This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer File: 30d422dc-98d1-4304-9f8a-097127e15d5e.cer (raw, json) Hash identifier: JGeh27FUK5Sg+4EKfWUDptkU4NMmZsV5U6oMyKF1SUU= Subject key identifier: D7:27:1A:B8:11:31:9C:15:97:44:55:D0:79:13:E2:34:B5:E0:86:31 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C6F7F11387CEB0D5F5EB98000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Jan 2026 13:45:23 +0000 Certificate not after: Mon 10 Apr 2028 12:45:23 +0000 Subordinate resources: AS: 3722 AS: 13647 AS: 27267 AS: 33119 AS: 36217 AS: 36236 AS: 54170 AS: 63420 AS: 394344 IP: 45.54.0.0/17 IP: 66.85.248.0/22 IP: 104.225.0.0/17 IP: 148.163.192.0/18 IP: 157.53.0.0/16 IP: 162.217.112.0/22 IP: 162.223.8.0/21 IP: 162.248.220.0/22 IP: 192.73.240.0/20 IP: 199.38.180.0/22 IP: 199.48.128.0/21 IP: 199.102.76.0/22 IP: 199.233.228.0/22 IP: 204.9.136.0/21 IP: 204.109.56.0/21 IP: 204.139.56.0/21 IP: 208.79.80.0/22 IP: 208.86.224.0/22 IP: 208.111.32.0/20 IP: 209.170.128.0/19 IP: 209.177.144.0/20 IP: 2606:80::/32 IP: 2607:3a00::/32 IP: 2607:f660::/32 IP: 2607:f740::/32 IP: 2607:fc50::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6f:7f:11:38:7c:eb:0d:5f:5e:b9:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 6 13:45:23 2026 GMT Not After : Apr 10 12:45:23 2028 GMT Subject: CN=30d422dc-98d1-4304-9f8a-097127e15d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:04:fd:f6:21:5c:fc:27:c8:34:76:bd:73: 90:f3:37:38:d0:f9:7b:34:d8:e6:d2:43:81:47:51: 8b:f9:56:27:9c:c7:e4:a4:0c:4b:a2:d5:a8:bf:c9: 2a:f6:67:ac:72:0c:18:26:8f:c5:d7:78:63:4d:6d: d2:77:ca:c4:d5:30:44:31:7d:c8:56:d1:ad:33:04: 84:59:24:13:3d:60:4f:60:c1:75:4e:99:8d:85:fa: cb:63:00:2b:bc:49:54:6c:e8:85:c1:08:53:b7:de: d8:14:3c:9d:40:ab:e3:eb:30:56:b2:26:05:9b:52: bf:42:2e:0f:43:b3:07:00:6b:38:fa:6f:4b:32:11: 48:b1:4a:c0:00:e8:16:d4:ce:bf:05:52:0a:5e:da: 0e:1d:cc:a3:7f:05:e4:e5:10:40:d9:57:37:0a:0e: a8:a5:a8:d9:19:8b:2f:c9:82:39:45:9d:c2:88:fa: 5b:df:32:c0:0b:f9:81:a3:3a:27:41:77:2e:e5:ef: 20:71:db:c5:50:01:77:e1:01:f4:9b:c6:eb:81:6e: 1b:f6:e5:f2:63:76:33:a6:ee:6f:83:93:38:2e:90: b8:c2:4e:77:9c:84:2b:3b:5a:b5:24:f6:bb:9a:cc: fe:b0:1d:8d:bb:93:2b:24:c6:cb:ae:59:cc:c9:7c: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:27:1A:B8:11:31:9C:15:97:44:55:D0:79:13:E2:34:B5:E0:86:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 45.54.0.0/17 66.85.248.0/22 104.225.0.0/17 148.163.192.0/18 157.53.0.0/16 162.217.112.0/22 162.223.8.0/21 162.248.220.0/22 192.73.240.0/20 199.38.180.0/22 199.48.128.0/21 199.102.76.0/22 199.233.228.0/22 204.9.136.0/21 204.109.56.0/21 204.139.56.0/21 208.79.80.0/22 208.86.224.0/22 208.111.32.0/20 209.170.128.0/19 209.177.144.0/20 IPv6: 2606:80::/32 2607:3a00::/32 2607:f660::/32 2607:f740::/32 