This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b4db0bed-ef87-42d1-a16e-f2d59306edbe.cer File: b4db0bed-ef87-42d1-a16e-f2d59306edbe.cer (raw, json) Hash identifier: gDeeSJBEhAnGHmrLg2W7Mn9trW3eeQ4Xyi85JclMYMI= Subject key identifier: 16:18:60:69:69:5D:77:85:54:CB:8B:BA:AD:28:EF:A8:33:EE:E6:72 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C622A7667CC1563C6DC29AD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b4db0bed-ef87-42d1-a16e-f2d59306edbe/b4db0bed-ef87-42d1-a16e-f2d59306edbe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b4db0bed-ef87-42d1-a16e-f2d59306edbe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Jan 2026 19:09:25 +0000 Certificate not after: Wed 05 Apr 2028 18:09:25 +0000 Subordinate resources: AS: 33402 IP: 216.24.58.0/23 IP: 2602:fe1b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:62:2a:76:67:cc:15:63:c6:dc:29:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 1 19:09:25 2026 GMT Not After : Apr 5 18:09:25 2028 GMT Subject: CN=b4db0bed-ef87-42d1-a16e-f2d59306edbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:22:43:ec:be:13:87:8d:b8:7c:22:26:3c:e3: c5:df:1f:c7:59:71:84:31:af:4b:da:e2:24:c9:4a: 5c:62:26:39:12:d1:84:4e:9b:bf:ca:e1:04:32:29: 5e:14:35:21:b1:53:e8:d9:16:98:19:14:50:66:3e: ca:fe:b8:32:f2:6f:5f:02:fc:fc:67:fc:ba:6c:0e: 6c:f5:43:41:b2:25:fd:08:48:eb:d7:e0:aa:60:9c: dd:ed:f4:f5:df:7c:3c:df:aa:90:d2:df:10:1c:22: b4:9c:4c:27:29:f2:c2:81:cd:bf:cf:cf:8c:50:2b: ef:4b:ae:12:b2:2c:94:ff:70:ee:a1:cc:cc:41:ae: 61:40:ae:18:88:cd:ab:f5:2d:23:54:f8:98:15:65: 22:da:b1:20:95:6f:a1:f2:c0:82:aa:26:27:f3:09: 3f:f1:90:ce:6a:4b:76:f1:12:6e:23:46:84:d8:42: 7d:3e:99:40:67:3e:da:8f:7d:a2:36:a3:76:2e:33: ce:73:e0:38:f3:c2:8b:ad:28:1a:2a:a8:37:95:ca: f7:7e:71:e3:63:4f:2d:d0:d0:fb:7e:cb:f8:5b:6d: a7:1b:9a:c5:dc:ea:cf:1e:09:0a:66:56:e5:20:85: 4e:77:38:60:fd:d4:d2:e3:36:cd:73:64:c2:da:bb: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:18:60:69:69:5D:77:85:54:CB:8B:BA:AD:28:EF:A8:33:EE:E6:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b4db0bed-ef87-42d1-a16e-f2d59306edbe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b4db0bed-ef87-42d1-a16e-f2d59306edbe/b4db0bed-ef87-42d1-a16e-f2d59306edbe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 216.24.58.0/23 IPv6: 2602:fe1b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33402 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b8:08:fd:d7:4c:1a:a6:07:96:8b:5e:a2:f8:7f:f4:c2:b5: de:e2:e3:ea:32:4a:db:15:09:b4:33:52:ae:a0:83:71:10:bd: 47:88:cd:6d:eb:d3:17:e4:a1:71:f8:e5:30:00:cf:60:75:ff: c1:e1:56:b7:e4:83:33:d0:2c:b5:b5:a6:65:84:2c:84:f5:ff: b3:e7:12:b1:c3:15:39:ec:e3:43:24:ac:1a:0f:2d:0a:c5:77: 66:db:71:9f:47:9b:06:7b:46:b4:bb:a6:ec:cc:7a:d2:e0:0f: 3f:13:93:a8:4a:5a:3c:e6:96:ba:c5:8d:a9:b8:aa:b0:71:97: 97:a0:50:9d:eb:2b:92:35:68:8d:4a:db:06:d9:10:1b:3e:e4: 32:91:dd:ad:36:b3:bb:01:36:1b:16:09:d1:d4:f7:cb:6f:3b: be:3f:44:95:b8:6d:1f:2a:c0:d9:df:10:c6:d2:d0:cf:d7:8b: a5:2a:b4:2b:0b:89:fd:c8:aa:7d:9f:cc:8a:28:5e:e1:34:a1: 1f:66:f9:a7:40:55:ed:00:b2:81:f5:fe:6f:12:c1:69:9a:bc: bf:a6:c8:59:e4:bf:58:a0:2a:e1:47:a2:9e:d6:da:ff:9a:7e: c2:e1:91:e5:bb:40:f0:fa:50:94:7f:f6:ea:08:14:be:cb:a3: 94:39:23:e0 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWExiKnZnzBVjxtwprQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDEwMTE5MDkyNVoXDTI4MDQwNTE4MDkyNVowLzEtMCsGA1UEAxMk YjRkYjBiZWQtZWY4Ny00MmQxLWExNmUtZjJkNTkzMDZlZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiJD7L4Th424fCImPOPF3x/HWXGEMa9L2uIk yUpcYiY5EtGETpu/yuEEMileFDUhsVPo2RaYGRRQZj7K/rgy8m9fAvz8Z/y6bA5s 9UNBsiX9CEjr1+CqYJzd7fT133w836qQ0t8QHCK0nEwnKfLCgc2/z8+MUCvvS64S siyU/3DuoczMQa5hQK4YiM2r9S0jVPiYFWUi2rEglW+h8sCCqiYn8wk/8ZDOakt2 8RJuI0aE2EJ9PplAZz7aj32iNqN2LjPOc+A488KLrSgaKqg3lcr3fnHjY08t0ND7 fsv4W22nG5rF3OrPHgkKZlblIIVOdzhg/dTS4zbNc2TC2rssWwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBYYYGlpXXeFVMuLuq0o76gz7uZyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i NGRiMGJlZC1lZjg3LTQyZDEtYTE2ZS1mMmQ1OTMwNmVkYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2I0ZGIwYmVkLWVmODctNDJkMS1h MTZlLWYyZDU5MzA2ZWRiZS9iNGRiMGJlZC1lZjg3LTQyZDEtYTE2ZS1mMmQ1OTMw NmVkYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHYGDowDgQCAAIwCAMGBCYC/hsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCCejBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWuAj910wapgeWi16i+H/0wrXe 4uPqMkrbFQm0M1KuoINxEL1HiM1t69MX5KFx+OUwAM9gdf/B4Va35IMz0Cy1taZl hCyE9f+z5xKxwxU57ONDJKwaDy0KxXdm23GfR5sGe0a0u6bszHrS4A8/E5OoSlo8 5pa6xY2puKqwcZeXoFCd6yuSNWiNStsG2RAbPuQykd2tNrO7ATYbFgnR1PfLbzu+ P0SVuG0fKsDZ3xDG0tDP14ulKrQrC4n9yKp9n8yKKF7hNKEfZvmnQFXtALKB9f5v EsFpmry/pshZ5L9YoCrhR6Ke1tr/mn7C4ZHlu0Dw+lCUf/bqCBS+y6OUOSPg -----END CERTIFICATE-----Generated at Mon Jan 12 12:25:24 2026 by rpki-client