This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer File: 01586a37-c709-480e-ac0d-b07d855c615b.cer (raw, json) Hash identifier: PBYASP/ogjfwDMkh5AIsKQztTvEMO92mRup9ih8UV+Q= Subject key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C69E9B297F3C9BCDBDDABAD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 04 Jan 2026 13:45:23 +0000 Certificate not after: Sat 08 Apr 2028 12:45:23 +0000 Subordinate resources: AS: 46516 AS: 396931 IP: 23.249.161.0/24 IP: 23.249.163.0 -- 23.249.164.255 IP: 23.249.169.0/24 IP: 23.249.174.0/23 IP: 66.111.61.0/24 IP: 138.128.132.0/22 IP: 162.251.136.0/21 IP: 172.103.32.0/22 IP: 209.242.192.0/19 IP: 216.170.118.0/24 IP: 216.170.123.0/24 IP: 2600:2900::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:69:e9:b2:97:f3:c9:bc:db:dd:ab:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 4 13:45:23 2026 GMT Not After : Apr 8 12:45:23 2028 GMT Subject: CN=01586a37-c709-480e-ac0d-b07d855c615b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:0d:c9:e7:e1:c3:67:78:af:9a:a5:e7:53: e5:5c:98:22:b2:14:37:60:43:aa:76:d2:9c:29:a8: a5:6a:7b:15:a0:52:86:45:3a:a0:93:a0:8e:fc:d3: 0e:d6:d4:7c:cc:6d:66:c3:d0:8f:65:4f:2c:b6:d0: 52:67:e4:57:ed:52:82:d0:1f:77:d9:f7:5d:1e:43: b5:e5:bc:41:eb:fc:93:c1:28:2d:22:41:0b:3f:63: a1:1b:3e:f1:c0:b1:5a:5f:af:4a:ee:3b:b7:61:0b: c3:c0:36:34:0d:92:65:64:94:4a:8f:cb:db:70:cf: 95:6a:26:36:53:54:47:70:16:de:b2:66:35:08:13: 52:cc:3f:50:7a:8b:e9:16:e4:93:5f:7a:5b:82:65: 31:16:17:12:73:12:9c:19:09:c5:ba:81:e5:72:1d: 98:ff:c4:22:52:cb:ea:0e:73:ae:2c:11:5f:dd:df: 5a:fb:b3:7f:d5:88:a5:3a:e4:e2:0a:bf:c6:33:53: d2:1d:07:5a:a4:b2:72:62:52:fb:1a:b5:77:cb:73: ea:14:12:e6:e0:fc:b1:fc:96:c8:a1:4d:c0:5b:94: a5:d7:74:28:3c:7e:f3:33:cf:b4:54:ab:2b:9e:71: 99:9a:fa:cb:06:0a:2b:03:24:6b:c2:3e:bd:52:e0: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.249.161.0/24 23.249.163.0-23.249.164.255 23.249.169.0/24 23.249.174.0/23 66.111.61.0/24 138.128.132.0/22 162.251.136.0/21 172.103.32.0/22 209.242.192.0/19 216.170.118.0/24 216.170.123.0/24 IPv6: 2600:2900::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46516 396931 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:57:ab:a7:b0:89:2c:3d:5f:8a:05:e0:c4:67:0c:3d:c2:f0: a2:34:e6:5e:8f:7f:94:d4:6b:11:07:1a:f6:b7:85:c7:1b:71: d8:1e:43:02:db:e3:e6:3e:a0:17:74:96:e0:1a:42:fc:0d:39: ad:11:c8:17:d5:d7:99:63:38:f6:83:ea:a4:50:bf:e6:3a:ba: d6:4f:d9:23:63:b7:e6:be:68:56:62:da:07:7a:3b:73:53:47: 77:41:65:f6:21:de:86:7b:02:26:6f:f8:4f:42:d1:3c:4d:dd: 15:76:fc:85:fc:bf:1a:e1:b5:b3:51:7e:ee:b1:70:4e:34:17: 92:e0:f5:ed:2e:df:84:25:6b:0e:6a:6d:47:c9:eb:c1:38:83: c9:35:19:e7:dc:d0:17:6c:1b:0e:15:07:76:61:64:15:ff:7d: 2c:2e:b3:16:82:94:88:fe:e0:2c:94:21:d6:38:36:95:3d:c3: 4c:84:ee:7f:6c:67:60:a2:3a:b0:35:ff:a9:74:39:76:fc:ed: ae:8f:04:17:56:87:97:0f:9b:c1:fa:d8:af:e6:b0:9b:3e:78: 7b:f3:54:1f:c4:9c:48:8e:30:58:90:a5:ab:55:e1:2b:6e:3a: 5b:af:cb:50:3b:48:d5:3b:50:32:77:21:b6:a6:07:e1:fc:17: f4:cd:5c:b5 -----BEGIN CERTIFICATE----- MIIHYTCCBkmgAwIBAgIUAQ0Mn0MoWExp6bKX88m8292rrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDEwNDEzNDUyM1oXDTI4MDQwODEyNDUyM1owLzEtMCsGA1UEAxMk MDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2MTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvsNyefhw2d4r5ql51PlXJgishQ3YEOqdtKc KailansVoFKGRTqgk6CO/NMO1tR8zG1mw9CPZU8sttBSZ+RX7VKC0B932fddHkO1 5bxB6/yTwSgtIkELP2OhGz7xwLFaX69K7ju3YQvDwDY0DZJlZJRKj8vbcM+VaiY2 U1RHcBbesmY1CBNSzD9QeovpFuSTX3pbgmUxFhcScxKcGQnFuoHlch2Y/8QiUsvq DnOuLBFf3d9a+7N/1YilOuTiCr/GM1PSHQdapLJyYlL7GrV3y3PqFBLm4Pyx/JbI oU3AW5Sl13QoPH7zM8+0VKsrnnGZmvrLBgorAyRrwj69UuCTWwIDAQABo4IEczCC BG8wHQYDVR0OBBYEFEC4aT/JFJ9cK3v6iLjH/2Iy65upMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w MTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzAxNTg2YTM3LWM3MDktNDgwZS1h YzBkLWIwN2Q4NTVjNjE1Yi8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1 YzYxNWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwcgYIKwYBBQUH AQcBAf8EYzBhMFAEAgABMEoDBAAX+aEwDAMEABf5owMEABf5pAMEABf5qQMEARf5 rgMEAEJvPQMEAoqAhAMEA6L7iAMEAqxnIAMEBdHywAMEANiqdgMEANiqezANBAIA AjAHAwUEJgApADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAtbQCAwYOgzBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBqV6unsIksPV+KBeDEZww9wvCiNOZej3+U1GsRBxr2t4XHG3HYHkMC2+Pm PqAXdJbgGkL8DTmtEcgX1deZYzj2g+qkUL/mOrrWT9kjY7fmvmhWYtoHejtzU0d3 QWX2Id6GewImb/hPQtE8Td0VdvyF/L8a4bWzUX7usXBONBeS4PXtLt+EJWsOam1H yevBOIPJNRnn3NAXbBsOFQd2YWQV/30sLrMWgpSI/uAslCHWODaVPcNMhO5/bGdg ojqwNf+pdDl2/O2ujwQXVoeXD5vB+tiv5rCbPnh781QfxJxIjjBYkKWrVeErbjpb r8tQO0jVO1AydyG2pgfh/Bf0zVy1 -----END CERTIFICATE-----Generated at Sun Jan 25 08:58:30 2026 by rpki-client