This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7df60ed7-9547-4eed-906c-2410d444cef0.cer File: 7df60ed7-9547-4eed-906c-2410d444cef0.cer (raw, json) Hash identifier: ueo5u8UXIdM5IHIhXlFy9u0UT3hhq2vNw4+toiQRml0= Subject key identifier: 56:24:31:40:77:77:18:0C:62:31:BB:47:0B:D1:5E:1E:35:00:15:66 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C6641EA24B77DB3D388B50600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7df60ed7-9547-4eed-906c-2410d444cef0/7df60ed7-9547-4eed-906c-2410d444cef0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7df60ed7-9547-4eed-906c-2410d444cef0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Jan 2026 06:19:54 +0000 Certificate not after: Fri 07 Apr 2028 05:19:54 +0000 Subordinate resources: AS: 29929 IP: 199.89.194.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:66:41:ea:24:b7:7d:b3:d3:88:b5:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 3 06:19:54 2026 GMT Not After : Apr 7 05:19:54 2028 GMT Subject: CN=7df60ed7-9547-4eed-906c-2410d444cef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:6b:02:ed:af:88:51:3c:f7:e8:3d:5a:fe: b2:eb:46:2b:47:b5:e7:50:2e:ae:a3:a1:0f:e4:4b: 6d:f8:f2:58:da:13:31:e6:c2:c7:7c:22:3f:67:96: 2d:06:35:de:3b:ad:3b:ae:43:5e:e1:83:9e:72:f3: 79:72:ba:38:dd:a4:4b:89:67:d7:df:34:af:e8:4e: 8e:70:e7:d0:25:34:3a:27:f4:89:f3:b2:18:01:c7: d5:97:ac:bf:7d:89:eb:9b:70:13:99:aa:42:2a:36: 95:e6:d7:ad:09:2f:66:42:37:6b:cc:85:21:63:33: c6:75:00:56:2a:5c:97:e3:ae:c8:e3:27:f8:5a:39: 1f:45:e4:94:2c:06:63:dc:fc:3a:7f:a0:52:08:eb: 32:c5:22:18:7b:66:d4:9e:80:78:70:23:e8:71:3d: 2d:dc:9e:01:51:ba:fb:6d:26:bf:2f:a9:72:31:66: 24:00:b9:fd:fe:f5:95:13:b7:ff:70:92:41:a7:0d: 80:bf:84:73:91:db:a1:3e:cd:62:88:4b:40:00:c6: 6e:64:39:e1:80:e0:03:a1:87:21:65:c2:e9:f6:2c: 11:cc:e4:56:57:b6:27:e2:5c:b8:7a:9d:68:5e:81: 45:9c:be:c5:29:6b:67:16:0c:f6:36:44:59:da:1f: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:24:31:40:77:77:18:0C:62:31:BB:47:0B:D1:5E:1E:35:00:15:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7df60ed7-9547-4eed-906c-2410d444cef0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7df60ed7-9547-4eed-906c-2410d444cef0/7df60ed7-9547-4eed-906c-2410d444cef0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 199.89.194.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29929 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:20:cb:dc:dd:0e:03:f2:f7:71:3e:00:97:5e:26:96:fc:5e: d7:6d:46:55:9d:35:98:c6:ed:e8:02:a4:c5:4f:70:a0:92:00: 71:7c:12:af:9b:8e:3e:58:00:03:e1:5e:25:39:fa:78:db:b8: 7e:bf:85:2d:a3:7c:fd:03:f3:00:20:66:2f:0d:fd:8f:19:cd: e3:e1:03:80:d7:65:42:01:e5:d4:f0:28:53:ba:aa:b3:7e:24: 79:f4:8a:1a:d7:ad:04:4e:3d:f1:ab:52:8b:33:81:0c:85:5f: 39:8b:a7:a5:5e:b3:b8:0e:ce:2a:0a:60:80:fd:d3:1f:9d:b2: d6:cd:a1:99:63:e6:00:85:a0:b0:d3:8a:6f:a2:e5:d4:34:a8: a2:ca:b6:2d:de:b5:59:48:ca:7f:f1:67:94:c5:9c:eb:1c:b2: ea:27:b7:91:52:02:99:c5:0a:03:36:55:1f:86:ba:26:ef:f1: 48:f5:eb:6f:4a:c4:c9:c8:65:59:7c:8a:33:96:0f:e8:d8:5f: ac:ad:8d:2d:79:8f:6b:07:d2:3d:dd:e2:34:03:e1:98:a7:da: 7f:27:ed:4a:00:56:37:51:19:52:45:98:a8:0d:2f:51:25:56: f3:51:d4:26:78:b2:64:5d:01:0e:56:89:36:b9:dd:91:37:4b: 3d:33:00:e0 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWExmQeokt32z04i1BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDEwMzA2MTk1NFoXDTI4MDQwNzA1MTk1NFowLzEtMCsGA1UEAxMk N2RmNjBlZDctOTU0Ny00ZWVkLTkwNmMtMjQxMGQ0NDRjZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAordrAu2viFE89+g9Wv6y60YrR7XnUC6uo6EP 5Ett+PJY2hMx5sLHfCI/Z5YtBjXeO607rkNe4YOecvN5cro43aRLiWfX3zSv6E6O cOfQJTQ6J/SJ87IYAcfVl6y/fYnrm3ATmapCKjaV5tetCS9mQjdrzIUhYzPGdQBW KlyX467I4yf4WjkfReSULAZj3Pw6f6BSCOsyxSIYe2bUnoB4cCPocT0t3J4BUbr7 bSa/L6lyMWYkALn9/vWVE7f/cJJBpw2Av4RzkduhPs1iiEtAAMZuZDnhgOADoYch ZcLp9iwRzORWV7Yn4ly4ep1oXoFFnL7FKWtnFgz2NkRZ2h9MBQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFYkMUB3dxgMYjG7RwvRXh41ABVmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 ZGY2MGVkNy05NTQ3LTRlZWQtOTA2Yy0yNDEwZDQ0NGNlZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzdkZjYwZWQ3LTk1NDctNGVlZC05 MDZjLTI0MTBkNDQ0Y2VmMC83ZGY2MGVkNy05NTQ3LTRlZWQtOTA2Yy0yNDEwZDQ0 NGNlZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHWcIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dOkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEARiDL3N0OA/L3cT4Al14mlvxe121GVZ01mMbt6AKkxU9woJIA cXwSr5uOPlgAA+FeJTn6eNu4fr+FLaN8/QPzACBmLw39jxnN4+EDgNdlQgHl1PAo U7qqs34kefSKGtetBE498atSizOBDIVfOYunpV6zuA7OKgpggP3TH52y1s2hmWPm AIWgsNOKb6Ll1DSoosq2Ld61WUjKf/FnlMWc6xyy6ie3kVICmcUKAzZVH4a6Ju/x SPXrb0rEychlWXyKM5YP6NhfrK2NLXmPawfSPd3iNAPhmKfafyftSgBWN1EZUkWY qA0vUSVW81HUJniyZF0BDlaJNrndkTdLPTMA4A== -----END CERTIFICATE-----Generated at Mon Jan 12 12:25:22 2026 by rpki-client