This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer File: 8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer (raw, json) Hash identifier: onTi4ry9+45JsofTfknmtpzhNLC//nYgy9llR6aC6jk= Subject key identifier: 0B:A0:ED:10:56:8B:05:D9:58:04:69:EA:B7:47:7F:B1:43:E4:CE:EF Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584C9718D35A7C97E48095F56E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Jan 2026 18:11:43 +0000 Certificate not after: Mon 24 Apr 2028 17:11:43 +0000 Subordinate resources: AS: 393667 IP: 104.244.12.0/22 IP: 192.153.154.0/24 IP: 192.160.236.0 -- 192.160.240.255 IP: 2620:11c:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:97:18:d3:5a:7c:97:e4:80:95:f5:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 20 18:11:43 2026 GMT Not After : Apr 24 17:11:43 2028 GMT Subject: CN=8bf08e2b-3722-4799-800f-2ecf7a554b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3e:0f:1c:9c:77:5d:04:b5:22:b9:00:4e:57: ef:ba:b5:6c:dc:e3:a9:a3:fe:5d:01:5e:57:75:19: a2:16:2d:b1:eb:54:d1:e1:e0:4f:7e:ee:1d:da:75: f6:67:b2:64:91:16:66:ff:ee:20:13:44:64:32:93: 29:26:ed:d1:66:48:5f:35:2f:2c:14:11:26:b7:d0: c4:b4:8c:f1:7e:f4:c4:28:3f:85:ba:99:6a:70:af: fc:22:9a:2b:73:cd:fc:81:53:e3:c1:03:ac:7c:fd: b7:a5:1d:55:ed:3a:a4:ef:26:c2:a1:36:20:c5:8b: 94:8f:9e:af:a6:cc:1d:f0:3f:b1:99:72:b7:08:f0: d2:b0:b8:a7:f8:10:04:a0:04:57:f3:eb:62:23:70: cc:1c:25:06:25:19:43:44:9b:b3:b8:6b:86:90:7c: f0:f1:68:1a:32:0e:07:e4:a2:a2:ae:cc:62:d3:95: 10:a5:20:77:d5:f6:b6:d4:1d:e4:46:74:f0:78:3d: ff:2c:ee:85:f5:63:14:81:2f:16:81:d3:3d:37:11: a4:b2:62:e5:64:19:ad:af:24:30:75:83:70:93:46: 13:56:9e:74:24:a3:b3:9e:cd:97:17:32:35:52:e2: a6:e9:ff:e1:f8:56:c5:42:6c:30:aa:b7:ec:b8:7a: 3a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A0:ED:10:56:8B:05:D9:58:04:69:EA:B7:47:7F:B1:43:E4:CE:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 104.244.12.0/22 192.153.154.0/24 192.160.236.0-192.160.240.255 IPv6: 2620:11c:f000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393667 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6c:d5:6c:5c:a6:9a:23:a8:df:a5:15:c0:5a:57:13:e1:66: 93:07:93:4f:3a:e2:91:30:4a:ca:39:37:33:55:8e:20:c9:31: 41:ef:dc:b3:e3:64:59:20:f1:71:3c:a5:4d:02:b6:66:6c:b5: 57:f9:76:31:14:95:a1:52:7c:44:c5:87:d8:ad:fb:b8:f8:88: 3b:9f:6b:a1:2f:55:71:0e:2a:30:88:36:5c:e4:c5:4d:02:28: 8d:d5:ae:24:45:b7:b7:f7:cb:57:23:d8:3d:68:f5:97:48:f2: 1d:5c:bf:b5:ed:1b:78:70:87:4d:57:84:c0:3d:e4:2e:12:74: ce:d4:00:ef:26:a4:92:f6:40:75:20:f9:fa:f7:74:84:78:8e: 32:71:0f:74:f2:11:72:8f:f3:77:db:ff:6f:ad:ea:ac:d2:29: 94:48:9c:cd:a1:39:75:78:b0:4a:67:0a:29:2f:d0:dc:1f:98: b6:00:00:c7:dd:b8:ef:ae:af:e7:58:8e:9b:99:66:4c:57:f9: 7b:63:4f:94:24:51:c9:b7:32:b1:09:51:3d:67:4a:d9:d7:98: 8d:9e:86:2c:13:7e:3c:cc:12:2f:ee:bd:f8:0e:01:5c:82:13: eb:0b:03:d7:fd:08:ec:b1:22:f5:dd:33:1d:d1:c0:28:d8:52: 45:ab:f9:e8 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEyXGNNafJfkgJX1bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEyMDE4MTE0M1oXDTI4MDQyNDE3MTE0M1owLzEtMCsGA1UEAxMk OGJmMDhlMmItMzcyMi00Nzk5LTgwMGYtMmVjZjdhNTU0YjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT4PHJx3XQS1IrkATlfvurVs3OOpo/5dAV5X dRmiFi2x61TR4eBPfu4d2nX2Z7JkkRZm/+4gE0RkMpMpJu3RZkhfNS8sFBEmt9DE tIzxfvTEKD+FuplqcK/8Iporc838gVPjwQOsfP23pR1V7Tqk7ybCoTYgxYuUj56v pswd8D+xmXK3CPDSsLin+BAEoARX8+tiI3DMHCUGJRlDRJuzuGuGkHzw8WgaMg4H 5KKirsxi05UQpSB31fa21B3kRnTweD3/LO6F9WMUgS8WgdM9NxGksmLlZBmtryQw dYNwk0YTVp50JKOzns2XFzI1UuKm6f/h+FbFQmwwqrfsuHo6DQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFAug7RBWiwXZWARp6rdHf7FD5M7vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 YmYwOGUyYi0zNzIyLTQ3OTktODAwZi0yZWNmN2E1NTRiMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzhiZjA4ZTJiLTM3MjItNDc5OS04 MDBmLTJlY2Y3YTU1NGIwZi84YmYwOGUyYi0zNzIyLTQ3OTktODAwZi0yZWNmN2E1 NTRiMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwRAYIKwYBBQUH AQcBAf8ENTAzMCAEAgABMBoDBAJo9AwDBADAmZowDAMEAsCg7AMEAMCg8DAPBAIA AjAJAwcEJiABHPAAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYBwzBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQA8bNVsXKaaI6jfpRXAWlcT4WaTB5NPOuKRMErKOTczVY4gyTFB79yz42RZIPFx PKVNArZmbLVX+XYxFJWhUnxExYfYrfu4+Ig7n2uhL1VxDiowiDZc5MVNAiiN1a4k Rbe398tXI9g9aPWXSPIdXL+17Rt4cIdNV4TAPeQuEnTO1ADvJqSS9kB1IPn693SE eI4ycQ908hFyj/N32/9vreqs0imUSJzNoTl1eLBKZwopL9DcH5i2AADH3bjvrq/n WI6bmWZMV/l7Y0+UJFHJtzKxCVE9Z0rZ15iNnoYsE348zBIv7r34DgFcghPrCwPX /QjssSL13TMd0cAo2FJFq/no -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:41 2026 by rpki-client