This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer File: e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer (raw, json) Hash identifier: m4XWa7VTN7VhtZ5pAXoDhbUmX08/M7WkEdAYlwQLE84= Subject key identifier: 16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584C80E76475D0707E1801974400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Jan 2026 19:24:20 +0000 Certificate not after: Thu 14 Oct 2027 22:11:22 +0000 Subordinate resources: AS: 32772 IP: 64.255.52.0/23 IP: 74.209.178.0/23 IP: 2604:16e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:e7:64:75:d0:70:7e:18:01:97:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jan 12 19:24:20 2026 GMT Not After : Oct 14 22:11:22 2027 GMT Subject: CN=e1ec92c2-2a27-47bb-a115-e1db2cee0fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:7f:24:49:29:49:82:44:99:c8:ff:98:f1: 84:bc:1c:af:bf:ff:e4:f9:9c:28:3c:8e:70:3a:a9: 41:60:6b:53:1a:b1:b2:3f:b9:ff:19:ea:9b:28:6b: ea:3e:2f:10:a6:97:d5:b3:15:94:e4:e1:97:ae:52: ec:f4:eb:bf:ff:da:d5:28:73:63:9f:89:27:96:f6: b5:9d:5f:ef:d5:d7:d2:41:00:26:93:65:5a:a6:97: 98:26:8f:2a:92:05:cb:34:1b:4b:41:62:ce:3d:82: 35:ea:87:39:4c:8b:9c:ba:ea:65:c6:20:95:44:93: 9b:7d:12:f5:5f:5b:7e:ba:b9:d2:77:e2:ce:e7:b2: 46:b2:b4:36:cd:73:cd:fa:01:12:86:a0:9a:1d:71: 2e:61:81:7a:cb:b7:57:73:09:0b:6e:fd:5c:bf:f0: 51:77:33:e0:e4:f3:14:73:de:b9:07:e3:ee:b8:47: 14:81:cd:cd:83:7d:cc:8a:23:8e:61:fa:13:8e:f4: 17:36:c6:80:f3:0d:ed:1e:0b:2c:42:15:c2:35:35: bc:50:00:26:e1:5f:71:ae:5b:26:d0:3e:73:29:87: 74:7b:3b:91:92:aa:34:b6:15:ab:1a:5d:64:af:b9: 2a:6e:1b:69:33:01:5d:42:cb:ee:96:2a:db:9b:d8: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 64.255.52.0/23 74.209.178.0/23 IPv6: 2604:16e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32772 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:09:9b:47:8c:9f:5d:2c:b1:d4:dd:f2:e2:49:34:36:a9:de: aa:c4:8e:c7:03:f6:12:25:61:53:c0:f8:31:3c:8b:c1:20:ca: 7c:50:13:1b:b0:3e:c6:a0:ce:da:a9:20:12:b7:39:af:13:f9: f7:a8:65:d6:fd:66:57:05:fc:37:c2:73:6b:b1:82:1f:ca:97: 8c:da:fb:29:a6:7a:a3:6a:0b:62:a2:34:2e:ec:5b:42:66:4c: 88:26:26:36:bf:1d:68:7a:87:ef:3b:e8:b7:46:62:f8:bd:44: ad:f7:94:00:74:08:d2:ab:eb:dd:0f:1a:7b:9c:b7:a6:e7:64: 45:da:fb:9a:0c:85:50:b0:92:e7:11:1e:30:25:83:9e:12:f6: b1:f9:37:0b:fb:13:96:78:29:79:57:59:3b:34:ab:e8:67:1f: 47:ba:3d:1a:20:2f:e2:5b:0e:87:c6:48:31:2e:c6:3c:7e:79: 59:93:67:bc:12:7c:0b:62:1f:35:47:fc:22:24:72:28:38:a9: 22:d7:1d:37:16:30:ae:1a:37:a8:27:ad:e2:9f:d7:bd:c6:f5: df:98:d2:b2:72:6e:26:48:2d:3b:08:9f:8c:a6:7b:87:fc:68: 64:b8:db:bf:33:46:b4:4d:5f:a5:33:2d:60:6e:19:8e:21:95: ab:27:8e:8d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEyA52R10HB+GAGXRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDExMjE5MjQyMFoXDTI3MTAxNDIyMTEyMlowLzEtMCsGA1UEAxMk ZTFlYzkyYzItMmEyNy00N2JiLWExMTUtZTFkYjJjZWUwZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9l/JEkpSYJEmcj/mPGEvByvv//k+ZwoPI5w OqlBYGtTGrGyP7n/GeqbKGvqPi8QppfVsxWU5OGXrlLs9Ou//9rVKHNjn4knlva1 nV/v1dfSQQAmk2VappeYJo8qkgXLNBtLQWLOPYI16oc5TIucuuplxiCVRJObfRL1 X1t+urnSd+LO57JGsrQ2zXPN+gEShqCaHXEuYYF6y7dXcwkLbv1cv/BRdzPg5PMU c965B+PuuEcUgc3Ng33MiiOOYfoTjvQXNsaA8w3tHgssQhXCNTW8UAAm4V9xrlsm 0D5zKYd0ezuRkqo0thWrGl1kr7kqbhtpMwFdQsvulirbm9gaQQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBZaevEDSYPqStWefQLu9x0n1AxcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l MWVjOTJjMi0yYTI3LTQ3YmItYTExNS1lMWRiMmNlZTBmZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2UxZWM5MmMyLTJhMjctNDdiYi1h MTE1LWUxZGIyY2VlMGZlZi9lMWVjOTJjMi0yYTI3LTQ3YmItYTExNS1lMWRiMmNl ZTBmZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAFA/zQDBAFK0bIwDQQCAAIwBwMFACYEFuAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAIAEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEIJm0eMn10ssdTd8uJJ NDap3qrEjscD9hIlYVPA+DE8i8EgynxQExuwPsagztqpIBK3Oa8T+feoZdb9ZlcF /DfCc2uxgh/Kl4za+ymmeqNqC2KiNC7sW0JmTIgmJja/HWh6h+876LdGYvi9RK33 lAB0CNKr690PGnuct6bnZEXa+5oMhVCwkucRHjAlg54S9rH5Nwv7E5Z4KXlXWTs0 q+hnH0e6PRogL+JbDofGSDEuxjx+eVmTZ7wSfAtiHzVH/CIkcig4qSLXHTcWMK4a N6gnreKf173G9d+Y0rJybiZILTsIn4yme4f8aGS4278zRrRNX6UzLWBuGY4hlasn jo0= -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:01 2026 by rpki-client