This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer File: 9de5b47f-bd49-4614-b658-9980cfd17769.cer (raw, json) Hash identifier: fUM/LpzNtfsrplUiD3YpSe6WoguFLuj81Eb+JHBSTws= Subject key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BDBF28196BAA8F6051DCBEAA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Nov 2025 17:18:21 +0000 Certificate not after: Wed 10 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 6126 AS: 13713 AS: 14547 AS: 18924 AS: 19637 AS: 21948 AS: 22853 AS: 22918 AS: 22965 AS: 23326 AS: 26248 AS: 26282 AS: 27471 AS: 36657 AS: 40816 AS: 53512 AS: 53766 AS: 54557 AS: 55048 AS: 62542 AS: 394136 AS: 395632 AS: 395730 AS: 397404 AS: 397983 AS: 400055 AS: 400870 -- 400881 IP: 63.245.192.0/20 IP: 64.186.24.0/21 IP: 66.170.96.0/20 IP: 66.205.228.0/22 IP: 67.219.240.0/20 IP: 98.158.240.0/20 IP: 104.193.28.0/22 IP: 130.119.0.0/16 IP: 130.200.0.0/16 IP: 135.14.0.0/15 IP: 135.24.0.0/16 IP: 135.36.0.0/16 IP: 135.141.0.0 -- 135.142.255.255 IP: 135.156.0.0/16 IP: 138.42.0.0/16 IP: 141.202.0.0/16 IP: 144.49.0.0/16 IP: 148.64.0.0/19 IP: 155.35.0.0/24 IP: 155.35.2.0 -- 155.35.33.255 IP: 155.35.36.0 -- 155.35.45.255 IP: 155.35.48.0 -- 155.35.225.255 IP: 155.35.227.0 -- 155.35.231.255 IP: 155.35.233.0 -- 155.35.255.255 IP: 168.149.128.0/18 IP: 170.176.240.0/21 IP: 192.19.0.0/16 IP: 192.40.64.0/24 IP: 192.251.86.0/24 IP: 198.135.124.0/23 IP: 199.19.248.0/21 IP: 199.43.188.0/24 IP: 199.85.234.0/23 IP: 199.101.152.0/22 IP: 199.116.168.0/21 IP: 199.184.126.0/23 IP: 199.247.32.0/20 IP: 207.189.188.0/22 IP: 208.91.0.0/22 IP: 216.18.144.0/20 IP: 216.31.208.0/20 IP: 216.82.240.0/20 IP: 216.221.16.0/20 IP: 2602:274::/36 IP: 2602:275::/36 IP: 2602:800:2000::/40 IP: 2604:b040::/32 IP: 2605:a7c0::/32 IP: 2606:9680::/32 IP: 2620:0:850::/48 IP: 2620:31:a000::/48 IP: 2620:51:a000::/48 IP: 2620:5a:2000::/48 IP: 2620:78::/48 IP: 2620:cc::/48 IP: 2620:df:4000::/44 IP: 2620:100::/44 IP: 2620:102:5000::/43 IP: 2620:120:7000::/40 IP: 2620:124:6000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:db:f2:81:96:ba:a8:f6:05:1d:cb:ea:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 14 17:18:21 2025 GMT Not After : Feb 10 01:45:33 2027 GMT Subject: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:fc:1f:8e:ed:53:f5:de:40:fa:6d:11:64: e8:38:b2:42:3b:e0:55:ed:7a:26:fb:99:52:27:3b: 26:bf:3d:dc:78:df:11:9e:74:18:14:2c:75:76:0b: d6:4c:5e:f1:d8:08:4d:5d:02:89:07:21:17:f0:e3: 54:24:53:33:65:56:af:7a:c3:92:7a:4d:91:70:b8: