This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f.cer File: ec44fac2-5f0d-4ebb-8425-6d4a3e12047f.cer (raw, json) Hash identifier: XZaHDc7VA5i+J8kUDC704mFlV3Y1jREZt+Z9YLXXEOQ= Subject key identifier: CC:E6:51:B2:C0:7E:8A:7D:AF:D7:FD:2E:AD:A0:38:90:09:2A:C0:05 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584C7249C1F8D6FE54E174F01600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Jan 2026 13:45:24 +0000 Certificate not after: Tue 11 Apr 2028 12:45:24 +0000 Subordinate resources: AS: 16719 IP: 150.123.0.0/16 IP: 198.202.240.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:49:c1:f8:d6:fe:54:e1:74:f0:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 7 13:45:24 2026 GMT Not After : Apr 11 12:45:24 2028 GMT Subject: CN=ec44fac2-5f0d-4ebb-8425-6d4a3e12047f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4f:c4:6a:69:2d:4b:b7:3d:67:63:d2:b2:c8: 90:b0:2d:b6:fb:f0:3e:12:d9:72:dd:b5:2d:91:0e: 9a:5b:ca:f8:a6:f1:51:14:7d:eb:06:0d:1a:ab:cc: b2:9d:94:94:84:3f:af:6c:75:b7:44:e6:d5:84:38: 14:75:fe:44:66:4f:52:8f:d3:35:33:ed:58:dc:91: ea:6c:e4:25:83:c7:a5:82:52:14:e9:c9:e9:49:5c: 6c:a0:79:eb:cc:9c:dd:76:0c:c2:76:2b:5b:7a:ac: db:ba:8e:35:a5:1d:36:7d:35:b0:8b:92:54:f4:61: 6c:b0:21:27:5e:e3:6a:29:1a:db:9e:02:33:d0:c7: 6f:26:ce:7e:5d:ff:98:0d:77:34:2c:45:e1:96:c8: 67:40:bd:06:bc:7e:22:da:6c:11:07:77:5e:5d:0c: 30:d7:8c:08:a8:54:9d:35:bf:8d:d9:94:5b:e5:db: 9d:8a:9b:f5:77:4d:05:d4:90:ed:a7:05:cc:a3:53: 11:14:6e:e3:3f:1f:0f:3b:2b:29:2a:0a:b2:46:bd: 6b:91:bb:ca:a2:8f:4c:22:61:a8:e0:73:9d:df:4c: 04:9e:2a:05:cf:3f:26:58:b8:fe:6e:a8:5e:cc:1a: 37:64:6e:e6:c8:e9:7d:92:f8:39:ad:db:5e:38:95: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E6:51:B2:C0:7E:8A:7D:AF:D7:FD:2E:AD:A0:38:90:09:2A:C0:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f/ec44fac2-5f0d-4ebb-8425-6d4a3e12047f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 150.123.0.0/16 198.202.240.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16719 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:14:3d:58:35:15:2a:7f:5b:24:b9:c0:7c:85:df:7e:e1:86: a1:4a:46:aa:c4:ce:ac:45:ba:98:5b:9f:4d:f9:c5:a0:1c:39: 68:81:c1:fd:69:2c:bd:38:e1:56:9a:4f:e7:49:af:93:77:a7: d6:4f:c9:aa:f4:83:05:15:7d:e5:92:7f:bd:2d:64:ed:b5:05: b4:28:48:43:d7:79:25:c2:cb:f5:b2:51:c2:28:21:cd:c4:c5: aa:c0:f2:ea:01:32:b1:15:c7:3c:70:d5:d5:ae:c1:34:7c:9b: 8d:1d:07:fb:1c:68:48:d3:ab:2e:b9:6b:9e:a8:7f:cf:bf:91: b1:06:38:ad:41:89:8e:7c:50:6f:e9:3a:4b:9e:5a:c9:a6:62: d6:92:b1:cb:b4:d7:ca:c0:7e:33:5a:b0:c4:33:ea:70:5a:54: 09:1b:bb:46:d5:dc:08:99:c1:49:f6:84:e1:98:ab:f0:28:4e: 04:a4:14:5e:94:19:e6:a3:9d:9b:42:0e:58:85:a0:a7:00:ed: 2d:52:91:4a:65:04:e2:84:17:df:e2:a8:a9:c6:86:99:93:4b: e7:a9:34:e6:6f:30:4c:c1:d3:54:32:a1:21:d1:1b:6a:6c:92: ff:4a:dd:52:53:36:81:d0:a3:1a:67:55:c5:a4:e4:67:98:49: ec:0b:6a:7d -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWExyScH41v5U4XTwFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDEwNzEzNDUyNFoXDTI4MDQxMTEyNDUyNFowLzEtMCsGA1UEAxMk ZWM0NGZhYzItNWYwZC00ZWJiLTg0MjUtNmQ0YTNlMTIwNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E/EamktS7c9Z2PSssiQsC22+/A+Etly3bUt kQ6aW8r4pvFRFH3rBg0aq8yynZSUhD+vbHW3RObVhDgUdf5EZk9Sj9M1M+1Y3JHq bOQlg8elglIU6cnpSVxsoHnrzJzddgzCditbeqzbuo41pR02fTWwi5JU9GFssCEn XuNqKRrbngIz0MdvJs5+Xf+YDXc0LEXhlshnQL0GvH4i2mwRB3deXQww14wIqFSd Nb+N2ZRb5dudipv1d00F1JDtpwXMo1MRFG7jPx8POyspKgqyRr1rkbvKoo9MImGo 4HOd30wEnioFzz8mWLj+bqhezBo3ZG7myOl9kvg5rdteOJXa/wIDAQABo4IEHzCC BBswHQYDVR0OBBYEFMzmUbLAfop9r9f9Lq2gOJAJKsAFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l YzQ0ZmFjMi01ZjBkLTRlYmItODQyNS02ZDRhM2UxMjA0N2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2VjNDRmYWMyLTVmMGQtNGViYi04 NDI1LTZkNGEzZTEyMDQ3Zi9lYzQ0ZmFjMi01ZjBkLTRlYmItODQyNS02ZDRhM2Ux MjA0N2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCWewMEAcbK8DAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgJBTzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBqFD1YNRUqf1skucB8hd9+4YahSkaqxM6sRbqYW59N +cWgHDlogcH9aSy9OOFWmk/nSa+Td6fWT8mq9IMFFX3lkn+9LWTttQW0KEhD13kl wsv1slHCKCHNxMWqwPLqATKxFcc8cNXVrsE0fJuNHQf7HGhI06suuWueqH/Pv5Gx BjitQYmOfFBv6TpLnlrJpmLWkrHLtNfKwH4zWrDEM+pwWlQJG7tG1dwImcFJ9oTh mKvwKE4EpBRelBnmo52bQg5YhaCnAO0tUpFKZQTihBff4qipxoaZk0vnqTTmbzBM wdNUMqEh0RtqbJL/St1SUzaB0KMaZ1XFpORnmEnsC2p9 -----END CERTIFICATE-----Generated at Fri Jan 9 01:23:22 2026 by rpki-client