This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer File: 8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer (raw, json) Hash identifier: Pp0vEXy06uUz0UZicA/CSioYJmbuZAZL2OUoL4rdux0= Subject key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C7C0F245DCD0D5704EDB61610 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Jan 2026 01:45:23 +0000 Certificate not after: Sat 15 Apr 2028 00:45:23 +0000 Subordinate resources: AS: 30045 IP: 142.224.0.0/16 IP: 192.75.165.0/24 IP: 192.139.83.0/24 IP: 192.139.223.0/24 IP: 192.219.1.0 -- 192.219.16.255 IP: 199.212.4.0/22 IP: 205.189.56.0/22 IP: 205.210.128.0/24 IP: 2620:62:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7c:0f:24:5d:cd:0d:57:04:ed:b6:16:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 11 01:45:23 2026 GMT Not After : Apr 15 00:45:23 2028 GMT Subject: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fe:d1:a6:81:71:a9:b0:21:79:3b:4c:cb:3b: ce:0a:7f:df:f5:19:18:47:36:a6:f8:9b:5b:77:ff: d9:b3:1a:1d:d8:65:a3:b1:72:56:55:39:c2:41:69: 53:e2:af:e5:aa:50:f4:63:88:c0:fe:0f:c3:64:87: 6c:e3:ac:df:a0:90:ee:31:d4:47:31:67:58:f8:d6: 0e:5a:7b:9d:9b:97:05:be:aa:cf:47:78:07:c1:ff: e6:a5:89:f9:9e:20:56:32:51:f1:1c:95:a4:06:d9: 35:78:30:07:24:d1:2d:eb:dd:eb:f5:f6:7e:96:4f: cf:8e:3e:8e:32:6d:02:e5:03:57:ea:d6:a3:f7:26: 4e:39:4e:43:36:e7:92:b4:1f:c3:b4:ed:0e:e0:5c: b6:63:57:60:36:ac:62:54:46:1a:4e:ad:be:1d:e9: 45:41:cd:b7:04:94:10:7d:47:f0:e0:17:45:f6:c5: 53:8b:6f:6a:00:0a:25:4e:ca:f7:2e:bd:1c:1e:0b: 6a:32:3f:cd:73:bc:16:bf:91:36:cf:ed:71:c6:1b: 4c:6b:c2:fa:34:f7:8c:15:91:d5:16:66:93:2b:ec: 3d:42:56:10:44:ce:7f:c6:87:74:51:9b:d4:a3:ca: 4c:e9:12:aa:f4:9e:8a:65:36:d0:74:f9:ea:46:24: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 142.224.0.0/16 192.75.165.0/24 192.139.83.0/24 192.139.223.0/24 192.219.1.0-192.219.16.255 199.212.4.0/22 205.189.56.0/22 205.210.128.0/24 IPv6: 2620:62:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30045 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9f:60:c1:b9:79:20:68:06:25:72:cb:d4:e0:2f:15:1c:ad: 7b:12:c6:7d:16:c0:cb:4a:61:44:59:85:73:f6:f8:a5:f3:58: f5:1b:22:bc:8b:6e:fd:71:e4:25:e2:5d:bc:5a:f2:7b:c0:8a: 70:07:b7:96:2b:57:dc:9b:71:19:06:04:0f:4c:97:5c:c7:c5: 69:f3:d8:ad:01:34:e4:93:86:80:ef:b4:2b:d3:4f:ba:98:ab: 93:19:03:51:2c:23:cf:ee:73:c9:04:5f:c8:61:07:9a:4a:5a: 4f:44:52:c5:d4:f4:d7:8c:d8:17:8c:93:85:ef:39:58:b6:64: ab:3a:3a:5b:69:64:09:18:a3:68:cf:2b:9b:36:a5:f6:b4:9a: aa:cd:2f:0c:71:f3:99:0b:38:f5:ca:2c:3a:09:81:52:c3:55: cb:5a:c8:6d:96:7c:62:15:24:5f:89:05:6e:d4:18:67:35:f5: a5:fc:8d:47:83:5b:a2:36:16:0a:a8:22:bf:91:b5:cc:d3:83: 2b:90:1d:e1:07:7a:53:f1:20:b7:c6:d9:42:00:f0:26:05:6b: 46:a6:62:57:16:fe:9b:02:25:b1:02:1f:96:9e:7e:ca:d5:82: bf:c3:91:cd:6b:5d:4a:0b:a9:07:0f:bd:d4:e3:e7:c8:0c:50: be:8e:8c:e9 -----BEGIN CERTIFICATE----- MIIHSjCCBjKgAwIBAgIUAQ0Mn0MoWEx8DyRdzQ1XBO22FhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDExMTAxNDUyM1oXDTI4MDQxNTAwNDUyM1owLzEtMCsGA1UEAxMk OGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFkYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f7RpoFxqbAheTtMyzvOCn/f9RkYRzam+Jtb d//Zsxod2GWjsXJWVTnCQWlT4q/lqlD0Y4jA/g/DZIds46zfoJDuMdRHMWdY+NYO Wnudm5cFvqrPR3gHwf/mpYn5niBWMlHxHJWkBtk1eDAHJNEt693r9fZ+lk/Pjj6O Mm0C5QNX6taj9yZOOU5DNueStB/DtO0O4Fy2Y1dgNqxiVEYaTq2+HelFQc23BJQQ fUfw4BdF9sVTi29qAAolTsr3Lr0cHgtqMj/Nc7wWv5E2z+1xxhtMa8L6NPeMFZHV FmaTK+w9QlYQRM5/xod0UZvUo8pM6RKq9J6KZTbQdPnqRiQdLQIDAQABo4IEXDCC BFgwHQYDVR0OBBYEFIN1OmMoq+KPfcCnO0w6M8pjBxMlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzhhYzFhNTZiLWVhMzMtNGJkNi05 ZDNlLTAwODk2YTkxZGI2Yi84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5 MWRiNmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwYQYIKwYBBQUH AQcBAf8EUjBQMD0EAgABMDcDAwCO4AMEAMBLpQMEAMCLUwMEAMCL3zAMAwQAwNsB AwQAwNsQAwQCx9QEAwQCzb04AwQAzdKAMA8EAgACMAkDBwQmIABiQAAwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICdV0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAc59gwbl5IGgGJXLL1OAvFRyt exLGfRbAy0phRFmFc/b4pfNY9RsivItu/XHkJeJdvFrye8CKcAe3litX3JtxGQYE D0yXXMfFafPYrQE05JOGgO+0K9NPupirkxkDUSwjz+5zyQRfyGEHmkpaT0RSxdT0 14zYF4yThe85WLZkqzo6W2lkCRijaM8rmzal9rSaqs0vDHHzmQs49cosOgmBUsNV y1rIbZZ8YhUkX4kFbtQYZzX1pfyNR4NbojYWCqgiv5G1zNODK5Ad4Qd6U/Egt8bZ QgDwJgVrRqZiVxb+mwIlsQIflp5+ytWCv8ORzWtdSgupBw+91OPnyAxQvo6M6Q== -----END CERTIFICATE-----Generated at Sun Jan 25 10:35:25 2026 by rpki-client