This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.cer File: 353144f7-67ae-4cdd-a9a1-d20cf6140f4f.cer (raw, json) Hash identifier: Zdb181cQ7oFixlEm7Ev9P/wDcRNDezP7maroiGC1Aao= Subject key identifier: 40:39:B5:3F:E1:53:87:18:56:61:43:DF:22:61:D6:0E:2E:97:AA:4F Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584C6B4F08AADC378F7D00676300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Jan 2026 01:45:22 +0000 Certificate not after: Sun 09 Apr 2028 00:45:22 +0000 Subordinate resources: AS: 14687 IP: 204.115.120.0 -- 204.115.125.255 IP: 2602:81a:5000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:4f:08:aa:dc:37:8f:7d:00:67:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 5 01:45:22 2026 GMT Not After : Apr 9 00:45:22 2028 GMT Subject: CN=353144f7-67ae-4cdd-a9a1-d20cf6140f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:dc:22:f3:24:73:8e:2d:9f:b8:9c:8e:a4: e3:e8:67:6a:c5:7c:c4:af:95:fa:c5:a9:d1:2a:fa: 80:d3:3b:5f:53:6a:35:11:34:77:78:76:4f:f6:72: b6:04:3d:e7:60:60:cf:ff:6c:56:bc:03:4d:36:bf: 00:9f:f9:c3:28:81:69:12:68:e1:ec:66:1f:dc:5b: 8a:e0:d8:d9:62:1d:4f:e0:7a:be:ed:40:28:b0:65: 7c:06:82:b8:c3:d8:42:82:da:3f:a4:99:c6:63:cc: a5:37:e3:32:4f:5c:94:4e:64:99:f4:8a:a9:29:d2: 37:92:7c:66:48:91:f9:7c:f3:9f:b2:fe:d6:81:ae: 6d:b0:13:83:73:88:cb:4a:40:a6:68:0a:fd:11:75: ec:4a:d5:4b:f1:7b:91:41:0b:02:50:0b:0c:a7:36: 94:46:0a:0a:d1:0c:76:b9:e6:3f:ed:4b:e3:2c:8e: d1:8d:80:0f:35:5b:cd:3d:ae:5a:7e:0b:0f:29:9e: d2:76:3f:18:c0:37:6a:bb:64:69:05:f2:d7:13:d8: dd:05:1c:06:e6:3f:bd:90:a6:04:ed:5b:96:f5:90: 2d:91:94:bf:73:bd:e9:93:bf:4a:ca:59:78:e3:7f: 26:c0:2c:75:9e:2f:d3:79:80:d4:51:a9:1e:7a:8b: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:39:B5:3F:E1:53:87:18:56:61:43:DF:22:61:D6:0E:2E:97:AA:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/353144f7-67ae-4cdd-a9a1-d20cf6140f4f/353144f7-67ae-4cdd-a9a1-d20cf6140f4f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 204.115.120.0-204.115.125.255 IPv6: 2602:81a:5000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14687 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:eb:c6:cd:a6:c4:ab:6a:00:66:d2:62:50:7b:48:7c:5c:b5: b2:85:64:8c:61:e0:be:e6:60:ef:6d:40:7a:93:26:0b:82:27: 06:95:fd:b6:93:11:9c:11:98:ca:78:1d:ca:d8:a9:70:a2:1d: 30:d9:96:98:b2:20:4e:0e:65:16:83:ba:72:a1:b6:61:4a:c3: 62:23:eb:fc:ac:fa:75:17:d7:2a:00:40:0e:58:f1:81:85:9a: cf:8a:83:76:f1:ba:7e:93:6a:47:28:e4:cc:f9:10:fa:66:02: 97:a3:5a:5a:14:2e:e1:85:39:49:4b:04:94:e3:7d:cd:54:e7: 34:c9:14:a2:21:90:8a:ef:dd:00:71:dd:fe:06:3c:c4:8b:8e: 62:15:25:2a:47:41:7b:e5:0b:45:3d:22:34:dc:64:14:0d:a4: 7d:37:8a:02:67:f3:98:be:1a:d5:6a:57:01:e7:af:9e:ca:81: 43:58:b3:e2:ad:ae:af:bb:5b:e1:5d:c6:6d:6c:e6:67:aa:c6: 28:97:40:11:1d:e6:6c:c5:62:5d:3f:60:52:e0:40:ed:b5:b1: 99:52:ba:52:f7:56:26:b4:39:d1:fd:09:73:0d:88:98:ba:84: c1:c7:06:bb:3e:f2:fd:93:21:a3:9a:23:62:33:f7:59:b6:b4: 26:0c:4c:f1 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWExrTwiq3DePfQBnYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEwNTAxNDUyMloXDTI4MDQwOTAwNDUyMlowLzEtMCsGA1UEAxMk MzUzMTQ0ZjctNjdhZS00Y2RkLWE5YTEtZDIwY2Y2MTQwZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdTcIvMkc44tn7icjqTj6GdqxXzEr5X6xanR KvqA0ztfU2o1ETR3eHZP9nK2BD3nYGDP/2xWvANNNr8An/nDKIFpEmjh7GYf3FuK 4NjZYh1P4Hq+7UAosGV8BoK4w9hCgto/pJnGY8ylN+MyT1yUTmSZ9IqpKdI3knxm SJH5fPOfsv7Wga5tsBODc4jLSkCmaAr9EXXsStVL8XuRQQsCUAsMpzaURgoK0Qx2 ueY/7UvjLI7RjYAPNVvNPa5afgsPKZ7Sdj8YwDdqu2RpBfLXE9jdBRwG5j+9kKYE 7VuW9ZAtkZS/c73pk79Kyll4438mwCx1ni/TeYDUUakeeos4cQIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFEA5tT/hU4cYVmFD3yJh1g4ul6pPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z NTMxNDRmNy02N2FlLTRjZGQtYTlhMS1kMjBjZjYxNDBmNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzM1MzE0NGY3LTY3YWUtNGNkZC1h OWExLWQyMGNmNjE0MGY0Zi8zNTMxNDRmNy02N2FlLTRjZGQtYTlhMS1kMjBjZjYx NDBmNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMBQEAgABMA4wDAMEA8xzeAMEAcxzfDAPBAIAAjAJAwcEJgIIGlAA MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjlfMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJDrxs2mxKtqAGbS YlB7SHxctbKFZIxh4L7mYO9tQHqTJguCJwaV/baTEZwRmMp4HcrYqXCiHTDZlpiy IE4OZRaDunKhtmFKw2Ij6/ys+nUX1yoAQA5Y8YGFms+Kg3bxun6Takco5Mz5EPpm ApejWloULuGFOUlLBJTjfc1U5zTJFKIhkIrv3QBx3f4GPMSLjmIVJSpHQXvlC0U9 IjTcZBQNpH03igJn85i+GtVqVwHnr57KgUNYs+Ktrq+7W+Fdxm1s5meqxiiXQBEd 5mzFYl0/YFLgQO21sZlSulL3Via0OdH9CXMNiJi6hMHHBrs+8v2TIaOaI2Iz91m2 tCYMTPE= -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:49 2026 by rpki-client