2607:fc50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3722 13647 27267 33119 36217 36236 54170 63420 394344 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:31:7a:c6:79:f7:c0:ed:d7:1c:4e:5c:05:6b:5d:bf:03:b2: a9:71:27:da:1f:ff:ae:a0:d2:03:65:73:dd:b2:66:2d:ee:11: 78:c3:af:f5:57:4e:6f:9e:62:5b:8d:3d:e4:0d:1a:ef:19:f2: 81:cd:ec:b9:7b:b8:0b:26:e3:b0:7e:b6:26:65:68:d0:7e:8a: aa:34:b5:76:af:bf:af:39:01:6e:74:43:91:9e:41:38:c7:63: ad:8e:9f:21:51:3c:75:83:ac:5b:df:b2:1f:69:e3:b0:49:74: 35:06:7d:65:86:0a:7e:37:f1:6a:16:63:5f:83:12:92:64:a8: 8c:f6:39:18:83:2e:5c:77:24:43:5a:05:85:19:15:d8:f0:01: 55:e8:f5:0c:e4:54:76:78:aa:9a:09:b9:ac:b1:34:2a:44:d1: 08:c1:ab:c4:74:ff:ac:45:21:b9:85:01:b1:7b:25:6b:ee:23: fe:d8:4f:e7:71:16:c3:27:d1:03:8b:35:a5:54:ad:42:5f:64: 21:40:f5:3b:e1:f7:78:70:86:c6:e7:76:9c:9e:b9:07:fe:72: a1:64:01:ee:ab:d7:8e:3b:91:d5:e2:09:c8:c5:df:5a:fd:36: b0:dc:45:58:24:c0:e8:67:dd:ce:4d:09:6f:c5:92:6d:44:74: 4a:c9:c1:89 -----BEGIN CERTIFICATE----- MIIH1DCCBrygAwIBAgIUAQ0Mn0MoWExvfxE4fOsNX165gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDEwNjEzNDUyM1oXDTI4MDQxMDEyNDUyM1owLzEtMCsGA1UEAxMk MzBkNDIyZGMtOThkMS00MzA0LTlmOGEtMDk3MTI3ZTE1ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngUE/fYhXPwnyDR2vXOQ8zc40Pl7NNjm0kOB R1GL+VYnnMfkpAxLotWov8kq9mescgwYJo/F13hjTW3Sd8rE1TBEMX3IVtGtMwSE WSQTPWBPYMF1TpmNhfrLYwArvElUbOiFwQhTt97YFDydQKvj6zBWsiYFm1K/Qi4P Q7MHAGs4+m9LMhFIsUrAAOgW1M6/BVIKXtoOHcyjfwXk5RBA2Vc3Cg6opajZGYsv yYI5RZ3CiPpb3zLAC/mBozonQXcu5e8gcdvFUAF34QH0m8brgW4b9uXyY3Yzpu5v g5M4LpC4wk53nIQrO1q1JPa7msz+sB2Nu5MrJMbLrlnMyXwxMwIDAQABo4IE5jCC BOIwHQYDVR0OBBYEFNcnGrgRMZwVl0RV0HkT4jS14IYxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z MGQ0MjJkYy05OGQxLTQzMDQtOWY4YS0wOTcxMjdlMTVkNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05 ZjhhLTA5NzEyN2UxNWQ1ZS8zMGQ0MjJkYy05OGQxLTQzMDQtOWY4YS0wOTcxMjdl MTVkNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgcQGCCsGAQUF BwEHAQH/BIG0MIGxMIGDBAIAATB9AwQHLTYAAwQCQlX4AwQHaOEAAwQGlKPAAwMA nTUDBAKi2XADBAOi3wgDBAKi+NwDBATASfADBALHJrQDBAPHMIADBALHZkwDBALH 6eQDBAPMCYgDBAPMbTgDBAPMizgDBALQT1ADBALQVuADBATQbyADBAXRqoADBATR sZAwKQQCAAIwIwMFACYGAIADBQAmBzoAAwUAJgf2YAMFACYH90ADBQAmB/xQMD8G CCsGAQUFBwEIAQH/BDAwLqAsMCoCAg6KAgI1TwICaoMCAwCBXwIDAI15AgMAjYwC AwDTmgIDAPe8AgMGBGgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACDF6xnn3wO3XHE5cBWtdvwOyqXEn2h// rqDSA2Vz3bJmLe4ReMOv9VdOb55iW4095A0a7xnygc3suXu4CybjsH62JmVo0H6K qjS1dq+/rzkBbnRDkZ5BOMdjrY6fIVE8dYOsW9+yH2njsEl0NQZ9ZYYKfjfxahZj X4MSkmSojPY5GIMuXHckQ1oFhRkV2PABVej1DORUdniqmgm5rLE0KkTRCMGrxHT/ rEUhuYUBsXsla+4j/thP53EWwyfRA4s1pVStQl9kIUD1O+H3eHCGxud2nJ65B/5y oWQB7qvXjjuR1eIJyMXfWv02sNxFWCTA6Gfdzk0Jb8WSbUR0SsnBiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:57:14 2026 by rpki-client