This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer File: 935332e4-2b48-45ab-95bc-6d4c2916350f.cer (raw, json) Hash identifier: Lu/VnPKn36bPNPw3tqrn6KOEnwqQQqLfWBIuXQKfQik= Subject key identifier: DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C0833C1489373685F23A3EEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 30 Nov 2025 13:45:23 +0000 Certificate not after: Sat 04 Mar 2028 13:45:23 +0000 Subordinate resources: AS: 393507 IP: 149.20.68.0/23 IP: 2620:137:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:08:33:c1:48:93:73:68:5f:23:a3:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 30 13:45:23 2025 GMT Not After : Mar 4 13:45:23 2028 GMT Subject: CN=935332e4-2b48-45ab-95bc-6d4c2916350f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:34:cc:5a:c1:6c:1f:a1:86:61:c2:93:b7: 0c:60:56:57:be:9b:2f:32:17:6f:c7:e2:90:30:53: 22:81:ab:74:ee:ad:c4:47:d5:0c:42:47:65:85:23: ae:d3:51:42:5b:a9:21:25:dd:e8:6f:f4:60:be:3f: 35:b2:05:3e:57:df:a4:ad:78:f9:dd:4d:2a:b6:e7: 68:8e:75:82:09:6d:f6:5f:d1:8e:2d:96:e6:7d:76: 6f:c6:a6:a3:3b:b1:f1:12:d6:c7:51:99:53:25:7a: 2d:04:ea:e8:0e:ae:24:46:c9:ba:ba:8d:18:aa:c3: 40:50:d3:1b:70:d3:d8:ef:f6:e1:ab:d6:8b:03:5b: 15:6b:dd:ca:85:d8:99:69:3d:a8:0a:ae:d0:1a:b0: 41:48:73:7c:dc:02:fe:4f:8d:9b:75:ba:d7:8b:52: 29:a6:f5:26:4f:e3:68:12:b8:e3:e6:b8:8b:4c:53: ee:99:e0:93:03:e2:be:f8:c3:1d:72:86:6e:7f:2b: 65:3f:79:83:1e:ac:91:0d:81:14:fd:14:1f:f8:5c: a5:80:8e:dc:7f:10:98:1c:9a:20:35:fe:2e:dc:92: f2:b6:11:82:1b:8d:65:d7:67:26:5e:07:ec:f2:c7: fe:f8:bd:80:9f:e1:91:6e:4f:d9:59:2d:96:92:a2: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 149.20.68.0/23 IPv6: 2620:137:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d0:ab:9f:b3:be:9d:d4:3a:fb:1b:8c:b9:4b:64:53:29:49: 91:ba:8b:45:b6:4e:be:90:0d:e8:8c:af:27:5b:9b:bb:49:fd: f6:9c:3e:cf:5c:b9:68:46:83:ba:09:de:62:70:97:6d:7d:19: 54:89:97:4a:8f:54:17:26:cf:fd:ec:c0:e6:b4:4b:0f:10:8b: 68:36:1b:92:89:54:28:df:db:14:b3:e8:0a:93:be:22:9c:32: 1a:b4:5b:97:32:64:3b:f2:51:e6:a8:2c:93:fc:29:42:89:d6: 8e:e6:3c:1a:8d:56:05:d1:29:fd:78:73:48:63:d2:6b:be:c5: af:0e:01:48:8e:a4:2a:57:e5:d1:39:7f:83:a6:42:56:5b:79: ea:cd:67:5e:04:3b:4f:57:73:6b:c5:39:f8:5e:ac:e7:a8:7d: 6c:2e:44:78:99:a8:c5:fe:2f:2e:5b:db:92:2c:3b:be:90:7b: 89:6d:12:8b:1b:94:b3:1e:f5:7f:6c:91:fd:68:45:44:49:d0: 3e:21:c2:03:1d:a0:20:8e:b9:e6:d6:83:98:55:99:a9:bf:dc: a5:ca:05:05:4c:8c:d0:88:b9:44:66:85:64:e0:12:84:da:88: 78:c7:c0:fa:7d:e2:64:97:d9:f8:55:2e:fd:c4:2c:24:e0:05: e9:c8:d5:f4 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEwIM8FIk3NoXyOj7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTEzMDEzNDUyM1oXDTI4MDMwNDEzNDUyM1owLzEtMCsGA1UEAxMk OTM1MzMyZTQtMmI0OC00NWFiLTk1YmMtNmQ0YzI5MTYzNTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMM0zFrBbB+hhmHCk7cMYFZXvpsvMhdvx+KQ MFMigat07q3ER9UMQkdlhSOu01FCW6khJd3ob/Rgvj81sgU+V9+krXj53U0qtudo jnWCCW32X9GOLZbmfXZvxqajO7HxEtbHUZlTJXotBOroDq4kRsm6uo0YqsNAUNMb cNPY7/bhq9aLA1sVa93KhdiZaT2oCq7QGrBBSHN83AL+T42bdbrXi1IppvUmT+No Erjj5riLTFPumeCTA+K++MMdcoZufytlP3mDHqyRDYEU/RQf+FylgI7cfxCYHJog Nf4u3JLythGCG41l12cmXgfs8sf++L2An+GRbk/ZWS2WkqJFFwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFN8gEVovKkSlXXMMKjH0wq8n+eqgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 MzUzMzJlNC0yYjQ4LTQ1YWItOTViYy02ZDRjMjkxNjM1MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzkzNTMzMmU0LTJiNDgtNDVhYi05 NWJjLTZkNGMyOTE2MzUwZi85MzUzMzJlNC0yYjQ4LTQ1YWItOTViYy02ZDRjMjkx NjM1MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAGVFEQwDwQCAAIwCQMHBCYgATdgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGASMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbdCrn7O+ndQ6+xuMuUtkUylJ kbqLRbZOvpAN6IyvJ1ubu0n99pw+z1y5aEaDugneYnCXbX0ZVImXSo9UFybP/ezA 5rRLDxCLaDYbkolUKN/bFLPoCpO+IpwyGrRblzJkO/JR5qgsk/wpQonWjuY8Go1W BdEp/XhzSGPSa77Frw4BSI6kKlfl0Tl/g6ZCVlt56s1nXgQ7T1dza8U5+F6s56h9 bC5EeJmoxf4vLlvbkiw7vpB7iW0SixuUsx71f2yR/WhFREnQPiHCAx2gII655taD mFWZqb/cpcoFBUyM0Ii5RGaFZOAShNqIeMfA+n3iZJfZ+FUu/cQsJOAF6cjV9A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:41 2025 by rpki-client