This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.cer File: d21fd4e3-ef8e-4280-aa21-7a5abc068db7.cer (raw, json) Hash identifier: 0RbSQxvWpzp2Vqzl6QkfIUyQWZSNOOoirvQS8KQyUYo= Subject key identifier: 4E:09:EB:87:86:7F:A2:A1:AB:9D:04:B6:AA:4D:C3:94:3F:81:71:3A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C6CB45FCBB54E6F8B81CFD6E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Jan 2026 13:45:22 +0000 Certificate not after: Sun 09 Apr 2028 12:45:22 +0000 Subordinate resources: AS: 395156 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6c:b4:5f:cb:b5:4e:6f:8b:81:cf:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 5 13:45:22 2026 GMT Not After : Apr 9 12:45:22 2028 GMT Subject: CN=d21fd4e3-ef8e-4280-aa21-7a5abc068db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6a:6f:b9:11:74:e9:b6:f6:f4:28:10:87:98: 79:c3:61:eb:40:d8:99:3b:9d:e3:e3:dc:c6:73:72: bb:34:88:df:7d:a9:8b:06:57:e5:8f:be:6a:83:f7: 00:82:3a:f7:47:11:5d:d1:7c:ed:65:07:3c:66:4a: 79:83:07:50:0f:4c:34:0e:61:2d:27:96:0d:13:95: ba:78:56:80:44:14:ac:46:59:ee:aa:7c:d9:1a:c8: 34:af:c3:45:dd:16:d4:76:a7:49:56:d3:e1:6a:5f: ae:df:7a:6e:89:eb:8e:fe:e4:18:7b:7c:bd:c7:6c: 9d:31:d7:15:83:b0:39:98:4c:35:58:b2:0d:58:7c: 49:de:e2:ac:6b:63:2a:99:f3:d2:5c:21:fa:f8:ba: 0c:65:56:66:a9:81:52:88:aa:4b:d2:a6:e9:46:5b: 52:67:1b:ae:69:57:3e:81:ef:77:b9:15:c8:73:22: bd:42:9a:58:f1:16:12:69:b8:f7:4e:00:0a:ef:d2: 56:db:40:bf:cc:95:ae:30:bd:3f:74:f7:d6:c5:a6: 3e:a2:fa:26:00:a7:28:93:67:e8:df:42:54:f9:61: 31:41:62:ee:26:21:4a:72:ef:6a:7f:5c:4b:2c:90: b7:86:1b:fa:62:52:60:81:4b:66:2c:f7:02:7d:44: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:09:EB:87:86:7F:A2:A1:AB:9D:04:B6:AA:4D:C3:94:3F:81:71:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395156 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:59:e2:80:a7:73:3a:1d:24:3c:ad:4b:3c:3e:44:67:8a:79: da:09:25:7e:aa:ff:6d:50:7f:45:86:0d:90:8a:24:83:cf:14: 2e:8d:82:21:bc:00:b7:d4:cc:f2:6d:bc:b8:fc:f5:20:f2:e8: 0c:24:e0:91:e2:d3:6f:7a:71:ba:2e:fc:a4:82:7f:a9:52:c5: e5:04:cf:6a:5b:24:3e:5a:31:c2:4a:b7:11:17:d4:f3:a3:7e: 03:73:07:b9:16:46:36:43:d7:44:0b:9e:de:f4:c3:93:e1:de: 1f:8c:30:87:63:b5:f7:26:78:99:4b:c0:4f:59:90:1a:3c:d8: 35:ea:b1:cd:db:48:ee:58:48:35:d1:3b:f7:9d:88:5b:1f:93: 6d:61:fe:5f:1a:02:4c:d6:96:4e:e8:57:c2:35:3c:dd:65:9f: ea:98:be:73:2f:df:ea:c1:98:7e:9c:d1:f3:f8:98:aa:a9:42: da:ed:aa:66:6e:51:9f:3e:82:c1:9e:14:c4:10:41:9d:b0:3a: 1d:21:37:2f:99:7b:55:43:5b:bf:d1:ae:62:e4:b7:6b:68:95: f2:b7:c9:3b:cf:a6:c1:65:e0:de:e9:e3:6e:cd:39:fe:a8:54: 5b:32:ae:b2:ec:4b:30:1d:80:ac:ad:4c:ea:a4:ee:ba:96:52: b4:a7:88:7e -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWExstF/LtU5vi4HP1uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEwNTEzNDUyMloXDTI4MDQwOTEyNDUyMlowLzEtMCsGA1UEAxMk ZDIxZmQ0ZTMtZWY4ZS00MjgwLWFhMjEtN2E1YWJjMDY4ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmpvuRF06bb29CgQh5h5w2HrQNiZO53j49zG c3K7NIjffamLBlflj75qg/cAgjr3RxFd0XztZQc8Zkp5gwdQD0w0DmEtJ5YNE5W6 eFaARBSsRlnuqnzZGsg0r8NF3RbUdqdJVtPhal+u33puieuO/uQYe3y9x2ydMdcV g7A5mEw1WLINWHxJ3uKsa2MqmfPSXCH6+LoMZVZmqYFSiKpL0qbpRltSZxuuaVc+ ge93uRXIcyK9QppY8RYSabj3TgAK79JW20C/zJWuML0/dPfWxaY+ovomAKcok2fo 30JU+WExQWLuJiFKcu9qf1xLLJC3hhv6YlJggUtmLPcCfURNnwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFE4J64eGf6Khq50EtqpNw5Q/gXE6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k MjFmZDRlMy1lZjhlLTQyODAtYWEyMS03YTVhYmMwNjhkYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2QyMWZkNGUzLWVmOGUtNDI4MC1h YTIxLTdhNWFiYzA2OGRiNy9kMjFmZDRlMy1lZjhlLTQyODAtYWEyMS03YTVhYmMw NjhkYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgeUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGZZ4oCnczodJDytSzw+RGeKedoJ JX6q/21Qf0WGDZCKJIPPFC6NgiG8ALfUzPJtvLj89SDy6Awk4JHi0296cbou/KSC f6lSxeUEz2pbJD5aMcJKtxEX1POjfgNzB7kWRjZD10QLnt70w5Ph3h+MMIdjtfcm eJlLwE9ZkBo82DXqsc3bSO5YSDXRO/ediFsfk21h/l8aAkzWlk7oV8I1PN1ln+qY vnMv3+rBmH6c0fP4mKqpQtrtqmZuUZ8+gsGeFMQQQZ2wOh0hNy+Ze1VDW7/RrmLk t2tolfK3yTvPpsFl4N7p427NOf6oVFsyrrLsSzAdgKytTOqk7rqWUrSniH4= -----END CERTIFICATE-----Generated at Sun Jan 25 07:11:21 2026 by rpki-client