This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer File: cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer (raw, json) Hash identifier: tqq2jegRF/sJZ3niF4TxFXnJLTaLeDuqMYg2qUiYZkU= Subject key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C72DB07667FA67F1762F6F600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Jan 2026 18:38:06 +0000 Certificate not after: Tue 11 Apr 2028 17:38:06 +0000 Subordinate resources: AS: 12195 IP: 192.234.50.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:db:07:66:7f:a6:7f:17:62:f6:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 7 18:38:06 2026 GMT Not After : Apr 11 17:38:06 2028 GMT Subject: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:c7:16:8d:16:7f:13:95:b0:2a:c5:5c:8b: 30:60:f6:75:ee:a2:d3:98:7c:76:0e:7d:64:b1:a2: ae:1c:48:3f:82:30:e0:f0:47:72:e4:25:58:86:a2: be:0c:10:99:17:bf:ac:df:94:c1:f6:56:71:e3:64: 44:ed:a8:eb:06:c6:f5:7f:fb:4a:32:27:d3:1c:39: 1d:ae:ea:e2:08:dd:13:3b:f3:9c:90:ea:14:21:78: 4d:71:fd:c7:6c:ce:45:51:62:6b:09:5f:22:9b:67: 11:d7:58:91:37:3c:46:26:bd:c8:13:df:54:f5:b3: 9e:7a:21:a3:db:ca:e5:89:4d:0a:c8:33:58:88:3a: 18:3b:ef:48:a7:6a:32:f2:59:df:aa:a6:45:03:06: 70:e8:90:b6:6b:99:0c:27:4e:ba:07:94:83:57:18: 41:70:c7:4a:8c:60:8e:8a:47:bd:40:2d:20:65:2d: eb:ae:eb:76:4c:92:45:af:c1:4b:35:9a:4c:e3:a8: 0a:7a:bb:b9:bf:10:1b:14:c7:a4:69:43:14:78:04: 2d:39:42:07:ec:9f:37:a1:38:43:7a:ad:91:bf:9e: 25:ef:a6:46:ca:16:a2:ad:32:d4:c6:b6:85:aa:81: 38:d5:e2:60:35:c6:1d:9a:49:f1:2a:c3:86:ff:01: 37:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 192.234.50.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12195 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a4:e0:28:21:30:49:d4:2d:1a:ef:4c:dd:1d:0d:7f:a0:6c: 17:4b:44:04:fe:f3:42:ef:03:9c:e4:67:f8:1e:05:61:d8:29: f8:72:da:6a:82:8d:60:4d:de:87:0c:f1:93:e5:63:28:f8:bb: 38:ae:dc:67:1b:47:04:9e:df:aa:74:7d:d3:d2:36:60:09:f1: 0f:6e:d7:0c:ba:03:dd:50:9c:02:5b:4a:83:69:4e:d1:fb:0e: eb:68:b7:93:cf:59:ff:85:a2:f9:bf:92:2b:ad:4b:83:af:cf: 0a:22:0f:23:f5:ea:40:8a:b6:7f:16:a5:83:a7:86:89:ad:48: 0b:9b:03:d3:fa:b7:2f:1a:ef:2e:20:1f:30:0f:31:be:65:36: 4f:21:3a:4d:97:5b:87:0c:ab:7b:bd:51:9a:95:58:b6:1d:11: 8e:db:6d:b6:5e:3b:5b:56:4c:60:bf:0e:ac:4f:c6:31:ba:45: fd:04:6f:b3:d3:fb:ed:07:9f:71:3e:10:18:1c:c3:f6:3b:f7: e2:b0:97:9a:0e:cb:e7:a9:8c:77:53:de:ba:d9:ae:52:12:07: 0a:7d:29:78:62:fb:25:cf:b6:48:32:79:a8:8c:c7:5f:4a:73: 11:6e:fd:e5:1c:ac:79:41:c8:ae:34:0c:dc:f9:46:cf:ab:2a: 1b:78:5f:f7 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWExy2wdmf6Z/F2L29gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDEwNzE4MzgwNloXDTI4MDQxMTE3MzgwNlowLzEtMCsGA1UEAxMk Y2ZhZjk1ZjEtOGQwOC00ODg3LWFlMjItNTQ0YTBkMmIzMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrnHFo0WfxOVsCrFXIswYPZ17qLTmHx2Dn1k saKuHEg/gjDg8Edy5CVYhqK+DBCZF7+s35TB9lZx42RE7ajrBsb1f/tKMifTHDkd ruriCN0TO/OckOoUIXhNcf3HbM5FUWJrCV8im2cR11iRNzxGJr3IE99U9bOeeiGj 28rliU0KyDNYiDoYO+9Ip2oy8lnfqqZFAwZw6JC2a5kMJ066B5SDVxhBcMdKjGCO ike9QC0gZS3rrut2TJJFr8FLNZpM46gKeru5vxAbFMekaUMUeAQtOUIH7J83oThD eq2Rv54l76ZGyhairTLUxraFqoE41eJgNcYdmknxKsOG/wE3QQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFC3Zynx64lImbOAZ7ZKbYpFqKjFJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j ZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQyYjMxNmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2NmYWY5NWYxLThkMDgtNDg4Ny1h ZTIyLTU0NGEwZDJiMzE2Yy9jZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQy YjMxNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA6jIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC L6MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAV6TgKCEwSdQtGu9M3R0Nf6BsF0tEBP7zQu8DnORn+B4FYdgp +HLaaoKNYE3ehwzxk+VjKPi7OK7cZxtHBJ7fqnR909I2YAnxD27XDLoD3VCcAltK g2lO0fsO62i3k89Z/4Wi+b+SK61Lg6/PCiIPI/XqQIq2fxalg6eGia1IC5sD0/q3 LxrvLiAfMA8xvmU2TyE6TZdbhwyre71RmpVYth0Rjttttl47W1ZMYL8OrE/GMbpF /QRvs9P77QefcT4QGBzD9jv34rCXmg7L56mMd1PeutmuUhIHCn0peGL7Jc+2SDJ5 qIzHX0pzEW795RyseUHIrjQM3PlGz6sqG3hf9w== -----END CERTIFICATE-----Generated at Mon Jan 12 12:24:29 2026 by rpki-client