This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer File: 9de5b47f-bd49-4614-b658-9980cfd17769.cer (raw, json) Hash identifier: 0kwJpbuKY05xb0G5itANBGqjFcSX/e6YXjypeasdcNU= Subject key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C83B984CD34B39A9BA3D3B6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Jan 2026 19:39:20 +0000 Certificate not after: Wed 10 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 6126 AS: 13713 AS: 14547 AS: 18924 AS: 19637 AS: 21948 AS: 22853 AS: 22918 AS: 22965 AS: 23326 AS: 26248 AS: 26282 AS: 27471 AS: 36657 AS: 40816 AS: 53512 AS: 54557 AS: 55048 AS: 62542 AS: 394136 AS: 395632 AS: 395730 AS: 397404 AS: 397983 AS: 400055 AS: 400870 -- 400881 IP: 63.245.192.0/20 IP: 66.170.96.0/20 IP: 66.205.228.0/22 IP: 67.219.240.0/20 IP: 98.158.240.0/20 IP: 130.119.0.0/16 IP: 130.200.0.0/16 IP: 135.14.0.0/15 IP: 135.24.0.0/16 IP: 135.36.0.0/16 IP: 135.141.0.0 -- 135.142.255.255 IP: 135.156.0.0/16 IP: 138.42.0.0/16 IP: 141.202.0.0/16 IP: 144.49.0.0/16 IP: 148.64.0.0/19 IP: 155.35.0.0/24 IP: 155.35.2.0 -- 155.35.33.255 IP: 155.35.36.0 -- 155.35.45.255 IP: 155.35.48.0 -- 155.35.225.255 IP: 155.35.227.0 -- 155.35.231.255 IP: 155.35.233.0 -- 155.35.255.255 IP: 168.149.128.0/18 IP: 170.176.240.0/21 IP: 192.19.0.0/16 IP: 192.251.86.0/24 IP: 198.135.124.0/23 IP: 199.19.248.0/21 IP: 199.43.188.0/24 IP: 199.85.234.0/23 IP: 199.101.152.0/22 IP: 199.116.168.0/21 IP: 199.184.126.0/23 IP: 199.247.32.0/20 IP: 207.189.188.0/22 IP: 208.91.0.0/22 IP: 216.18.144.0/20 IP: 216.31.208.0/20 IP: 216.82.240.0/20 IP: 2602:274::/36 IP: 2602:275::/36 IP: 2602:800:2000::/40 IP: 2604:b040::/32 IP: 2606:9680::/32 IP: 2620:0:850::/48 IP: 2620:31:a000::/48 IP: 2620:51:a000::/48 IP: 2620:5a:2000::/48 IP: 2620:78::/48 IP: 2620:cc::/48 IP: 2620:100::/44 IP: 2620:102:5000::/43 IP: 2620:120:7000::/40 IP: 2620:124:6000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:83:b9:84:cd:34:b3:9a:9b:a3:d3:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 13 19:39:20 2026 GMT Not After : Feb 10 01:45:33 2027 GMT Subject: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:fc:1f:8e:ed:53:f5:de:40:fa:6d:11:64: e8:38:b2:42:3b:e0:55:ed:7a:26:fb:99:52:27:3b: 26:bf:3d:dc:78:df:11:9e:74:18:14:2c:75:76:0b: d6:4c:5e:f1:d8:08:4d:5d:02:89:07:21:17:f0:e3: 54:24:53:33:65:56:af:7a:c3:92:7a:4d:91:70:b8: c1:2b:8f:4b:14:ce:68:61:af:3e:0d:1f:63:2f:9f: 81:84:5a:05:62:c0:5f:7b:00:e8:df:4a:c8:41:80: c4:a3:ba:b2:d2:39:e0:3d:06:4d:8e:f1:cf:5d:37: 24:b9:6f:ed:f1:c8:45:80:8e:dd:ff:2c:f9:85:a4: 62:31:c4:d1:79:30:82:af:5b:7a:42:87:d9:65:a6: d5:b6:a9:a4:0f:bc:2d:1a:31:12:b1:3b:a4:d8:fd: ad:e4:95:33:c4:25:12:24:d7:70:56:1a:47:cd:b6: d8:3d:ee:17:04:12:49:68:a4:d2:6b:74:a5:f6:e1: bd:22:4f:7a:cc:c4:e7:50:2f:bb:0f:29:7b:19:f5: 94:e1:5e:77:40:a3:cc:04:36:7d:c9:ca:fe:f5:ee: f8:8b:69:8d:eb:36:b9:f1:3c:7f:4e:87:76:52:85: 91:51:a6:e2:7b:ab:9a:2d:ad:0f:41:05:f3:00:1c: d7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 63.245.192.0/20 66.170.96.0/20 66.205.228.0/22 67.219.240.0/20 98.158.240.0/20 130.119.0.0/16 130.200.0.0/16 135.14.0.0/15 135.24.0.0/16 135.36.0.0/16 135.141.0.0-135.142.255.255 135.156.0.0/16 138.42.0.0/16 141.202.0.0/16 144.49.0.0/16 148.64.0.0/19 155.35.0.0/24 155.35.2.0-155.35.33.255 155.35.36.0-155.35.45.255 155.35.48.0-155.35.225.255 155.35.227.0-155.35.231.255 155.35.233.0-155.35.255.255 168.149.128.0/18 170.176.240.0/21 192.19.0.0/16 192.251.86.0/24 198.135.124.0/23 199.19.248.0/21 199.43.188.0/24 199.85.234.0/23 199.101.152.0/22 199.116.168.0/21 199.184.126.0/23 199.247.32.0/20 207.189.188.0/22 208.91.0.0/22 216.18.144.0/20 216.31.208.0/20 216.82.240.0/20 IPv6: 2602:274::/36 2602:275::/36 2602:800:2000::/40 2604:b040::/32 2606:9680::/32 2620:0:850::/48 2620:31:a000::/48 2620:51:a000::/48 2620:5a:2000::/48 2620:78::/48 2620:cc::/48 2620:100::/44 2620:102:5000::/43 2620:120:7000::/40 2620:124:6000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6126 13713 14547 18924 19637 21948 22853 22918 22965 23326 26248 26282 27471 36657 40816 53512 54557 55048 62542 394136 395632 395730 397404 397983 400055 400870-400881 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:6f:5a:38:fd:77:e2:b8:62:f6:ef:65:db:31:fc:16:b9:54: 0a:09:d3:f5:ab:32:87:b5:8f:6b:9a:37:e6:9e:ba:a9:9d:4b: d6:15:68:9b:69:d4:cd:24:f4:b3:c1:75:e4:51:b8:70:7f:ab: 35:1b:95:dd:ed:55:be:15:74:16:34:86:ef:a7:c3:d4:ca:00: 91:6b:4c:a2:ed:bd:72:ec:2f:3e:ad:0d:59:73:84:b2:6e:6c: 4b:8e:22:8b:56:6f:5c:21:60:f4:73:d3:7f:b6:a4:bf:13:98: 1b:b3:4c:ce:ee:2b:ee:50:6a:3a:eb:46:48:ba:f6:25:1f:9f: d7:63:2f:48:01:10:7f:51:e6:cc:20:e2:d3:74:4a:5b:f4:94: a4:e1:b3:3c:8a:9e:23:72:1e:9a:af:34:65:ae:eb:c2:7a:1f: 76:92:ed:fc:f7:2a:d5:49:73:21:ab:10:e5:5b:e7:67:5d:92: c1:8a:2d:0a:61:46:34:82:4d:bc:17:00:e0:6b:04:6f:23:5d: 66:c7:14:23:d1:8b:61:94:cc:8d:4c:80:d1:0d:78:62:d0:3b: f3:af:8a:b6:7b:2d:1c:a3:d7:f4:23:80:bc:63:19:de:c8:92: db:eb:eb:9a:89:fa:f3:dc:a5:2e:4c:f2:d2:b6:29:e2:ee:18: 70:87:fa:5f -----BEGIN CERTIFICATE----- MIIJGzCCCAOgAwIBAgIUAQ0Mn0MoWEyDuYTNNLOam6PTtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDExMzE5MzkyMFoXDTI3MDIxMDAxNDUzM1owLzEtMCsGA1UEAxMk OWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCb8H47tU/XeQPptEWToOLJCO+BV7Xom+5lS Jzsmvz3ceN8RnnQYFCx1dgvWTF7x2AhNXQKJByEX8ONUJFMzZVavesOSek2RcLjB K49LFM5oYa8+DR9jL5+BhFoFYsBfewDo30rIQYDEo7qy0jngPQZNjvHPXTckuW/t 8chFgI7d/yz5haRiMcTReTCCr1t6QofZZabVtqmkD7wtGjESsTuk2P2t5JUzxCUS JNdwVhpHzbbYPe4XBBJJaKTSa3Sl9uG9Ik96zMTnUC+7Dyl7GfWU4V53QKPMBDZ9 ycr+9e74i2mN6za58Tx/Tod2UoWRUabie6uaLa0PQQXzABzXEQIDAQABo4IGLTCC BikwHQYDVR0OBBYEFI8YixjttXkjVfu5vwZWCtPiAaQ3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzlkZTViNDdmLWJkNDktNDYxNC1i NjU4LTk5ODBjZmQxNzc2OS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2Zk MTc3NjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwggG1BggrBgEF BQcBBwEB/wSCAaQwggGgMIIBFQQCAAEwggENAwQEP/XAAwQEQqpgAwQCQs3kAwQE Q9vwAwQEYp7wAwMAgncDAwCCyAMDAYcOAwMAhxgDAwCHJDAKAwMAh40DAwCHjgMD AIecAwMAiioDAwCNygMDAJAxAwQFlEAAAwQAmyMAMAwDBAGbIwIDBAGbIyAwDAME ApsjJAMEAZsjLDAMAwQEmyMwAwQBmyPgMAwDBACbI+MDBAObI+AwCwMEAJsj6QMD ApsgAwQGqJWAAwQDqrDwAwMAwBMDBADA+1YDBAHGh3wDBAPHE/gDBADHK7wDBAHH VeoDBALHZZgDBAPHdKgDBAHHuH4DBATH9yADBALPvbwDBALQWwADBATYEpADBATY H9ADBATYUvAwgYQEAgACMH4DBgQmAgJ0AAMGBCYCAnUAAwYAJgIIACADBQAmBLBA AwUAJgaWgAMHACYgAAAIUAMHACYgADGgAAMHACYgAFGgAAMHACYgAFogAAMHACYg AHgAAAMHACYgAMwAAAMHBCYgAQAAAAMHBSYgAQJQAAMGACYgASBwAwYAJiABJGAw gZMGCCsGAQUFBwEIAQH/BIGDMIGAoH4wfAICF+4CAjWRAgI40wICSewCAky1AgJV vAICWUUCAlmGAgJZtQICWx4CAmaIAgJmqgICa08CAwCPMQIDAJ9wAgMA0QgCAwDV HQIDANcIAgMA9E4CAwYDmAIDBglwAgMGCdICAwYQXAIDBhKfAgMGGrcwCgIDBh3m AgMGHfEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAjm9aOP134rhi9u9l2zH8FrlUCgnT9asyh7WPa5o35p66 qZ1L1hVom2nUzST0s8F15FG4cH+rNRuV3e1VvhV0FjSG76fD1MoAkWtMou29cuwv Pq0NWXOEsm5sS44ii1ZvXCFg9HPTf7akvxOYG7NMzu4r7lBqOutGSLr2JR+f12Mv SAEQf1HmzCDi03RKW/SUpOGzPIqeI3Iemq80Za7rwnofdpLt/Pcq1UlzIasQ5Vvn Z12SwYotCmFGNIJNvBcA4GsEbyNdZscUI9GLYZTMjUyA0Q14YtA786+KtnstHKPX 9COAvGMZ3siS2+vrmon689ylLkzy0rYp4u4YcIf6Xw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:51:44 2026 by rpki-client