This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer File: 900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer (raw, json) Hash identifier: dkCdUb6WEQucxR/24hE2DmHU7mVM/ZmES4qtRrCx5U8= Subject key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CB814D723B0E1ED67DABA2620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Feb 2026 13:45:21 +0000 Certificate not after: Sat 06 May 2028 12:45:21 +0000 Subordinate resources: IP: 69.17.224.0/19 IP: 104.37.80.0/22 IP: 192.154.144.0/20 IP: 216.239.64.0/19 IP: 2607:f530::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:14:d7:23:b0:e1:ed:67:da:ba:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 1 13:45:21 2026 GMT Not After : May 6 12:45:21 2028 GMT Subject: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:67:13:ed:99:83:c3:42:82:e6:cb:46:88: d9:d9:7c:cf:f2:a3:62:27:b5:6d:c9:da:57:11:a4: a6:65:08:90:7c:8c:e5:2a:c1:31:1c:07:4b:8f:e5: 14:2b:eb:c2:3a:08:df:a2:2c:9e:a5:c9:34:84:4e: 90:ef:ae:c2:e9:4e:49:71:1d:60:b9:6a:15:fc:48: d1:e0:d4:eb:3b:18:a7:e6:16:18:d2:61:66:b1:b7: 03:a6:eb:3a:fe:e0:4d:f4:2c:e8:2f:9f:97:a9:07: bb:d0:8d:f0:98:43:ef:7b:1e:73:b9:0d:b2:6c:49: 4a:b0:aa:60:9f:e4:cc:a8:df:e2:c6:98:fd:ee:73: ff:d7:ae:a3:98:1c:f5:b3:5b:b8:5a:84:d1:c6:f7: c7:92:7d:1b:b5:c0:96:a4:ba:b4:ee:f2:2f:52:86: d1:06:e8:5e:b2:86:a9:f9:b9:b7:97:54:8d:2d:43: 3c:6b:13:be:c7:9c:13:41:e4:43:b8:a5:d7:88:db: 9d:4a:cf:2c:2e:42:46:c4:06:c9:d7:c4:81:b7:ae: b2:68:a4:53:d6:bd:11:f0:65:8c:c8:65:2d:ed:94: f6:bd:58:f6:92:ea:f6:ea:e6:cf:eb:b0:7f:fb:40: 19:4c:5c:21:01:23:d1:ab:0a:06:35:ea:79:75:46: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 69.17.224.0/19 104.37.80.0/22 192.154.144.0/20 216.239.64.0/19 IPv6: 2607:f530::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:94:db:de:4b:09:3c:9c:1e:91:58:5b:51:4b:e7:a1:24:ca: 87:6d:14:6b:86:43:2f:c4:6a:35:90:dd:bf:6c:28:bf:7a:e0: 4b:e8:71:d1:e0:3e:63:f8:7f:31:eb:f9:4f:57:f4:8e:67:79: 8b:b2:67:d5:a0:a5:23:d4:2c:33:b0:97:9e:e6:ef:79:e2:d9: 02:e8:59:c3:84:c1:f5:8d:81:98:0f:85:bf:69:e0:9a:42:e6: fd:ca:2a:d6:2f:4f:ab:0d:cf:8d:9e:e3:e4:4f:78:69:cf:8a: 6a:00:bc:4c:60:f9:6d:ac:a9:bd:bd:88:75:c6:3b:26:01:34: a0:f9:b2:cf:9b:a3:b2:84:da:8d:70:95:8a:2e:08:26:fb:c2: a2:67:34:52:ab:9e:e6:69:bd:3d:fd:8a:17:cb:48:e3:be:c0: a5:43:b2:74:7f:85:0f:18:eb:66:6f:e9:23:e4:67:29:8e:b2: c8:97:f5:73:6d:78:ce:5c:e3:a3:18:59:a1:e3:87:53:76:1c: d3:4d:97:83:ee:9c:7e:40:6b:38:2f:d6:1f:a3:9e:34:42:aa: c8:65:31:a6:84:06:7a:5b:07:c4:3b:e9:ec:8c:3e:ea:03:f2: 1b:bb:f1:2b:4e:c0:ea:b5:9c:80:bb:44:92:59:c4:3a:99:7f: 49:5c:e4:d1 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEy4FNcjsOHtZ9q6JiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwMTEzNDUyMVoXDTI4MDUwNjEyNDUyMVowLzEtMCsGA1UEAxMk OTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQyYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqxnE+2Zg8NCgubLRojZ2XzP8qNiJ7VtydpX EaSmZQiQfIzlKsExHAdLj+UUK+vCOgjfoiyepck0hE6Q767C6U5JcR1guWoV/EjR 4NTrOxin5hYY0mFmsbcDpus6/uBN9CzoL5+XqQe70I3wmEPvex5zuQ2ybElKsKpg n+TMqN/ixpj97nP/166jmBz1s1u4WoTRxvfHkn0btcCWpLq07vIvUobRBuhesoap +bm3l1SNLUM8axO+x5wTQeRDuKXXiNudSs8sLkJGxAbJ18SBt66yaKRT1r0R8GWM yGUt7ZT2vVj2kur26ubP67B/+0AZTFwhASPRqwoGNep5dUZ0QQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFLFhH7BMNTSiepLSodZ1pgC2wEN8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzkwMGJjYjVkLTllMDctNDRhMy1h ZjYxLTI1ZTdmMDI0MmFkMC85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAy NDJhZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAVFEeADBAJoJVADBATAmpADBAXY70AwDQQCAAIw BwMFACYH9TAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAlJTb3ksJPJwekVhbUUvnoSTKh20Ua4ZDL8RqNZDd v2wov3rgS+hx0eA+Y/h/Mev5T1f0jmd5i7Jn1aClI9QsM7CXnubveeLZAuhZw4TB 9Y2BmA+Fv2ngmkLm/coq1i9Pqw3PjZ7j5E94ac+KagC8TGD5baypvb2IdcY7JgE0 oPmyz5ujsoTajXCVii4IJvvComc0Uque5mm9Pf2KF8tI477ApUOydH+FDxjrZm/p I+RnKY6yyJf1c214zlzjoxhZoeOHU3Yc002Xg+6cfkBrOC/WH6OeNEKqyGUxpoQG elsHxDvp7Iw+6gPyG7vxK07A6rWcgLtEklnEOpl/SVzk0Q== -----END CERTIFICATE-----Generated at Wed Feb 11 05:13:40 2026 by rpki-client