This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer File: a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer (raw, json) Hash identifier: 9E0zIXtPzOPYjsfqF/c4eYcnS+sBpP5K7X4+ov6PvxA= Subject key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D Authority key identifier: 9E:99:95:10:F4:5F:4C:0B:85:E1:2D:C4:0B:BD:18:AC:A0:CF:CA:E8 Certificate issuer: /CN=7f33cf59-ae35-41d4-8252-d9bdbaba4210 Certificate serial: 010D0C9F4328584C8F0B54EF4A4FF5100F614880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 17 Jan 2026 20:58:04 +0000 Certificate not after: Fri 21 Apr 2028 19:58:04 +0000 Subordinate resources: AS: 40115 AS: 40929 AS: 53808 AS: 198304 IP: 23.175.24.0/23 IP: 149.112.117.0/24 IP: 206.251.52.0/22 IP: 2602:f92a::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8f:0b:54:ef:4a:4f:f5:10:0f:61:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f33cf59-ae35-41d4-8252-d9bdbaba4210 Validity Not Before: Jan 17 20:58:04 2026 GMT Not After : Apr 21 19:58:04 2028 GMT Subject: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:cb:97:e4:7e:16:12:8a:1c:30:43:22:ee: 10:ed:73:02:13:81:e9:4b:5e:f2:2c:9e:25:b3:1d: 9d:ac:50:42:86:ec:3e:d5:2c:f1:69:5d:5a:39:2f: a6:21:5b:af:bd:5a:ec:6b:54:70:8c:fb:c4:4b:84: 30:30:3e:c5:ed:b0:6b:8d:81:44:96:79:25:f5:7b: 83:21:ac:51:ab:4d:68:08:ab:0a:a2:b5:98:bd:fc: aa:21:3a:f5:df:a2:08:47:68:c8:9e:3a:d8:7d:3b: 25:75:84:4e:c4:96:77:ef:36:aa:1d:df:e3:7e:91: 34:a9:ce:28:48:cb:28:03:6a:a0:30:82:2c:bf:de: 2d:4b:1f:ec:7c:ed:ce:b2:29:d1:1e:50:19:19:f9: b9:36:3e:54:72:90:2a:a4:18:06:dd:6f:f8:8d:35: 3a:b9:c6:e8:89:87:ab:4b:72:c9:86:99:d5:05:bb: 22:0a:4f:2e:46:ce:a3:73:6a:89:d2:60:e7:e6:e2: 0f:f3:5f:33:a4:c3:fa:e3:fe:b2:4f:96:5f:53:bd: 66:d6:3b:4c:f2:6a:11:fb:8e:07:14:8e:25:44:4f: 4d:5c:7c:03:96:e6:a0:33:2e:ae:e9:9c:f5:c5:bf: 9d:da:4e:36:c1:ba:88:36:49:f4:44:87:da:1f:12: bf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl X509v3 Authority Key Identifier: keyid:9E:99:95:10:F4:5F:4C:0B:85:E1:2D:C4:0B:BD:18:AC:A0:CF:CA:E8 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer sbgp-ipAddrBlock: critical IPv4: 23.175.24.0/23 149.112.117.0/24 206.251.52.0/22 IPv6: 2602:f92a::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40115 40929 53808 198304 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e0:f7:cb:eb:eb:79:77:0b:5e:91:4a:a7:62:c7:74:c5:b3: 3d:09:03:11:f6:8e:23:05:2e:92:55:5a:33:66:98:17:57:4e: 15:b6:65:f8:94:45:38:c4:b5:a1:55:dc:bb:44:45:1e:f4:33: 79:dd:70:a1:2a:d1:33:f7:b7:dc:6c:29:a2:f3:87:9f:e0:4a: 4b:9a:7c:e6:f0:62:cc:43:c3:dd:fd:54:1a:d7:88:f6:bc:95: 