This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer File: b9ea3438-4142-4de2-a912-7b081a51b42d.cer (raw, json) Hash identifier: MN5NXuv9ciAQe2JoJI/SYUsS7BT0QfRLi1GnWoI0Y60= Subject key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584C9C29FE761F825AB35D37B480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 Jan 2026 13:45:21 +0000 Certificate not after: Wed 26 Apr 2028 12:45:21 +0000 Subordinate resources: IP: 74.116.104.0/21 IP: 198.17.50.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:29:fe:76:1f:82:5a:b3:5d:37:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 22 13:45:21 2026 GMT Not After : Apr 26 12:45:21 2028 GMT Subject: CN=b9ea3438-4142-4de2-a912-7b081a51b42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:75:55:95:19:2f:25:ac:07:db:f0:a2:27: aa:ff:59:a1:f4:dd:29:95:12:13:f9:f9:a8:25:35: 7a:44:b8:79:7b:50:38:62:f1:40:5a:d3:e4:f3:f4: 42:27:38:35:fc:1c:eb:92:8e:4c:16:a5:4f:7a:3c: 6d:a3:4d:16:37:23:2b:52:e9:fa:49:14:2c:8b:67: 95:48:77:4b:df:ad:04:68:30:0e:50:d0:c7:85:71: e9:64:9b:02:ec:0c:40:d3:da:86:3b:35:be:b2:28: 91:c7:40:94:77:62:dc:14:42:c0:74:4b:83:c1:bf: c6:c6:0a:dd:05:72:61:12:c8:a7:43:07:23:24:85: a0:71:cd:1f:53:33:ce:64:f0:31:7f:7a:28:70:7d: 01:24:7c:17:1e:1f:f3:4d:26:f6:ac:73:91:7f:cc: 91:80:cb:73:91:e4:ef:ad:da:93:95:a0:3a:00:fa: b8:32:41:91:27:84:1c:91:06:0b:a9:28:78:1b:4e: 5b:70:11:4e:71:c6:b1:ec:48:d8:13:d5:fc:20:cb: f5:df:c2:e8:c5:28:36:37:6e:34:e4:87:1d:73:3e: 9c:f6:66:ff:57:4c:b9:3e:44:ba:a5:d3:ca:6c:49: 64:8f:d4:e9:0f:ea:c2:a0:53:fc:eb:61:0f:02:27: 51:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.116.104.0/21 198.17.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8f:91:4f:2c:53:d0:81:95:88:eb:28:57:de:e2:9b:b8:8d: c7:96:d4:a9:7c:95:6b:7d:38:3a:1f:31:cc:fb:af:9b:49:51: eb:ed:1e:96:2d:94:a3:8f:39:6c:85:ae:a6:39:89:02:e4:97: fa:54:d3:0b:e4:e8:5c:e3:8d:33:1f:11:fb:2f:fd:04:10:ef: 59:f9:fa:ab:d1:87:c2:c3:d2:2a:25:4a:fa:02:c7:82:ad:b1: 5c:b9:2e:a3:40:24:27:9a:96:8d:bb:f6:49:6f:c1:4d:40:45: a7:88:6a:98:88:44:7c:6e:1f:62:1f:e9:84:8a:9c:d6:f5:d0: 88:e3:a8:0c:67:e3:a0:4b:87:2a:17:c0:45:9b:b8:3d:4f:58: 2f:26:34:39:f6:92:60:93:94:32:1d:4f:d1:95:ba:16:1d:d7: 90:b5:7d:4c:0a:6f:70:22:74:b0:c7:c0:0e:de:00:9f:3f:15: f6:41:7a:ea:6f:c0:a7:2c:2e:87:66:01:58:0f:d8:4b:c6:e3: e9:95:83:66:82:a3:e0:11:c2:e6:17:fd:43:af:81:e8:5c:ae: 29:4b:3e:18:56:02:e9:00:ab:78:ff:ba:26:2c:24:02:3d:20: fd:c6:ec:bc:51:ca:93:9b:eb:cd:36:71:71:84:12:ee:0a:a3: ee:f9:6c:82 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEycKf52H4Jas103tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDEyMjEzNDUyMVoXDTI4MDQyNjEyNDUyMVowLzEtMCsGA1UEAxMk YjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFiNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w51VZUZLyWsB9vwoieq/1mh9N0plRIT+fmo JTV6RLh5e1A4YvFAWtPk8/RCJzg1/Bzrko5MFqVPejxto00WNyMrUun6SRQsi2eV SHdL360EaDAOUNDHhXHpZJsC7AxA09qGOzW+siiRx0CUd2LcFELAdEuDwb/Gxgrd BXJhEsinQwcjJIWgcc0fUzPOZPAxf3oocH0BJHwXHh/zTSb2rHORf8yRgMtzkeTv rdqTlaA6APq4MkGRJ4QckQYLqSh4G05bcBFOccax7EjYE9X8IMv138LoxSg2N240 5Icdcz6c9mb/V0y5PkS6pdPKbElkj9TpD+rCoFP862EPAidRiQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFCQ5Yl6Idnj2c5gRreRIFm05Nq9tMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i OWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I5ZWEzNDM4LTQxNDItNGRlMi1h OTEyLTdiMDgxYTUxYjQyZC9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1 MWI0MmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANKdGgDBAHGETIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjI+RTyxT0IGV iOsoV97im7iNx5bUqXyVa304Oh8xzPuvm0lR6+0eli2Uo485bIWupjmJAuSX+lTT C+ToXOONMx8R+y/9BBDvWfn6q9GHwsPSKiVK+gLHgq2xXLkuo0AkJ5qWjbv2SW/B TUBFp4hqmIhEfG4fYh/phIqc1vXQiOOoDGfjoEuHKhfARZu4PU9YLyY0OfaSYJOU Mh1P0ZW6Fh3XkLV9TApvcCJ0sMfADt4Anz8V9kF66m/Apywuh2YBWA/YS8bj6ZWD ZoKj4BHC5hf9Q6+B6FyuKUs+GFYC6QCreP+6JiwkAj0g/cbsvFHKk5vrzTZxcYQS 7gqj7vlsgg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:29:14 2026 by rpki-client