This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer File: 95a66ba6-9469-47f7-8328-e12b21a9be23.cer (raw, json) Hash identifier: zxSOlGEE9TM6SU/jhWEr9LvsS4WDgLD/uahX5VyxmSo= Subject key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C7C0F243F72CAE92D5C2DDC60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Jan 2026 01:45:23 +0000 Certificate not after: Sat 15 Apr 2028 00:45:23 +0000 Subordinate resources: AS: 3573 IP: 144.36.0.0 -- 144.36.69.255 IP: 144.36.74.0 -- 144.36.103.255 IP: 144.36.105.0 -- 144.36.127.255 IP: 144.36.130.0 -- 144.36.133.255 IP: 144.36.136.0/22 IP: 144.36.142.0/23 IP: 144.36.146.0/23 IP: 144.36.150.0 -- 144.36.175.255 IP: 144.36.177.0/24 IP: 144.36.179.0 -- 144.36.181.255 IP: 144.36.186.0/23 IP: 144.36.190.0 -- 144.36.205.255 IP: 144.36.208.0/23 IP: 144.36.212.0/23 IP: 144.36.218.0/23 IP: 144.36.237.0 -- 144.36.243.255 IP: 144.36.246.0/23 IP: 144.36.252.0/23 IP: 149.122.0.0/16 IP: 170.248.2.0 -- 170.248.11.255 IP: 170.248.14.0 -- 170.248.41.255 IP: 170.248.44.0/23 IP: 170.248.48.0 -- 170.248.137.255 IP: 170.248.140.0 -- 170.248.159.255 IP: 170.248.172.0 -- 170.248.189.255 IP: 170.248.192.0/18 IP: 170.251.0.0 -- 170.251.9.255 IP: 170.251.12.0 -- 170.251.19.255 IP: 170.251.22.0 -- 170.251.39.255 IP: 170.251.48.0 -- 170.251.59.255 IP: 170.251.62.0 -- 170.251.89.255 IP: 170.251.92.0 -- 170.251.109.255 IP: 170.251.112.0 -- 170.251.141.255 IP: 170.251.144.0 -- 170.251.148.255 IP: 170.251.152.0/23 IP: 170.251.158.0 -- 170.251.169.255 IP: 170.251.172.0/23 IP: 170.251.176.0 -- 170.252.255.255 IP: 199.89.236.0 -- 199.89.242.255 IP: 199.120.146.0/23 IP: 199.164.229.0/24 IP: 204.62.186.0 -- 204.62.188.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7c:0f:24:3f:72:ca:e9:2d:5c:2d:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 11 01:45:23 2026 GMT Not After : Apr 15 00:45:23 2028 GMT Subject: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:b3:d2:ae:8b:c6:ac:cd:7c:a4:d8:42:41: 80:cd:cd:29:10:48:67:2b:98:75:88:50:fa:af:53: fa:c6:81:0c:46:7b:cb:5a:52:9a:26:32:35:3f:ae: 36:a8:be:22:39:7f:41:07:66:7d:6d:99:ab:ef:68: ad:cb:0a:50:4f:e4:91:7d:70:08:35:2f:53:08:90: ee:23:49:de:6c:9b:c9:1c:7c:3a:80:58:e5:c3:ea: 0f:73:ed:33:6c:d6:16:77:4a:51:b1:1f:af:d5:65: 08:de:c4:c1:8f:19:ad:f0:cc:41:58:23:3e:e7:08: 90:d5:ce:66:fb:d1:1e:9f:79:da:74:aa:1c:32:bc: c8:56:00:80:16:98:95:cf:e5:7d:c5:65:79:4a:f9: 39:e0:7f:84:12:9c:d5:1c:4e:20:44:a4:d4:f3:40: f6:06:31:60:8f:58:ec:eb:75:39:d4:17:11:77:2c: 56:65:27:9b:4a:dd:78:e2:91:55:e9:c1:fa:0f:7e: 59:43:f6:57:1b:b6:01:c8:86:94:6b:cf:e2:ac:24: 7b:11:db:b7:23:c3:b1:67:7e:7b:49:cf:e1:1a:ca: 35:91:3f:65:b0:d8:53:63:49:3f:1f:95:f2:5c:35: c0:8e:9d:ae:f8:7d:04:cf:ab:26:15:cc:4c:47:65: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 144.36.0.0-144.36.69.255 144.36.74.0-144.36.103.255 144.36.105.0-144.36.127.255 144.36.130.0-144.36.133.255 144.36.136.0/22 144.36.142.0/23 144.36.146.0/23 144.36.150.0-144.36.175.255 144.36.177.0/24 144.36.179.0-144.36.181.255 144.36.186.0/23 144.36.190.0-144.36.205.255 144.36.208.0/23 144.36.212.0/23 144.36.218.0/23 144.36.237.0-144.36.243.255 144.36.246.0/23 144.36.252.0/23 149.122.0.0/16 170.248.2.0-170.248.11.255 170.248.14.0-170.248.41.255 170.248.44.0/23 170.248.48.0-170.248.137.255 170.248.140.0-170.248.159.255 170.248.172.0-170.248.189.255 170.248.192.0/18 170.251.0.0-170.251.9.255 170.251.12.0-170.251.19.255 170.251.22.0-170.251.39.255 170.251.48.0-170.251.59.255 170.251.62.0-170.251.89.255 170.251.92.0-170.251.109.255 170.251.112.0-170.251.141.255 170.251.144.0-170.251.148.255 170.251.152.0/23 170.251.158.0-170.251.169.255 170.251.172.0/23 170.251.176.0-170.252.255.255 199.89.236.0-199.89.242.255 199.120.146.0/23 199.164.229.0/24 204.62.186.0-204.62.188.