98:35:76:6b:bd:bc:66:00:de:4a:85:e7:fd:5e:e7:06:42:eb: d6:ab:65:ab:cc:58:b1:28:27:6d:81:ff:fa:4b:68:34:f7:1d: 57:75:41:8d:77:40:71:47:72:1b:41:eb:f9:a8:ae:ec:3f:1c: 0f:b6:63:5d:68:eb:09:22:a5:ba:18:41:c9:d4:0e:f9:39:2a: 7b:c7:e0:04:78:42:49:eb:f5:65:b3:ee:56:aa:68:72:63:0c: 0c:62:fb:6f:4a:f5:e0:7c:c1:27:d5:72:f4:5d:5a:32:a8:6f: 9f:ec:36:94:83:9f:e3:59:7c:c7:91:70:d2:fa:c8:4c:67:09: b2:0b:e9:92:b4:44:c5:4e:fb:d8:47:c0:a8:c4:9e:7a:26:02: b4:14:60:56:af:b8:04:f9:3b:8a:c4:f4:d8:99:eb:cb:30:eb: d5:7b:bc:5c -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEyPC1TvSk/1EA9hSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2YzM2NmNTktYWUzNS00MWQ0LTgyNTItZDliZGJhYmE0 MjEwMB4XDTI2MDExNzIwNTgwNFoXDTI4MDQyMTE5NTgwNFowPTE7MDkGA1UEAxMy YTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNlZWYyODUxNDQxZWQ3YzBm ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogsuX5H4WEoocMEMi 7hDtcwITgelLXvIsniWzHZ2sUEKG7D7VLPFpXVo5L6YhW6+9WuxrVHCM+8RLhDAw PsXtsGuNgUSWeSX1e4MhrFGrTWgIqwqitZi9/KohOvXfoghHaMieOth9OyV1hE7E lnfvNqod3+N+kTSpzihIyygDaqAwgiy/3i1LH+x87c6yKdEeUBkZ+bk2PlRykCqk GAbdb/iNNTq5xuiJh6tLcsmGmdUFuyIKTy5GzqNzaonSYOfm4g/zXzOkw/rj/rJP ll9TvWbWO0zyahH7jgcUjiVET01cfAOW5qAzLq7pnPXFv53aTjbBuog2SfREh9of Er/7AgMBAAGjggQHMIIEAzAdBgNVHQ4EFgQUZSwBmeZWL7YRniWSMBaYJinCEI0w ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkz OS05NWU5LTAwNzdiODBiNGYwZS8xLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00 OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzEvNjUyQzAxOTlFNjU2MkZCNjExOUUyNTky MzAxNjk4MjYyOUMyMTA4RC5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNk OTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1kOWJkYmFiYTQyMTAvN2YzM2Nm NTktYWUzNS00MWQ0LTgyNTItZDliZGJhYmE0MjEwLmNybDAfBgNVHSMEGDAWgBSe mZUQ9F9MC4XhLcQLvRisoM/K6DAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzdm MzNjZjU5LWFlMzUtNDFkNC04MjUyLWQ5YmRiYWJhNDIxMC5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAEXrxgDBACVcHUDBALO+zQwDQQCAAIwBwMFACYC +SowKQYIKwYBBQUHAQgBAf8EGjAYoBYwFAIDAJyzAgMAn+ECAwDSMAIDAwagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3g98vr63l3C16RSqdix3TFsz0JAxH2jiMFLpJVWjNmmBdXThW2ZfiU RTjEtaFV3LtERR70M3ndcKEq0TP3t9xsKaLzh5/gSkuafObwYsxDw939VBrXiPa8 lZg1dmu9vGYA3kqF5/1e5wZC69arZavMWLEoJ22B//pLaDT3HVd1QY13QHFHchtB 6/moruw/HA+2Y11o6wkipboYQcnUDvk5KnvH4AR4Qknr9WWz7laqaHJjDAxi+29K 9eB8wSfVcvRdWjKob5/sNpSDn+NZfMeRcNL6yExnCbIL6ZK0RMVO+9hHwKjEnnom ArQUYFavuAT5O4rE9NiZ68sw69V7vFw= -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:55 2026 by rpki-client