This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fb08522-3798-445b-a3fd-5fd3a50c9281.cer File: 4fb08522-3798-445b-a3fd-5fd3a50c9281.cer (raw, json) Hash identifier: SpLkfpYpQgCaKaneV30PU4VwZwZDXb+WvBzvZ3C9aU4= Subject key identifier: BC:DE:2E:9F:68:22:4F:85:19:2B:89:E1:62:4F:42:57:01:B9:26:1E Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C97F9F77F1A52C5D963D9FD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fb08522-3798-445b-a3fd-5fd3a50c9281/4fb08522-3798-445b-a3fd-5fd3a50c9281.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fb08522-3798-445b-a3fd-5fd3a50c9281/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Jan 2026 01:45:21 +0000 Certificate not after: Tue 25 Apr 2028 00:45:21 +0000 Subordinate resources: AS: 395551 IP: 74.118.133.0/24 IP: 162.221.36.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:97:f9:f7:7f:1a:52:c5:d9:63:d9:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 21 01:45:21 2026 GMT Not After : Apr 25 00:45:21 2028 GMT Subject: CN=4fb08522-3798-445b-a3fd-5fd3a50c9281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:9f:3c:85:33:d4:8d:4a:5c:24:fd:4f:3f: 70:a7:6b:f6:c8:2d:76:ef:8b:a2:1a:65:6d:77:45: a1:25:56:66:b7:bc:dd:01:18:ff:52:13:40:22:c6: a2:34:95:0a:b5:a7:13:f7:4d:b7:fe:5d:70:cc:7e: e4:b9:6e:e3:6d:cd:39:17:bd:ce:3c:28:aa:21:c4: ec:f9:db:c7:e1:6b:8d:03:92:be:39:d0:33:ce:ac: 14:d9:ad:e0:81:22:67:2e:22:94:ce:83:3c:fb:be: 29:fb:b4:9a:f7:b2:fc:ce:c1:2b:f1:08:5d:3c:ae: 1e:79:a2:bd:d8:99:01:04:4a:b2:f3:65:05:38:8f: 47:9c:76:ab:b9:dd:af:af:c9:79:a4:07:2e:86:7d: c2:49:47:da:05:29:41:3b:4a:f8:3c:54:82:90:f1: cc:55:15:c5:e8:f9:0d:b5:59:2d:92:18:0c:ed:15: 2c:8e:b7:00:b6:5c:84:e6:a8:01:48:bd:fa:75:1e: e1:bf:12:40:8c:d8:3d:ab:16:05:31:75:fa:46:b1: d5:02:9c:24:f4:c9:9a:a8:1a:3c:1e:eb:be:8a:e9: 36:33:42:ee:90:45:eb:6a:cd:a0:31:86:b5:61:ea: ed:20:ee:7d:f6:27:f1:fc:44:7f:c5:a2:07:7a:24: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DE:2E:9F:68:22:4F:85:19:2B:89:E1:62:4F:42:57:01:B9:26:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fb08522-3798-445b-a3fd-5fd3a50c9281/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fb08522-3798-445b-a3fd-5fd3a50c9281/4fb08522-3798-445b-a3fd-5fd3a50c9281.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 74.118.133.0/24 162.221.36.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395551 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:db:2c:2d:c0:8b:0e:f8:26:ac:f5:e3:0c:f0:42:96:f6:30: a2:0f:2f:c0:9f:0f:74:be:05:ab:f5:45:00:16:0f:06:c0:a4: a2:73:81:91:1b:a8:39:ae:e4:38:8b:50:16:18:a7:e6:cd:bd: 14:9d:85:08:63:b7:43:76:6f:9a:21:d0:ea:dd:e4:a9:bf:66: 28:a5:59:67:d9:6e:61:e3:fb:92:89:8c:3a:e5:67:38:10:a1: 8b:52:96:fc:1f:37:ef:8e:12:39:97:8b:0d:6b:c9:5f:2c:67: 4b:97:2e:af:83:e5:a8:b1:4b:69:50:10:80:78:c6:1c:a8:9e: ea:3f:4f:37:38:77:68:3b:77:61:00:a6:2a:fe:96:7c:56:ce: 6d:09:bd:fd:9f:74:0e:03:04:e8:0c:73:bb:2b:42:3f:8b:2f: 94:6e:fa:c5:13:77:00:51:0e:9d:1d:ce:c4:d2:23:8e:9c:49: 75:6d:45:05:62:b4:5a:e2:23:cb:ee:15:50:b5:0a:67:48:69: 34:2f:8d:b2:dc:a5:ce:ca:59:c6:db:32:3f:5a:af:ab:97:54: 6d:22:31:43:94:fa:05:86:62:ee:3b:19:32:65:7a:06:1b:0a: 5f:d5:c5:77:1f:95:7f:4f:02:06:b5:c6:ae:b4:23:2d:e0:0e: 85:78:7a:36 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEyX+fd/GlLF2WPZ/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEyMTAxNDUyMVoXDTI4MDQyNTAwNDUyMVowLzEtMCsGA1UEAxMk NGZiMDg1MjItMzc5OC00NDViLWEzZmQtNWZkM2E1MGM5MjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+KfPIUz1I1KXCT9Tz9wp2v2yC1274uiGmVt d0WhJVZmt7zdARj/UhNAIsaiNJUKtacT9023/l1wzH7kuW7jbc05F73OPCiqIcTs +dvH4WuNA5K+OdAzzqwU2a3ggSJnLiKUzoM8+74p+7Sa97L8zsEr8QhdPK4eeaK9 2JkBBEqy82UFOI9HnHarud2vr8l5pAcuhn3CSUfaBSlBO0r4PFSCkPHMVRXF6PkN tVktkhgM7RUsjrcAtlyE5qgBSL36dR7hvxJAjNg9qxYFMXX6RrHVApwk9MmaqBo8 Huu+iuk2M0LukEXras2gMYa1YertIO599ifx/ER/xaIHeiSsdwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFLzeLp9oIk+FGSuJ4WJPQlcBuSYeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80 ZmIwODUyMi0zNzk4LTQ0NWItYTNmZC01ZmQzYTUwYzkyODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzRmYjA4NTIyLTM3OTgtNDQ1Yi1h M2ZkLTVmZDNhNTBjOTI4MS80ZmIwODUyMi0zNzk4LTQ0NWItYTNmZC01ZmQzYTUw YzkyODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABKdoUDBAGi3SQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgkfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADfbLC3Aiw74Jqz14wzwQpb2MKIPL8CfD3S+Bav1 RQAWDwbApKJzgZEbqDmu5DiLUBYYp+bNvRSdhQhjt0N2b5oh0Ord5Km/ZiilWWfZ bmHj+5KJjDrlZzgQoYtSlvwfN++OEjmXiw1ryV8sZ0uXLq+D5aixS2lQEIB4xhyo nuo/Tzc4d2g7d2EApir+lnxWzm0Jvf2fdA4DBOgMc7srQj+LL5Ru+sUTdwBRDp0d zsTSI46cSXVtRQVitFriI8vuFVC1CmdIaTQvjbLcpc7KWcbbMj9ar6uXVG0iMUOU +gWGYu47GTJlegYbCl/VxXcflX9PAga1xq60Iy3gDoV4ejY= -----END CERTIFICATE-----Generated at Sun Jan 25 08:57:33 2026 by rpki-client