This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer File: 3990f0e4-fc13-467e-a765-98d98d252d56.cer (raw, json) Hash identifier: B6b0iGgdhR9lqJKeIty8Qk/fhDDfPk4mp+vI8EdRBtk= Subject key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584BD11842971071714087713A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Nov 2025 20:00:32 +0000 Certificate not after: Sun 01 Aug 2027 17:59:11 +0000 Subordinate resources: AS: 4943 AS: 11215 AS: 13637 AS: 13973 AS: 25956 AS: 36366 AS: 53659 IP: 66.64.0.0/18 IP: 66.196.192.0/18 IP: 67.200.128.0/17 IP: 69.94.224.0/19 IP: 74.213.0.0/18 IP: 96.43.0.0/19 IP: 104.219.224.0/22 IP: 139.138.128.0/18 IP: 162.252.160.0/22 IP: 192.52.188.0/22 IP: 192.64.92.0/22 IP: 199.15.164.0/22 IP: 199.115.168.0/22 IP: 199.241.248.0/21 IP: 206.126.32.0/19 IP: 207.91.128.0/18 IP: 209.94.224.0/19 IP: 209.189.232.0/21 IP: 216.74.224.0/19 IP: 216.130.240.0/20 IP: 216.201.128.0/17 IP: 216.215.64.0/18 IP: 2605:b400::/32 IP: 2607:f568::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:18:42:97:10:71:71:40:87:71:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Nov 10 20:00:32 2025 GMT Not After : Aug 1 17:59:11 2027 GMT Subject: CN=3990f0e4-fc13-467e-a765-98d98d252d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:c3:7f:48:fb:1f:3a:84:42:ac:3a:8e:d3: 48:07:90:8d:4f:40:fa:8f:43:12:23:16:2c:fc:1b: be:97:d4:5c:81:8c:67:b0:20:58:73:c7:cc:01:7f: 1d:13:6c:e6:2b:dd:27:21:7d:ee:58:40:87:dd:dd: c7:15:b9:52:c3:df:99:7e:60:25:5d:90:f5:5f:69: d6:3a:a3:51:97:80:64:06:bb:ab:3f:9b:88:05:e9: 6c:5a:3a:74:47:a7:b7:28:19:dd:81:21:11:5d:c6: 82:3a:0f:f1:83:ea:e7:98:ed:78:eb:c0:72:6a:c1: c5:84:c9:ec:f7:f0:0b:6e:b7:99:1a:1a:21:3f:4d: 10:08:b2:71:ae:1f:9e:11:04:31:7e:1b:77:87:e5: e6:82:dd:ff:cf:f1:5c:18:66:f0:54:92:b1:3e:c4: 2f:90:68:ea:60:ed:6f:2f:5f:bc:92:9a:1e:0b:1c: c1:f6:84:87:ea:8a:02:c3:43:2b:e9:90:d2:18:c0: 2c:49:38:34:3b:79:e4:5e:73:4d:19:62:05:7a:89: 4f:30:f7:86:2e:7a:71:bc:1e:2c:41:03:ea:ed:4b: d9:0e:98:0f:19:7a:2d:45:b1:79:0e:1c:9d:fa:02: 33:8f:b7:36:6d:9f:05:9d:64:7f:3f:fd:f6:ab:aa: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.64.0.0/18 66.196.192.0/18 67.200.128.0/17 69.94.224.0/19 74.213.0.0/18 96.43.0.0/19 104.219.224.0/22 139.138.128.0/18 162.252.160.0/22 192.52.188.0/22 192.64.92.0/22 199.15.164.0/22 199.115.168.0/22 199.241.248.0/21 206.126.32.0/19 207.91.128.0/18 209.94.224.0/19 209.189.232.0/21 216.74.224.0/19 216.130.240.0/20 216.201.128.0/17 216.215.64.0/18 IPv6: 2605:b400::/32 2607:f568::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4943 11215 13637 13973 25956 36366 53659 