This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer File: dda1859b-9b6c-47e8-8de0-488bb1a65637.cer (raw, json) Hash identifier: CFYU25BjnlcfjCh1DCsJBUa3qdFHxNWYa1qn2k9ABzM= Subject key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C6626C94D18BCF6F5341238E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Jan 2026 05:25:14 +0000 Certificate not after: Fri 07 Apr 2028 04:25:14 +0000 Subordinate resources: IP: 23.151.220.0/24 IP: 2602:f486::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:66:26:c9:4d:18:bc:f6:f5:34:12:38:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 3 05:25:14 2026 GMT Not After : Apr 7 04:25:14 2028 GMT Subject: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:86:00:c4:38:05:5d:41:82:f1:91:29:8b: 6d:d4:db:e9:d4:2d:6d:b5:53:6e:62:83:aa:88:c5: 84:6d:e7:4f:22:f6:01:72:9f:09:31:04:2c:0a:40: 94:1e:09:87:b6:b4:71:07:b4:e1:43:07:54:aa:b3: 79:41:17:bc:61:c2:b1:28:31:1d:0b:f1:1b:23:55: da:6a:04:46:03:e3:a3:8b:a8:a5:dc:58:05:94:4c: 67:4d:4d:a7:e5:c4:62:e2:3f:42:c9:c8:f3:a6:da: 74:50:6f:2b:1d:ef:99:50:61:dd:59:df:b7:45:2b: 25:83:8a:c7:40:16:48:e1:a9:58:6e:2d:b3:cf:0f: 8d:fa:64:04:84:2f:67:9b:d9:b5:a8:80:c5:9a:53: 17:7a:96:8d:43:3c:77:bf:84:15:c1:b2:be:b3:07: 0a:82:8e:5c:a9:85:9e:ed:0f:99:7f:76:7c:00:44: a7:ad:98:33:6b:87:3a:43:e8:e9:14:ce:f1:e5:78: b3:74:0b:ef:46:4e:04:84:0d:b7:cb:6d:a4:39:6d: 13:ac:8a:a1:d6:1a:bc:be:24:72:8b:8a:ff:e1:b9: 7a:54:92:68:86:e4:27:ac:bf:e4:77:64:49:b8:c1: d6:27:ff:5b:9f:be:16:08:82:f9:b4:26:a0:30:02: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.151.220.0/24 IPv6: 2602:f486::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:14:62:f8:7f:05:b1:cb:d6:ab:d8:ce:4b:b8:2d:b6:a3:fd: ea:79:1a:56:26:87:23:f4:75:e5:2f:2a:14:fa:57:a6:d2:54: e7:f5:c0:6b:db:29:9b:be:5c:1d:a5:97:39:3d:00:7d:87:cf: 61:00:04:e0:7c:cd:95:df:99:18:ee:e7:fd:f5:ab:41:e5:f4: 42:86:b3:fd:7d:1a:90:69:8d:7e:aa:02:65:88:ad:de:fc:9a: 3d:ce:6b:3d:72:2b:1a:2d:9f:d4:bc:86:13:df:17:63:e1:91: 12:87:fb:4b:58:a0:95:46:f0:db:ed:83:93:22:1b:af:40:7c: 21:51:9e:23:06:24:29:55:17:d5:16:62:26:a4:1d:af:e2:94: c5:04:f8:38:0c:21:1b:9c:8a:cc:cd:27:9f:c9:81:3e:7e:ae: d6:bc:0c:40:c1:58:e3:8c:82:20:4c:e8:b8:8d:3a:da:31:3b: 6b:ab:27:f0:a6:da:48:47:61:f4:97:6c:e4:53:d3:7f:b6:d8: a7:8b:ea:10:e9:0e:dc:a4:48:8f:f0:ff:ab:b2:49:81:11:71: eb:2b:bb:38:44:41:ca:f6:e2:bf:c8:c9:2a:04:71:62:48:72: 15:17:e8:80:f8:0d:b0:57:a2:1d:fc:19:60:68:ed:3a:c3:94: 2c:e4:79:15 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWExmJslNGLz29TQSOOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDEwMzA1MjUxNFoXDTI4MDQwNzA0MjUxNFowLzEtMCsGA1UEAxMk ZGRhMTg1OWItOWI2Yy00N2U4LThkZTAtNDg4YmIxYTY1NjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8+GAMQ4BV1BgvGRKYtt1Nvp1C1ttVNuYoOq iMWEbedPIvYBcp8JMQQsCkCUHgmHtrRxB7ThQwdUqrN5QRe8YcKxKDEdC/EbI1Xa agRGA+Oji6il3FgFlExnTU2n5cRi4j9Cycjzptp0UG8rHe+ZUGHdWd+3RSslg4rH QBZI4alYbi2zzw+N+mQEhC9nm9m1qIDFmlMXepaNQzx3v4QVwbK+swcKgo5cqYWe 7Q+Zf3Z8AESnrZgza4c6Q+jpFM7x5XizdAvvRk4EhA23y22kOW0TrIqh1hq8viRy i4r/4bl6VJJohuQnrL/kd2RJuMHWJ/9bn74WCIL5tCagMAJdtQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNK0UuGrRPSo0Non+hE6V9ujlcxzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k ZGExODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhiYjFhNjU2MzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2RkYTE4NTliLTliNmMtNDdlOC04 ZGUwLTQ4OGJiMWE2NTYzNy9kZGExODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhiYjFh NjU2MzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXl9wwDgQCAAIwCAMGACYC9IYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADkUYvh/BbHL1qvYzku4Lbaj/ep5GlYmhyP0deUvKhT6V6bSVOf1wGvbKZu+XB2l lzk9AH2Hz2EABOB8zZXfmRju5/31q0Hl9EKGs/19GpBpjX6qAmWIrd78mj3Oaz1y Kxotn9S8hhPfF2PhkRKH+0tYoJVG8Nvtg5MiG69AfCFRniMGJClVF9UWYiakHa/i lMUE+DgMIRuciszNJ5/JgT5+rta8DEDBWOOMgiBM6LiNOtoxO2urJ/Cm2khHYfSX bORT03+22KeL6hDpDtykSI/w/6uySYERcesruzhEQcr24r/IySoEcWJIchUX6ID4 DbBXoh38GWBo7TrDlCzkeRU= -----END CERTIFICATE-----Generated at Mon Jan 12 12:24:29 2026 by rpki-client