This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.cer File: 2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.cer (raw, json) Hash identifier: JdKoyl1hDDtxd+ApuSbj/E4ZL0jR6vCaOv9C++FOPf4= Subject key identifier: 3D:F4:29:73:E8:33:31:4F:1B:DD:BF:04:91:2F:A4:35:96:E9:4E:9A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C5D599F202995768CC82A3800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 31 Dec 2025 01:45:23 +0000 Certificate not after: Tue 04 Apr 2028 00:45:23 +0000 Subordinate resources: AS: 393856 IP: 107.189.32.0/19 IP: 192.189.28.0/23 IP: 216.193.128.0/18 IP: 2605:a640::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5d:59:9f:20:29:95:76:8c:c8:2a:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 31 01:45:23 2025 GMT Not After : Apr 4 00:45:23 2028 GMT Subject: CN=2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:52:53:12:8d:ff:99:82:e1:0e:43:0b:ae:2e: 9a:d4:bc:89:f9:71:9c:08:5a:44:f9:b8:ae:f9:4b: 84:6e:3d:10:1a:a1:6a:66:f5:57:02:5d:1d:20:16: 56:88:3b:19:c2:f4:6f:3e:2a:0e:84:91:10:8d:85: e1:e0:1e:10:77:21:e7:2e:c7:24:6d:da:7a:bf:07: 94:9e:95:43:f4:00:00:52:f5:c5:f7:95:0d:5d:05: 50:87:68:99:6b:46:39:ea:b3:2a:30:36:ff:50:6d: d1:42:1c:6d:1f:18:7e:90:aa:6b:78:f1:58:e9:f4: 07:3d:5b:4a:26:66:17:77:c8:12:96:e1:ab:c2:d7: e3:3b:1f:c3:2e:60:c6:d6:08:3d:0f:fd:f3:66:82: 71:46:e2:78:bb:31:8d:52:c5:bc:a2:0d:ea:51:d0: b8:5d:11:96:c2:95:74:ac:15:b2:b6:0f:e8:d4:19: b5:42:d5:45:b2:11:cf:b4:67:2b:6c:d0:d2:4b:25: 1f:36:de:0e:4e:b3:64:af:cc:7d:c1:16:8a:fc:59: 69:3e:30:35:39:f4:d2:78:84:56:d5:11:7f:b6:09: 0c:bb:b4:5e:13:01:4d:3d:3b:df:b7:c1:74:6e:75: 16:28:8c:bf:25:96:b7:01:f9:0c:00:c9:53:6d:78: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F4:29:73:E8:33:31:4F:1B:DD:BF:04:91:2F:A4:35:96:E9:4E:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 107.189.32.0/19 192.189.28.0/23 216.193.128.0/18 IPv6: 2605:a640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393856 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4a:94:a3:f6:84:5b:e4:66:2c:8b:f1:ad:0c:a1:c1:58:a2: c7:9c:27:26:27:02:05:72:b1:b8:36:29:39:0b:c9:ac:0b:e8: cd:65:fd:ca:4d:18:ab:b1:7b:52:55:76:d6:7b:b1:e9:fc:15: 43:87:36:83:2d:37:c3:51:af:5f:aa:f3:48:70:36:9b:e7:08: 2c:00:85:6b:25:a4:54:b5:e7:53:ab:e6:d1:ca:99:bb:db:51: fb:58:c4:71:41:5d:00:48:50:2b:87:83:31:3c:c5:71:4c:c5: 35:8c:2b:ab:63:56:0c:85:c3:68:9d:dc:0e:48:59:95:a8:94: 78:dc:15:58:ae:cc:00:7f:d0:88:35:09:36:46:19:47:db:dc: 1a:c9:0e:2b:b2:0e:64:a7:79:ba:a5:60:e5:5b:29:40:12:0b: 5a:e9:98:4a:ff:94:ad:46:f2:94:7e:b3:7a:39:16:bb:66:45: 52:00:fe:6f:8a:f4:86:43:a5:1c:1d:6d:95:cd:c9:44:9c:fb: 94:d6:c5:98:15:72:fc:8f:bb:29:79:0b:61:02:a1:81:04:b0: 37:8e:51:d9:f5:64:0f:a2:fa:c8:b1:89:73:58:1a:8f:2a:e1: bf:69:2d:be:5e:30:95:1e:0d:91:52:be:b4:b4:3b:a0:c6:60: 1f:c3:00:3b -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWExdWZ8gKZV2jMgqOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTIzMTAxNDUyM1oXDTI4MDQwNDAwNDUyM1owLzEtMCsGA1UEAxMk MmUxYmFjNTAtMWQ4YS00MzNlLWJiZjUtZWUyYjBjNzE3ZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VJTEo3/mYLhDkMLri6a1LyJ+XGcCFpE+biu +UuEbj0QGqFqZvVXAl0dIBZWiDsZwvRvPioOhJEQjYXh4B4QdyHnLsckbdp6vweU npVD9AAAUvXF95UNXQVQh2iZa0Y56rMqMDb/UG3RQhxtHxh+kKprePFY6fQHPVtK JmYXd8gSluGrwtfjOx/DLmDG1gg9D/3zZoJxRuJ4uzGNUsW8og3qUdC4XRGWwpV0 rBWytg/o1Bm1QtVFshHPtGcrbNDSSyUfNt4OTrNkr8x9wRaK/FlpPjA1OfTSeIRW 1RF/tgkMu7ReEwFNPTvft8F0bnUWKIy/JZa3AfkMAMlTbXjgkwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFD30KXPoMzFPG92/BJEvpDWW6U6aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8y ZTFiYWM1MC0xZDhhLTQzM2UtYmJmNS1lZTJiMGM3MTdlNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzJlMWJhYzUwLTFkOGEtNDMzZS1i YmY1LWVlMmIwYzcxN2U1ZC8yZTFiYWM1MC0xZDhhLTQzM2UtYmJmNS1lZTJiMGM3 MTdlNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAVrvSADBAHAvRwDBAbYwYAwDQQCAAIwBwMFACYF pkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgKAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACVKlKP2hFvk ZiyL8a0MocFYosecJyYnAgVysbg2KTkLyawL6M1l/cpNGKuxe1JVdtZ7sen8FUOH NoMtN8NRr1+q80hwNpvnCCwAhWslpFS151Or5tHKmbvbUftYxHFBXQBIUCuHgzE8 xXFMxTWMK6tjVgyFw2id3A5IWZWolHjcFViuzAB/0Ig1CTZGGUfb3BrJDiuyDmSn ebqlYOVbKUASC1rpmEr/lK1G8pR+s3o5FrtmRVIA/m+K9IZDpRwdbZXNyUSc+5TW xZgVcvyPuyl5C2ECoYEEsDeOUdn1ZA+i+sixiXNYGo8q4b9pLb5eMJUeDZFSvrS0 O6DGYB/DADs= -----END CERTIFICATE-----Generated at Thu Jan 8 23:55:11 2026 by rpki-client