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:09:a0:db:ae:a8:b5:07:10:67:81:09:41:f9:2c:99:29:1a: 5f:54:9c:de:25:29:88:23:58:58:8b:7e:04:7d:83:6d:b4:36: 57:9d:0e:f6:d5:a7:f5:61:37:72:f8:40:1f:8f:ea:1a:89:72: eb:2f:b4:44:67:af:ea:31:f0:f6:5a:33:5c:3c:5e:43:c4:24: 25:3f:f4:c2:31:99:4b:70:aa:0f:00:06:13:d2:94:c0:ce:35: 53:ce:5e:b5:e5:4a:6a:57:1b:87:94:25:91:32:e8:1f:d5:5b: bc:95:c5:0e:30:5c:16:21:6b:4d:4f:49:3a:13:9f:f5:ff:92: 10:d5:7f:2d:1d:c4:15:ef:6d:98:29:e0:1f:dd:28:79:b7:f6: 4e:cc:e4:19:c9:c9:9a:ef:32:fd:38:c4:57:ea:26:ea:c4:d7: 8a:cc:ec:39:4e:37:02:42:be:08:58:b8:0e:b1:27:aa:7a:1a: 58:5d:36:37:92:3f:0f:50:a4:c3:d3:ac:87:c7:5b:f9:9d:27: 76:7f:93:36:d1:3a:05:91:e6:85:af:39:0e:55:0a:30:f0:4e: 7c:72:70:d8:6e:e6:96:62:04:19:2a:6f:2c:98:58:8e:bf:32: 5b:df:e6:e5:26:3d:a7:39:72:40:de:85:27:dc:b2:70:ad:d9: 9e:9d:90:9d -----BEGIN CERTIFICATE----- MIIHuzCCBqOgAwIBAgIUAQ0Mn0MoWEvRGEKXEHFxQIdxOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MTExMDIwMDAzMloXDTI3MDgwMTE3NTkxMVowLzEtMCsGA1UEAxMk Mzk5MGYwZTQtZmMxMy00NjdlLWE3NjUtOThkOThkMjUyZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbvDf0j7HzqEQqw6jtNIB5CNT0D6j0MSIxYs /Bu+l9RcgYxnsCBYc8fMAX8dE2zmK90nIX3uWECH3d3HFblSw9+ZfmAlXZD1X2nW OqNRl4BkBrurP5uIBelsWjp0R6e3KBndgSERXcaCOg/xg+rnmO1468ByasHFhMns 9/ALbreZGhohP00QCLJxrh+eEQQxfht3h+Xmgt3/z/FcGGbwVJKxPsQvkGjqYO1v L1+8kpoeCxzB9oSH6ooCw0Mr6ZDSGMAsSTg0O3nkXnNNGWIFeolPMPeGLnpxvB4s QQPq7UvZDpgPGXotRbF5Dhyd+gIzj7c2bZ8FnWR/P/32q6rgDwIDAQABo4IEzTCC BMkwHQYDVR0OBBYEFP89ZyImURnyc5R+bRUzHRMQpEG9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z OTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQyNTJkNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzM5OTBmMGU0LWZjMTMtNDY3ZS1h NzY1LTk4ZDk4ZDI1MmQ1Ni8zOTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQy NTJkNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwgbcGCCsGAQUF BwEHAQH/BIGnMIGkMIGLBAIAATCBhAMEBkJAAAMEBkLEwAMEB0PIgAMEBUVe4AME BkrVAAMEBWArAAMEAmjb4AMEBouKgAMEAqL8oAMEAsA0vAMEAsBAXAMEAscPpAME AsdzqAMEA8fx+AMEBc5+IAMEBs9bgAMEBdFe4AMEA9G96AMEBdhK4AMEBNiC8AME B9jJgAMEBtjXQDAUBAIAAjAOAwUAJgW0AAMFACYH9WgwMwYIKwYBBQUHAQgBAf8E JDAioCAwHgICE08CAivPAgI1RQICNpUCAmVkAgMAjg4CAwDRmzBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH CaDbrqi1BxBngQlB+SyZKRpfVJzeJSmII1hYi34EfYNttDZXnQ721af1YTdy+EAf j+oaiXLrL7REZ6/qMfD2WjNcPF5DxCQlP/TCMZlLcKoPAAYT0pTAzjVTzl615Upq VxuHlCWRMugf1Vu8lcUOMFwWIWtNT0k6E5/1/5IQ1X8tHcQV722YKeAf3Sh5t/ZO zOQZycma7zL9OMRX6ibqxNeKzOw5TjcCQr4IWLgOsSeqehpYXTY3kj8PUKTD06yH x1v5nSd2f5M20ToFkeaFrzkOVQow8E58cnDYbuaWYgQZKm8smFiOvzJb3+blJj2n OXJA3oUn3LJwrdmenZCd -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:00 2025 by rpki-client