This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer File: b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer (raw, json) Hash identifier: uI0c4DJ8R6wnJaNMxn9f/T+gTMjMrrAXmF3LwEpfJgs= Subject key identifier: 1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C48697FA00FEE20092875C200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Dec 2025 13:45:24 +0000 Certificate not after: Mon 27 Mar 2028 12:45:24 +0000 Subordinate resources: AS: 6491 IP: 204.89.198.0/24 IP: 206.197.69.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:69:7f:a0:0f:ee:20:09:28:75:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 23 13:45:24 2025 GMT Not After : Mar 27 12:45:24 2028 GMT Subject: CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a8:c2:41:10:ad:af:80:66:10:d9:86:3f:08: 4b:e0:c8:4b:24:5a:21:9e:e0:59:db:32:cc:c8:dd: df:ce:56:76:c0:bd:8d:62:8c:4e:91:8d:07:79:a9: 12:f8:be:70:f9:fd:62:11:20:17:a9:f2:2e:54:c3: 15:5f:88:11:89:a4:36:4c:46:21:68:78:4e:c7:e3: 7e:83:ff:0c:f0:b3:a6:d2:14:ae:d4:1e:7c:01:71: d9:35:11:b8:26:32:89:9e:02:45:13:4f:f1:66:09: 5f:a4:86:27:b1:96:b0:c8:22:d6:4d:e7:4f:92:33: cb:a2:da:e6:7c:68:0f:86:58:ec:ce:df:ed:42:db: 6c:27:c0:43:be:34:ee:da:b7:e9:cb:f7:6c:18:23: c1:fe:ca:5e:50:25:3a:ec:1a:7b:a0:f1:f2:8b:02: 0c:8c:54:7b:f4:f4:2d:c1:fc:c4:f5:e2:89:9b:c5: 62:e1:8d:70:6d:0a:08:9d:1a:04:82:40:1d:73:64: e9:9a:61:2f:f6:a9:2a:33:7b:3e:c5:be:c1:21:0a: 01:05:44:29:20:2d:ee:3f:58:4f:89:aa:93:4a:00: bf:54:a1:d3:02:48:cc:82:ba:e9:89:58:ed:51:2a: 2d:c6:a1:c1:ed:56:aa:69:a1:42:1e:14:dd:f2:a7: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.89.198.0/24 206.197.69.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6491 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:17:44:eb:5f:51:40:07:60:68:ac:1b:fc:02:e2:2e:e5:08: 3c:fe:54:40:51:ef:90:8e:5b:a8:e4:3e:fb:d7:64:c6:ac:12: 8c:1a:a9:be:00:51:66:7f:7f:db:f2:36:ef:40:58:41:90:cc: a2:bf:d0:bf:1c:51:55:e2:df:7f:0b:35:4c:c9:20:b8:6a:be: 43:7f:1a:22:5b:7a:43:eb:92:b2:85:c6:a0:f5:81:95:7a:26: b6:bf:1a:c8:f3:bc:91:47:bf:f5:1a:82:e6:f2:96:22:e4:21: 38:68:d5:89:67:59:4b:9e:e5:13:10:e8:7d:ee:e0:47:d4:6b: f8:02:00:e9:d0:06:1d:e9:79:c2:f5:df:3c:53:f9:25:39:39: 24:8a:91:93:81:39:4d:e4:36:a8:ed:ca:01:87:fb:e3:a7:fb: 91:94:b0:65:a1:b8:7c:b8:18:65:76:53:85:3f:4e:e1:55:8d: e9:06:8f:e4:f8:01:5f:2f:b9:bc:63:e6:9c:fe:b7:69:f2:98: bf:0a:99:09:c4:7b:13:44:a8:86:42:ee:a1:59:93:c3:29:8c: d0:30:4e:c4:50:e2:5d:06:2b:03:43:04:05:c4:84:43:03:e4: 24:38:35:f3:1c:d5:83:ed:24:bc:a5:74:2e:ef:db:72:7a:e3: a3:97:0f:a3 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWExIaX+gD+4gCSh1wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTIyMzEzNDUyNFoXDTI4MDMyNzEyNDUyNFowLzEtMCsGA1UEAxMk YjJjZDBkNTEtOGI5OS00MmM4LTkxYWYtMmZmMzRhNDRhZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ajCQRCtr4BmENmGPwhL4MhLJFohnuBZ2zLM yN3fzlZ2wL2NYoxOkY0HeakS+L5w+f1iESAXqfIuVMMVX4gRiaQ2TEYhaHhOx+N+ g/8M8LOm0hSu1B58AXHZNRG4JjKJngJFE0/xZglfpIYnsZawyCLWTedPkjPLotrm fGgPhljszt/tQttsJ8BDvjTu2rfpy/dsGCPB/speUCU67Bp7oPHyiwIMjFR79PQt wfzE9eKJm8Vi4Y1wbQoInRoEgkAdc2TpmmEv9qkqM3s+xb7BIQoBBUQpIC3uP1hP iaqTSgC/VKHTAkjMgrrpiVjtUSotxqHB7VaqaaFCHhTd8qeiMwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFBscQ/2AajCo40MRRsLWeOJLv/AUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MmNkMGQ1MS04Yjk5LTQyYzgtOTFhZi0yZmYzNGE0NGFlOTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IyY2QwZDUxLThiOTktNDJjOC05 MWFmLTJmZjM0YTQ0YWU5My9iMmNkMGQ1MS04Yjk5LTQyYzgtOTFhZi0yZmYzNGE0 NGFlOTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADMWcYDBADOxUUwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICGVswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAfhdE619RQAdgaKwb/ALiLuUIPP5UQFHvkI5bqOQ+ +9dkxqwSjBqpvgBRZn9/2/I270BYQZDMor/QvxxRVeLffws1TMkguGq+Q38aIlt6 Q+uSsoXGoPWBlXomtr8ayPO8kUe/9RqC5vKWIuQhOGjViWdZS57lExDofe7gR9Rr +AIA6dAGHel5wvXfPFP5JTk5JIqRk4E5TeQ2qO3KAYf746f7kZSwZaG4fLgYZXZT hT9O4VWN6QaP5PgBXy+5vGPmnP63afKYvwqZCcR7E0SohkLuoVmTwymM0DBOxFDi XQYrA0MEBcSEQwPkJDg18xzVg+0kvKV0Lu/bcnrjo5cPow== -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:41 2026 by rpki-client