This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer File: abf1f0ec-0f56-4356-9ce5-9c637405f386.cer (raw, json) Hash identifier: FHTIuSCxf6sxJPh24GEzmwkFeac7qop0Z8n7nS8HJwQ= Subject key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C18F3DE004BA22CC5A4F111A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 06 Dec 2025 13:45:24 +0000 Certificate not after: Fri 10 Mar 2028 13:45:24 +0000 Subordinate resources: AS: 22423 AS: 54777 AS: 64254 AS: 396338 AS: 396363 IP: 23.154.0.0 -- 23.154.2.255 IP: 24.231.96.0/20 IP: 45.42.72.0/21 IP: 45.58.96.0/20 IP: 65.23.128.0 -- 65.23.151.255 IP: 65.38.64.0/19 IP: 66.97.64.0/19 IP: 69.9.64.0/18 IP: 104.159.0.0/17 IP: 104.192.208.0/21 IP: 104.244.64.0/22 IP: 108.175.128.0/20 IP: 138.229.16.0/20 IP: 142.90.192.0/18 IP: 144.208.96.0/21 IP: 144.208.112.0/22 IP: 160.20.232.0/22 IP: 162.222.80.0/22 IP: 162.223.116.0/22 IP: 162.246.52.0/22 IP: 166.48.0.0/16 IP: 170.100.160.0/19 IP: 170.100.208.0/21 IP: 180.181.160.0/19 IP: 192.83.128.0/20 IP: 192.214.128.0/19 IP: 192.214.224.0/19 IP: 198.72.48.0/20 IP: 199.166.219.0/24 IP: 199.189.76.0/22 IP: 199.189.164.0/23 IP: 199.202.146.0/24 IP: 199.202.200.0/24 IP: 199.202.204.0/24 IP: 199.241.128.0/21 IP: 205.233.150.0/24 IP: 205.236.43.0/24 IP: 205.236.80.0/24 IP: 205.236.89.0/24 IP: 205.236.104.0/22 IP: 205.236.120.0/22 IP: 205.236.226.0/24 IP: 206.180.240.0/20 IP: 209.182.228.0/22 IP: 2604:a8c0::/32 IP: 2607:9500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:f3:de:00:4b:a2:2c:c5:a4:f1:11:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 6 13:45:24 2025 GMT Not After : Mar 10 13:45:24 2028 GMT Subject: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:81:5d:70:20:8a:67:fa:f6:aa:65:d1:94: 59:91:b8:8d:a1:7f:f8:38:ea:b9:0e:4c:b4:7a:58: cd:d7:b8:8b:06:15:a2:03:63:fb:55:bd:f3:42:e2: ed:e3:3d:79:b2:a4:69:8f:d5:a2:45:31:62:7c:26: c8:b8:28:07:97:eb:bf:c9:ab:64:d3:ed:a7:6f:89: 22:53:5b:de:02:67:71:85:f3:9c:43:f4:df:55:8f: 2d:82:44:42:af:b0:4a:b9:d5:74:36:53:39:37:74: 5b:06:01:6d:ee:2e:8e:6b:9f:a6:ea:e9:d0:e7:2d: 7b:f4:23:31:06:6b:c2:4e:98:6a:ac:64:55:f5:9c: 4e:d4:13:a3:45:47:2e:3d:4e:f3:22:a0:0e:4b:40: 6e:21:f2:c4:5f:1f:e7:28:c9:1f:cb:07:e9:b7:1d: c8:6c:aa:f7:cc:1e:a5:ad:f1:ab:9b:bb:2a:f7:f9: df:23:5d:98:b0:6a:c5:09:35:38:66:8f:8d:42:55: c0:97:4d:b6:96:8a:2b:ac:0a:5e:a7:56:03:d3:0d: 10:da:b1:22:a8:ed:4c:7b:5d:1f:75:a7:aa:72:f3: 2b:64:d2:c3:32:7f:b8:f5:61:78:2b:9a:00:44:3b: bf:c7:8e:90:c2:71:a3:77:b4:e9:78:39:5c:a4:fa: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.154.0.0-23.154.2.255 24.231.96.0/20 45.42.72.0/21 45.58.96.0/20 65.23.128.0-65.23.151.255 65.38.64.0/19 66.97.64.0/19 69.9.64.0/18 104.159.0.0/17 104.192.208.0/21 104.244.64.0/22 108.175.128.0/20 138.229.16.0/20 142.90.192.0/18 144.208.96.0/21 144.208.112.0/22 160.20.232.0/22 162.222.80.0/22 162.223.116.0/22 162.246.52.0/22 166.48.0.0/16 170.100.160.0/19 170.100.208.0/21 180.181.160.0/19 192.83.128.0/20 192.214.128.0/19 192.214.224.0/19 198.72.48.0/20 199.166.219.0/24 199.189.76.0/22 199.189.164.0/23 199.202.146.0/24 199.202.200.0/24 199.202.204.0/24 199.241.128.0/21 