This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer File: 4625cd05-e90e-4f91-9b34-2899122cfc5f.cer (raw, json) Hash identifier: OqimC/DQP71TpvTFJnqgQhKC9eckFwBX/SujeCx7/R4= Subject key identifier: 52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C837DF689673D476A8CA93340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Jan 2026 17:39:20 +0000 Certificate not after: Sun 23 Jan 2028 19:01:42 +0000 Subordinate resources: AS: 398128 IP: 23.144.92.0/24 IP: 2602:f58c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:83:7d:f6:89:67:3d:47:6a:8c:a9:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 13 17:39:20 2026 GMT Not After : Jan 23 19:01:42 2028 GMT Subject: CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:71:d2:17:63:82:b5:dc:dc:8d:64:0e:fb: 6b:0e:26:55:ff:89:f9:a4:5d:53:ac:3c:54:b8:6b: 6f:3e:cd:c0:db:c2:01:4a:5e:e3:e2:3a:f4:5e:7d: f1:ed:50:7e:1c:84:26:70:e4:50:ff:9b:02:0d:77: 80:a6:68:21:a3:b6:db:ed:67:1b:d6:c1:d3:5d:a0: ac:ff:d9:7b:dd:0b:62:9d:e8:0b:3c:cc:eb:ea:ab: ec:71:d4:ce:34:5c:35:4e:c3:d6:ee:65:8c:2a:0c: f7:ca:4c:ea:36:e3:de:15:3f:4d:fc:a2:91:14:ef: 6a:da:b2:9d:bb:f5:a3:32:b1:f7:d3:98:5d:ad:ed: 04:70:30:af:9b:f9:21:47:0c:84:43:ca:cc:88:88: cc:2c:cd:0c:68:d5:21:10:aa:37:9c:15:15:5d:8d: 45:3c:4c:a6:c4:70:16:b4:fc:8b:85:4e:a9:c5:0b: d9:da:d5:78:3a:70:73:0d:62:a7:03:ee:9f:e8:f2: 15:fb:e3:f3:cc:6f:6a:fa:5f:d9:ac:40:07:30:7e: 35:18:e8:fa:71:b6:87:20:b0:b5:d3:2b:1e:75:a3: 3a:56:30:78:d9:d2:03:3b:eb:f8:f6:fe:74:f8:a0: e6:6e:2f:56:94:09:5a:53:3b:c8:43:51:70:6f:5b: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.144.92.0/24 IPv6: 2602:f58c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:23:1a:13:57:9d:f1:7f:df:78:44:02:be:4c:bd:6d:6e:d3: 31:36:d5:db:86:d0:13:6d:d9:cd:15:24:a1:6c:5e:ac:7c:92: 05:3b:4f:8c:2c:97:f9:96:43:19:16:12:14:eb:17:90:f3:fe: a6:bb:cc:83:a7:77:10:02:ab:5c:19:2e:57:4b:d8:2a:b3:79: b6:ef:5d:1a:23:93:99:6f:e4:c8:b2:ce:8d:19:40:33:98:a0: b2:45:4e:07:30:32:db:49:17:f2:39:f3:9f:d9:93:78:b9:e0: 72:c3:3f:b0:b8:bf:79:ce:f4:0f:81:94:74:da:50:d0:c9:f8: c1:92:87:4b:26:da:21:d4:6a:17:af:26:0f:5d:d5:93:c3:7b: b9:23:49:32:e4:9e:17:1c:10:e1:88:53:61:38:c4:70:38:ba: 2f:8b:d6:44:e7:cf:a0:5a:be:8e:b8:af:7b:43:ca:eb:b5:06: fb:2d:01:13:b8:f9:35:9d:42:35:f6:96:ce:55:73:1f:d1:5e: fa:1c:34:ca:b2:c4:c4:a1:05:79:76:56:bb:29:0f:c6:33:7b: cb:52:b5:fb:26:a0:cc:44:74:b1:dc:f7:52:8a:cd:93:ba:21: 45:14:a2:5d:1e:b4:bd:f7:c1:4d:30:4e:1e:8d:e2:37:2d:97: 53:8e:63:0d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEyDffaJZz1HaoypM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDExMzE3MzkyMFoXDTI4MDEyMzE5MDE0MlowLzEtMCsGA1UEAxMk NDYyNWNkMDUtZTkwZS00ZjkxLTliMzQtMjg5OTEyMmNmYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjtx0hdjgrXc3I1kDvtrDiZV/4n5pF1TrDxU uGtvPs3A28IBSl7j4jr0Xn3x7VB+HIQmcORQ/5sCDXeApmgho7bb7Wcb1sHTXaCs /9l73QtinegLPMzr6qvscdTONFw1TsPW7mWMKgz3ykzqNuPeFT9N/KKRFO9q2rKd u/WjMrH305hdre0EcDCvm/khRwyEQ8rMiIjMLM0MaNUhEKo3nBUVXY1FPEymxHAW tPyLhU6pxQvZ2tV4OnBzDWKnA+6f6PIV++PzzG9q+l/ZrEAHMH41GOj6cbaHILC1 0ysedaM6VjB42dIDO+v49v50+KDmbi9WlAlaUzvIQ1Fwb1uCOQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFIXnnFsdX4dcwXvFr1NViHKImNaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 NjI1Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5MTIyY2ZjNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzQ2MjVjZDA1LWU5MGUtNGY5MS05 YjM0LTI4OTkxMjJjZmM1Zi80NjI1Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5MTIy Y2ZjNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkFwwDgQCAAIwCAMGACYC9YwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYTMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxIxoTV53xf994RAK+TL1tbtMx NtXbhtATbdnNFSShbF6sfJIFO0+MLJf5lkMZFhIU6xeQ8/6mu8yDp3cQAqtcGS5X S9gqs3m2710aI5OZb+TIss6NGUAzmKCyRU4HMDLbSRfyOfOf2ZN4ueBywz+wuL95 zvQPgZR02lDQyfjBkodLJtoh1GoXryYPXdWTw3u5I0ky5J4XHBDhiFNhOMRwOLov i9ZE58+gWr6OuK97Q8rrtQb7LQETuPk1nUI19pbOVXMf0V76HDTKssTEoQV5dla7 KQ/GM3vLUrX7JqDMRHSx3PdSis2TuiFFFKJdHrS998FNME4ejeI3LZdTjmMN -----END CERTIFICATE-----Generated at Sun Jan 25 07:10:50 2026 by rpki-client