c1:2b:8f:4b:14:ce:68:61:af:3e:0d:1f:63:2f:9f: 81:84:5a:05:62:c0:5f:7b:00:e8:df:4a:c8:41:80: c4:a3:ba:b2:d2:39:e0:3d:06:4d:8e:f1:cf:5d:37: 24:b9:6f:ed:f1:c8:45:80:8e:dd:ff:2c:f9:85:a4: 62:31:c4:d1:79:30:82:af:5b:7a:42:87:d9:65:a6: d5:b6:a9:a4:0f:bc:2d:1a:31:12:b1:3b:a4:d8:fd: ad:e4:95:33:c4:25:12:24:d7:70:56:1a:47:cd:b6: d8:3d:ee:17:04:12:49:68:a4:d2:6b:74:a5:f6:e1: bd:22:4f:7a:cc:c4:e7:50:2f:bb:0f:29:7b:19:f5: 94:e1:5e:77:40:a3:cc:04:36:7d:c9:ca:fe:f5:ee: f8:8b:69:8d:eb:36:b9:f1:3c:7f:4e:87:76:52:85: 91:51:a6:e2:7b:ab:9a:2d:ad:0f:41:05:f3:00:1c: d7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 63.245.192.0/20 64.186.24.0/21 66.170.96.0/20 66.205.228.0/22 67.219.240.0/20 98.158.240.0/20 104.193.28.0/22 130.119.0.0/16 130.200.0.0/16 135.14.0.0/15 135.24.0.0/16 135.36.0.0/16 135.141.0.0-135.142.255.255 135.156.0.0/16 138.42.0.0/16 141.202.0.0/16 144.49.0.0/16 148.64.0.0/19 155.35.0.0/24 155.35.2.0-155.35.33.255 155.35.36.0-155.35.45.255 155.35.48.0-155.35.225.255 155.35.227.0-155.35.231.255 155.35.233.0-155.35.255.255 168.149.128.0/18 170.176.240.0/21 192.19.0.0/16 192.40.64.0/24 192.251.86.0/24 198.135.124.0/23 199.19.248.0/21 199.43.188.0/24 199.85.234.0/23 199.101.152.0/22 199.116.168.0/21 199.184.126.0/23 199.247.32.0/20 207.189.188.0/22 208.91.0.0/22 216.18.144.0/20 216.31.208.0/20 216.82.240.0/20 216.221.16.0/20 IPv6: 2602:274::/36 2602:275::/36 2602:800:2000::/40 2604:b040::/32 2605:a7c0::/32 2606:9680::/32 2620:0:850::/48 2620:31:a000::/48 2620:51:a000::/48 2620:5a:2000::/48 2620:78::/48 2620:cc::/48 2620:df:4000::/44 2620:100::/44 2620:102:5000::/43 2620:120:7000::/40 2620:124:6000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6126 13713 14547 18924 19637 21948 22853 22918 22965 23326 26248 26282 27471 36657 40816 53512 53766 54557 55048 62542 394136 395632 395730 397404 397983 400055 400870-400881 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:49:88:c0:a5:83:47:85:57:a0:62:92:bd:95:93:de:06:18: 0a:d6:a1:c5:ab:63:ba:85:3b:d5:5b:99:cf:ad:36:d1:04:b3: 4d:50:7e:83:91:68:65:f4:43:16:40:2a:59:a8:e1:2c:05:fc: 8f:b0:93:d6:68:4f:e6:46:91:43:34:21:7e:ab:98:12:bf:ac: 09:97:bb:0d:a4:bc:56:70:89:61:90:58:30:f9:d6:c1:29:49: 83:40:34:a0:dd:0d:4e:42:7b:a5:43:68:77:46:8b:2d:a8:02: 3e:db:f0:b2:18:38:c8:09:21:e0:c1:8d:c2:93:6a:67:05:56: 75:55:93:88:51:69:39:cc:0b:e3:55:d2:3f:2b:74:bb:e5:2f: 78:b8:aa:af:4b:b1:76:f3:2d:b9:03:07:de:76:7b:1a:c9:38: 1d:df:22:8e:ff:1c:f6:cc:fc:ba:75:dd:15:fb:38:5d:6e:57: 