This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb.cer File: 0ab7127f-56a7-4a7a-95af-3764330074eb.cer (raw, json) Hash identifier: U8XXAWONSntqhY9iK9S7aDNVHbWz8Jufg6M2z0RfnAI= Subject key identifier: 3B:31:34:F0:FD:01:C5:23:DC:DE:12:B9:BB:1D:5C:B6:C5:CC:98:37 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C890FAB3FA031055FB84DF880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/0ab7127f-56a7-4a7a-95af-3764330074eb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Jan 2026 17:31:57 +0000 Certificate not after: Wed 19 Apr 2028 16:31:57 +0000 Subordinate resources: AS: 21745 AS: 29733 AS: 395188 IP: 67.199.250.0/24 IP: 67.199.255.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:89:0f:ab:3f:a0:31:05:5f:b8:4d:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 15 17:31:57 2026 GMT Not After : Apr 19 16:31:57 2028 GMT Subject: CN=0ab7127f-56a7-4a7a-95af-3764330074eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:32:61:4e:66:91:47:66:bb:dd:07:14:d6: a8:fb:85:f1:b6:93:b9:6e:0e:ba:8c:64:a6:f3:ec: a2:53:78:b8:10:e0:ab:6d:bb:2a:c6:99:de:5f:26: ba:dc:9d:62:9f:4f:7a:03:4d:9b:93:36:10:ce:5d: 4e:c1:f3:42:34:22:60:3a:d0:ca:8b:0b:8b:2e:af: 6c:19:38:f3:71:31:98:04:61:26:d2:40:37:ab:33: 6a:e8:d6:d6:32:e6:26:80:06:43:82:26:58:aa:ae: 9b:18:27:80:b8:b6:ce:b2:df:06:d9:0f:73:32:9c: 54:fd:7b:b3:9e:27:61:a7:cd:36:4e:59:d0:a9:76: d0:ab:5f:17:9d:1b:1e:23:df:1f:9e:b2:f3:88:69: 66:e1:e1:33:25:dc:65:d5:b7:85:ba:e5:cc:71:f6: 10:06:fd:99:86:b2:ba:46:b5:f3:3d:97:c8:97:19: 83:66:5e:70:5e:06:e5:ac:e7:6b:21:9d:a6:65:87: 22:fc:3c:d1:01:98:15:94:09:f1:9b:cc:5e:5e:80: 33:00:64:0a:86:14:cc:81:fc:b7:a5:19:60:b8:55: 76:15:7c:9d:73:02:0b:79:dd:37:dc:2f:c5:97:97: ee:c9:a0:90:29:bd:21:2b:e8:77:f6:e0:3b:bb:c0: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:31:34:F0:FD:01:C5:23:DC:DE:12:B9:BB:1D:5C:B6:C5:CC:98:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/0ab7127f-56a7-4a7a-95af-3764330074eb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 67.199.250.0/24 67.199.255.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21745 29733 395188 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:43:15:cf:65:ed:d2:93:b5:5b:56:46:d8:9c:24:50:6d:21: be:c7:c1:7c:b3:15:ae:6a:cb:d9:42:de:3c:a2:80:22:84:91: eb:27:c2:14:d5:68:3a:fc:3a:a2:91:17:a7:cf:1b:f4:27:09: 1c:48:72:97:64:f6:c6:28:13:e2:93:c3:24:dd:e1:c4:eb:6f: 1c:06:d7:25:1d:f6:89:cf:a6:3b:78:a3:08:fc:69:97:b6:3c: f8:d5:5e:49:f5:72:0e:02:2e:be:94:bf:76:7a:3b:ff:f3:a3: 7c:8b:c5:c4:27:6a:76:b5:98:1a:20:f6:b2:fa:b5:75:d7:6e: 34:8d:79:dd:e2:b9:21:25:86:eb:47:72:8b:e0:c7:4b:3e:0d: 00:d8:73:8b:51:61:f0:aa:5f:dc:ba:59:4a:76:ad:37:b4:86: 9f:9d:fb:bf:da:74:c0:d5:be:09:d9:a1:98:62:0b:8c:6d:9c: f7:7e:36:dd:c3:a6:f9:79:1a:54:8b:9d:50:8c:0a:13:c7:6c: ea:9a:3f:0c:03:9a:41:04:42:b1:b8:5e:5f:61:5e:d6:ba:11: f7:11:0b:8e:02:d1:ce:8b:f8:4b:04:16:59:44:8a:11:f9:17: 56:01:7f:00:30:9d:61:08:7f:e2:1c:a3:f5:fc:1b:40:73:11: b7:93:de:dd -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEyJD6s/oDEFX7hN+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDExNTE3MzE1N1oXDTI4MDQxOTE2MzE1N1owLzEtMCsGA1UEAxMk MGFiNzEyN2YtNTZhNy00YTdhLTk1YWYtMzc2NDMzMDA3NGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl08yYU5mkUdmu90HFNao+4XxtpO5bg66jGSm 8+yiU3i4EOCrbbsqxpneXya63J1in096A02bkzYQzl1OwfNCNCJgOtDKiwuLLq9s GTjzcTGYBGEm0kA3qzNq6NbWMuYmgAZDgiZYqq6bGCeAuLbOst8G2Q9zMpxU/Xuz nidhp802TlnQqXbQq18XnRseI98fnrLziGlm4eEzJdxl1beFuuXMcfYQBv2ZhrK6 RrXzPZfIlxmDZl5wXgblrOdrIZ2mZYci/DzRAZgVlAnxm8xeXoAzAGQKhhTMgfy3 pRlguFV2FXydcwILed033C/Fl5fuyaCQKb0hK+h39uA7u8DpKwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFDsxNPD9AcUj3N4SubsdXLbFzJg3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w YWI3MTI3Zi01NmE3LTRhN2EtOTVhZi0zNzY0MzMwMDc0ZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzBhYjcxMjdmLTU2YTctNGE3YS05 NWFmLTM3NjQzMzAwNzRlYi8wYWI3MTI3Zi01NmE3LTRhN2EtOTVhZi0zNzY0MzMw MDc0ZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABDx/oDBABDx/8wIgYIKwYBBQUHAQgBAf8EEzAR oA8wDQICVPECAnQlAgMGB7QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcUMVz2Xt0pO1W1ZG2JwkUG0hvsfB fLMVrmrL2ULePKKAIoSR6yfCFNVoOvw6opEXp88b9CcJHEhyl2T2xigT4pPDJN3h xOtvHAbXJR32ic+mO3ijCPxpl7Y8+NVeSfVyDgIuvpS/dno7//OjfIvFxCdqdrWY GiD2svq1ddduNI153eK5ISWG60dyi+DHSz4NANhzi1Fh8Kpf3LpZSnatN7SGn537 v9p0wNW+CdmhmGILjG2c93423cOm+XkaVIudUIwKE8ds6po/DAOaQQRCsbheX2Fe 1roR9xELjgLRzov4SwQWWUSKEfkXVgF/ADCdYQh/4hyj9fwbQHMRt5Pe3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:30 2026 by rpki-client