This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer File: 5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer (raw, json) Hash identifier: I+k86Qo0BsPGzL62F0Ub+FErjSJxQ9PZMy4fhiKgKVU= Subject key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority key identifier: 3F:D6:7E:0F:02:D3:6F:E1:89:34:27:A7:09:EB:70:E4:4E:D3:3B:9D Certificate issuer: /CN=42b2991f-22c7-42f7-8cf5-4f3138859732 Certificate serial: 010D0C9F4328584C54F991F30ABCCEAB33FA6988 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/a841823c-a10d-477c-bfdf-4086f0b1594c/notification.xml Certificate not before: Sun 28 Dec 2025 01:45:23 +0000 Certificate not after: Sat 01 Apr 2028 00:45:23 +0000 Subordinate resources: IP: 184.169.128.0/17 IP: 2620:107:3000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:54:f9:91:f3:0a:bc:ce:ab:33:fa:69:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b2991f-22c7-42f7-8cf5-4f3138859732 Validity Not Before: Dec 28 01:45:23 2025 GMT Not After : Apr 1 00:45:23 2028 GMT Subject: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:a6:4f:4f:f7:11:6b:21:b1:97:9a:4e:d1: 5a:9e:22:09:ac:a1:61:d5:fa:0f:0e:20:3e:e2:49: ee:6a:30:19:ec:ec:c1:6b:dd:5b:10:9c:3a:dd:da: 9e:f9:4c:de:b3:fb:eb:34:5f:95:0f:16:b6:ca:42: 73:31:01:9c:5b:67:31:e9:79:3e:8b:20:78:94:e0: af:6b:f7:34:84:18:7b:e2:59:a9:85:99:1e:96:ed: 52:02:f3:a3:54:50:24:ac:a4:f2:7a:44:ee:e6:74: 7c:f1:0d:9c:bb:35:cb:60:bb:ef:36:7e:f0:7f:8e: 72:e3:4c:ed:f5:65:09:cf:9e:6e:9e:92:e2:09:d2: 84:d7:10:5a:1a:08:5e:9d:b6:62:bc:1c:c3:81:9a: eb:72:66:8c:8b:c6:52:99:9a:95:f6:6e:e3:ba:52: bc:08:bd:fa:71:90:27:ea:c2:39:a7:96:b8:ac:96: 7d:6e:28:77:cf:3d:a2:bb:cc:7c:3c:2a:a6:f5:0f: 2e:8c:ab:de:75:54:e9:94:de:c8:08:b0:54:25:03: ed:02:eb:55:9b:dc:98:5f:26:9e:fc:d3:8b:2f:a5: 81:13:6b:b1:ef:4c:e0:2d:6a:cf:d6:16:a9:48:3e: 7d:33:61:62:db:94:68:ba:aa:f3:3e:06:75:83:cf: b4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/a841823c-a10d-477c-bfdf-4086f0b1594c/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl X509v3 Authority Key Identifier: keyid:3F:D6:7E:0F:02:D3:6F:E1:89:34:27:A7:09:EB:70:E4:4E:D3:3B:9D X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer sbgp-ipAddrBlock: critical IPv4: 184.169.128.0/17 IPv6: 2620:107:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f2:cd:78:f6:84:1d:71:1c:92:01:b9:be:03:e1:0e:85:d1: 66:5e:3b:4f:65:4f:26:a8:c7:8c:ba:c2:17:85:fc:49:e1:f8: 5d:ee:e9:f7:dc:7c:2f:2c:d4:b7:3b:2c:5c:76:3e:4d:59:75: e1:8a:15:24:6e:78:90:30:e9:1f:26:2c:18:2a:02:ba:91:fa: dc:17:d7:e0:a5:23:bf:0d:fe:76:76:1d:01:57:c9:e6:ef:f7: