This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer File: 58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer (raw, json) Hash identifier: cav6OkrY0VPo0mNEFrsT3gJRgDN8g9Jw1dXB1cWp+Vc= Subject key identifier: 10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C88D946B22846EB04C288D460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Jan 2026 15:42:21 +0000 Certificate not after: Sun 12 Mar 2028 14:08:08 +0000 Subordinate resources: AS: 401723 IP: 198.154.28.0/23 IP: 209.92.152.0/21 IP: 2602:81d:1000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:88:d9:46:b2:28:46:eb:04:c2:88:d4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 15 15:42:21 2026 GMT Not After : Mar 12 14:08:08 2028 GMT Subject: CN=58586e21-4dd1-43e8-9654-b8dd5e4a7157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:e4:fb:5d:67:3d:59:f6:c1:e9:2c:56:93: 1e:03:15:39:ba:57:59:c3:c5:92:41:04:58:22:1c: 03:ee:0c:11:c2:22:1f:ec:45:b1:10:d1:39:5e:d0: de:97:c0:b9:75:3f:64:d0:77:eb:0f:6b:db:ad:1f: b6:2f:31:dd:9d:e6:9b:a6:93:b9:70:6e:25:8b:6b: c2:0e:be:37:13:97:c4:97:c2:f0:45:e3:16:99:69: 8b:24:90:7c:45:b3:eb:4d:5e:1d:de:7f:b7:89:2a: c1:b4:7f:af:24:4a:1e:e2:3a:a3:d4:af:a7:2f:30: 1e:00:cc:fd:45:b6:ab:b1:46:8e:c6:23:0b:9d:92: db:25:53:92:20:d0:94:ef:fa:7b:29:ab:65:61:ce: 5a:16:6d:06:7d:0c:9f:39:79:37:83:88:d4:a1:07: 93:5c:75:01:e1:da:35:b3:19:98:87:38:5c:a4:4f: 16:1b:95:5d:8f:92:52:69:55:82:32:6e:5f:cb:91: fb:f5:cc:c9:90:39:4c:77:dd:cc:40:3c:b2:91:d6: a4:21:fc:1c:09:c7:e9:83:1a:e6:d8:63:d0:bf:b0: c6:09:73:2e:2f:26:53:31:3a:f2:89:66:dd:28:4c: d0:a2:d4:91:b1:a2:22:e8:c7:44:1c:2d:3a:0c:a2: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.154.28.0/23 209.92.152.0/21 IPv6: 2602:81d:1000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401723 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:09:ac:05:04:74:93:fc:9a:5b:a3:92:a9:df:17:44:0e:3c: 47:c6:95:fc:f4:c9:98:bd:6e:7a:6e:2f:b1:6d:e5:15:b2:31: 90:62:c7:a4:91:09:41:5a:53:56:8d:cf:dd:1e:9b:ad:61:23: d1:15:ee:1e:95:3a:39:74:cf:73:d8:b8:32:ef:71:db:9e:6c: d5:7a:54:e4:7f:0a:d1:cd:83:e9:74:82:28:48:44:81:cf:f6: d9:1b:07:c7:be:e0:05:da:f2:70:31:aa:64:3a:c1:05:d3:ae: b2:32:20:a7:e4:56:f7:d4:33:4d:4e:c3:44:44:b8:d6:4f:46: 65:8d:3e:97:e9:8e:34:27:66:2a:c1:34:ab:d0:7e:76:56:1a: 10:8b:88:d3:79:a8:19:3f:b6:99:ba:20:12:e6:67:64:8a:99: f7:b4:44:f5:d6:3a:0e:61:a0:3e:b1:40:f0:83:d1:c3:19:c9: 08:5c:c8:b2:73:02:b0:55:a3:48:f1:42:53:72:50:2f:ef:4a: 89:b5:94:d1:24:73:31:7c:c6:81:c1:3e:a7:5f:2c:e1:47:41: ed:cb:3c:57:8c:86:89:ea:ae:11:e9:cd:70:bc:5f:5c:5b:3b: f5:9e:fd:08:f0:67:f3:84:7e:c1:c8:fd:de:6b:15:21:c6:c9: 15:c4:1c:b0 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEyI2UayKEbrBMKI1GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDExNTE1NDIyMVoXDTI4MDMxMjE0MDgwOFowLzEtMCsGA1UEAxMk NTg1ODZlMjEtNGRkMS00M2U4LTk2NTQtYjhkZDVlNGE3MTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSHk+11nPVn2weksVpMeAxU5uldZw8WSQQRY IhwD7gwRwiIf7EWxENE5XtDel8C5dT9k0HfrD2vbrR+2LzHdneabppO5cG4li2vC Dr43E5fEl8LwReMWmWmLJJB8RbPrTV4d3n+3iSrBtH+vJEoe4jqj1K+nLzAeAMz9 RbarsUaOxiMLnZLbJVOSINCU7/p7KatlYc5aFm0GfQyfOXk3g4jUoQeTXHUB4do1 sxmYhzhcpE8WG5Vdj5JSaVWCMm5fy5H79czJkDlMd93MQDyykdakIfwcCcfpgxrm 2GPQv7DGCXMuLyZTMTryiWbdKEzQotSRsaIi6MdEHC06DKIm/QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBAQ56yeQZNVA6f6OWZ7wsDAdlVGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 ODU4NmUyMS00ZGQxLTQzZTgtOTY1NC1iOGRkNWU0YTcxNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzU4NTg2ZTIxLTRkZDEtNDNlOC05 NjU0LWI4ZGQ1ZTRhNzE1Ny81ODU4NmUyMS00ZGQxLTQzZTgtOTY1NC1iOGRkNWU0 YTcxNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAHGmhwDBAPRXJgwDgQCAAIwCAMGACYCCB0QMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYhOzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApCawFBHST/Jpbo5Kp 3xdEDjxHxpX89MmYvW56bi+xbeUVsjGQYsekkQlBWlNWjc/dHputYSPRFe4elTo5 dM9z2Lgy73HbnmzVelTkfwrRzYPpdIIoSESBz/bZGwfHvuAF2vJwMapkOsEF066y MiCn5Fb31DNNTsNERLjWT0ZljT6X6Y40J2YqwTSr0H52VhoQi4jTeagZP7aZuiAS 5mdkipn3tET11joOYaA+sUDwg9HDGckIXMiycwKwVaNI8UJTclAv70qJtZTRJHMx fMaBwT6nXyzhR0HtyzxXjIaJ6q4R6c1wvF9cWzv1nv0I8GfzhH7ByP3eaxUhxskV xByw -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:34 2026 by rpki-client