This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer File: 7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer (raw, json) Hash identifier: pX/b5wFlTsmI8tg1FQN0BLqtRQ2oMUKfncWJFBaCWAQ= Subject key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584C72DA261ABA33599FC52CE300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Jan 2026 18:36:20 +0000 Certificate not after: Mon 10 May 2027 00:45:34 +0000 Subordinate resources: AS: 15003 AS: 19148 AS: 25847 AS: 27411 AS: 30633 AS: 393886 AS: 394380 AS: 395954 AS: 396190 AS: 396362 IP: 23.19.0.0 -- 23.19.47.255 IP: 23.19.52.0/22 IP: 23.19.64.0 -- 23.19.255.255 IP: 23.80.0.0 -- 23.81.31.255 IP: 23.81.48.0 -- 23.83.63.255 IP: 23.83.72.0 -- 23.83.111.255 IP: 23.83.128.0 -- 23.83.207.255 IP: 23.104.0.0 -- 23.105.191.255 IP: 23.106.0.0/19 IP: 23.106.40.0/21 IP: 23.106.80.0 -- 23.106.103.255 IP: 23.106.160.0 -- 23.106.223.255 IP: 23.107.0.0 -- 23.108.95.255 IP: 23.108.104.0 -- 23.108.207.255 IP: 23.108.224.0/19 IP: 23.110.0.0/16 IP: 23.111.8.0/22 IP: 23.111.248.0/21 IP: 64.64.0.0/19 IP: 64.120.0.0 -- 64.120.87.255 IP: 64.120.96.0 -- 64.120.107.255 IP: 64.120.109.0/24 IP: 64.120.122.0 -- 64.120.127.255 IP: 64.131.64.0/19 IP: 69.147.224.0/19 IP: 70.32.32.0/20 IP: 108.59.0.0/20 IP: 108.62.0.0/16 IP: 108.177.128.0/17 IP: 142.91.0.0/21 IP: 142.91.16.0 -- 142.91.95.255 IP: 142.91.112.0/21 IP: 142.91.128.0 -- 142.91.151.255 IP: 142.91.160.0 -- 142.91.255.255 IP: 142.234.0.0/19 IP: 142.234.40.0 -- 142.234.255.255 IP: 147.255.0.0/16 IP: 162.210.192.0/21 IP: 172.241.8.0 -- 172.241.39.255 IP: 172.241.56.0/21 IP: 172.241.72.0 -- 172.241.83.255 IP: 172.241.88.0 -- 172.241.215.255 IP: 172.241.224.0/19 IP: 172.255.16.0 -- 172.255.47.255 IP: 172.255.64.0/19 IP: 172.255.112.0 -- 172.255.135.255 IP: 172.255.144.0 -- 172.255.191.255 IP: 172.255.212.0 -- 172.255.223.255 IP: 172.255.240.0/21 IP: 173.208.0.0 -- 173.208.47.255 IP: 173.208.56.0/22 IP: 173.208.62.0 -- 173.208.127.255 IP: 173.234.32.0/19 IP: 173.234.80.0 -- 173.234.103.255 IP: 173.234.112.0/20 IP: 173.234.144.0 -- 173.234.255.255 IP: 174.34.128.0/18 IP: 192.96.200.0/21 IP: 198.7.56.0/21 IP: 199.38.112.0/21 IP: 199.58.84.0/22 IP: 199.102.224.0/21 IP: 199.115.112.0/21 IP: 199.167.40.0/21 IP: 199.223.208.0/21 IP: 199.230.52.0/22 IP: 206.214.208.0/20 IP: 207.58.128.0/18 IP: 207.244.64.0/18 IP: 209.50.224.0/19 IP: 209.58.144.0/20 IP: 216.6.224.0/20 IP: 216.22.0.0/18 IP: 216.38.48.0/20 IP: 2604:9a00::/32 IP: 2606:4e00::/32 IP: 2606:9880::/32 IP: 2607:f5b0::/29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:da:26:1a:ba:33:59:9f:c5:2c:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 7 18:36:20 2026 GMT Not After : May 10 00:45:34 2027 GMT Subject: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:c0:16:9e:81:b3:ca:f2:8a:10:93:b2:4e: 5f:fd:bb:fa:5a:8a:ae:c5:32:96:75:de:08:f3:07: c3:ea:49:4a:4e:12:16:b7:0e:5f:bb:92:fd:bd:6a: 4f:fa:ed:75:82:af:a4:63:93:5b:92:88:6e:25:e6: df:d4:d4:77:ef:d5:65:f7:27:c4:a5:98:98:22:88: 1e:a4:7a:3d:74:59:db:ca:65:77:5b:d2:6d:44:bc: 45:b1:55:14:44:98:29:54:12:ac:15:97:e5:64:f4: 39:fa:47:f4:bb:05:4a:fc:2b:2b:79:9f:fc:17:81: 10:3d:8d:86:5d:f6:f3:c8:18:4b:de:99:7c:76:6a: da:dd:23:eb:82:74:6d:4d:58:25:81:48:fc:c0:1c: c2:3e:15:fa:49:2a:89:d2:71:f7:da:7c:44:37:01: 52:cc:b3:ac:9d:af:81:5a:40:79:cc:8d:22:80:f8: 1a:0f:d9:1e:07:ae:04:f8:b7:c9:8f:9e:98:9d:6c: a2:80:c4:4b:7f:fb:15:3b:c2:f2:fc:67:ec:41:6e: e2:b0:c8:ea:5d:40:8e:d2:ac:98:df:f2:79:b8:f6: 3f:e4:09:34:f9:d7:61:40:df:e7:ff:9d:7b:1d:d5: d2:7f:83:63:be:f3:1c:de:c6:f3:d4:45:88:18:e3: 93:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.19.0.0-23.19.47.255 23.19.52.0/22 23.19.64.0-23.19.255.255 23.80.0.0-23.81.31.255 23.81.48.0-23.83.63.255 23.83.72.0-23.83.111.255 23.83.128.0-23.83.207.255 23.104.0.0-23.105.191.255 23.106.0.0/19 23.106.40.0/21 23.106.80.0-23.106.103.255 23.106.160.0-23.106.223.255 23.107.0.0-23.108.95.255 23.108.104.0-23.108.207.255 23.108.224.0/19 23.110.0.0/16 23.111.8.0/22 23.111.248.0/21 64.64.0.0/19 64.120.0.0-64.120.87.255 64.120.96.0-64.120.107.255 64.120.109.0/24 64.120.122.0-64.120.127.255 64.131.64.0/19 69.147.224.0/19 70.32.32.0/20 108.59.0.0/20 108.62.0.0/16 108.177.128.0/17 142.91.0.0/21 142.91.16.0-142.91.95.255 142.91.112.0/21 142.91.128.0-142.91.151.255 142.91.160.0-142.91.255.255 142.234.0.0/19 142.234.40.0-142.234.255.255 147.255.0.0/16 162.210.192.0/21 172.241.8.0-172.241.39.255 172.241.56.0/21 172.241.72.0-172.241.83.255 172.241.88.0-172.241.215.255 172.241.224.0/19 172.255.16.0-172.255.47.255 172.255.64.0/19 172.255.112.0-172.255.135.255 172.255.144.0-172.255.191.255 172.255.212.0-172.255.223.255 172.255.240.0/21 173.208.0.0-173.208.47.255 173.208.56.0/22 173.208.62.0-173.208.127.255 173.234.32.0/19 173.234.80.0-173.234.103.255 173.234.112.0/20 173.234.144.0-173.234.255.255 174.34.128.0/18 192.96.200.0/21 198.7.56.0/21 199.38.112.0/21 199.58.84.0/22 199.102.224.0/21 199.115.112.0/21 199.167.40.0/21 199.223.208.0/21 199.230.52.0/22 206.214.208.0/20 207.58.128.0/18 207.244.64.0/18 209.50.224.0/19 209.58.144.0/20 216.6.224.0/20 216.22.0.0/18 216.38.48.0/20 IPv6: 2604:9a00::/32 2606:4e00::/32 2606:9880::/32 2607:f5b0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15003 19148 25847 27411 30633 393886 394380 395954 396190 396362 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bf:28:34:7c:12:3f:ee:68:77:04:1d:5e:00:cf:b7:2d:7a: e0:a4:df:ac:e9:67:b6:c2:2a:56:f7:51:0d:61:d2:c1:ea:6c: 16:e7:57:4d:aa:89:f3:6b:5a:e5:4a:5c:43:cf:8f:a8:cb:cf: 5a:bf:a0:38:d2:ad:3c:26:cc:39:ff:0d:6d:e4:e3:56:6e:fe: c8:36:b3:3e:ed:a7:9e:7d:1f:d3:21:9f:6b:ff:46:3e:a5:81: df:4c:b9:35:d5:f9:6a:f5:5d:df:bf:33:6b:d5:a4:f7:9d:50: af:dd:23:85:46:fc:39:c2:f2:9d:b7:2f:d3:00:7b:e2:86:81: 42:7b:2b:50:98:79:b3:4a:c1:7f:e7:f6:34:5d:05:6d:48:cd: 