b6:d4:d2:1f:91:77:88:e1:2e:2d:74:3c:20:97:7e:fa:9f:a5: 6d:7a:65:cb:ce:f7:9e:be:83:8e:4c:ff:6e:96:6a:06:71:96: f8:34:5e:1a:2d:fb:1c:58:76:98:6e:68:65:84:17:2d:8a:41: 76:5b:eb:89:46:5d:0b:37:bd:99:67:1e:b6:2d:5f:50:d9:8d: fd:1a:93:f0:09:34:f8:75:40:36:22:bc:7f:de:28:ed:a5:ab: f8:8c:b7:a9:5c:0f:0a:05:60:dd:67:d1:ee:47:8b:14:a7:5f: ff:32:1d:7d:d1:8f:ed:f1:b8:b5:75:7b:b3:99:11:8b:53:d8: 68:17:5c:d8:64:3f:57:1d:3d:03:c6:f4:c0:28:50:02:53:71: cf:75:a8:b5:65:26:da:91:a7:45:a2:7d:b2:1c:fb:ce:c9:b3: ac:5f:96:7c -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWExU+ZHzCrzOqzP6aYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiMjk5MWYtMjJjNy00MmY3LThjZjUtNGYzMTM4ODU5 NzMyMB4XDTI1MTIyODAxNDUyM1oXDTI4MDQwMTAwNDUyM1owPTE7MDkGA1UEAxMy NWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjli NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQKZPT/cRayGxl5pO 0VqeIgmsoWHV+g8OID7iSe5qMBns7MFr3VsQnDrd2p75TN6z++s0X5UPFrbKQnMx AZxbZzHpeT6LIHiU4K9r9zSEGHviWamFmR6W7VIC86NUUCSspPJ6RO7mdHzxDZy7 Nctgu+82fvB/jnLjTO31ZQnPnm6ekuIJ0oTXEFoaCF6dtmK8HMOBmutyZoyLxlKZ mpX2buO6UrwIvfpxkCfqwjmnlrisln1uKHfPPaK7zHw8Kqb1Dy6Mq951VOmU3sgI sFQlA+0C61Wb3JhfJp7804svpYETa7HvTOAtas/WFqlIPn0zYWLblGi6qvM+BnWD z7RZAgMBAAGjggQBMIID/TAdBgNVHQ4EFgQU/iLg9yLMTwYMWFoSb+aiZQA2Xkgw ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWEx MGQtNDc3Yy1iZmRmLTQwODZmMGIxNTk0Yy8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4 MjNjLWExMGQtNDc3Yy1iZmRmLTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFn cXJxX20wM19tMlEubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2E4NDE4MjNjLWExMGQtNDc3Yy1i ZmRmLTQwODZmMGIxNTk0Yy9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyLzQyYjI5OTFmLTIyYzctNDJmNy04Y2Y1LTRmMzEzODg1OTczMi80MmIyOTkx Zi0yMmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIuY3JsMB8GA1UdIwQYMBaAFD/W fg8C02/hiTQnpwnrcORO0zudMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDJi Mjk5MWYtMjJjNy00MmY3LThjZjUtNGYzMTM4ODU5NzMyLmNlcjAwBggrBgEFBQcB BwEB/wQhMB8wDAQCAAEwBgMEB7ipgDAPBAIAAjAJAwcEJiABBzAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHnyzXj2hB1xHJIBub4D4Q6F0WZeO09lTyaox4y6wheF/Enh+F3u6ffcfC8s1Lc7 LFx2Pk1ZdeGKFSRueJAw6R8mLBgqArqR+twX1+ClI78N/nZ2HQFXyebv97bU0h+R d4jhLi10PCCXfvqfpW16ZcvO956+g45M/26WagZxlvg0Xhot+xxYdphuaGWEFy2K QXZb64lGXQs3vZlnHrYtX1DZjf0ak/AJNPh1QDYivH/eKO2lq/iMt6lcDwoFYN1n 0e5HixSnX/8yHX3Rj+3xuLV1e7OZEYtT2GgXXNhkP1cdPQPG9MAoUAJTcc91qLVl JtqRp0WifbIc+87Js6xflnw= -----END CERTIFICATE-----Generated at Sun Jan 25 12:56:36 2026 by rpki-client