This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer File: 4d9dc039-b411-4feb-8901-e0f700ab5da0.cer (raw, json) Hash identifier: Fb5AmtJihxsPI9C6bKLvYqr89P+slp3LlAZfT5DLBGY= Subject key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584C99E1DA70EB7628E7597EE540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Jan 2026 18:08:23 +0000 Certificate not after: Tue 25 Apr 2028 17:08:23 +0000 Subordinate resources: IP: 23.91.112.0/20 IP: 100.42.48.0/20 IP: 104.152.64.0/21 IP: 104.171.0.0/20 IP: 108.175.144.0/20 IP: 162.253.144.0/21 IP: 162.254.160.0/21 IP: 192.169.48.0/20 IP: 198.58.80.0/20 IP: 198.252.64.0/20 IP: 2606:6f00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:e1:da:70:eb:76:28:e7:59:7e:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 21 18:08:23 2026 GMT Not After : Apr 25 17:08:23 2028 GMT Subject: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:22:b3:cd:91:5a:90:f1:90:45:0e:56:99: 05:2e:25:34:f6:77:6d:96:f5:5d:6c:98:40:d1:78: 2d:29:39:96:c4:18:73:f4:ff:2b:18:07:bf:4a:cb: bf:4e:2d:68:07:59:c9:88:f2:31:29:27:54:7a:0f: 96:75:23:dc:2e:78:dc:56:55:34:a6:b5:a5:3c:83: 8b:87:f2:1d:ae:b8:15:b5:93:6c:d0:50:cd:bc:24: e4:b5:68:4a:c1:fa:62:50:dc:85:ea:d7:67:bf:2a: 30:77:d1:f7:4a:00:50:2e:85:51:6b:10:7a:84:4e: 53:d2:73:fe:5b:0f:f2:3f:b1:e7:1f:27:f9:91:ed: 97:48:1a:ad:a9:47:33:da:2c:a9:88:a6:e3:09:4c: bb:f5:56:f6:04:62:69:df:c5:f6:86:ae:8d:5b:eb: 8f:87:72:5a:6a:e5:b5:b9:47:36:c0:fb:36:16:5b: 4d:a3:a8:b6:1c:bd:5e:b8:b4:a2:e3:4c:e0:55:75: 11:d4:b1:fb:4d:52:2b:65:a7:9b:83:aa:0e:6c:88: bb:87:03:d7:f7:5a:2d:22:39:ac:23:ce:97:f0:ac: 19:4e:b1:18:04:a0:1c:e9:66:3e:6d:b1:91:e1:94: db:50:e8:6b:a0:e4:63:c1:1e:70:42:84:63:ca:18: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.91.112.0/20 100.42.48.0/20 104.152.64.0/21 104.171.0.0/20 108.175.144.0/20 162.253.144.0/21 162.254.160.0/21 192.169.48.0/20 198.58.80.0/20 198.252.64.0/20 IPv6: 2606:6f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f8:07:8f:e5:59:d6:42:10:3d:2c:57:f2:31:ea:00:5a:0d: 6b:9b:87:fd:68:e1:e4:7e:d1:4d:b4:e6:4d:9d:4d:40:d1:9c: 0e:7d:a8:61:4a:b1:20:9c:4e:6d:cd:2c:f6:a1:fe:e0:1f:34: f9:37:56:07:0e:dc:fd:48:88:5f:76:ed:8e:34:f7:70:55:fc: 6d:39:3d:61:c7:ec:3b:39:64:65:56:fd:62:85:7d:8f:48:cb: 65:59:76:2c:df:10:dd:85:eb:37:92:b5:ab:0b:19:da:b9:6d: 8f:f9:a8:34:df:a2:eb:bd:6f:cc:9a:09:d5:03:79:39:ec:b5: 1e:d9:6c:86:59:5a:25:b3:62:ad:52:d2:5c:bc:c3:7d:49:ba: 69:cb:69:8f:2c:34:11:e7:e7:4c:a7:99:60:c5:46:f9:18:e4: a4:62:b4:7f:22:a9:02:c4:2c:49:df:7e:37:84:7c:55:dd:b0: f3:5d:c8:4f:50:e8:8e:ee:ac:b9:a8:93:df:7a:63:10:f3:25: e9:55:16:d7:85:a7:44:a0:3e:42:27:04:18:99:9b:52:8d:f4: fb:2f:87:09:ff:c7:7c:8a:2e:39:66:0d:6d:07:11:ac:80:db: 6e:5b:e3:13:93:93:22:58:23:30:97:4a:1d:0a:c8:f7:8d:15: de:b6:a1:ff -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEyZ4dpw63Yo51l+5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEyMTE4MDgyM1oXDTI4MDQyNTE3MDgyM1owLzEtMCsGA1UEAxMk NGQ5ZGMwMzktYjQxMS00ZmViLTg5MDEtZTBmNzAwYWI1ZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8gis82RWpDxkEUOVpkFLiU09ndtlvVdbJhA 0XgtKTmWxBhz9P8rGAe/Ssu/Ti1oB1nJiPIxKSdUeg+WdSPcLnjcVlU0prWlPIOL h/IdrrgVtZNs0FDNvCTktWhKwfpiUNyF6tdnvyowd9H3SgBQLoVRaxB6hE5T0nP+ Ww/yP7HnHyf5ke2XSBqtqUcz2iypiKbjCUy79Vb2BGJp38X2hq6NW+uPh3JaauW1 uUc2wPs2FltNo6i2HL1euLSi40zgVXUR1LH7TVIrZaebg6oObIi7hwPX91otIjms I86X8KwZTrEYBKAc6WY+bbGR4ZTbUOhroORjwR5wQoRjyhgYkwIDAQABo4IERDCC BEAwHQYDVR0OBBYEFOOT3Zsw8i/TJa36aoK94JFAM3rCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBhYjVkYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzRkOWRjMDM5LWI0MTEtNGZlYi04 OTAxLWUwZjcwMGFiNWRhMC80ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBh YjVkYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwZAYIKwYBBQUH AQcBAf8EVTBTMEIEAgABMDwDBAQXW3ADBARkKjADBANomEADBARoqwADBARsr5AD BAOi/ZADBAOi/qADBATAqTADBATGOlADBATG/EAwDQQCAAIwBwMFACYGbwAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALfgHj+VZ1kIQPSxX8jHqAFoNa5uH/Wjh5H7RTbTmTZ1NQNGcDn2oYUqx IJxObc0s9qH+4B80+TdWBw7c/UiIX3btjjT3cFX8bTk9YcfsOzlkZVb9YoV9j0jL ZVl2LN8Q3YXrN5K1qwsZ2rltj/moNN+i671vzJoJ1QN5Oey1HtlshllaJbNirVLS XLzDfUm6actpjyw0EefnTKeZYMVG+RjkpGK0fyKpAsQsSd9+N4R8Vd2w813IT1Do ju6suaiT33pjEPMl6VUW14WnRKA+QicEGJmbUo30+y+HCf/HfIouOWYNbQcRrIDb blvjE5OTIlgjMJdKHQrI940V3rah/w== -----END CERTIFICATE-----Generated at Sun Jan 25 10:13:10 2026 by rpki-client