This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer File: b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer (raw, json) Hash identifier: KVPMazUClCCi4/rSQYKMSywZ+v3RQ4uV4LguniSLIxw= Subject key identifier: 2B:7B:77:56:E4:AD:D2:16:5D:12:8B:55:09:D7:10:69:3D:E4:18:8F Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584C836C1F15424913EA44057B20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Jan 2026 17:03:23 +0000 Certificate not after: Fri 03 Mar 2028 01:45:23 +0000 Subordinate resources: AS: 19680 IP: 23.153.232.0/24 IP: 192.75.196.0/23 IP: 2602:fa7a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:83:6c:1f:15:42:49:13:ea:44:05:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jan 13 17:03:23 2026 GMT Not After : Mar 3 01:45:23 2028 GMT Subject: CN=b150e98d-80e9-45f6-bc63-6b40a3d59e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:e1:ef:53:8e:78:11:9e:78:d6:fd:ea:94: 45:39:88:e6:b5:0d:11:ab:74:b0:70:51:82:27:d5: c2:18:d3:2d:63:50:b6:41:48:09:96:54:20:0d:97: 80:a9:bb:31:eb:de:1e:2c:bb:b1:09:6c:90:52:f3: 87:5a:78:36:68:ac:57:6e:83:a5:e4:db:41:c9:ac: 2f:8a:0d:d1:f2:04:cc:b5:55:60:7d:86:be:5d:6d: 0d:41:ec:94:c5:9d:29:94:1c:11:05:89:96:a7:46: b1:ca:6e:58:84:82:67:96:19:cc:cf:9d:c3:b0:ec: 2c:37:a6:91:2e:1a:e3:2d:22:04:37:5b:76:a6:e5: 6e:ad:cd:55:c1:14:cb:91:3f:5d:bf:6d:4b:3a:4c: bb:41:83:42:86:c3:40:10:6a:18:94:b2:8f:84:47: 17:71:65:61:1b:cd:1b:58:d1:8b:25:a5:e2:0b:22: 81:1e:59:d7:96:d8:e4:c1:7f:e7:d2:da:30:a6:49: 62:ea:e0:77:f7:72:49:d3:84:ab:19:59:97:c0:ab: ad:c5:37:95:8a:8f:4d:41:1c:2e:57:9b:56:fd:a6: b8:cd:bd:d4:29:33:f5:11:dd:77:f8:fd:52:7c:0c: 8d:fb:eb:f4:77:62:ff:93:b0:c8:d4:58:3c:bf:4b: 02:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7B:77:56:E4:AD:D2:16:5D:12:8B:55:09:D7:10:69:3D:E4:18:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.153.232.0/24 192.75.196.0/23 IPv6: 2602:fa7a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19680 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b9:c5:17:10:81:76:6f:a0:b0:4c:5c:38:1e:66:4f:7b:07: c3:3f:6e:b9:46:3f:c1:5d:87:d4:2c:5b:c4:a9:af:84:36:a1: 7e:96:de:51:3c:23:61:a6:37:a1:a5:18:75:ec:bd:59:13:e7: 64:3a:3a:63:e6:0d:9a:1f:f2:32:31:20:e1:ca:94:88:78:88: c0:02:97:f6:13:ba:38:ae:08:9c:d8:49:28:bd:62:a0:08:98: f0:2e:7a:91:90:8d:ec:57:e6:ec:56:97:05:8e:67:3f:11:28: 3b:4d:d4:45:a8:ba:88:af:7a:72:11:78:4d:b1:36:f9:db:8b: 49:b3:86:21:f8:c0:b5:87:65:af:38:7a:79:1d:d1:61:6b:3c: 59:85:89:ed:ae:a0:68:87:f7:d4:ca:6c:a3:41:17:70:96:84: 6c:fb:6b:88:1b:fb:ae:2f:5a:c3:16:e4:34:d6:64:83:2d:7f: 8a:ff:0b:21:ea:8d:01:87:aa:4b:84:e7:f6:f4:7f:fe:50:08: 30:51:14:4d:a3:d6:5d:13:df:d3:a5:94:c4:b1:e5:a9:5b:4f: 0d:b1:b2:9c:4e:fb:f5:c0:0c:43:ee:d4:14:40:14:5a:b2:b6: d7:ef:dd:20:07:cb:8f:d7:e8:5c:0e:70:24:d6:72:76:0a:03: 37:23:d1:f9 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEyDbB8VQkkT6kQFeyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDExMzE3MDMyM1oXDTI4MDMwMzAxNDUyM1owLzEtMCsGA1UEAxMk YjE1MGU5OGQtODBlOS00NWY2LWJjNjMtNmI0MGEzZDU5ZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ozh71OOeBGeeNb96pRFOYjmtQ0Rq3SwcFGC J9XCGNMtY1C2QUgJllQgDZeAqbsx694eLLuxCWyQUvOHWng2aKxXboOl5NtByawv ig3R8gTMtVVgfYa+XW0NQeyUxZ0plBwRBYmWp0axym5YhIJnlhnMz53DsOwsN6aR LhrjLSIEN1t2puVurc1VwRTLkT9dv21LOky7QYNChsNAEGoYlLKPhEcXcWVhG80b WNGLJaXiCyKBHlnXltjkwX/n0towpkli6uB393JJ04SrGVmXwKutxTeVio9NQRwu V5tW/aa4zb3UKTP1Ed13+P1SfAyN++v0d2L/k7DI1Fg8v0sCDQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFCt7d1bkrdIWXRKLVQnXEGk95BiPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i MTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02YjQwYTNkNTllOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2IxNTBlOThkLTgwZTktNDVmNi1i YzYzLTZiNDBhM2Q1OWU5Yy9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02YjQwYTNk NTllOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXmegDBAHAS8QwDgQCAAIwCAMGACYC+noAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAkzgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEG5xRcQgXZvoLBMXDge Zk97B8M/brlGP8Fdh9QsW8Spr4Q2oX6W3lE8I2GmN6GlGHXsvVkT52Q6OmPmDZof 8jIxIOHKlIh4iMACl/YTujiuCJzYSSi9YqAImPAuepGQjexX5uxWlwWOZz8RKDtN 1EWouoivenIReE2xNvnbi0mzhiH4wLWHZa84enkd0WFrPFmFie2uoGiH99TKbKNB F3CWhGz7a4gb+64vWsMW5DTWZIMtf4r/CyHqjQGHqkuE5/b0f/5QCDBRFE2j1l0T 39OllMSx5albTw2xspxO+/XADEPu1BRAFFqyttfv3SAHy4/X6FwOcCTWcnYKAzcj 0fk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:30 2026 by rpki-client