf: d6:2f:ef:11:2d:44:31:e8:7d:f4:87:f2:61:d3:5b:98:7b:8d: 63:75:98:e2:0c:78:d9:9d:97:1e:fa:0e:e6:30:b1:cb:ad:e5: 20:06:e9:27:ee:00:c3:99:40:f9:cd:42:33:65:ca:8b:14:74: 98:73:b0:54:e2:bf:a2:0d:5f:17:7a:35:00:a1:43:4a:1a:4a: 03:0e:33:38 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEv3c6gV2brdStdKVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTEyNDEzNDUyNFoXDTI4MDIyNzEzNDUyNFowLzEtMCsGA1UEAxMk M2FkMzNlOGMtODk4Yy00Y2YxLWI3ZWYtNDhmN2U0NGY0YmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluAM08Q6g+ym2M/fMXpxvfTD8F7ZbDcC+Zx7 m/O7H924HPS1aNR+omXqjB/jwlQJ8riQX5akLLj/jiG0GvcH9XypsbLfsAMdzIYq V3JzBt1LKv/VnbExkpqqwoWc4Gv3Pjtx3tV3WWDqQJA0MaYjTYQgLKyxS/TH8I8v Mp72mqub/ma3FWdpDB/JzmojoXK4TGrOJcictRKLqrmBpr8H4A3hXSRfeHmCPDoe d/L4xXE5OOcQSu6AsolNOqCuoqz+uOuzc1eIGXbuv0JLXZbFXddsP8tAyPpL7HGU 4kccy8wmx/wylT2rsde1vgTfYvC6ttFey7EqOztBh2HsJP5+gQIDAQABo4IELzCC BCswHQYDVR0OBBYEFDR1pM1IlrTXmUkaKsqBNvYB6GcgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z YWQzM2U4Yy04OThjLTRjZjEtYjdlZi00OGY3ZTQ0ZjRiZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzNhZDMzZThjLTg5OGMtNGNmMS1i N2VmLTQ4ZjdlNDRmNGJmNi8zYWQzM2U4Yy04OThjLTRjZjEtYjdlZi00OGY3ZTQ0 ZjRiZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXmZgDBACCM08wDQQCAAIwBwMFACYGa8AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICQncwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALf8qL0RovvX6RLfYbKaJ xNpwX6ivOej4CKkYfCYjfcRcN+x+bTDHTwtr2lFGtKe468hyJQ+PCiZrzmEjhi/r O8qCzL00/7pVyyLPkxipRCi+qcGTpm4u5N8rzPTwxfsuMKKbpd98k6WKSvYJjUn4 DoKkGmaqwYfwAF6uGNcyl1rurFN0urXsI87lv/PR8G4LgffPiPqIi+qOtshPF+4C yOZEdU3RU5Xxtd8nz1OigShqnMbP1i/vES1EMeh99IfyYdNbmHuNY3WY4gx42Z2X HvoO5jCxy63lIAbpJ+4Aw5lA+c1CM2XKixR0mHOwVOK/og1fF3o1AKFDShpKAw4z OA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:01:55 2025 by rpki-client