This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer File: a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer (raw, json) Hash identifier: xB1hztfJIb59a+lBKirXnNvMxwh/1hlISZf5wzvKgbA= Subject key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BD48E1ABC6AE45ECEEC2C4780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Nov 2025 01:45:24 +0000 Certificate not after: Tue 15 Feb 2028 01:45:24 +0000 Subordinate resources: AS: 21766 IP: 64.63.192.0/18 IP: 69.8.160.0/20 IP: 152.97.64.0 -- 152.97.255.255 IP: 192.131.56.0/21 IP: 199.189.240.0/21 IP: 199.217.124.0/22 IP: 2605:6600::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d4:8e:1a:bc:6a:e4:5e:ce:ec:2c:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 12 01:45:24 2025 GMT Not After : Feb 15 01:45:24 2028 GMT Subject: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:e9:41:24:a2:bf:d8:95:65:bd:dc:68:0c: d4:c0:57:99:ff:7a:c3:3e:e6:03:0d:ee:18:83:46: 49:99:3f:58:3f:65:38:2b:99:48:eb:0f:b2:91:6d: ed:7b:92:40:60:42:85:c9:6e:8d:16:a6:7d:26:73: 54:fd:f5:91:d6:f5:11:33:e9:4a:66:84:9c:f7:be: e3:45:16:ba:a8:2f:94:d0:2f:74:29:3c:70:05:16: be:45:f1:a0:79:af:22:3f:c1:e7:de:8a:29:b9:5b: 83:1a:93:67:e5:e8:f7:b0:f4:c9:14:40:e1:1d:c5: 56:5d:0a:63:52:ac:57:0b:e5:48:a7:6e:15:c9:b5: bf:00:79:3e:37:ac:9f:32:35:06:f4:58:2a:52:0a: 5f:18:2b:0f:f5:26:e3:f4:de:a6:37:d4:c0:02:35: c1:d8:e2:ce:3f:67:95:e6:b1:27:1e:94:4b:fc:33: c0:ae:a8:fd:1b:62:5a:3f:39:1e:81:38:f8:c1:b2: be:8e:52:24:4a:c9:9a:15:93:9e:ed:2b:5b:5f:31: fe:e3:77:3f:b4:09:7f:59:bd:11:f3:34:53:bc:c6: 68:07:14:4e:01:39:bb:1d:18:ad:bb:12:b9:7a:d1: df:25:85:3d:84:4c:65:1b:5e:f4:6b:e3:26:04:33: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.63.192.0/18 69.8.160.0/20 152.97.64.0-152.97.255.255 192.131.56.0/21 199.189.240.0/21 199.217.124.0/22 IPv6: 2605:6600::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:30:c1:bd:43:27:1a:70:99:f1:cd:c2:31:0a:cd:ca:72:3b: 8c:c7:6d:a5:3b:de:30:9f:d1:a7:e9:7c:9a:33:bf:44:18:7c: bb:50:cf:fe:24:7e:b8:b9:c8:00:79:67:7b:61:28:89:09:dd: f6:80:54:3f:7e:d4:0a:99:07:37:6c:3a:db:a6:ac:77:31:eb: 7b:8a:0d:69:47:16:ef:22:59:31:a7:90:b7:86:49:3f:16:f2: ee:55:40:00:27:f8:4c:19:3a:26:a6:7b:8f:08:de:35:66:78: ce:af:0c:5d:59:22:81:95:a6:ef:37:9b:2b:65:76:18:d7:7a: 05:76:7e:c0:60:bd:cc:84:03:b5:0f:03:67:17:32:67:81:ae: 0f:5b:ed:46:86:90:1a:18:63:76:0a:60:01:f2:a9:47:21:96: 33:66:2e:61:d2:e8:26:a1:17:c6:64:7d:c4:8b:78:4f:e0:d6: 87:e4:b0:23:74:e7:3b:53:86:be:e3:c5:5a:9e:ff:db:0c:14: f6:d5:e6:b5:56:38:f0:29:d3:2c:8e:8c:97:f6:67:10:80:4a: fd:1f:64:f9:9c:5b:5f:2d:c1:c8:5e:a2:e2:d4:73:00:c4:0e: 3f:f5:80:73:50:15:67:7a:40:48:56:41:7a:9c:14:85:55:e6: 5c:c0:91:ba -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWEvUjhq8auRezuwsR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTExMjAxNDUyNFoXDTI4MDIxNTAxNDUyNFowLzEtMCsGA1UEAxMk YTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRjN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqHpQSSiv9iVZb3caAzUwFeZ/3rDPuYDDe4Y g0ZJmT9YP2U4K5lI6w+ykW3te5JAYEKFyW6NFqZ9JnNU/fWR1vURM+lKZoSc977j RRa6qC+U0C90KTxwBRa+RfGgea8iP8Hn3oopuVuDGpNn5ej3sPTJFEDhHcVWXQpj UqxXC+VIp24VybW/AHk+N6yfMjUG9FgqUgpfGCsP9Sbj9N6mN9TAAjXB2OLOP2eV 5rEnHpRL/DPArqj9G2JaPzkegTj4wbK+jlIkSsmaFZOe7StbXzH+43c/tAl/Wb0R 8zRTvMZoBxROATm7HRituxK5etHfJYU9hExlG170a+MmBDMf7QIDAQABo4IETjCC BEowHQYDVR0OBBYEFF7cDgLabuQVv+IjkeTcoydRC3oNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h N2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2E3ZDdmMTRlLTcyYzQtNDdlNC1h ZDA2LWExYjcyZjk0YzdiMS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5 NGM3YjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwUwYIKwYBBQUH AQcBAf8ERDBCMDEEAgABMCsDBAZAP8ADBARFCKAwCwMEBphhQAMDAZhgAwQDwIM4 AwQDx73wAwQCx9l8MA0EAgACMAcDBQQmBWYAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAlUGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBADkwwb1DJxpwmfHNwjEKzcpyO4zHbaU73jCf0afpfJoz v0QYfLtQz/4kfri5yAB5Z3thKIkJ3faAVD9+1AqZBzdsOtumrHcx63uKDWlHFu8i WTGnkLeGST8W8u5VQAAn+EwZOiame48I3jVmeM6vDF1ZIoGVpu83mytldhjXegV2 fsBgvcyEA7UPA2cXMmeBrg9b7UaGkBoYY3YKYAHyqUchljNmLmHS6CahF8ZkfcSL eE/g1ofksCN05ztThr7jxVqe/9sMFPbV5rVWOPAp0yyOjJf2ZxCASv0fZPmcW18t wcheouLUcwDEDj/1gHNQFWd6QEhWQXqcFIVV5lzAkbo= -----END CERTIFICATE-----Generated at Mon Dec 15 17:20:08 2025 by rpki-client