This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61a4cb0e-ca80-4991-b6a0-28106cba1cb9.cer File: 61a4cb0e-ca80-4991-b6a0-28106cba1cb9.cer (raw, json) Hash identifier: HN5FCAHGVSXj71F74AHqHtwekdeqVnsCiLk3KRdaTSo= Subject key identifier: BF:CF:4B:9E:9D:88:1D:51:C5:C8:5A:B5:40:DD:45:40:2C:8F:62:1B Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C80EB73732908CBA1F1EEC980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61a4cb0e-ca80-4991-b6a0-28106cba1cb9/61a4cb0e-ca80-4991-b6a0-28106cba1cb9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61a4cb0e-ca80-4991-b6a0-28106cba1cb9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Jan 2026 19:32:31 +0000 Certificate not after: Sun 16 Apr 2028 18:32:31 +0000 Subordinate resources: AS: 398872 IP: 169.197.132.0/24 IP: 206.168.128.0/22 IP: 216.238.60.0/22 IP: 2602:fcc4::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:eb:73:73:29:08:cb:a1:f1:ee:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 12 19:32:31 2026 GMT Not After : Apr 16 18:32:31 2028 GMT Subject: CN=61a4cb0e-ca80-4991-b6a0-28106cba1cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:c2:09:c1:34:2b:37:28:f5:bf:44:8c:ef: 17:ff:c3:24:59:ba:38:e4:88:64:0b:7d:5d:35:ec: 0c:f1:90:4c:85:c5:fa:35:8d:5a:6e:39:ea:fb:70: 84:b4:4a:bf:5d:7f:51:ae:bc:9c:85:34:d9:1e:0f: 30:bb:7a:7c:ef:92:20:92:60:f1:fb:89:0f:92:c0: 3a:52:fc:46:5f:36:45:f4:54:cb:12:ed:81:92:5c: 1d:3e:bc:04:17:25:30:f6:ce:fe:07:68:c6:40:75: 13:8f:82:60:5c:03:d1:bf:0a:8c:fd:d9:93:fe:39: 0a:d4:42:d7:86:06:49:4f:a8:d3:22:86:6a:89:2e: e8:2d:5e:80:1e:7c:d4:b9:91:54:6b:ce:07:ab:6d: a5:a5:9c:5b:55:53:99:6c:83:32:92:1f:8f:a0:d4: 31:30:11:da:dc:4c:c5:76:61:5e:f4:fd:81:70:8a: db:e3:5b:a6:64:be:45:46:18:93:de:c7:a1:4b:15: dd:b2:dc:10:a5:a9:1c:58:32:14:82:c9:63:0b:51: a9:95:76:3c:20:0a:4a:0c:af:64:ed:a5:dd:14:d6: a4:2d:24:43:dc:f8:66:c1:32:b0:46:3f:e9:d3:71: 6e:f7:7e:3f:a1:12:57:c2:ad:46:e7:27:0e:b4:50: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CF:4B:9E:9D:88:1D:51:C5:C8:5A:B5:40:DD:45:40:2C:8F:62:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61a4cb0e-ca80-4991-b6a0-28106cba1cb9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61a4cb0e-ca80-4991-b6a0-28106cba1cb9/61a4cb0e-ca80-4991-b6a0-28106cba1cb9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 169.197.132.0/24 206.168.128.0/22 216.238.60.0/22 IPv6: 2602:fcc4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398872 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:2e:17:17:d3:52:36:22:3d:52:4a:a4:59:da:3e:d2:ad:46: 56:91:79:4a:c2:58:72:5d:de:3a:fd:04:27:02:8e:41:b4:82: 23:0b:1d:f1:73:b7:76:d6:e7:21:06:29:3f:d1:f7:42:1a:05: 60:e8:03:0a:f2:a9:4e:f2:99:86:8d:74:10:0b:6c:19:80:ae: 9a:32:1c:89:4b:d7:69:a0:1a:cb:1e:6e:12:02:1b:1b:90:bf: d5:62:98:87:77:31:92:2b:14:ef:88:bd:d5:a0:c1:72:57:0d: f5:f8:9e:c4:73:0a:b9:2a:e4:0a:00:ee:4f:1b:1f:55:6d:6b: 5b:36:3a:a1:1d:bb:72:ec:e8:d0:d1:22:9a:cd:20:2a:d4:c3: 92:8d:35:1d:88:d2:0e:65:ee:1f:91:cb:83:13:07:4d:fb:14: 92:6c:96:87:9b:34:5d:90:40:c9:98:21:21:8f:d9:77:09:7a: cc:f6:a5:5c:c5:92:06:27:3e:f3:c1:87:43:07:52:ea:f6:91: d1:90:e3:1a:af:11:da:36:ae:68:46:e0:bf:78:e1:bb:b9:71: d0:ff:69:3e:12:58:cd:b7:bf:16:2c:f4:bc:a6:2c:d0:7a:00: 11:44:ed:b1:18:3f:48:ab:1f:70:d5:80:bb:ee:61:b8:4d:f2: 55:39:eb:e7 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEyA63NzKQjLofHuyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDExMjE5MzIzMVoXDTI4MDQxNjE4MzIzMVowLzEtMCsGA1UEAxMk NjFhNGNiMGUtY2E4MC00OTkxLWI2YTAtMjgxMDZjYmExY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIbCCcE0Kzco9b9EjO8X/8MkWbo45IhkC31d NewM8ZBMhcX6NY1abjnq+3CEtEq/XX9RrrychTTZHg8wu3p875IgkmDx+4kPksA6 UvxGXzZF9FTLEu2BklwdPrwEFyUw9s7+B2jGQHUTj4JgXAPRvwqM/dmT/jkK1ELX hgZJT6jTIoZqiS7oLV6AHnzUuZFUa84Hq22lpZxbVVOZbIMykh+PoNQxMBHa3EzF dmFe9P2BcIrb41umZL5FRhiT3sehSxXdstwQpakcWDIUgsljC1GplXY8IApKDK9k 7aXdFNakLSRD3PhmwTKwRj/p03Fu934/oRJXwq1G5ycOtFBZKQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFL/PS56diB1RxchatUDdRUAsj2IbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 MWE0Y2IwZS1jYTgwLTQ5OTEtYjZhMC0yODEwNmNiYTFjYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzYxYTRjYjBlLWNhODAtNDk5MS1i NmEwLTI4MTA2Y2JhMWNiOS82MWE0Y2IwZS1jYTgwLTQ5OTEtYjZhMC0yODEwNmNi YTFjYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBACpxYQDBALOqIADBALY7jwwDgQCAAIwCAMGBCYC /MQAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWGDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2LhcX01I2 Ij1SSqRZ2j7SrUZWkXlKwlhyXd46/QQnAo5BtIIjCx3xc7d21uchBik/0fdCGgVg 6AMK8qlO8pmGjXQQC2wZgK6aMhyJS9dpoBrLHm4SAhsbkL/VYpiHdzGSKxTviL3V oMFyVw31+J7Ecwq5KuQKAO5PGx9VbWtbNjqhHbty7OjQ0SKazSAq1MOSjTUdiNIO Ze4fkcuDEwdN+xSSbJaHmzRdkEDJmCEhj9l3CXrM9qVcxZIGJz7zwYdDB1Lq9pHR kOMarxHaNq5oRuC/eOG7uXHQ/2k+EljNt78WLPS8pizQegARRO2xGD9Iqx9w1YC7 7mG4TfJVOevn -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:37 2026 by rpki-client