This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457.cer File: c638a4ea-7b45-4ddf-8d7e-0483500e3457.cer (raw, json) Hash identifier: NNcPfOM9o1A0Y8LfTHLkrYx62GuKZKpAd9geH9C0uVM= Subject key identifier: 1D:F1:22:25:80:48:59:A8:B3:0D:CC:20:FA:70:E1:A6:EE:7E:68:28 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584C133F325039FC9426EEB23800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/c638a4ea-7b45-4ddf-8d7e-0483500e3457.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Dec 2025 12:42:20 +0000 Certificate not after: Thu 06 May 2027 18:37:46 +0000 Subordinate resources: AS: 401539 IP: 104.218.236.0/23 IP: 2620:e0:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:3f:32:50:39:fc:94:26:ee:b2:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 4 12:42:20 2025 GMT Not After : May 6 18:37:46 2027 GMT Subject: CN=c638a4ea-7b45-4ddf-8d7e-0483500e3457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0c:8c:04:f3:dc:13:24:49:87:f6:81:4a:5d: 07:d2:53:e2:88:50:07:2e:2a:1f:c8:5c:7c:6e:6e: 5b:3a:32:aa:c7:06:4e:fc:f7:62:a2:85:c9:e3:96: e7:e2:ae:d8:af:4f:14:92:60:29:71:0c:57:f6:13: e9:7c:7f:a9:8d:35:5e:22:d9:11:33:b9:83:5c:9e: 02:81:4b:e1:73:65:74:49:c8:26:79:03:32:8b:3d: 6e:64:12:6e:14:ff:8e:d2:6c:f3:4e:38:d4:fa:0d: 92:75:d9:91:0d:d7:5a:6c:fc:3e:1f:21:fc:e7:ce: f7:9b:ab:aa:39:7d:5f:78:13:c5:63:b6:46:3a:39: a0:79:26:5d:72:60:c4:ac:55:08:ca:b8:95:04:2f: 95:51:67:03:b5:04:0a:8d:d0:4a:3b:e1:c1:78:e7: 3c:0a:92:ba:96:f5:79:89:fc:b0:57:6d:11:ee:e7: ff:4c:69:89:97:f5:34:7f:b7:a0:14:ba:a2:04:94: 00:d4:5b:18:eb:48:ec:bd:7a:c6:7d:73:9d:c4:c7: 00:09:ba:03:3a:03:29:4f:e1:bb:d1:ed:a3:bf:1a: 3c:03:c4:7a:58:3b:23:ad:ce:85:81:12:e3:3d:ff: 9e:43:d3:3c:4c:02:d1:47:b7:4c:ad:de:46:59:ff: a9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F1:22:25:80:48:59:A8:B3:0D:CC:20:FA:70:E1:A6:EE:7E:68:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/c638a4ea-7b45-4ddf-8d7e-0483500e3457.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.218.236.0/23 IPv6: 2620:e0:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401539 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f8:6d:66:38:72:f2:71:e5:65:a2:98:dd:fa:6c:a4:79:bb: 98:2d:f2:54:60:b1:3f:ee:87:04:0e:89:d3:4c:8b:04:96:d4: 57:6d:f4:6c:ee:d9:18:7b:fe:4c:d8:d8:a7:17:15:ca:e0:12: 95:15:03:e7:3e:3a:cf:c6:bc:0c:67:d2:e2:12:a4:40:ef:de: 2c:28:9e:42:d0:49:44:9f:5d:f2:75:e3:0a:4e:29:ce:bf:98: 0d:99:7d:4c:4f:28:6f:03:b4:c6:65:cf:82:de:5b:79:30:cb: 10:ff:e2:08:66:c1:1c:2e:c8:3c:26:98:ee:67:da:aa:a7:ec: 3b:d5:0d:be:ed:e6:40:4e:17:07:0f:8f:c8:f7:b0:84:c3:fa: 4b:d8:5a:a8:43:be:73:ed:51:c4:6b:b9:9b:62:1d:3f:79:e5: 50:cc:c8:32:ca:72:ce:f4:c6:32:ee:26:0f:fa:d3:63:b8:bf: 6d:87:df:e0:35:54:54:f7:0d:1e:91:a3:9d:d4:4e:18:39:df: 48:62:9b:01:88:60:5e:7c:01:3a:70:77:79:8e:72:9a:de:b1: a8:c5:f3:72:d3:48:26:c1:59:1c:e3:b8:5f:db:98:a6:af:11: fd:c2:e6:e4:55:f8:fe:3c:b1:21:9b:c6:df:23:b1:b5:4f:6b: 54:f7:e1:37 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEwTPzJQOfyUJu6yOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MTIwNDEyNDIyMFoXDTI3MDUwNjE4Mzc0NlowLzEtMCsGA1UEAxMk YzYzOGE0ZWEtN2I0NS00ZGRmLThkN2UtMDQ4MzUwMGUzNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigyMBPPcEyRJh/aBSl0H0lPiiFAHLiofyFx8 bm5bOjKqxwZO/PdiooXJ45bn4q7Yr08UkmApcQxX9hPpfH+pjTVeItkRM7mDXJ4C gUvhc2V0ScgmeQMyiz1uZBJuFP+O0mzzTjjU+g2SddmRDddabPw+HyH85873m6uq OX1feBPFY7ZGOjmgeSZdcmDErFUIyriVBC+VUWcDtQQKjdBKO+HBeOc8CpK6lvV5 ifywV20R7uf/TGmJl/U0f7egFLqiBJQA1FsY60jsvXrGfXOdxMcACboDOgMpT+G7 0e2jvxo8A8R6WDsjrc6FgRLjPf+eQ9M8TALRR7dMrd5GWf+pQwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFB3xIiWASFmosw3MIPpw4abufmgoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j NjM4YTRlYS03YjQ1LTRkZGYtOGQ3ZS0wNDgzNTAwZTM0NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2M2MzhhNGVhLTdiNDUtNGRkZi04 ZDdlLTA0ODM1MDBlMzQ1Ny9jNjM4YTRlYS03YjQ1LTRkZGYtOGQ3ZS0wNDgzNTAw ZTM0NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAFo2uwwDwQCAAIwCQMHACYgAOCgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGIIMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAh/htZjhy8nHlZaKY3fpspHm7 mC3yVGCxP+6HBA6J00yLBJbUV230bO7ZGHv+TNjYpxcVyuASlRUD5z46z8a8DGfS 4hKkQO/eLCieQtBJRJ9d8nXjCk4pzr+YDZl9TE8obwO0xmXPgt5beTDLEP/iCGbB HC7IPCaY7mfaqqfsO9UNvu3mQE4XBw+PyPewhMP6S9haqEO+c+1RxGu5m2IdP3nl UMzIMspyzvTGMu4mD/rTY7i/bYff4DVUVPcNHpGjndROGDnfSGKbAYhgXnwBOnB3 eY5ymt6xqMXzctNIJsFZHOO4X9uYpq8R/cLm5FX4/jyxIZvG3yOxtU9rVPfhNw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:52:55 2025 by rpki-client