This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer File: b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer (raw, json) Hash identifier: PXIl0/+qtdtAubqi8NZb9tXxlDYtb/hlXFXxhMvo9O0= Subject key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C565EEA8BA415FAC03394AC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Dec 2025 13:45:24 +0000 Certificate not after: Sat 01 Apr 2028 12:45:24 +0000 Subordinate resources: AS: 7265 AS: 11693 AS: 12015 AS: 12026 AS: 12083 AS: 16727 AS: 29737 AS: 29780 AS: 29859 AS: 29895 IP: 23.28.96.0 -- 23.28.255.255 IP: 24.35.0.0 -- 24.35.30.255 IP: 24.35.32.0/19 IP: 24.42.128.0 -- 24.42.227.255 IP: 24.96.0.0/16 IP: 24.192.0.0/16 IP: 24.214.0.0 -- 24.214.72.255 IP: 24.214.74.0 -- 24.214.127.255 IP: 24.214.144.0/22 IP: 24.214.200.0 -- 24.214.228.255 IP: 24.214.241.0 -- 24.214.255.255 IP: 24.236.64.0/18 IP: 50.4.0.0/16 IP: 64.233.192.0/18 IP: 66.216.192.0/19 IP: 67.149.0.0/16 IP: 68.179.128.0/18 IP: 69.1.0.0/18 IP: 69.14.0.0/16 IP: 69.73.0.0/17 IP: 69.171.206.0/24 IP: 72.15.64.0/18 IP: 75.76.0.0 -- 75.76.39.255 IP: 75.76.69.0/24 IP: 75.76.84.0/24 IP: 75.76.107.0/24 IP: 75.76.126.0/24 IP: 75.76.138.0 -- 75.76.160.255 IP: 75.76.163.0/24 IP: 76.73.128.0 -- 76.73.193.255 IP: 76.73.214.0/24 IP: 76.73.239.0/24 IP: 96.27.0.0/16 IP: 143.59.0.0/16 IP: 207.98.128.0 -- 207.98.248.255 IP: 207.98.250.0 -- 207.98.255.255 IP: 208.74.232.0/22 IP: 216.47.192.0/19 IP: 216.130.128.0/19 IP: 216.186.128.0/19 IP: 216.186.164.0/24 IP: 216.186.180.0/24 IP: 2606:1100::/32 IP: 2607:3d00::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:5e:ea:8b:a4:15:fa:c0:33:94:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 28 13:45:24 2025 GMT Not After : Apr 1 12:45:24 2028 GMT Subject: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3f:f1:62:d9:4b:b5:93:46:4d:3a:10:88:2a: 7a:1c:a1:1e:6e:65:c2:29:cb:79:66:34:e4:31:4f: 81:e2:cf:a9:33:07:5c:06:93:b2:81:68:4e:04:5c: 1d:16:1d:bd:6c:fd:97:cf:66:6e:6d:da:55:30:ea: 9a:da:93:d6:20:73:19:89:13:6c:79:d3:7f:b0:48: f2:87:35:8b:b1:d9:6b:35:b9:e1:89:e1:2c:de:6c: 4a:ab:ed:d0:98:0f:0c:6b:91:b5:9e:63:8d:3a:16: 90:1e:38:99:04:f7:30:69:2a:fd:5d:af:52:7a:3b: 45:42:e3:3d:57:d8:7a:7f:7f:86:b6:9b:3e:51:a7: cb:71:c7:f9:f9:a0:89:89:ca:93:f8:22:07:ac:76: a2:7d:0a:2e:59:b7:53:1c:43:21:cb:50:5b:f4:0d: b7:bf:8e:70:1e:ae:46:e5:a4:9e:d2:5e:a5:ef:05: 3c:4b:5f:79:04:91:a3:7c:06:3e:5e:b5:7b:97:26: 18:46:f6:42:78:21:cc:de:05:8a:10:75:bc:48:d3: 0c:60:18:5d:a9:65:3a:1f:9a:ce:7c:ff:fd:26:f6: 99:19:48:22:61:99:b7:85:c3:55:3d:f6:70:27:fe: a9:5f:d4:2b:3c:f5:d8:07:85:f1:d1:90:b8:d3:93: 12:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.28.96.0-23.28.255.255 24.35.0.0-24.35.30.255 24.35.32.0/19 24.42.128.0-24.42.227.255 24.96.0.0/16 24.192.0.0/16 24.214.0.0-24.214.72.255 24.214.74.0-24.214.127.255 24.214.144.0/22 24.214.200.0-24.214.228.255 24.214.241.0-24.214.255.255 24.236.64.0/18 50.4.0.0/16 64.233.192.0/18 66.216.192.0/19 67.149.0.0/16 68.179.128.0/18 69.1.0.0/18 69.14.0.0/16 69.73.0.0/17 69.171.206.0/24 72.15.64.0/18 75.76.0.0-75.76.39.255 75.76.69.0/24 75.76.84.0/24 75.76.107.0/24 75.76.126.0/24 75.76.138.0-75.76.160.255 75.76.163.0/24 76.73.128.0-76.73.193.255 76.73.214.0/24 76.73.239.0/24 96.27.0.0/16 