205.233.150.0/24 205.236.43.0/24 205.236.80.0/24 205.236.89.0/24 205.236.104.0/22 205.236.120.0/22 205.236.226.0/24 206.180.240.0/20 209.182.228.0/22 IPv6: 2604:a8c0::/32 2607:9500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22423 54777 64254 396338 396363 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:77:74:9b:85:d4:78:d6:41:2b:30:9b:7b:ec:7c:1f:85:5e: 67:dd:eb:1c:74:02:87:22:02:74:93:41:7f:43:ee:45:c8:1e: e8:88:4c:9f:9e:51:0c:cd:9f:9b:eb:31:e8:2a:8a:dc:fb:b7: 21:3d:b1:3b:fe:bb:35:14:4c:95:0b:81:db:76:b4:9b:0d:00: f0:93:38:29:d4:67:01:ad:34:25:59:df:95:00:00:a7:2d:c9: 18:db:f3:8f:7a:dd:64:e1:54:e9:77:04:11:76:d8:20:d8:49: 12:e8:16:d1:7f:fc:47:41:9f:59:e5:49:bb:44:c8:d4:53:3f: e3:16:2c:27:0f:a5:2e:03:ad:a7:c4:92:2c:3e:ff:2e:52:a5: 16:6d:b0:27:48:3c:ef:4a:70:ef:16:77:30:86:b1:33:eb:1d: 01:71:f4:68:42:a1:08:4d:1e:b5:f3:03:5a:4c:86:e9:fe:21: 27:19:ea:f1:9b:6e:be:d0:a0:57:cc:93:ed:87:6c:c6:61:c0: 35:e4:d2:1f:9c:89:60:39:c1:9a:14:db:75:ab:c3:d2:db:91: 1f:14:c9:c7:b9:c2:e3:07:6f:ef:f1:ff:f5:b6:a6:61:f6:f2: 7f:56:aa:30:b7:e2:72:fc:c9:08:97:b9:ac:52:ec:7a:6e:0e: df:22:6b:63 -----BEGIN CERTIFICATE----- MIIITDCCBzSgAwIBAgIUAQ0Mn0MoWEwY894AS6IsxaTxEaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTIwNjEzNDUyNFoXDTI4MDMxMDEzNDUyNFowLzEtMCsGA1UEAxMk YWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVmMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm6BXXAgimf69qpl0ZRZkbiNoX/4OOq5Dky0 eljN17iLBhWiA2P7Vb3zQuLt4z15sqRpj9WiRTFifCbIuCgHl+u/yatk0+2nb4ki U1veAmdxhfOcQ/TfVY8tgkRCr7BKudV0NlM5N3RbBgFt7i6Oa5+m6unQ5y179CMx BmvCTphqrGRV9ZxO1BOjRUcuPU7zIqAOS0BuIfLEXx/nKMkfywfptx3IbKr3zB6l rfGrm7sq9/nfI12YsGrFCTU4Zo+NQlXAl022loorrApep1YD0w0Q2rEiqO1Me10f daeqcvMrZNLDMn+49WF4K5oARDu/x46QwnGjd7TpeDlcpPolCQIDAQABo4IFXjCC BVowHQYDVR0OBBYEFJdLyUck9N0GUN8dKpGJdSYpkNq+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h YmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2FiZjFmMGVjLTBmNTYtNDM1Ni05 Y2U1LTljNjM3NDA1ZjM4Ni9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQw NWYzODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwggFNBggrBgEF BQcBBwEB/wSCATwwggE4MIIBHgQCAAEwggEWMAsDAwEXmgMEABeaAgMEBBjnYAME Ay0qSAMEBC06YDAMAwQHQReAAwQDQReQAwQFQSZAAwQFQmFAAwQGRQlAAwQHaJ8A AwQDaMDQAwQCaPRAAwQEbK+AAwQEiuUQAwQGjlrAAwQDkNBgAwQCkNBwAwQCoBTo AwQCot5QAwQCot90AwQCovY0AwMApjADBAWqZKADBAOqZNADBAW0taADBATAU4AD BAXA1oADBAXA1uADBATGSDADBADHptsDBALHvUwDBAHHvaQDBADHypIDBADHysgD BADHyswDBAPH8YADBADN6ZYDBADN7CsDBADN7FADBADN7FkDBALN7GgDBALN7HgD BADN7OIDBATOtPADBALRtuQwFAQCAAIwDgMFACYEqMADBQAmB5UAMC0GCCsGAQUF BwEIAQH/BB4wHKAaMBgCAleXAgMA1fkCAwD6/gIDBgwyAgMGDEswVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA k3d0m4XUeNZBKzCbe+x8H4VeZ93rHHQChyICdJNBf0PuRcge6IhMn55RDM2fm+sx 6CqK3Pu3IT2xO/67NRRMlQuB23a0mw0A8JM4KdRnAa00JVnflQAApy3JGNvzj3rd ZOFU6XcEEXbYINhJEugW0X/8R0GfWeVJu0TI1FM/4xYsJw+lLgOtp8SSLD7/LlKl Fm2wJ0g870pw7xZ3MIaxM+sdAXH0aEKhCE0etfMDWkyG6f4hJxnq8ZtuvtCgV8yT 7YdsxmHANeTSH5yJYDnBmhTbdavD0tuRHxTJx7nC4wdv7/H/9bamYfbyf1aqMLfi cvzJCJe5rFLsem4O3yJrYw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:08:39 2025 by rpki-client