This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer File: 09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer (raw, json) Hash identifier: OluB/AUzPn1yT0O7/ehfxticdsG1ejxPQiUikjkas/s= Subject key identifier: F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C78D477B1AA86622392EA1700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Jan 2026 21:59:44 +0000 Certificate not after: Thu 13 Apr 2028 20:59:44 +0000 Subordinate resources: AS: 394935 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:78:d4:77:b1:aa:86:62:23:92:ea:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 9 21:59:44 2026 GMT Not After : Apr 13 20:59:44 2028 GMT Subject: CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:fa:8b:bf:8f:da:86:f5:c2:1f:c8:79:a5: ad:a9:08:70:30:2e:20:62:e5:69:31:c3:9a:80:1d: df:64:d3:4a:88:6a:13:64:34:17:0c:72:99:1a:eb: 65:43:c3:3e:4b:dc:6a:be:9f:a3:47:ce:7b:1a:4c: 82:1b:f8:1e:67:95:1f:f2:26:f8:53:81:96:cd:5d: 57:d3:74:3a:75:03:5d:a7:39:ae:5b:8b:ce:a0:ac: 88:70:a3:f2:cb:83:39:23:e2:2d:79:d2:d3:99:46: 86:86:aa:73:10:d5:ec:7e:a6:ce:11:57:9a:cb:c5: be:5d:90:cb:24:14:61:d8:77:1c:3e:a9:bd:09:1e: 6f:82:6a:b8:d0:d1:c9:92:7d:a7:71:8f:9c:3c:fd: b3:d9:cc:89:59:92:b5:30:6a:0a:b7:2b:91:2b:a2: bf:a1:be:fc:79:b3:8f:5d:fe:2b:19:00:94:26:14: 5e:95:e8:b8:46:05:27:5e:41:9d:a9:c9:5c:b2:26: e3:2e:fb:8c:20:9f:0e:cd:aa:32:f8:75:0a:dd:41: 92:fd:83:62:32:5c:d5:a1:bb:d8:82:41:5b:58:f6: e1:5f:6d:bc:a8:c5:fc:c3:97:9f:69:ab:90:81:b5: ab:94:d8:c9:cf:c8:31:3e:af:a5:eb:b0:9f:60:e2: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 394935 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a5:75:d7:e1:9e:f5:f5:ff:1f:1d:db:87:47:86:93:f3:29: 18:79:da:ab:d8:97:2c:d1:35:bb:fc:db:a8:2b:1b:f2:76:93: dd:ea:74:94:ca:a0:56:73:29:60:9e:7d:12:89:e3:b5:02:54: d1:fc:88:dd:53:08:77:b4:eb:bb:b0:3b:66:71:04:fd:45:d4: 2e:be:95:68:85:a2:5c:8a:fc:2a:7b:2b:6d:16:c4:52:70:5b: d1:ac:97:af:9f:53:0f:72:2c:82:2f:c6:1f:e1:24:4f:f5:c9: 5b:bd:e9:aa:2f:a1:17:0f:43:65:c2:38:fe:30:c3:71:d0:9d: 16:34:8e:e1:53:bb:17:39:be:c7:75:cb:9b:f8:63:9a:f7:b7: 26:68:54:71:ff:ad:65:3b:2b:be:e3:3a:db:c8:1a:ed:50:d1: 56:1c:d8:07:74:1a:86:53:99:16:07:46:00:31:66:e9:ef:0c: 99:0e:0a:f9:39:b4:ea:c3:a3:2f:f4:b5:3b:f2:68:e3:c9:d3: 6f:f4:64:e2:47:e3:72:d3:56:12:0a:7c:ec:80:a2:c8:f3:dd: e7:5e:56:c2:b8:49:db:5a:b1:e5:09:82:53:63:65:69:35:4d: 34:51:0d:52:2f:07:e6:2b:85:93:ef:24:67:84:9c:9b:40:21: b9:c7:c0:08 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEx41HexqoZiI5LqFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDEwOTIxNTk0NFoXDTI4MDQxMzIwNTk0NFowLzEtMCsGA1UEAxMk MDlhODI4ZWQtYzllMi00ODFiLTg3MTUtNDFiNGQ1ZjVmYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfn6i7+P2ob1wh/IeaWtqQhwMC4gYuVpMcOa gB3fZNNKiGoTZDQXDHKZGutlQ8M+S9xqvp+jR857GkyCG/geZ5Uf8ib4U4GWzV1X 03Q6dQNdpzmuW4vOoKyIcKPyy4M5I+ItedLTmUaGhqpzENXsfqbOEVeay8W+XZDL JBRh2HccPqm9CR5vgmq40NHJkn2ncY+cPP2z2cyJWZK1MGoKtyuRK6K/ob78ebOP Xf4rGQCUJhRelei4RgUnXkGdqclcsibjLvuMIJ8Ozaoy+HUK3UGS/YNiMlzVobvY gkFbWPbhX228qMX8w5efaauQgbWrlNjJz8gxPq+l67CfYOKlEQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFPQ3tsMqgTJ/fu0z9nl82mx1cRM5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w OWE4MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0ZDVmNWZhNTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzA5YTgyOGVkLWM5ZTItNDgxYi04 NzE1LTQxYjRkNWY1ZmE1NC8wOWE4MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0ZDVm NWZhNTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBga3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACGlddfhnvX1/x8d24dHhpPzKRh5 2qvYlyzRNbv826grG/J2k93qdJTKoFZzKWCefRKJ47UCVNH8iN1TCHe067uwO2Zx BP1F1C6+lWiFolyK/Cp7K20WxFJwW9Gsl6+fUw9yLIIvxh/hJE/1yVu96aovoRcP Q2XCOP4ww3HQnRY0juFTuxc5vsd1y5v4Y5r3tyZoVHH/rWU7K77jOtvIGu1Q0VYc 2Ad0GoZTmRYHRgAxZunvDJkOCvk5tOrDoy/0tTvyaOPJ02/0ZOJH43LTVhIKfOyA osjz3edeVsK4SdtaseUJglNjZWk1TTRRDVIvB+YrhZPvJGeEnJtAIbnHwAg= -----END CERTIFICATE-----Generated at Mon Jan 12 12:34:21 2026 by rpki-client