This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer File: b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer (raw, json) Hash identifier: hSL3hwGOxbrEJUusldU3lq6vpBOnMp+6sZN1jp4tXsM= Subject key identifier: 2B:7B:77:56:E4:AD:D2:16:5D:12:8B:55:09:D7:10:69:3D:E4:18:8F Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584C0403B9956AF7E125EA776C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 29 Nov 2025 01:45:23 +0000 Certificate not after: Fri 03 Mar 2028 01:45:23 +0000 Subordinate resources: AS: 19680 IP: 23.153.232.0/24 IP: 2602:fa7a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:04:03:b9:95:6a:f7:e1:25:ea:77:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 29 01:45:23 2025 GMT Not After : Mar 3 01:45:23 2028 GMT Subject: CN=b150e98d-80e9-45f6-bc63-6b40a3d59e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:e1:ef:53:8e:78:11:9e:78:d6:fd:ea:94: 45:39:88:e6:b5:0d:11:ab:74:b0:70:51:82:27:d5: c2:18:d3:2d:63:50:b6:41:48:09:96:54:20:0d:97: 80:a9:bb:31:eb:de:1e:2c:bb:b1:09:6c:90:52:f3: 87:5a:78:36:68:ac:57:6e:83:a5:e4:db:41:c9:ac: 2f:8a:0d:d1:f2:04:cc:b5:55:60:7d:86:be:5d:6d: 0d:41:ec:94:c5:9d:29:94:1c:11:05:89:96:a7:46: b1:ca:6e:58:84:82:67:96:19:cc:cf:9d:c3:b0:ec: 2c:37:a6:91:2e:1a:e3:2d:22:04:37:5b:76:a6:e5: 6e:ad:cd:55:c1:14:cb:91:3f:5d:bf:6d:4b:3a:4c: bb:41:83:42:86:c3:40:10:6a:18:94:b2:8f:84:47: 17:71:65:61:1b:cd:1b:58:d1:8b:25:a5:e2:0b:22: 81:1e:59:d7:96:d8:e4:c1:7f:e7:d2:da:30:a6:49: 62:ea:e0:77:f7:72:49:d3:84:ab:19:59:97:c0:ab: ad:c5:37:95:8a:8f:4d:41:1c:2e:57:9b:56:fd:a6: b8:cd:bd:d4:29:33:f5:11:dd:77:f8:fd:52:7c:0c: 8d:fb:eb:f4:77:62:ff:93:b0:c8:d4:58:3c:bf:4b: 02:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7B:77:56:E4:AD:D2:16:5D:12:8B:55:09:D7:10:69:3D:E4:18:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.153.232.0/24 IPv6: 2602:fa7a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19680 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fe:43:a5:6a:c0:c3:2b:75:1e:c4:7c:87:f9:e3:6e:44:c9: f9:b2:21:44:56:bd:b5:12:25:d8:cf:24:1c:47:3e:a8:f8:87: a1:42:23:2a:15:2e:88:11:40:2c:b6:10:32:19:1a:a6:e7:35: 7f:43:55:69:3f:8b:bf:d2:ed:fb:a7:b2:d3:de:54:e3:5e:a1: f2:9e:87:84:b8:ff:c5:52:ba:3d:ec:cf:4f:03:e9:eb:3c:cc: 96:1c:05:44:60:49:e9:0b:dd:ba:1c:8f:cd:c1:f1:61:31:fe: 1e:0e:73:78:f7:61:58:2c:a2:8a:3d:24:70:5c:5c:f8:54:1f: 93:37:e6:bb:30:bd:75:cb:89:3c:ba:13:5c:39:3d:0d:57:c5: 18:76:60:72:35:5e:15:d8:90:79:5d:98:bd:fa:08:ab:d4:1b: 1e:f4:b9:73:fe:10:68:13:03:36:14:0f:f7:13:6a:39:49:12: c4:41:c4:b9:7f:e9:a7:24:d1:15:aa:ac:8e:52:1e:d4:f2:e3: 36:d7:42:3b:ce:61:c6:8e:44:0e:a7:52:3b:ad:bb:e4:58:81: fb:a8:56:76:a8:ed:d0:9c:91:db:7c:15:db:1f:9d:52:52:70: 12:f1:73:8e:4b:01:19:a3:f6:6f:e4:71:cf:6f:9f:a0:6e:5b: 6d:c6:6d:b9 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEwEA7mVavfhJep3bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTEyOTAxNDUyM1oXDTI4MDMwMzAxNDUyM1owLzEtMCsGA1UEAxMk YjE1MGU5OGQtODBlOS00NWY2LWJjNjMtNmI0MGEzZDU5ZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ozh71OOeBGeeNb96pRFOYjmtQ0Rq3SwcFGC J9XCGNMtY1C2QUgJllQgDZeAqbsx694eLLuxCWyQUvOHWng2aKxXboOl5NtByawv ig3R8gTMtVVgfYa+XW0NQeyUxZ0plBwRBYmWp0axym5YhIJnlhnMz53DsOwsN6aR LhrjLSIEN1t2puVurc1VwRTLkT9dv21LOky7QYNChsNAEGoYlLKPhEcXcWVhG80b WNGLJaXiCyKBHlnXltjkwX/n0towpkli6uB393JJ04SrGVmXwKutxTeVio9NQRwu V5tW/aa4zb3UKTP1Ed13+P1SfAyN++v0d2L/k7DI1Fg8v0sCDQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCt7d1bkrdIWXRKLVQnXEGk95BiPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i MTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02YjQwYTNkNTllOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2IxNTBlOThkLTgwZTktNDVmNi1i YzYzLTZiNDBhM2Q1OWU5Yy9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02YjQwYTNk NTllOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmegwDgQCAAIwCAMGACYC+noAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkzgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD3+Q6VqwMMrdR7EfIf5425Eyfmy IURWvbUSJdjPJBxHPqj4h6FCIyoVLogRQCy2EDIZGqbnNX9DVWk/i7/S7funstPe VONeofKeh4S4/8VSuj3sz08D6es8zJYcBURgSekL3bocj83B8WEx/h4Oc3j3YVgs ooo9JHBcXPhUH5M35rswvXXLiTy6E1w5PQ1XxRh2YHI1XhXYkHldmL36CKvUGx70 uXP+EGgTAzYUD/cTajlJEsRBxLl/6ack0RWqrI5SHtTy4zbXQjvOYcaORA6nUjut u+RYgfuoVnao7dCckdt8FdsfnVJScBLxc45LARmj9m/kcc9vn6BuW23Gbbk= -----END CERTIFICATE-----Generated at Sat Dec 6 06:02:13 2025 by rpki-client