This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer File: 8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer (raw, json) Hash identifier: lObRjLC4l4hxpGB41IVAkyqpi2+6YoLZ1Bx7zrvPmAU= Subject key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584C9F07A96C5D0FFF5BFD1C9C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 Jan 2026 14:23:36 +0000 Certificate not after: Thu 27 Apr 2028 13:23:36 +0000 Subordinate resources: AS: 2019 AS: 3486 AS: 7743 AS: 10389 AS: 10934 AS: 11496 AS: 13463 AS: 19270 AS: 19612 AS: 21551 AS: 32066 AS: 32496 AS: 33267 AS: 40010 AS: 40012 AS: 40682 AS: 46898 AS: 53821 AS: 54141 AS: 395419 IP: 75.119.160.0/20 IP: 146.143.0.0/16 IP: 146.149.0.0/16 IP: 147.107.0.0/16 IP: 147.113.0.0/16 IP: 155.180.0.0/16 IP: 159.53.0.0/16 IP: 160.229.0.0/16 IP: 161.121.0.0/17 IP: 161.121.160.0 -- 161.121.255.255 IP: 161.192.0.0/16 IP: 165.168.0.0/16 IP: 167.84.0.0/15 IP: 167.145.0.0/16 IP: 168.118.0.0/16 IP: 169.16.0.0/12 IP: 169.64.0.0/10 IP: 170.76.0.0/17 IP: 170.148.0.0/16 IP: 192.83.162.0/24 IP: 192.245.239.0/24 IP: 198.27.1.0 -- 198.27.3.255 IP: 198.36.0.0/21 IP: 198.49.83.0 -- 198.49.84.255 IP: 198.75.0.0/16 IP: 198.147.142.0/23 IP: 198.180.8.0/21 IP: 198.180.234.0 -- 198.180.236.255 IP: 198.183.149.0 -- 198.183.150.255 IP: 198.206.252.0/24 IP: 199.4.168.0 -- 199.4.179.255 IP: 199.74.224.0/22 IP: 199.253.241.0 -- 199.253.248.255 IP: 204.27.32.0 -- 204.27.51.255 IP: 204.44.58.0/23 IP: 204.56.8.0/21 IP: 204.86.14.0/23 IP: 205.132.184.0/21 IP: 206.253.176.0/20 IP: 207.89.52.0/24 IP: 207.162.224.0/20 IP: 208.87.184.0/21 IP: 208.116.64.0/18 IP: 2620:11::/40 IP: 2620:3e:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9f:07:a9:6c:5d:0f:ff:5b:fd:1c:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 23 14:23:36 2026 GMT Not After : Apr 27 13:23:36 2028 GMT Subject: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:f1:41:78:7d:b3:f9:df:ab:c4:e0:4c:cc: f0:f0:88:83:d1:52:49:db:93:90:10:8d:d2:95:94: f3:f4:48:67:42:c7:db:53:8f:eb:6d:4e:3a:ab:90: 21:f1:39:f7:7d:2c:40:e0:56:f4:ce:0b:c1:3f:0e: 81:fa:fc:72:88:3a:81:9b:37:ca:85:46:89:20:00: 69:d6:ba:3e:0d:82:8d:1a:be:3c:2c:ea:42:ce:2b: aa:7a:62:8c:da:7a:65:79:e9:3b:ae:6f:a1:44:c5: 6c:c7:e5:62:0f:b2:ea:1f:71:db:ed:28:3f:a2:be: 0d:f9:fb:bd:f2:8c:e8:a7:7b:01:47:e7:e0:ef:cd: de:78:5a:18:f4:92:24:a1:1b:35:3b:63:ee:c0:73: df:d6:64:5a:7b:0d:8f:5d:b8:92:7f:ff:e3:e0:b8: cf:c3:00:71:e7:ba:d5:0c:ed:ce:e4:1e:e7:ff:32: d1:ae:d0:02:63:6f:6e:85:a8:d1:84:59:b8:9b:09: fa:33:e7:ce:e6:92:f6:91:aa:d6:e6:bd:72:a6:7f: da:5d:02:20:54:b1:9b:86:20:b8:4b:81:47:74:e7: cd:f6:2b:03:3b:96:f6:6b:af:ce:f0:d1:58:48:de: eb:21:78:64:b9:70:f2:bd:d1:9e:fa:6b:c1:47:c3: 24:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 75.119.160.0/20 146.143.0.0/16 146.149.0.0/16 147.107.0.0/16 147.113.0.0/16 155.180.0.0/16 159.53.0.0/16 160.229.0.0/16 161.121.0.0/17 161.121.160.0-161.121.255.255 161.192.0.0/16 165.168.0.0/16 167.84.0.0/15 167.145.0.0/16 168.118.0.0/16 169.16.0.0/12 169.64.0.0/10 170.76.0.0/17 170.148.0.0/16 192.83.162.0/24 192.245.239.0/24 198.27.1.0-198.27.3.255 198.36.0.0/21 198.49.83.0-198.49.84.255 198.75.0.0/16 198.147.142.0/23 198.180.8.0/21 198.180.234.0-198.180.236.255 198.183.149.0-198.183.150.255 198.206.252.0/24 199.4.168.0-199.4.179.255 199.74.224.0/22 