01:92:b4:94:77:37:a8:aa:c4:fb:f6:63:54:ed:c7:7d:88:2f: d4:2e:ee:94:b4:40:0e:ce:12:16:09:4b:31:92:7d:4c:0d:5b: c7:f6:27:3e:b2:27:b7:76:09:44:16:14:49:94:3f:32:1a:fe: 60:38:5e:f7:50:ee:c4:b0:3f:48:61:d2:a9:0d:69:dd:4d:b1: bf:5a:9a:87 -----BEGIN CERTIFICATE----- MIIJSzCCCDOgAwIBAgIUAQ0Mn0MoWEvb8oGWuqj2BR3L6qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTExNDE3MTgyMVoXDTI3MDIxMDAxNDUzM1owLzEtMCsGA1UEAxMk OWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCb8H47tU/XeQPptEWToOLJCO+BV7Xom+5lS Jzsmvz3ceN8RnnQYFCx1dgvWTF7x2AhNXQKJByEX8ONUJFMzZVavesOSek2RcLjB K49LFM5oYa8+DR9jL5+BhFoFYsBfewDo30rIQYDEo7qy0jngPQZNjvHPXTckuW/t 8chFgI7d/yz5haRiMcTReTCCr1t6QofZZabVtqmkD7wtGjESsTuk2P2t5JUzxCUS JNdwVhpHzbbYPe4XBBJJaKTSa3Sl9uG9Ik96zMTnUC+7Dyl7GfWU4V53QKPMBDZ9 ycr+9e74i2mN6za58Tx/Tod2UoWRUabie6uaLa0PQQXzABzXEQIDAQABo4IGXTCC BlkwHQYDVR0OBBYEFI8YixjttXkjVfu5vwZWCtPiAaQ3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzlkZTViNDdmLWJkNDktNDYxNC1i NjU4LTk5ODBjZmQxNzc2OS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2Zk MTc3NjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwggHeBggrBgEF BQcBBwEB/wSCAc0wggHJMIIBLQQCAAEwggElAwQEP/XAAwQDQLoYAwQEQqpgAwQC Qs3kAwQEQ9vwAwQEYp7wAwQCaMEcAwMAgncDAwCCyAMDAYcOAwMAhxgDAwCHJDAK AwMAh40DAwCHjgMDAIecAwMAiioDAwCNygMDAJAxAwQFlEAAAwQAmyMAMAwDBAGb IwIDBAGbIyAwDAMEApsjJAMEAZsjLDAMAwQEmyMwAwQBmyPgMAwDBACbI+MDBAOb I+AwCwMEAJsj6QMDApsgAwQGqJWAAwQDqrDwAwMAwBMDBADAKEADBADA+1YDBAHG h3wDBAPHE/gDBADHK7wDBAHHVeoDBALHZZgDBAPHdKgDBAHHuH4DBATH9yADBALP vbwDBALQWwADBATYEpADBATYH9ADBATYUvADBATY3RAwgZUEAgACMIGOAwYEJgIC dAADBgQmAgJ1AAMGACYCCAAgAwUAJgSwQAMFACYFp8ADBQAmBpaAAwcAJiAAAAhQ AwcAJiAAMaAAAwcAJiAAUaAAAwcAJiAAWiAAAwcAJiAAeAAAAwcAJiAAzAAAAwcE JiAA30AAAwcEJiABAAAAAwcFJiABAlAAAwYAJiABIHADBgAmIAEkYDCBmgYIKwYB BQUHAQgBAf8EgYowgYeggYQwgYECAhfuAgI1kQICONMCAknsAgJMtQICVbwCAllF AgJZhgICWbUCAlseAgJmiAICZqoCAmtPAgMAjzECAwCfcAIDANEIAgMA0gYCAwDV HQIDANcIAgMA9E4CAwYDmAIDBglwAgMGCdICAwYQXAIDBhKfAgMGGrcwCgIDBh3m AgMGHfEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEADkmIwKWDR4VXoGKSvZWT3gYYCtahxatjuoU71VuZz602 0QSzTVB+g5FoZfRDFkAqWajhLAX8j7CT1mhP5kaRQzQhfquYEr+sCZe7DaS8VnCJ YZBYMPnWwSlJg0A0oN0NTkJ7pUNod0aLLagCPtvwshg4yAkh4MGNwpNqZwVWdVWT iFFpOcwL41XSPyt0u+UveLiqr0uxdvMtuQMH3nZ7Gsk4Hd8ijv8c9sz8unXdFfs4 XW5XAZK0lHc3qKrE+/ZjVO3HfYgv1C7ulLRADs4SFglLMZJ9TA1bx/YnPrInt3YJ RBYUSZQ/Mhr+YDhe91DuxLA/SGHSqQ1p3U2xv1qahw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:24 2025 by rpki-client