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3573 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:18:02:20:8b:e8:19:2c:e0:c9:25:a8:8f:52:c4:82:89:57: 61:d6:75:ad:0b:d7:8d:2e:03:76:76:ee:dc:f4:cf:0a:d6:3b: ce:e2:69:9e:73:72:4b:60:81:90:81:22:a2:3b:0b:01:3b:94: d9:5e:71:d8:b6:80:7b:b1:83:22:83:67:ed:f5:7e:ce:22:62: e5:43:a9:05:bd:ea:90:85:91:c2:e4:5c:92:e0:01:0d:50:69: e2:c4:36:da:17:33:27:6e:81:b3:63:17:5c:c7:3a:e7:7a:a3: 48:5c:50:c2:c4:4d:ba:d8:5d:22:da:43:b5:4a:8c:20:e6:99: 28:87:0d:b3:67:52:f7:3c:07:70:01:d6:e7:22:a6:63:d0:60: c7:8e:61:ec:fe:93:dc:3f:30:4f:ca:e8:14:87:59:cc:42:34: 17:13:f2:e4:08:5f:46:06:41:10:7c:46:36:b0:83:1e:d9:8a: d4:d3:9e:60:17:d4:f7:bf:29:93:0f:71:a7:df:06:cf:da:37: db:54:ec:f7:77:f8:cb:49:b3:73:5f:21:0d:b0:4d:5f:d1:98: 93:26:28:44:87:40:94:80:c5:e2:52:e6:67:e5:06:25:25:e2: c4:6f:d3:fe:2f:59:42:14:76:92:21:f1:c7:a0:07:eb:4a:41: 40:66:39:63 -----BEGIN CERTIFICATE----- MIIIzDCCB7SgAwIBAgIUAQ0Mn0MoWEx8DyQ/csrpLVwt3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDExMTAxNDUyM1oXDTI4MDQxNTAwNDUyM1owLzEtMCsGA1UEAxMk OTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTliZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCmz0q6LxqzNfKTYQkGAzc0pEEhnK5h1iFD6 r1P6xoEMRnvLWlKaJjI1P642qL4iOX9BB2Z9bZmr72itywpQT+SRfXAINS9TCJDu I0nebJvJHHw6gFjlw+oPc+0zbNYWd0pRsR+v1WUI3sTBjxmt8MxBWCM+5wiQ1c5m +9Een3nadKocMrzIVgCAFpiVz+V9xWV5Svk54H+EEpzVHE4gRKTU80D2BjFgj1js 63U51BcRdyxWZSebSt144pFV6cH6D35ZQ/ZXG7YByIaUa8/irCR7Edu3I8OxZ357 Sc/hGso1kT9lsNhTY0k/H5XyXDXAjp2u+H0Ez6smFcxMR2WLiwIDAQABo4IF3jCC BdowHQYDVR0OBBYEFG1a9kvMGgbNBBbbTUvk5gKkCGuBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzk1YTY2YmE2LTk0NjktNDdmNy04 MzI4LWUxMmIyMWE5YmUyMy85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFh OWJlMjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwggHhBggrBgEF BQcBBwEB/wSCAdAwggHMMIIByAQCAAEwggHAMAsDAwKQJAMEAZAkRDAMAwQBkCRK AwQDkCRgMAwDBACQJGkDBAeQJAAwDAMEAZAkggMEAZAkhAMEApAkiAMEAZAkjgME AZAkkjAMAwQBkCSWAwQEkCSgAwQAkCSxMAwDBACQJLMDBAGQJLQDBAGQJLowDAME AZAkvgMEAZAkzAMEAZAk0AMEAZAk1AMEAZAk2jAMAwQAkCTtAwQCkCTwAwQBkCT2 AwQBkCT8AwMAlXowDAMEAar4AgMEAqr4CDAMAwQBqvgOAwQBqvgoAwQBqvgsMAwD BASq+DADBAGq+IgwDAMEAqr4jAMEBar4gDAMAwQCqvisAwQBqvi8AwQGqvjAMAsD AwCq+wMEAar7CDAMAwQCqvsMAwQCqvsQMAwDBAGq+xYDBAOq+yAwDAMEBKr7MAME Aqr7ODAMAwQBqvs+AwQBqvtYMAwDBAKq+1wDBAGq+2wwDAMEBKr7cAMEAar7jDAM AwQEqvuQAwQAqvuUAwQBqvuYMAwDBAGq+54DBAGq+6gDBAGq+6wwCwMEBKr7sAMD AKr8MAwDBALHWewDBADHWfIDBAHHeJIDBADHpOUwDAMEAcw+ugMEAMw+vDAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgIN9TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVGAIgi+gZLODJJaiPUsSC iVdh1nWtC9eNLgN2du7c9M8K1jvO4mmec3JLYIGQgSKiOwsBO5TZXnHYtoB7sYMi g2ft9X7OImLlQ6kFveqQhZHC5FyS4AENUGnixDbaFzMnboGzYxdcxzrneqNIXFDC xE262F0i2kO1Sowg5pkohw2zZ1L3PAdwAdbnIqZj0GDHjmHs/pPcPzBPyugUh1nM QjQXE/LkCF9GBkEQfEY2sIMe2YrU055gF9T3vymTD3Gn3wbP2jfbVOz3d/jLSbNz XyENsE1f0ZiTJihEh0CUgMXiUuZn5QYlJeLEb9P+L1lCFHaSIfHHoAfrSkFAZjlj -----END CERTIFICATE-----Generated at Sun Jan 25 07:58:41 2026 by rpki-client