199.253.241.0-199.253.248.255 204.27.32.0-204.27.51.255 204.44.58.0/23 204.56.8.0/21 204.86.14.0/23 205.132.184.0/21 206.253.176.0/20 207.89.52.0/24 207.162.224.0/20 208.87.184.0/21 208.116.64.0/18 IPv6: 2620:11::/40 2620:3e:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2019 3486 7743 10389 10934 11496 13463 19270 19612 21551 32066 32496 33267 40010 40012 40682 46898 53821 54141 395419 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:bf:e0:b9:fe:17:28:fe:63:33:05:a9:44:34:0b:59:00:c8: 4f:ae:af:a4:54:17:0b:fd:14:76:3b:2d:8c:66:8f:e6:2e:0f: f2:6a:b0:f3:c9:92:ba:92:f0:ce:04:4d:75:38:f1:36:40:6f: 0b:01:c2:63:30:44:08:f2:7b:69:e0:21:9c:39:c8:dc:7d:89: 07:8a:d3:ba:d9:d7:af:32:65:08:49:d9:4a:a0:bd:00:8a:32: a6:b6:3d:7b:15:1c:89:fa:05:c6:c8:16:0b:64:29:84:56:19: a4:a9:4e:ed:4a:89:fb:8d:b8:59:e0:ff:64:64:02:43:b7:89: d5:f6:42:a9:91:92:6c:c0:ea:f8:3b:5f:65:99:98:f7:59:08: 84:ce:b8:04:ce:dd:d2:99:36:38:e2:8a:b7:2c:97:dc:34:e0: 2e:e7:55:7d:f4:d6:cc:4f:05:ec:fb:c4:b0:5d:7d:f7:bb:ad: ed:2d:48:e9:b8:17:71:ee:0b:07:76:60:8d:a0:f3:de:96:51: 21:36:b4:03:a6:00:a3:e7:41:17:59:77:84:7c:ca:8e:41:38: 76:4a:00:c0:84:3c:f6:66:07:5a:a8:f6:ac:16:cb:10:67:b8: 6c:ec:5a:e9:49:40:c3:40:21:7a:af:1a:e8:ea:99:c2:04:88: 2d:f3:4d:2b -----BEGIN CERTIFICATE----- MIIIqjCCB5KgAwIBAgIUAQ0Mn0MoWEyfB6lsXQ//W/0cnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEyMzE0MjMzNloXDTI4MDQyNzEzMjMzNlowLzEtMCsGA1UEAxMk OGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4N2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCrxQXh9s/nfq8TgTMzw8IiD0VJJ25OQEI3S lZTz9EhnQsfbU4/rbU46q5Ah8Tn3fSxA4Fb0zgvBPw6B+vxyiDqBmzfKhUaJIABp 1ro+DYKNGr48LOpCziuqemKM2npleek7rm+hRMVsx+ViD7LqH3Hb7Sg/or4N+fu9 8ozop3sBR+fg783eeFoY9JIkoRs1O2PuwHPf1mRaew2PXbiSf//j4LjPwwBx57rV DO3O5B7n/zLRrtACY29uhajRhFm4mwn6M+fO5pL2karW5r1ypn/aXQIgVLGbhiC4 S4FHdOfN9isDO5b2a6/O8NFYSN7rIXhkuXDyvdGe+mvBR8MkrQIDAQABo4IFvDCC BbgwHQYDVR0OBBYEFABud7BqtHf5SpnNzmlTsTT6b7iuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzhiM2ZkM2RhLTk2YjMtNGQ2OS04 N2Q4LWViN2MwYWNiODdmYy84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFj Yjg3ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwggFrBggrBgEF BQcBBwEB/wSCAVowggFWMIIBOQQCAAEwggExAwQES3egAwMAko8DAwCSlQMDAJNr AwMAk3EDAwCbtAMDAJ81AwMAoOUDBAeheQAwCwMEBaF5oAMDAaF4AwMAocADAwCl qAMDAadUAwMAp5EDAwCodgMDBKkQAwMGqUADBAeqTAADAwCqlAMEAMBTogMEAMD1 7zAMAwQAxhsBAwQCxhsAAwQDxiQAMAwDBADGMVMDBADGMVQDAwDGSwMEAcaTjgME A8a0CDAMAwQBxrTqAwQAxrTsMAwDBADGt5UDBADGt5YDBADGzvwwDAMEA8cEqAME AscEsAMEAsdK4DAMAwQAx/3xAwQAx/34MAwDBAXMGyADBALMGzADBAHMLDoDBAPM OAgDBAHMVg4DBAPNhLgDBATO/bADBADPWTQDBATPouADBAPQV7gDBAbQdEAwFwQC AAIwEQMGACYgABEAAwcAJiAAPoAAMG0GCCsGAQUFBwEIAQH/BF4wXKBaMFgCAgfj AgINngICHj8CAiiVAgIqtgICLOgCAjSXAgJLRgICTJwCAlQvAgJ9QgICfvACAwCB 8wIDAJxKAgMAnEwCAwCe6gIDALcyAgMA0j0CAwDTfQIDBgibMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ6/ 4Ln+Fyj+YzMFqUQ0C1kAyE+ur6RUFwv9FHY7LYxmj+YuD/JqsPPJkrqS8M4ETXU4 8TZAbwsBwmMwRAjye2ngIZw5yNx9iQeK07rZ168yZQhJ2UqgvQCKMqa2PXsVHIn6 BcbIFgtkKYRWGaSpTu1KifuNuFng/2RkAkO3idX2QqmRkmzA6vg7X2WZmPdZCITO uATO3dKZNjjiircsl9w04C7nVX301sxPBez7xLBdffe7re0tSOm4F3HuCwd2YI2g 896WUSE2tAOmAKPnQRdZd4R8yo5BOHZKAMCEPPZmB1qo9qwWyxBnuGzsWulJQMNA IXqvGujqmcIEiC3zTSs= -----END CERTIFICATE-----Generated at Sun Jan 25 07:25:57 2026 by rpki-client