This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer File: 4d6573b2-9f3e-43b9-a710-eaee606df226.cer (raw, json) Hash identifier: emMML+nSWlilYPECnQbD2MJ6fHOOxqr75twIB2XUNXI= Subject key identifier: 20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C97F9F743FEDD228ABBB2BB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Jan 2026 01:45:21 +0000 Certificate not after: Tue 25 Apr 2028 00:45:21 +0000 Subordinate resources: IP: 143.200.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:97:f9:f7:43:fe:dd:22:8a:bb:b2:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 21 01:45:21 2026 GMT Not After : Apr 25 00:45:21 2028 GMT Subject: CN=4d6573b2-9f3e-43b9-a710-eaee606df226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:6f:77:bc:16:84:26:6d:3f:8d:0d:36:16: ab:f3:3a:a2:7d:bc:6c:98:40:5b:ab:30:16:26:5c: c5:7a:3a:ef:17:59:9b:50:16:ef:48:88:4d:7e:5c: 9f:40:4c:06:af:35:c9:6b:7c:00:9b:96:6c:d5:e7: 52:83:b6:c8:f7:a3:a0:08:61:81:ac:6d:40:c8:cc: 3a:03:47:7d:f5:b8:69:a4:02:d8:74:39:bc:e7:df: d3:22:a9:35:db:a3:97:ae:49:2b:62:30:29:9e:42: be:cd:53:bb:81:0e:40:92:46:b7:d6:7a:0a:9e:94: 22:24:d0:aa:f2:30:1a:c6:e8:26:19:f5:d6:d5:81: 9a:1c:e8:01:44:0e:cd:5a:2c:52:c2:12:f7:1c:27: 2c:35:33:d0:f3:a2:33:dd:da:31:db:10:92:e2:bc: 1c:26:4f:eb:d9:e5:e9:8c:e0:61:e8:8c:dc:ce:c2: 3a:2e:7a:0f:6b:78:66:42:06:3d:a1:da:db:2e:64: a6:03:3d:2e:8a:0e:4b:ea:18:41:9c:11:33:38:a5: a8:f6:cc:9c:ff:d8:59:62:42:8b:88:8c:5f:65:60: ce:ab:86:bf:cc:d3:25:4b:1a:46:70:70:83:f2:a0: 1b:f0:cf:87:77:1c:1a:e8:76:56:9c:b9:0b:c9:b0: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 143.200.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:66:bf:b2:d5:c5:b9:c1:d8:a6:e9:57:2c:2d:2b:28:19:f8: 90:65:11:65:8b:42:ef:03:95:aa:ed:9a:00:35:c4:7f:81:c1: a9:e5:06:7a:d8:b9:4c:cc:12:b4:43:dd:46:a0:50:18:98:53: 37:e4:bf:3e:a3:42:7b:63:bc:6a:47:25:d9:18:0d:4e:15:83: b9:f1:89:d4:d5:f5:5a:3d:da:84:e5:a8:9a:99:77:02:e6:a9: 9a:f1:cc:b3:eb:62:91:7e:3d:48:1a:6a:02:d1:3e:8e:70:a9: b8:c1:c3:94:e3:1a:7e:ca:30:9a:9f:65:c5:fd:26:fa:ea:02: 44:c3:a2:0a:b2:7b:b2:7a:57:4b:b4:84:ec:d7:69:e2:ad:7f: 5e:ea:5e:03:cb:e3:ec:92:23:5e:32:6e:a3:b3:07:1b:34:8d: 5c:cb:81:22:30:32:97:f5:b8:fa:86:d4:3c:75:41:4a:7f:62: 01:6b:75:3b:14:2d:32:e5:6a:c5:1d:11:df:b1:7f:15:7d:da: 5f:a8:54:7f:73:7f:90:f1:eb:31:fa:64:84:ee:72:46:50:39: 7f:f3:0d:af:b6:24:ec:ba:a6:26:09:56:de:3c:56:da:97:54: 28:01:7e:f6:f9:17:1e:5c:cf:8b:e6:f4:12:9b:21:4c:30:eb: 5c:2b:85:d2 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEyX+fdD/t0iiruyu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDEyMTAxNDUyMVoXDTI4MDQyNTAwNDUyMVowLzEtMCsGA1UEAxMk NGQ2NTczYjItOWYzZS00M2I5LWE3MTAtZWFlZTYwNmRmMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP5vd7wWhCZtP40NNhar8zqifbxsmEBbqzAW JlzFejrvF1mbUBbvSIhNflyfQEwGrzXJa3wAm5Zs1edSg7bI96OgCGGBrG1AyMw6 A0d99bhppALYdDm859/TIqk126OXrkkrYjApnkK+zVO7gQ5Akka31noKnpQiJNCq 8jAaxugmGfXW1YGaHOgBRA7NWixSwhL3HCcsNTPQ86Iz3dox2xCS4rwcJk/r2eXp jOBh6IzczsI6LnoPa3hmQgY9odrbLmSmAz0uig5L6hhBnBEzOKWo9syc/9hZYkKL iIxfZWDOq4a/zNMlSxpGcHCD8qAb8M+Hdxwa6HZWnLkLybD3BQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFCBj/MPOqjJWJr1ZwHGwFoRD4wWqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 ZDY1NzNiMi05ZjNlLTQzYjktYTcxMC1lYWVlNjA2ZGYyMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzRkNjU3M2IyLTlmM2UtNDNiOS1h NzEwLWVhZWU2MDZkZjIyNi80ZDY1NzNiMi05ZjNlLTQzYjktYTcxMC1lYWVlNjA2 ZGYyMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCPyDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoZr+y1cW5wdim6VcsLSso GfiQZRFli0LvA5Wq7ZoANcR/gcGp5QZ62LlMzBK0Q91GoFAYmFM35L8+o0J7Y7xq RyXZGA1OFYO58YnU1fVaPdqE5aiamXcC5qma8cyz62KRfj1IGmoC0T6OcKm4wcOU 4xp+yjCan2XF/Sb66gJEw6IKsnuyeldLtITs12nirX9e6l4Dy+PskiNeMm6jswcb NI1cy4EiMDKX9bj6htQ8dUFKf2IBa3U7FC0y5WrFHRHfsX8VfdpfqFR/c3+Q8esx +mSE7nJGUDl/8w2vtiTsuqYmCVbePFbal1QoAX72+RceXM+L5vQSmyFMMOtcK4XS -----END CERTIFICATE-----Generated at Sun Jan 25 17:02:10 2026 by rpki-client