This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
File: 1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer (raw, json)
Hash identifier: fFQHb7jhheuSFvxCbwPUFFo+8kYut9Su1s5gIiKYpUo=
Subject key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584C65B9AA6562B1F4B3BCC8BC80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 03 Jan 2026 01:45:22 +0000
Certificate not after: Fri 07 Apr 2028 00:45:22 +0000
Subordinate resources: AS: 394106
IP: 23.136.124.0/24
IP: 142.249.136.0/22
IP: 2602:f6a6::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:65:b9:aa:65:62:b1:f4:b3:bc:c8:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Jan 3 01:45:22 2026 GMT
Not After : Apr 7 00:45:22 2028 GMT
Subject: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:ab:ce:e5:b9:9d:59:d8:cf:19:b2:c9:df:
43:51:9f:ba:38:0b:6b:08:dd:53:3e:c8:fa:9f:cf:
6f:19:30:7a:79:b1:dd:2f:a5:44:63:9e:24:df:40:
0e:cb:7d:33:9e:22:d9:1b:f4:29:55:a2:a8:7a:aa:
51:0c:f2:f9:cd:d7:b6:dd:7d:ca:fb:bb:44:cb:3e:
79:c5:4a:01:71:3d:d5:60:0d:f4:a3:38:25:c2:3a:
5c:5a:c4:f6:72:83:26:73:76:94:c1:d2:1e:92:5b:
7a:66:c1:52:8f:1a:60:8f:19:35:81:45:aa:61:dd:
0a:3e:06:1c:27:8a:32:71:12:41:2b:d5:f6:ac:cb:
76:73:df:4d:af:4b:ab:06:49:73:b0:f9:6d:ca:ee:
00:51:5c:fb:da:d7:79:8f:44:02:00:7b:6c:e7:a3:
f3:93:4a:01:47:78:c8:c6:ae:e0:1d:83:79:27:97:
0e:e8:03:e3:83:d7:05:1a:2a:4c:39:e3:bd:21:67:
12:48:97:72:38:fc:e5:61:4f:2c:ab:70:bf:f4:e3:
7b:4d:53:b3:f7:84:36:e0:3c:7a:c6:87:bc:fa:82:
45:b0:d4:ee:81:92:21:1c:1e:87:70:56:86:e2:ca:
fc:cd:0a:2f:10:a9:97:4d:85:21:b8:5c:e2:69:2a:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.124.0/24
142.249.136.0/22
IPv6:
2602:f6a6::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394106
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:58:dc:8f:08:95:40:78:cd:51:29:00:bb:98:0a:06:9c:f5:
bc:64:77:a3:93:59:01:42:fa:a2:52:49:ab:f9:9f:c9:9c:25:
bb:5d:b7:44:96:66:3a:41:48:cb:aa:83:e5:ce:bf:15:20:69:
0b:d1:ee:60:21:90:8c:7d:d2:b9:7c:cf:3d:7c:e5:70:0f:e7:
58:cc:c2:6e:0e:79:90:36:42:62:ac:ca:9b:1a:59:9d:29:27:
72:15:32:af:c8:fb:92:c2:04:dd:2a:cd:17:50:62:9d:bb:94:
c3:29:cb:df:0a:65:f5:8d:cb:91:c0:a3:41:14:76:89:c3:2a:
91:e7:f1:3c:eb:d9:03:3a:c2:7e:bd:a7:50:8c:8c:54:88:af:
1a:9b:b8:ad:30:d6:81:28:6c:76:78:d1:02:88:e0:53:02:7e:
7d:5a:6c:00:10:69:ab:f0:df:7c:4a:1e:85:c7:30:88:49:d0:
3b:2e:b3:7f:16:4d:5c:1f:56:ce:73:6f:c0:53:69:92:34:3b:
c0:1c:f2:4f:30:99:85:2a:c1:0c:f0:1f:c8:d7:93:2d:cb:77:
1e:b5:e9:ae:45:bd:25:bb:2d:5c:f7:29:2e:be:dd:4a:af:3f:
b1:9b:fe:78:9e:cc:16:b5:91:b5:b8:6b:86:07:6b:3c:4c:ce:
e4:d6:89:46
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWExluaplYrH0s7zIvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI2MDEwMzAxNDUyMloXDTI4MDQwNzAwNDUyMlowLzEtMCsGA1UEAxMk
MWQyZTY2OWUtOGQ1ZC00YjM5LWE2OGYtNGY1MzZjYzJmNTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69OrzuW5nVnYzxmyyd9DUZ+6OAtrCN1TPsj6
n89vGTB6ebHdL6VEY54k30AOy30zniLZG/QpVaKoeqpRDPL5zde23X3K+7tEyz55
xUoBcT3VYA30ozglwjpcWsT2coMmc3aUwdIeklt6ZsFSjxpgjxk1gUWqYd0KPgYc
J4oycRJBK9X2rMt2c99Nr0urBklzsPltyu4AUVz72td5j0QCAHts56Pzk0oBR3jI
xq7gHYN5J5cO6APjg9cFGipMOeO9IWcSSJdyOPzlYU8sq3C/9ON7TVOz94Q24Dx6
xoe8+oJFsNTugZIhHB6HcFaG4sr8zQovEKmXTYUhuFziaSrBCQIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFCs9ox06fY4X30i9bKxKYtJfVL4QMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x
ZDJlNjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUzNmNjMmY1NDYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzFkMmU2NjllLThkNWQtNGIzOS1h
NjhmLTRmNTM2Y2MyZjU0Ni8xZDJlNjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUzNmNj
MmY1NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXiHwDBAKO+YgwDgQCAAIwCAMGACYC9qYAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYDejBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlWNyPCJVAeM1RKQC7
mAoGnPW8ZHejk1kBQvqiUkmr+Z/JnCW7XbdElmY6QUjLqoPlzr8VIGkL0e5gIZCM
fdK5fM89fOVwD+dYzMJuDnmQNkJirMqbGlmdKSdyFTKvyPuSwgTdKs0XUGKdu5TD
KcvfCmX1jcuRwKNBFHaJwyqR5/E869kDOsJ+vadQjIxUiK8am7itMNaBKGx2eNEC
iOBTAn59WmwAEGmr8N98Sh6FxzCISdA7LrN/Fk1cH1bOc2/AU2mSNDvAHPJPMJmF
KsEM8B/I15Mty3cetemuRb0luy1c9ykuvt1Krz+xm/54nswWtZG1uGuGB2s8TM7k
1olG
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:33:30 2026 by rpki-client