This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a.cer File: 414698c0-81d5-46ea-95ef-95e376ba003a.cer (raw, json) Hash identifier: rZWyWfOdBCcmcnJqaqZne1UcsU+58fCZUkJ9/GiN4as= Subject key identifier: CB:49:E0:5B:C6:B3:DA:01:8B:C9:49:77:0F:69:F4:E0:EE:A3:8C:BD Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584C117D8D4592FA6DD5682A1700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/414698c0-81d5-46ea-95ef-95e376ba003a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Dec 2025 21:36:21 +0000 Certificate not after: Sat 13 Mar 2027 21:25:56 +0000 Subordinate resources: AS: 40112 IP: 141.246.0.0/16 IP: 192.80.18.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:11:7d:8d:45:92:fa:6d:d5:68:2a:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 3 21:36:21 2025 GMT Not After : Mar 13 21:25:56 2027 GMT Subject: CN=414698c0-81d5-46ea-95ef-95e376ba003a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:39:ff:7d:3b:c7:77:af:50:fa:67:66:f6: 3c:a3:7a:5d:f4:0f:ac:2d:56:36:a9:d4:4e:dd:8a: b2:78:20:50:67:75:e2:dd:15:0b:8c:ac:f5:43:5a: f8:95:8b:87:a0:50:56:81:11:63:b2:8e:03:9b:ef: da:55:2d:90:81:5a:03:4f:0e:b6:9c:3d:d2:cf:a4: 99:64:ae:3e:90:59:da:5d:28:b9:43:f1:56:9d:28: 53:2f:43:f0:49:8b:c8:01:af:8e:f6:5d:2e:89:72: 1a:56:33:24:22:7b:a4:2c:cb:06:0d:1f:ed:13:11: 33:31:cf:31:a4:6c:40:2c:6b:cd:5e:83:3c:8f:7b: cb:06:e4:c9:0e:6c:1d:d2:31:14:ba:eb:0d:53:4a: f3:bd:cb:a5:05:28:e5:e9:fc:cc:f1:90:c2:15:f7: 1c:8d:c0:f2:d7:6e:19:3a:11:ed:bf:8f:15:b7:43: 1c:82:b8:4c:a4:8f:5f:35:d4:f9:fd:03:3b:f1:fa: 0e:1f:2a:48:44:3f:e4:a1:95:3b:47:b8:06:02:64: 30:6d:30:77:7c:0e:f2:f7:92:50:9e:b7:9e:e2:00: eb:28:81:a8:74:89:57:54:bc:80:d8:fc:86:8f:4f: f9:82:e4:2e:2c:9a:6e:b6:25:59:52:ff:9c:11:f3: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:49:E0:5B:C6:B3:DA:01:8B:C9:49:77:0F:69:F4:E0:EE:A3:8C:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/414698c0-81d5-46ea-95ef-95e376ba003a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 141.246.0.0/16 192.80.18.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40112 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:42:c9:ca:5e:e1:2d:71:66:6b:19:68:b1:3f:76:05:81:4b: 42:61:cb:77:db:49:9a:79:f5:3a:72:b5:5f:e1:f1:e6:36:a9: d9:4e:49:53:13:24:1a:0c:ee:c4:d9:dc:8f:33:ed:c3:ab:93: 9f:f5:e6:53:2a:1d:e9:78:f4:a9:fc:ce:b6:c2:f1:f8:ad:e3: 44:5e:fb:77:a5:cc:c7:0b:1b:33:89:75:60:58:41:6f:8f:fc: 21:a7:ce:6d:6c:a1:cc:f9:ce:18:3e:de:d2:6b:bc:64:1a:0b: 84:3a:56:d2:d9:69:f0:fe:f9:6b:01:d1:79:ef:b1:36:07:22: 13:0e:9c:24:76:21:be:db:3f:69:d0:c3:67:61:9a:26:5f:8b: d6:26:98:9b:e9:fc:cf:4d:73:29:f5:26:0c:f7:10:12:6e:16: 16:f5:08:61:6a:92:24:e7:17:c4:2c:8f:37:3e:86:62:bd:4d: d1:39:3f:7d:28:16:be:8a:7b:52:8e:15:c2:ff:c0:d9:cc:88: 57:72:f9:bd:24:67:35:76:de:5a:1e:be:4e:42:9d:5b:d5:3d: 69:5b:bd:b7:d0:07:d4:33:81:3e:be:bb:80:45:73:98:77:b0: 21:ed:31:12:d9:c9:8c:76:db:86:c2:85:f3:18:38:34:17:83: 37:9b:1e:fc -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEwRfY1Fkvpt1WgqFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTIwMzIxMzYyMVoXDTI3MDMxMzIxMjU1NlowLzEtMCsGA1UEAxMk NDE0Njk4YzAtODFkNS00NmVhLTk1ZWYtOTVlMzc2YmEwMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdo5/307x3evUPpnZvY8o3pd9A+sLVY2qdRO 3YqyeCBQZ3Xi3RULjKz1Q1r4lYuHoFBWgRFjso4Dm+/aVS2QgVoDTw62nD3Sz6SZ ZK4+kFnaXSi5Q/FWnShTL0PwSYvIAa+O9l0uiXIaVjMkInukLMsGDR/tExEzMc8x pGxALGvNXoM8j3vLBuTJDmwd0jEUuusNU0rzvculBSjl6fzM8ZDCFfccjcDy124Z OhHtv48Vt0McgrhMpI9fNdT5/QM78foOHypIRD/koZU7R7gGAmQwbTB3fA7y95JQ nree4gDrKIGodIlXVLyA2PyGj0/5guQuLJputiVZUv+cEfOLbwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFMtJ4FvGs9oBi8lJdw9p9ODuo4y9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 MTQ2OThjMC04MWQ1LTQ2ZWEtOTVlZi05NWUzNzZiYTAwM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQxNDY5OGMwLTgxZDUtNDZlYS05 NWVmLTk1ZTM3NmJhMDAzYS80MTQ2OThjMC04MWQ1LTQ2ZWEtOTVlZi05NWUzNzZi YTAwM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCN9gMEAMBQEjAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAnLAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAgELJyl7hLXFmaxlosT92BYFLQmHLd9tJmnn1OnK1 X+Hx5jap2U5JUxMkGgzuxNncjzPtw6uTn/XmUyod6Xj0qfzOtsLx+K3jRF77d6XM xwsbM4l1YFhBb4/8IafObWyhzPnOGD7e0mu8ZBoLhDpW0tlp8P75awHRee+xNgci Ew6cJHYhvts/adDDZ2GaJl+L1iaYm+n8z01zKfUmDPcQEm4WFvUIYWqSJOcXxCyP Nz6GYr1N0Tk/fSgWvop7Uo4Vwv/A2cyIV3L5vSRnNXbeWh6+TkKdW9U9aVu9t9AH 1DOBPr67gEVzmHewIe0xEtnJjHbbhsKF8xg4NBeDN5se/A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:06:52 2025 by rpki-client