This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc.cer File: 686dfae3-1a9a-4471-9592-9f404f78a8dc.cer (raw, json) Hash identifier: lQdxKKY1SJVowD90zsJP6fcpqgQDOBldH7ok1elJsQ0= Subject key identifier: 67:B6:B0:66:11:44:C4:30:E2:59:D0:39:C8:AD:D9:F4:F6:33:BA:AF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C10A723536A756A5F80894B90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Dec 2025 14:24:20 +0000 Certificate not after: Wed 16 Feb 2028 21:55:16 +0000 Subordinate resources: AS: 20446 IP: 204.154.108.0/24 IP: 2602:f4ca::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:a7:23:53:6a:75:6a:5f:80:89:4b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 3 14:24:20 2025 GMT Not After : Feb 16 21:55:16 2028 GMT Subject: CN=686dfae3-1a9a-4471-9592-9f404f78a8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:eb:8c:93:38:51:15:85:44:f2:7a:2b:37:30: 12:ef:b4:9a:bc:72:a0:e9:42:f5:58:77:32:6a:f7: 73:aa:d0:b3:ec:6c:cc:75:d0:56:8a:3d:43:ea:af: 50:85:26:31:79:4e:8f:75:c3:c4:5f:db:e6:00:f5: ce:0e:d6:ea:81:fb:34:e7:6b:b3:00:8a:be:85:ca: 18:58:53:26:b6:01:89:88:b4:b4:ea:20:64:86:46: 5f:56:29:51:ac:ca:12:8c:db:8d:dd:76:e2:21:d9: 60:eb:24:c9:d9:16:8a:58:bd:dd:9f:7a:bf:f2:5c: cc:21:29:3d:d4:ea:86:4b:bf:f5:c0:32:9f:9d:a8: 86:a4:98:b1:2b:49:d4:cc:42:a1:24:b9:86:81:b8: 43:3e:c3:e7:fb:84:24:2d:56:17:4c:34:cf:da:2d: be:53:98:59:6f:9d:db:a7:19:04:8a:50:24:b0:93: 4a:a9:3a:e3:50:fc:f1:35:33:2d:39:19:a1:bf:42: 70:f7:e6:ae:53:e0:4e:0e:3b:60:69:9f:b4:20:0b: 4e:f3:df:c7:a5:e5:06:55:15:82:5c:f5:b2:39:5e: ac:fa:f3:59:31:9d:ef:05:08:63:33:d5:49:b3:03: 39:95:ef:2c:1d:6d:12:c8:78:a1:51:68:31:f7:86: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B6:B0:66:11:44:C4:30:E2:59:D0:39:C8:AD:D9:F4:F6:33:BA:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.154.108.0/24 IPv6: 2602:f4ca::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20446 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6c:17:6c:25:f2:e3:71:39:c4:1d:5f:df:1e:ac:2f:a2:8c: 5d:09:e1:18:3d:05:62:0f:c3:29:06:86:99:55:de:84:78:b0: 60:af:2b:2a:de:e3:7d:44:b8:66:f4:6b:37:63:fc:d5:fe:a9: 72:6a:b3:dd:94:19:1e:08:19:7f:bd:5c:4b:54:e8:44:70:5e: a2:cf:c6:b0:17:70:54:d4:c4:fc:5d:41:da:25:ee:81:0e:01: 4e:39:aa:05:6b:bc:eb:46:b8:8a:38:6f:e5:86:9b:ef:51:15: e8:4c:5a:c2:d2:ee:27:70:6c:97:f7:67:54:b1:47:9c:cb:c9: bf:b9:eb:0b:32:5e:2b:f6:57:e1:63:1c:28:50:be:4f:17:eb: 3b:b3:c5:49:43:22:b3:38:bf:44:b9:93:9e:9f:43:a0:ba:da: 23:ce:15:1a:19:c1:82:6b:14:6e:a0:f6:8f:ad:07:a3:0a:5f: b6:61:6b:b8:7d:7b:7d:85:ff:e8:ab:a3:24:c9:21:5c:ea:28: ff:0e:96:0b:0b:05:e7:64:62:09:37:4b:4c:b6:1d:34:2c:b6: 00:e6:96:3d:0b:d4:4e:b1:be:3f:d4:e6:77:cb:82:35:15:44: fb:3c:fd:d1:e0:0a:fe:64:89:e0:b4:b9:04:21:81:1d:61:21: 07:b6:ec:e1 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEwQpyNTanVqX4CJS5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTIwMzE0MjQyMFoXDTI4MDIxNjIxNTUxNlowLzEtMCsGA1UEAxMk Njg2ZGZhZTMtMWE5YS00NDcxLTk1OTItOWY0MDRmNzhhOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uuMkzhRFYVE8norNzAS77SavHKg6UL1WHcy avdzqtCz7GzMddBWij1D6q9QhSYxeU6PdcPEX9vmAPXODtbqgfs052uzAIq+hcoY WFMmtgGJiLS06iBkhkZfVilRrMoSjNuN3XbiIdlg6yTJ2RaKWL3dn3q/8lzMISk9 1OqGS7/1wDKfnaiGpJixK0nUzEKhJLmGgbhDPsPn+4QkLVYXTDTP2i2+U5hZb53b pxkEilAksJNKqTrjUPzxNTMtORmhv0Jw9+auU+BODjtgaZ+0IAtO89/HpeUGVRWC XPWyOV6s+vNZMZ3vBQhjM9VJswM5le8sHW0SyHihUWgx94a/xwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGe2sGYRRMQw4lnQOcit2fT2M7qvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82 ODZkZmFlMy0xYTlhLTQ0NzEtOTU5Mi05ZjQwNGY3OGE4ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4NmRmYWUzLTFhOWEtNDQ3MS05 NTkyLTlmNDA0Zjc4YThkYy82ODZkZmFlMy0xYTlhLTQ0NzEtOTU5Mi05ZjQwNGY3 OGE4ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADMmmwwDgQCAAIwCAMGACYC9MoAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAk/eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEVsF2wl8uNxOcQdX98erC+ijF0J 4Rg9BWIPwykGhplV3oR4sGCvKyre431EuGb0azdj/NX+qXJqs92UGR4IGX+9XEtU 6ERwXqLPxrAXcFTUxPxdQdol7oEOAU45qgVrvOtGuIo4b+WGm+9RFehMWsLS7idw bJf3Z1SxR5zLyb+56wsyXiv2V+FjHChQvk8X6zuzxUlDIrM4v0S5k56fQ6C62iPO FRoZwYJrFG6g9o+tB6MKX7Zha7h9e32F/+iroyTJIVzqKP8OlgsLBedkYgk3S0y2 HTQstgDmlj0L1E6xvj/U5nfLgjUVRPs8/dHgCv5kieC0uQQhgR1hIQe27OE= -----END CERTIFICATE-----Generated at Sat Dec 6 09:41:59 2025 by rpki-client