143.59.0.0/16 207.98.128.0-207.98.248.255 207.98.250.0-207.98.255.255 208.74.232.0/22 216.47.192.0/19 216.130.128.0/19 216.186.128.0/19 216.186.164.0/24 216.186.180.0/24 IPv6: 2606:1100::/32 2607:3d00::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7265 11693 12015 12026 12083 16727 29737 29780 29859 29895 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5d:f8:f1:ac:0f:16:45:0a:09:de:b8:5f:01:87:62:25:4e: 78:4f:97:ac:f4:20:0a:5a:df:81:9c:b0:a2:e4:f7:9e:0a:e0: c1:85:c1:fd:9c:d8:a0:a5:b7:1c:e6:5a:22:d4:52:f5:ed:ec: 97:48:98:f0:95:60:4c:3d:a6:d8:ad:ea:e0:f7:fe:d2:82:06: fc:79:32:82:4d:cc:15:76:b2:31:de:10:e8:14:a3:b3:23:34: fc:ba:0e:f1:04:f7:cd:61:2a:d1:83:0a:a5:ed:ed:1f:29:e1: c1:a4:4c:9d:b3:e5:1a:cd:d0:71:e2:6e:d3:b2:27:89:b8:d6: a1:29:2e:3f:2e:1a:d4:2e:2e:97:21:1e:c7:38:d7:67:45:de: 6b:e8:a8:43:d3:e6:bd:e1:03:b6:b1:39:e0:85:1f:f1:52:f4: f3:04:e5:b3:1b:fd:dc:79:15:77:23:ff:ae:e4:35:d6:f3:34: f3:45:d5:6b:1e:87:55:14:ab:a0:5a:72:d2:8e:6d:4a:05:7e: 0f:6a:2e:4d:c9:8c:54:68:82:62:0f:2f:f9:2e:12:71:cd:44: f9:3b:14:f6:fc:e9:23:37:b3:26:a3:3d:50:da:52:ba:51:f2: 6b:d3:89:e0:e5:bd:a3:4f:28:66:5a:4e:59:6e:ee:70:6b:7f: c4:c8:21:32 -----BEGIN CERTIFICATE----- MIIIlTCCB32gAwIBAgIUAQ0Mn0MoWExWXuqLpBX6wDOUrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MTIyODEzNDUyNFoXDTI4MDQwMTEyNDUyNFowLzEtMCsGA1UEAxMk Yjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2VmNWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz/xYtlLtZNGTToQiCp6HKEebmXCKct5ZjTk MU+B4s+pMwdcBpOygWhOBFwdFh29bP2Xz2ZubdpVMOqa2pPWIHMZiRNsedN/sEjy hzWLsdlrNbnhieEs3mxKq+3QmA8Ma5G1nmONOhaQHjiZBPcwaSr9Xa9SejtFQuM9 V9h6f3+Gtps+UafLccf5+aCJicqT+CIHrHaifQouWbdTHEMhy1Bb9A23v45wHq5G 5aSe0l6l7wU8S195BJGjfAY+XrV7lyYYRvZCeCHM3gWKEHW8SNMMYBhdqWU6H5rO fP/9JvaZGUgiYZm3hcNVPfZwJ/6pX9QrPPXYB4Xx0ZC405MSXQIDAQABo4IFpzCC BaMwHQYDVR0OBBYEFN54Lmr60wUAWO7ogPUW2WhR85CRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i NzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2I3NmUwZDE1LTk5NzYtNDQ2Ni1i NmZmLTJkMDY3YjdlZjVmZS9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3 ZWY1ZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwggGGBggrBgEF BQcBBwEB/wSCAXUwggFxMIIBVwQCAAEwggFPMAsDBAUXHGADAwAXHDALAwMAGCMD BAAYIx4DBAUYIyAwDAMEBxgqgAMEAhgq4AMDABhgAwMAGMAwCwMDARjWAwQAGNZI MAwDBAEY1koDBAcY1gADBAIY1pAwDAMEAxjWyAMEABjW5DALAwQAGNbxAwMAGNYD BAYY7EADAwAyBAMEBkDpwAMEBULYwAMDAEOVAwQGRLOAAwQGRQEAAwMARQ4DBAdF SQADBABFq84DBAZID0AwCwMDAktMAwQDS0wgAwQAS0xFAwQAS0xUAwQAS0xrAwQA S0x+MAwDBAFLTIoDBABLTKADBABLTKMwDAMEB0xJgAMEAUxJwAMEAExJ1gMEAExJ 7wMDAGAbAwMAjzswDAMEB89igAMEAM9i+DALAwQBz2L6AwMAz2IDBALQSugDBAXY L8ADBAXYgoADBAXYuoADBADYuqQDBADYurQwFAQCAAIwDgMFACYGEQADBQQmBz0A MD0GCCsGAQUFBwEIAQH/BC4wLKAqMCgCAhxhAgItrQICLu8CAi76AgIvMwICQVcC AnQpAgJ0VAICdKMCAnTHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAhd+PGsDxZFCgneuF8Bh2IlTnhPl6z0 IApa34GcsKLk954K4MGFwf2c2KCltxzmWiLUUvXt7JdImPCVYEw9ptit6uD3/tKC Bvx5MoJNzBV2sjHeEOgUo7MjNPy6DvEE981hKtGDCqXt7R8p4cGkTJ2z5RrN0HHi btOyJ4m41qEpLj8uGtQuLpchHsc412dF3mvoqEPT5r3hA7axOeCFH/FS9PME5bMb /dx5FXcj/67kNdbzNPNF1Wseh1UUq6BactKObUoFfg9qLk3JjFRogmIPL/kuEnHN RPk7FPb86SM3syajPVDaUrpR8mvTieDlvaNPKGZaTllu7nBrf8TIITI= -----END CERTIFICATE-----Generated at Mon Jan 12 00:52:04 2026 by rpki-client