This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.cer File: ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.cer (raw, json) Hash identifier: ik18LaOtpvo6ik8kWouEz0ES11L6D/GDgRLO4H8tbaQ= Subject key identifier: C9:DB:48:E3:6C:7D:18:7A:DB:3F:13:52:36:D0:61:8D:65:63:96:A8 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C64B8F4ABE451ADCCD4F18D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Jan 2026 17:08:08 +0000 Certificate not after: Thu 06 Apr 2028 16:08:08 +0000 Subordinate resources: AS: 401803 IP: 204.128.249.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:b8:f4:ab:e4:51:ad:cc:d4:f1:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 2 17:08:08 2026 GMT Not After : Apr 6 16:08:08 2028 GMT Subject: CN=ecaf3eac-d982-4ee8-b103-c57ce0ff9c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e4:7b:6f:e4:32:af:b9:59:a4:12:51:8e:17: a4:99:96:b3:7e:16:34:f8:9b:de:3a:ac:0b:d3:19: 50:d7:46:a0:fd:ce:09:5a:c8:72:9a:64:7f:da:50: fa:39:2e:4e:93:b5:98:5f:01:d7:2e:32:3b:2a:81: ef:e2:e0:83:db:60:5f:96:66:38:99:5b:21:91:c0: 4d:a8:48:82:c9:2c:7b:6d:22:85:43:64:ad:56:aa: b5:7d:6b:76:d1:12:34:07:95:85:9c:f1:71:12:c8: 37:3a:ec:d4:7b:81:e7:8d:2f:44:b8:a6:a6:f8:8f: da:45:5d:9d:42:72:ad:f0:5f:f0:e7:f7:a1:d4:f5: 10:c0:64:35:43:22:c8:cc:be:5d:f8:ff:9b:89:7a: 2a:32:58:88:23:4f:c2:4f:32:10:05:d5:1b:29:34: aa:6d:af:d3:5a:f1:6b:33:22:4c:fc:cf:45:d8:05: 9d:79:aa:51:38:04:b0:14:6a:ea:ab:42:19:5a:be: 26:a4:39:2c:3f:8b:07:d7:f9:c3:6c:78:98:8b:e8: 5c:35:06:2a:7e:83:f1:0d:dd:5d:d6:d8:fb:10:c1: 4c:46:66:ef:d8:3b:d6:d0:78:4c:0d:25:be:18:1f: a2:83:55:78:c7:d6:15:62:eb:58:ea:80:c8:1f:99: 20:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DB:48:E3:6C:7D:18:7A:DB:3F:13:52:36:D0:61:8D:65:63:96:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 204.128.249.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401803 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7d:85:15:a8:16:58:92:ba:4c:7c:96:1b:40:aa:30:50:43: 1f:4c:c6:33:d3:d3:01:ef:8d:70:42:ed:58:98:18:9a:ae:78: 4c:bb:ed:6d:1a:b1:2a:c4:d5:0b:22:63:5a:ab:ce:87:71:5b: a2:e0:f7:ba:60:fa:55:35:06:80:48:ce:78:41:a8:19:3a:20: 60:ec:e4:71:28:d2:ac:a5:42:86:dc:45:c1:b0:0e:73:78:4a: 8a:50:59:f6:df:ff:f4:5e:c5:1a:04:b1:ee:c5:c0:14:ff:b5: 82:cd:e1:95:ae:42:09:4a:3d:2b:90:2f:0e:7f:37:63:05:a4: 9a:f7:76:a3:2f:23:16:c5:61:26:86:d3:82:3c:db:67:07:31: d1:26:1c:5c:8d:b8:80:33:db:80:0e:e9:dd:23:92:1e:c5:e2: 6f:d0:15:25:41:aa:e9:4b:e2:a4:79:0d:a1:36:93:49:84:5f: ef:6d:03:15:7b:9d:b6:0b:de:78:77:2b:45:90:c0:21:4f:6a: aa:63:71:4e:63:43:eb:22:8d:18:c2:5a:06:66:8f:c4:22:e5: 92:d0:3e:27:d4:15:33:c9:e9:61:20:f4:a7:ee:54:e9:7f:3d: d9:b8:38:12:53:32:1e:cf:8a:1b:0c:ee:14:43:1f:52:ae:0e: 13:05:e5:71 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWExkuPSr5FGtzNTxjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDEwMjE3MDgwOFoXDTI4MDQwNjE2MDgwOFowLzEtMCsGA1UEAxMk ZWNhZjNlYWMtZDk4Mi00ZWU4LWIxMDMtYzU3Y2UwZmY5YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguR7b+Qyr7lZpBJRjhekmZazfhY0+JveOqwL 0xlQ10ag/c4JWshymmR/2lD6OS5Ok7WYXwHXLjI7KoHv4uCD22BflmY4mVshkcBN qEiCySx7bSKFQ2StVqq1fWt20RI0B5WFnPFxEsg3OuzUe4HnjS9EuKam+I/aRV2d QnKt8F/w5/eh1PUQwGQ1QyLIzL5d+P+biXoqMliII0/CTzIQBdUbKTSqba/TWvFr MyJM/M9F2AWdeapROASwFGrqq0IZWr4mpDksP4sH1/nDbHiYi+hcNQYqfoPxDd1d 1tj7EMFMRmbv2DvW0HhMDSW+GB+ig1V4x9YVYutY6oDIH5kgtQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMnbSONsfRh62z8TUjbQYY1lY5aoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9l Y2FmM2VhYy1kOTgyLTRlZTgtYjEwMy1jNTdjZTBmZjljODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2VjYWYzZWFjLWQ5ODItNGVlOC1i MTAzLWM1N2NlMGZmOWM4MS9lY2FmM2VhYy1kOTgyLTRlZTgtYjEwMy1jNTdjZTBm ZjljODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMgPkwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiGLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACF9hRWoFliSukx8lhtAqjBQQx9MxjPT0wHvjXBC7ViYGJqu eEy77W0asSrE1QsiY1qrzodxW6Lg97pg+lU1BoBIznhBqBk6IGDs5HEo0qylQobc RcGwDnN4SopQWfbf//RexRoEse7FwBT/tYLN4ZWuQglKPSuQLw5/N2MFpJr3dqMv IxbFYSaG04I822cHMdEmHFyNuIAz24AO6d0jkh7F4m/QFSVBqulL4qR5DaE2k0mE X+9tAxV7nbYL3nh3K0WQwCFPaqpjcU5jQ+sijRjCWgZmj8Qi5ZLQPifUFTPJ6WEg 9KfuVOl/Pdm4OBJTMh7PihsM7hRDH1KuDhMF5XE= -----END CERTIFICATE-----Generated at Mon Jan 12 12:34:23 2026 by rpki-client