6a:ee:74:b3:4a:18:72:17:0b:dc:1e:90:98:7f:dc:8e:9c:d7: d0:65:63:23:93:a3:2f:e2:69:51:62:8e:b2:ef:d0:c0:b9:e7: 7a:80:86:6c:ac:bb:59:88:58:d7:16:6c:6e:53:5a:a4:b2:46: 9d:6f:4f:da:19:2a:ec:4f:20:6e:c9:d8:c2:9d:6b:bf:99:f1: 6f:fc:e6:cc:82:69:e8:23:7b:bc:79:e8:0e:06:fa:0e:81:0e: a8:0d:33:ee:dd:68:57:9d:17:cc:97:03:d7:3f:a4:19:bf:97: 03:a6:97:42 -----BEGIN CERTIFICATE----- MIIJ8DCCCNigAwIBAgIUAQ0Mn0MoWExy2iYaujNZn8Us4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDEwNzE4MzYyMFoXDTI3MDUxMDAwNDUzNFowLzEtMCsGA1UEAxMk N2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5OTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4fAFp6Bs8ryihCTsk5f/bv6WoquxTKWdd4I 8wfD6klKThIWtw5fu5L9vWpP+u11gq+kY5NbkohuJebf1NR379Vl9yfEpZiYIoge pHo9dFnbymV3W9JtRLxFsVUURJgpVBKsFZflZPQ5+kf0uwVK/CsreZ/8F4EQPY2G XfbzyBhL3pl8dmra3SPrgnRtTVglgUj8wBzCPhX6SSqJ0nH32nxENwFSzLOsna+B WkB5zI0igPgaD9keB64E+LfJj56YnWyigMRLf/sVO8Ly/GfsQW7isMjqXUCO0qyY 3/J5uPY/5Ak0+ddhQN/n/517HdXSf4NjvvMc3sbz1EWIGOOT/wIDAQABo4IHAjCC Bv4wHQYDVR0OBBYEFJKrTeTGEqvx8he3RZx8OdZ6J+18MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzdlNDJlM2E5LWRkNjItNDE0Yi1h MWIxLWMxYjJkMzI5OTk3ZC83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMy OTk5N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwggLcBggrBgEF BQcBBwEB/wSCAsswggLHMIICnwQCAAEwggKXMAsDAwAXEwMEBBcTIAMEAhcTNDAL AwQGFxNAAwMCFxAwCwMDBBdQAwQFF1EAMAwDBAQXUTADBAYXUwAwDAMEAxdTSAME BBdTYDAMAwQHF1OAAwQEF1PAMAsDAwMXaAMEBhdpgAMEBRdqAAMEAxdqKDAMAwQE F2pQAwQDF2pgMAwDBAUXaqADBAUXasAwCwMDABdrAwQFF2xAMAwDBAMXbGgDBAQX bMADBAUXbOADAwAXbgMEAhdvCAMEAxdv+AMEBUBAADALAwMDQHgDBANAeFAwDAME BUB4YAMEAkB4aAMEAEB4bTAMAwQBQHh6AwQHQHgAAwQFQINAAwQFRZPgAwQERiAg AwQEbDsAAwMAbD4DBAdssYADBAOOWwAwDAMEBI5bEAMEBY5bQAMEA45bcDAMAwQH jluAAwQDjluQMAsDBAWOW6ADAwKOWAMEBY7qADALAwQDjuooAwMAjuoDAwCT/wME A6LSwDAMAwQDrPEIAwQDrPEgAwQDrPE4MAwDBAOs8UgDBAKs8VAwDAMEA6zxWAME A6zx0AMEBazx4DAMAwQErP8QAwQErP8gAwQFrP9AMAwDBASs/3ADBAOs/4AwDAME BKz/kAMEBqz/gDAMAwQCrP/UAwQFrP/AAwQDrP/wMAsDAwSt0AMEBK3QIAMEAq3Q ODAMAwQBrdA+AwQHrdAAAwQFreogMAwDBASt6lADBAOt6mADBASt6nAwCwMEBK3q kAMDAK3qAwQGriKAAwQDwGDIAwQDxgc4AwQDxyZwAwQCxzpUAwQDx2bgAwQDx3Nw AwQDx6coAwQDx9/QAwQCx+Y0AwQEztbQAwQGzzqAAwQGz/RAAwQF0TLgAwQE0TqQ AwQE2AbgAwQG2BYAAwQE2CYwMCIEAgACMBwDBQAmBJoAAwUAJgZOAAMFACYGmIAD BQMmB/WwMEIGCCsGAQUFBwEIAQH/BDMwMaAvMC0CAjqbAgJKzAICZPcCAmsTAgJ3 qQIDBgKeAgMGBIwCAwYKsgIDBgueAgMGDEowVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWL8oNHwSP+5odwQd XgDPty164KTfrOlntsIqVvdRDWHSwepsFudXTaqJ82ta5UpcQ8+PqMvPWr+gONKt PCbMOf8NbeTjVm7+yDazPu2nnn0f0yGfa/9GPqWB30y5NdX5avVd378za9Wk951Q r90jhUb8OcLynbcv0wB74oaBQnsrUJh5s0rBf+f2NF0FbUjNau50s0oYchcL3B6Q mH/cjpzX0GVjI5OjL+JpUWKOsu/QwLnneoCGbKy7WYhY1xZsblNapLJGnW9P2hkq 7E8gbsnYwp1rv5nxb/zmzIJp6CN7vHnoDgb6DoEOqA0z7t1oV50XzJcD1z+kGb+X A6aXQg== -----END CERTIFICATE-----Generated at Mon Jan 12 02:31:44 2026 by rpki-client