This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer File: be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer (raw, json) Hash identifier: ChfanHiUrC+QpZS5/VABJ+sXS1DoXR/hfnNrg9oodxg= Subject key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7 Authority key identifier: DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57 Certificate issuer: /CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f Certificate serial: 010D0C9F4328584C54F991554BB5ED485EA02100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sun 28 Dec 2025 01:45:23 +0000 Certificate not after: Sat 01 Apr 2028 00:45:23 +0000 Subordinate resources: AS: 396864 IP: 199.204.160.0/22 IP: 2604:d740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:54:f9:91:55:4b:b5:ed:48:5e:a0:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f Validity Not Before: Dec 28 01:45:23 2025 GMT Not After : Apr 1 00:45:23 2028 GMT Subject: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:d3:0a:7b:58:71:95:ab:0c:5f:c2:e8:cf: db:5e:43:63:73:3f:4e:1a:87:b2:06:8e:35:b4:47: f6:91:36:c7:f4:c6:b8:5a:de:83:8b:cf:ac:43:4a: d0:58:d6:d8:aa:8b:e9:35:c4:4c:19:35:da:81:54: f8:c0:1a:ef:0f:fb:ca:26:0b:8c:b8:51:63:7e:94: 1c:4d:7b:4e:59:69:fd:fe:86:78:06:8a:69:bd:db: 40:41:24:dc:0b:96:1b:88:91:77:03:67:f9:e3:e5: b7:94:d0:09:45:91:f1:40:ac:02:a5:64:89:dc:8f: 25:c6:9f:c2:ed:d8:e9:36:53:41:23:4b:64:b5:de: 21:69:52:5c:38:00:d5:e6:9c:8e:63:d5:67:02:58: 90:4c:73:cc:11:ce:4a:01:37:68:ae:f1:af:fe:48: 8e:04:89:18:3a:8b:15:97:ff:bd:fa:f8:c3:31:bc: a1:2b:d3:ae:26:f0:cb:bc:9f:5e:44:96:7c:9f:f5: 32:d3:e9:63:6e:19:d5:c0:68:92:ba:b2:93:d4:cb: d1:93:88:8a:55:75:9f:d7:e7:6d:60:a2:3a:42:13: cc:64:e4:0f:10:14:15:fb:cf:92:45:00:b1:81:e0: bc:9b:ea:5a:84:4d:c7:35:30:30:85:0a:99:b9:35: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl X509v3 Authority Key Identifier: keyid:DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer sbgp-ipAddrBlock: critical IPv4: 199.204.160.0/22 IPv6: 2604:d740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396864 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5e:24:bc:ca:70:23:da:84:35:ce:c2:17:06:8c:f0:02:ab: 19:9a:b8:a3:b4:7a:35:16:56:79:05:43:46:c1:6e:52:d1:39: 90:30:df:bf:65:1f:6d:86:c6:eb:1f:8e:35:fb:5e:e3:95:9b: 8f:04:36:dc:57:86:f5:91:07:e1:36:c3:b4:b6:cc:19:9a:60: 37:e3:ce:38:5f:46:06:e1:3a:7c:de:89:22:44:a1:88:47:04: 57:dd:44:c8:ce:cc:bd:2e:bd:d9:fa:ba:5a:50:76:0f:8a:0c: be:e1:3f:68:b9:df:0e:ae:a2:af:53:58:0f:47:94:80:f8:72: e4:de:aa:41:0a:48:c8:f6:49:34:b4:0b:18:39:94:79:a7:5c: 33:2d:28:57:06:64:b8:dc:28:bd:1c:f6:6f:5c:f3:c2:f3:fd: f3:75:2a:9f:fe:4d:1c:8f:20:6a:02:96:75:67:8e:b9:8a:c9: e5:0a:b6:da:15:72:15:45:b0:02:cf:0a:2d:22:05:06:56:39: 7b:48:c7:52:5b:11:50:dc:18:70:24:6e:8b:2a:81:4f:19:fe: ef:50:df:2f:1a:a1:53:ab:d4:af:8e:1e:cc:fc:11:23:4b:d1: 3b:cf:28:6c:d3:69:75:fe:0f:cc:05:5a:1a:58:22:ce:37:56: ed:a3:d1:05 -----BEGIN CERTIFICATE----- MIIGzDCCBbSgAwIBAgIUAQ0Mn0MoWExU+ZFVS7XtSF6gIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzYTgxMmMtMGYxMC00NWVjLWFjYTMtNjhhNzNlOTlk MDhmMB4XDTI1MTIyODAxNDUyM1oXDTI4MDQwMTAwNDUyM1owPTE7MDkGA1UEAxMy YmU0OWFkYWIxNDA0NDg3ZmE5ZmQ1ZTFmOGU2YzE5YzA5OTM2MTBjZWFmNTU2Mzhi YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z9MKe1hxlasMX8Lo z9teQ2NzP04ah7IGjjW0R/aRNsf0xrha3oOLz6xDStBY1tiqi+k1xEwZNdqBVPjA Gu8P+8omC4y4UWN+lBxNe05Zaf3+hngGimm920BBJNwLlhuIkXcDZ/nj5beU0AlF kfFArAKlZIncjyXGn8Lt2Ok2U0EjS2S13iFpUlw4ANXmnI5j1WcCWJBMc8wRzkoB N2iu8a/+SI4EiRg6ixWX/736+MMxvKEr064m8Mu8n15Elnyf9TLT6WNuGdXAaJK6 spPUy9GTiIpVdZ/X521gojpCE8xk5A8QFBX7z5JFALGB4Lyb6lqETcc1MDCFCpm5 Nb87AgMBAAGjggPQMIIDzDAdBgNVHQ4EFgQUn3zubmNgEPk8A0bu3lVlcY7vYqcw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTBjZmViNzAxODU1YWNh NGIxNzM0MzQvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTBjZmViNzAxODU1YWNhNGIxNzM0MzQv MC85RjdDRUU2RTYzNjAxMEY5M0MwMzQ2RUVERTU1NjU3MThFRUY2MkE3Lm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNj Yy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2NmM2E4MTJjLTBmMTAtNDVlYy1hY2Ez LTY4YTczZTk5ZDA4Zi9jZjNhODEyYy0wZjEwLTQ1ZWMtYWNhMy02OGE3M2U5OWQw OGYuY3JsMB8GA1UdIwQYMBaAFNybVLTbTyw6IiPQWtdmgEBreR9XMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMt YmRhNy0xYmUyMDQ5MzNhZTUvY2YzYTgxMmMtMGYxMC00NWVjLWFjYTMtNjhhNzNl OTlkMDhmLmNlcjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsfMoDANBAIA AjAHAwUAJgTXQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGDkAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA il4kvMpwI9qENc7CFwaM8AKrGZq4o7R6NRZWeQVDRsFuUtE5kDDfv2UfbYbG6x+O Nfte45WbjwQ23FeG9ZEH4TbDtLbMGZpgN+POOF9GBuE6fN6JIkShiEcEV91EyM7M vS692fq6WlB2D4oMvuE/aLnfDq6ir1NYD0eUgPhy5N6qQQpIyPZJNLQLGDmUeadc My0oVwZkuNwovRz2b1zzwvP983Uqn/5NHI8gagKWdWeOuYrJ5Qq22hVyFUWwAs8K LSIFBlY5e0jHUlsRUNwYcCRuiyqBTxn+71DfLxqhU6vUr44ezPwRI0vRO88obNNp df4PzAVaGlgizjdW7aPRBQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:54 2026 by rpki-client