This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer File: 5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer (raw, json) Hash identifier: ZwpJJT6GdkOmlEcXYh6mw9ZWpF1m20dAttaDgC1E8Kw= Subject key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584C4BD7EF9AED6010DED31ED280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Dec 2025 19:15:21 +0000 Certificate not after: Sat 22 May 2027 00:45:32 +0000 Subordinate resources: AS: 26341 AS: 32983 AS: 401772 IP: 152.55.144.0/21 IP: 198.29.16.0/20 IP: 2602:f9e7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:d7:ef:9a:ed:60:10:de:d3:1e:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 24 19:15:21 2025 GMT Not After : May 22 00:45:32 2027 GMT Subject: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2d:f3:84:76:22:85:c8:56:8f:30:65:b1:ea: f4:ee:0d:3b:91:38:42:d6:3e:5b:6e:e9:76:de:fb: 3d:83:86:62:8f:89:d8:c2:b9:33:4f:a7:ae:34:48: a2:ce:78:55:b7:ea:03:ff:71:a9:a7:f3:83:7e:28: e6:3c:ac:ae:6c:2a:22:44:f3:12:f0:22:ca:6a:a4: 91:6a:8a:7b:4c:4b:19:20:04:d4:29:45:1d:ef:7c: 4f:07:c6:28:c0:19:1c:e0:03:79:80:ba:a7:86:6c: 1c:b2:ab:91:92:45:d9:ed:c4:1d:62:3f:0a:22:9d: f1:8c:da:86:08:b8:79:0d:6c:55:4e:8a:da:ad:ee: 90:24:1f:72:3b:43:c0:d3:bd:37:b9:8b:90:a6:60: e3:09:a6:e5:d0:57:b2:8a:b0:dd:2d:49:ee:0b:74: 10:19:6f:f9:d7:98:6a:18:6d:8b:02:0d:cc:65:e9: 9c:54:ee:a8:d6:b6:ab:24:e1:c8:e1:65:b5:0e:9a: 8b:60:8b:bd:cf:43:cd:bd:9b:5d:2a:54:bd:83:d3: e5:c9:d8:96:0a:00:e1:20:07:1c:f2:1f:1e:3a:4a: 69:11:c6:f2:db:a8:f6:fb:9e:4d:62:d8:b8:50:05: 40:8d:3b:69:58:c2:61:71:fa:74:1e:75:49:42:3d: 33:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 152.55.144.0/21 198.29.16.0/20 IPv6: 2602:f9e7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26341 32983 401772 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a6:d5:18:f3:c6:a8:c3:2c:e5:de:14:c0:57:9e:b8:e5:a9: 10:ea:03:e5:c8:e9:6b:12:c8:2b:67:ce:9c:c6:24:ca:06:cc: 10:87:f7:37:f9:5c:96:05:6f:6d:6e:88:23:84:d9:6f:09:5c: d6:96:08:3e:ff:57:6c:58:75:c2:41:2b:4c:da:68:6a:3d:57: 47:f4:be:e4:36:2c:fa:eb:4b:0f:ae:42:2a:45:e3:cf:d0:9f: 7a:04:80:1a:90:f7:b7:df:e9:3a:67:65:5b:91:cc:63:0f:6a: c7:8b:02:8e:e1:bf:95:72:35:7c:ae:6b:42:67:58:9e:fa:ad: 0b:a9:62:64:9c:77:63:0f:33:d5:24:61:3f:9c:91:ae:dd:1c: 82:28:ac:76:61:5b:57:78:f9:b7:f4:d0:84:39:8e:16:2a:f1: 84:07:ef:62:73:25:87:f6:a2:e8:08:24:73:db:00:60:61:2b: 73:94:71:ee:af:a4:3c:4d:f4:d8:c1:ea:bd:3c:bc:a7:2d:2d: 7a:4b:d8:b3:68:9f:cc:77:c6:84:ed:6b:52:b3:76:89:5d:ff: 81:b3:96:88:f0:60:ba:d5:d5:88:ec:e9:ba:81:d8:f9:02:3a: fc:b2:54:55:19:bc:79:d9:36:59:77:66:93:ea:01:b7:56:cd: cb:43:d7:92 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWExL1++a7WAQ3tMe0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTIyNDE5MTUyMVoXDTI3MDUyMjAwNDUzMlowLzEtMCsGA1UEAxMk NWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJjMzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy3zhHYihchWjzBlser07g07kThC1j5bbul2 3vs9g4Zij4nYwrkzT6euNEiiznhVt+oD/3Gpp/ODfijmPKyubCoiRPMS8CLKaqSR aop7TEsZIATUKUUd73xPB8YowBkc4AN5gLqnhmwcsquRkkXZ7cQdYj8KIp3xjNqG CLh5DWxVTorare6QJB9yO0PA0703uYuQpmDjCabl0FeyirDdLUnuC3QQGW/515hq GG2LAg3MZemcVO6o1rarJOHI4WW1DpqLYIu9z0PNvZtdKlS9g9PlydiWCgDhIAcc 8h8eOkppEcby26j2+55NYti4UAVAjTtpWMJhcfp0HnVJQj0zSwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFDqvlO+a2qCJiYddyuhghslA4w24MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzVhZDA4NjVlLTc3ODYtNGM2Ni05 ZjkxLWJjMWY0NmYyYzM0Zi81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZm MmMzNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAOYN5ADBATGHRAwDgQCAAIwCAMGBCYC+ecAMCMG CCsGAQUFBwEIAQH/BBQwEqAQMA4CAmblAgMAgNcCAwYhbDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpptUY 88aowyzl3hTAV5645akQ6gPlyOlrEsgrZ86cxiTKBswQh/c3+VyWBW9tbogjhNlv CVzWlgg+/1dsWHXCQStM2mhqPVdH9L7kNiz660sPrkIqRePP0J96BIAakPe33+k6 Z2VbkcxjD2rHiwKO4b+VcjV8rmtCZ1ie+q0LqWJknHdjDzPVJGE/nJGu3RyCKKx2 YVtXePm39NCEOY4WKvGEB+9icyWH9qLoCCRz2wBgYStzlHHur6Q8TfTYweq9PLyn LS16S9izaJ/Md8aE7WtSs3aJXf+Bs5aI8GC61dWI7Om6gdj5Ajr8slRVGbx52TZZ d2aT6gG3Vs3LQ9eS -----END CERTIFICATE-----Generated at Mon Jan 19 11:27:53 2026 by rpki-client