This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer File: f240d902-7ba3-4aec-b663-471f0fabfe37.cer (raw, json) Hash identifier: fUVh+JjeICag4e9p6t1VHzjbfCTe27lOBWnrQ4xO8AM= Subject key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584C6CB46012BA83EA3F3EBCCF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Jan 2026 13:45:22 +0000 Certificate not after: Sun 09 Apr 2028 12:45:22 +0000 Subordinate resources: IP: 66.96.32.0/19 IP: 66.112.128.0/20 IP: 196.27.0.0/18 IP: 200.30.0.0/18 IP: 206.48.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6c:b4:60:12:ba:83:ea:3f:3e:bc:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 5 13:45:22 2026 GMT Not After : Apr 9 12:45:22 2028 GMT Subject: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:26:a5:b7:e9:34:2f:29:86:95:d7:6e:fe: 32:1b:88:44:4e:ef:69:aa:5f:4c:e5:17:88:66:29: 4b:f0:4e:0a:91:ba:2b:4f:c6:2e:55:e8:f0:e7:d5: 9c:36:c1:8a:aa:d2:27:ae:09:74:1f:ab:ae:f9:98: f1:46:4b:e1:8a:c5:5d:e9:83:59:d9:80:05:68:91: 05:ad:04:85:8b:c3:6b:5a:84:da:4a:41:16:fa:dc: b6:34:2a:e2:8f:d0:ab:cc:bb:ed:d3:fd:e5:78:3e: 4c:94:b2:53:af:c2:b3:72:c9:ed:55:77:be:e0:05: 00:d3:f3:32:02:72:a3:3b:69:a1:4a:14:77:4e:22: e3:94:ca:28:2d:5c:fe:ba:f3:f7:cc:76:b8:ff:6f: 10:50:46:85:a4:6f:19:cd:54:37:44:ac:6f:10:e9: fd:02:6b:c8:37:7b:b5:4e:a2:0d:33:f8:7e:1d:27: 8e:5c:94:5b:f1:9f:6c:e2:ce:50:18:e2:cf:74:58: 97:24:d6:72:0c:e9:e0:c8:32:d7:7b:d3:7a:de:58: 9a:f1:7b:a7:b0:31:0b:43:5e:c3:e8:61:3e:41:7d: fe:f7:59:7e:0e:bb:b8:52:92:d9:83:c4:98:c6:48: d1:80:45:dd:59:6b:8d:ae:7a:a8:3b:31:f4:12:49: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.96.32.0/19 66.112.128.0/20 196.27.0.0/18 200.30.0.0/18 206.48.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:46:9a:29:f9:4c:af:15:6d:cb:8e:e1:37:ea:3f:d7:e8:45: cc:79:01:79:98:5c:bd:1f:82:6b:2a:c1:8d:10:a5:b4:6c:bb: 1f:5e:88:c4:71:92:dd:bb:96:00:7e:b6:f4:d5:66:fc:ca:e8: f0:d8:6f:62:99:25:bf:20:97:82:20:e1:25:98:fe:ed:9a:92: 8f:7d:ca:8f:6e:1a:13:7e:16:e3:28:6b:b4:ce:0b:7c:26:00: 7e:ce:91:4b:f8:16:bc:e5:74:5b:b7:00:34:2f:85:3b:21:d9: 67:cc:94:e3:c2:13:5a:35:83:ed:13:ef:f3:dd:81:3e:33:30: 9f:90:28:2f:f0:fd:1c:e0:6d:84:30:cb:6c:89:e6:4b:c7:62: d0:36:a1:34:c5:be:f0:07:d0:cd:c6:40:b6:2d:13:03:75:c6: 2d:43:22:3a:2f:bf:1e:c0:cf:5d:1b:e7:cf:a4:fd:51:76:dd: 92:c7:cb:82:db:d5:06:0e:b8:9a:d4:5b:79:97:28:9b:0b:76: 14:5a:ae:a0:85:16:05:dd:76:9c:34:db:e3:4a:86:68:e7:a6: f9:dc:18:5a:fc:a9:c7:d1:43:0d:19:8f:2c:60:70:09:d3:79: a6:cf:0f:a3:b9:a8:d0:ad:43:e8:91:2d:4a:a3:bb:84:a3:be: ef:da:9e:a2 -----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUAQ0Mn0MoWExstGASuoPqPz68zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDEwNTEzNDUyMloXDTI4MDQwOTEyNDUyMlowLzEtMCsGA1UEAxMk ZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJmZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xUmpbfpNC8phpXXbv4yG4hETu9pql9M5ReI ZilL8E4KkborT8YuVejw59WcNsGKqtInrgl0H6uu+ZjxRkvhisVd6YNZ2YAFaJEF rQSFi8NrWoTaSkEW+ty2NCrij9CrzLvt0/3leD5MlLJTr8KzcsntVXe+4AUA0/My AnKjO2mhShR3TiLjlMooLVz+uvP3zHa4/28QUEaFpG8ZzVQ3RKxvEOn9AmvIN3u1 TqINM/h+HSeOXJRb8Z9s4s5QGOLPdFiXJNZyDOngyDLXe9N63lia8XunsDELQ17D 6GE+QX3+91l+Dru4UpLZg8SYxkjRgEXdWWuNrnqoOzH0EkmjAwIDAQABo4IEFjCC BBIwHQYDVR0OBBYEFORX1SgMCZwqfqilgLFv9rC6TPEeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m MjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2YyNDBkOTAyLTdiYTMtNGFlYy1i NjYzLTQ3MWYwZmFiZmUzNy9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZh YmZlMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMCMEAgABMB0DBAVCYCADBARCcIADBAbEGwADBAbIHgADAwDOMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/Rpop+UyvFW3LjuE36j/X6EXMeQF5mFy9H4JrKsGNEKW0bLsfXojE cZLdu5YAfrb01Wb8yujw2G9imSW/IJeCIOElmP7tmpKPfcqPbhoTfhbjKGu0zgt8 JgB+zpFL+Ba85XRbtwA0L4U7IdlnzJTjwhNaNYPtE+/z3YE+MzCfkCgv8P0c4G2E MMtsieZLx2LQNqE0xb7wB9DNxkC2LRMDdcYtQyI6L78ewM9dG+fPpP1Rdt2Sx8uC 29UGDria1Ft5lyibC3YUWq6ghRYF3XacNNvjSoZo56b53Bha/KnH0UMNGY8sYHAJ 03mmzw+juajQrUPokS1Ko7uEo77v2p6i -----END CERTIFICATE-----Generated at Fri Jan 9 01:20:52 2026 by rpki-client