This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer File: ba321e18-86bd-46af-83a2-478b4fd1fa97.cer (raw, json) Hash identifier: bjYLuEZ9c16gKIgYHutH6tUENsO7OFZ9q43oFxTBnzE= Subject key identifier: 5C:70:00:42:A7:CC:07:80:1A:06:BF:41:D4:F2:01:DB:FC:8D:2A:D5 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C84A1F9CA207F556FD1759100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Jan 2026 03:27:42 +0000 Certificate not after: Tue 18 Apr 2028 02:27:42 +0000 Subordinate resources: AS: 396264 IP: 23.146.148.0/24 IP: 138.128.230.0/23 IP: 158.51.24.0/22 IP: 2604:1620::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:a1:f9:ca:20:7f:55:6f:d1:75:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 14 03:27:42 2026 GMT Not After : Apr 18 02:27:42 2028 GMT Subject: CN=ba321e18-86bd-46af-83a2-478b4fd1fa97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:87:19:c5:62:5f:cb:43:12:cb:42:87:72:93: 42:e3:6a:45:b1:e5:c9:80:f9:40:9a:a0:a2:00:5c: 6d:4f:97:21:83:4c:b1:62:7d:5c:a5:9a:d1:0b:c8: 33:57:46:83:fe:b3:a1:b8:ec:ab:e8:2c:ff:b6:b3: 6b:b9:90:6e:6e:51:36:75:78:1a:41:8b:a6:3e:e0: 54:83:0e:11:5e:d1:a7:ab:40:ad:08:0e:d1:0d:59: 91:e0:70:87:ce:46:96:f7:a8:06:a6:15:87:39:40: c6:f0:70:f4:c0:96:54:ab:fd:2e:22:9f:64:3c:d1: b4:cc:08:7a:db:13:f2:ba:5c:e1:72:d4:46:5d:c0: 29:a2:96:04:12:e7:4c:7e:cc:53:8b:83:29:04:ec: 17:70:68:86:e5:d6:dc:a3:a2:2e:7c:6b:2c:38:55: 81:8e:d4:00:24:ec:1f:f2:be:27:41:12:29:d5:8f: fa:6d:fb:27:29:a5:86:fc:6e:c8:a5:f3:1e:11:40: d0:0d:e1:be:4f:85:d1:e0:81:07:e6:00:a3:de:e1: ec:a5:51:51:80:fd:82:1e:71:ee:fd:96:ea:f0:cc: d0:1d:68:81:52:a9:74:c0:4a:4c:01:de:d8:a7:ba: 8f:4c:c4:26:83:86:54:29:4d:ba:29:86:ee:e6:2c: 24:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:70:00:42:A7:CC:07:80:1A:06:BF:41:D4:F2:01:DB:FC:8D:2A:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.146.148.0/24 138.128.230.0/23 158.51.24.0/22 IPv6: 2604:1620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396264 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9c:03:1c:07:f2:2d:41:55:f2:be:27:40:e6:5d:a1:79:57: 49:80:b7:68:39:80:f8:f2:93:36:a1:ec:75:dd:ca:2e:46:d6: 78:c1:c1:40:31:c9:ed:a9:68:2a:d3:08:11:02:b4:a7:e6:5f: 0f:34:b8:1d:50:d4:a2:3f:27:b9:9b:10:d2:fd:3e:8d:f0:34: ee:d4:98:d9:8a:9f:7f:a1:7f:cf:7a:62:0c:9b:0b:ca:fb:85: 4b:ea:df:32:9d:90:46:9e:21:df:34:eb:0b:c3:f9:54:2c:c4: 38:d5:9d:86:e1:84:67:79:c1:5f:ad:bd:ac:6e:57:e5:9f:8f: 3c:17:4a:4d:db:4e:6c:c5:35:98:64:f3:40:cf:03:13:14:18: 83:26:fd:a4:2d:18:02:17:bd:aa:80:3f:57:b8:de:fa:9d:a8: d0:ff:9d:90:d4:d5:b3:3c:95:a2:0a:78:c6:6b:a2:4e:5b:0a: b8:bd:50:a7:36:82:77:7b:40:29:e8:c7:d2:cf:7c:bd:71:43: b0:d7:13:1e:93:6d:78:aa:08:1c:26:9b:c7:d6:b9:c6:5d:8f: 10:45:a0:be:a3:0f:d7:79:2d:70:1c:1d:7b:1b:09:41:f3:32: 52:d4:61:04:95:ca:32:15:fb:6d:05:e7:41:e6:08:90:d1:d0: 4b:e4:9b:02 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEyEofnKIH9Vb9F1kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDExNDAzMjc0MloXDTI4MDQxODAyMjc0MlowLzEtMCsGA1UEAxMk YmEzMjFlMTgtODZiZC00NmFmLTgzYTItNDc4YjRmZDFmYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IcZxWJfy0MSy0KHcpNC42pFseXJgPlAmqCi AFxtT5chg0yxYn1cpZrRC8gzV0aD/rOhuOyr6Cz/trNruZBublE2dXgaQYumPuBU gw4RXtGnq0CtCA7RDVmR4HCHzkaW96gGphWHOUDG8HD0wJZUq/0uIp9kPNG0zAh6 2xPyulzhctRGXcApopYEEudMfsxTi4MpBOwXcGiG5dbco6IufGssOFWBjtQAJOwf 8r4nQRIp1Y/6bfsnKaWG/G7IpfMeEUDQDeG+T4XR4IEH5gCj3uHspVFRgP2CHnHu /Zbq8MzQHWiBUql0wEpMAd7Yp7qPTMQmg4ZUKU26KYbu5iwkpQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFFxwAEKnzAeAGga/QdTyAdv8jSrVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i YTMyMWUxOC04NmJkLTQ2YWYtODNhMi00NzhiNGZkMWZhOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2JhMzIxZTE4LTg2YmQtNDZhZi04 M2EyLTQ3OGI0ZmQxZmE5Ny9iYTMyMWUxOC04NmJkLTQ2YWYtODNhMi00NzhiNGZk MWZhOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXkpQDBAGKgOYDBAKeMxgwDQQCAAIwBwMFACYE FiAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgvoMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHKcAxwH8i1B VfK+J0DmXaF5V0mAt2g5gPjykzah7HXdyi5G1njBwUAxye2paCrTCBECtKfmXw80 uB1Q1KI/J7mbENL9Po3wNO7UmNmKn3+hf896YgybC8r7hUvq3zKdkEaeId806wvD +VQsxDjVnYbhhGd5wV+tvaxuV+WfjzwXSk3bTmzFNZhk80DPAxMUGIMm/aQtGAIX vaqAP1e43vqdqND/nZDU1bM8laIKeMZrok5bCri9UKc2gnd7QCnox9LPfL1xQ7DX Ex6TbXiqCBwmm8fWucZdjxBFoL6jD9d5LXAcHXsbCUHzMlLUYQSVyjIV+20F50Hm CJDR0EvkmwI= -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:00 2026 by rpki-client