This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer File: 9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer (raw, json) Hash identifier: Okrs8E122oZBEOsKauehrv2fisPIjaXf1L7NXo5NqFI= Subject key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B Authority key identifier: 35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D Certificate issuer: /CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce Certificate serial: 010D0C9F4328584C54F9910F640D98CDE912A880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sun 28 Dec 2025 01:45:23 +0000 Certificate not after: Sat 01 Apr 2028 00:45:23 +0000 Subordinate resources: IP: 47.191.0.0 -- 47.207.255.255 IP: 172.99.32.0/19 IP: 172.109.0.0/16 IP: 2606:4d80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:54:f9:91:0f:64:0d:98:cd:e9:12:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce Validity Not Before: Dec 28 01:45:23 2025 GMT Not After : Apr 1 00:45:23 2028 GMT Subject: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:18:a2:cc:cf:5e:4e:1a:71:50:bc:d3:64: bc:e3:83:02:15:e1:fa:7b:10:0e:9a:3a:21:a6:1f: ba:d5:1e:71:34:c5:01:70:89:c9:fa:48:c5:0c:40: 4a:9a:94:db:56:a5:9c:5a:26:a2:85:2b:bb:ed:5a: 17:37:b4:59:cf:09:e5:e3:2e:5e:1f:8a:0e:34:ae: 81:81:0a:a3:9d:7f:7c:0a:8e:da:ff:b1:91:1b:dc: 0d:83:25:15:11:dc:80:38:44:97:5e:fa:09:0d:53: 9b:a6:be:e7:ca:ed:29:d4:ea:7c:2f:9d:fd:8e:de: 0f:3e:bd:40:dc:8f:fb:94:b5:65:e1:fc:09:b5:71: 92:dd:68:ee:e4:fa:5a:d6:c9:d6:95:23:38:a9:ab: 2d:95:05:c3:40:f3:56:74:b0:67:d0:d1:fb:30:3c: ce:bb:8f:2b:51:ee:0c:3d:3a:f6:08:29:7d:03:4e: 42:8f:80:0c:87:ec:81:80:da:ae:c8:00:ce:29:38: fe:3e:7e:ef:71:26:24:28:ba:da:7a:05:df:ae:e3: a1:90:f7:46:d5:b6:71:82:0d:d4:05:86:4d:f0:03: 5e:d3:d7:26:eb:81:f0:2e:47:51:a2:69:ed:1c:86: 0f:d2:39:f3:03:44:de:61:0e:89:1d:c6:8b:a7:b5: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl X509v3 Authority Key Identifier: keyid:35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer sbgp-ipAddrBlock: critical IPv4: 47.191.0.0-47.207.255.255 172.99.32.0/19 172.109.0.0/16 IPv6: 2606:4d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:76:ff:86:3e:94:68:b3:47:0d:c2:64:c5:94:4d:ba:69:cb: d4:de:44:6b:2b:83:91:3a:45:d1:15:53:c0:49:88:20:e2:1c: 06:75:65:90:41:9d:3d:dc:c9:c0:08:a6:64:9b:59:69:58:d7: bd:5f:b3:dd:37:55:a3:64:fe:40:53:0d:22:ca:ce:ab:1b:bf: bd:df:be:a4:ca:31:3b:eb:31:52:1c:52:9e:1a:55:b2:c9:f7: 58:02:53:42:4b:ac:6e:dd:cd:13:75:24:d2:fd:26:76:0e:38: 5a:73:86:eb:29:73:bd:e6:77:36:f0:f9:2b:f3:5d:99:84:5c: 21:71:4b:8a:e7:db:91:17:79:86:a3:b8:42:87:20:6b:d6:f4: ba:82:e6:d1:0b:e0:6e:a3:1b:80:18:de:59:ee:5e:bc:f5:37: 9b:95:cc:2d:56:9c:32:c7:d1:da:c3:54:c1:f5:96:67:a7:f6: 3e:b0:59:9a:87:d9:d1:c3:f9:6b:4f:85:f3:06:a6:ef:e1:16: 83:04:1e:ec:6d:85:79:32:fa:a1:bb:65:b0:57:35:73:e8:1f: 4e:e9:8b:39:e7:89:c2:27:0b:08:0e:3c:ff:26:c3:93:e0:b1: 46:0e:05:5b:10:40:46:34:92:9c:75:5b:4f:f1:ca:f1:eb:e3: 6a:7f:bc:81 -----BEGIN CERTIFICATE----- MIIGwTCCBamgAwIBAgIUAQ0Mn0MoWExU+ZEPZA2YzekSqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZlMGIxMzgtYmVmNC00OWZlLTlkZDEtZmE1MTM4M2Ri ZmNlMB4XDTI1MTIyODAxNDUyM1oXDTI4MDQwMTAwNDUyM1owPTE7MDkGA1UEAxMy OWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGExN2I3MjY5NjIwM2RjODNh OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJhiizM9eThpxULzT ZLzjgwIV4fp7EA6aOiGmH7rVHnE0xQFwicn6SMUMQEqalNtWpZxaJqKFK7vtWhc3 tFnPCeXjLl4fig40roGBCqOdf3wKjtr/sZEb3A2DJRUR3IA4RJde+gkNU5umvufK 7SnU6nwvnf2O3g8+vUDcj/uUtWXh/Am1cZLdaO7k+lrWydaVIzipqy2VBcNA81Z0 sGfQ0fswPM67jytR7gw9OvYIKX0DTkKPgAyH7IGA2q7IAM4pOP4+fu9xJiQoutp6 Bd+u46GQ90bVtnGCDdQFhk3wA17T1ybrgfAuR1Giae0chg/SOfMDRN5hDokdxoun tacpAgMBAAGjggPFMIIDwTAdBgNVHQ4EFgQUgqkWOi6ZSEusoHgg7E95xoZmSYsw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5 MGEyZjA5N2YvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEyZjA5N2Yv MC84MkE5MTYzQTJFOTk0ODRCQUNBMDc4MjBFQzRGNzlDNjg2NjY0OThCLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNj Yy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQx LWZhNTEzODNkYmZjZS84NmUwYjEzOC1iZWY0LTQ5ZmUtOWRkMS1mYTUxMzgzZGJm Y2UuY3JsMB8GA1UdIwQYMBaAFDVrFPTDF1+W/pkhRXtqsWBp/kYtMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMt YmRhNy0xYmUyMDQ5MzNhZTUvODZlMGIxMzgtYmVmNC00OWZlLTlkZDEtZmE1MTM4 M2RiZmNlLmNlcjA/BggrBgEFBQcBBwEB/wQwMC4wHQQCAAEwFzAKAwMAL78DAwQv wAMEBaxjIAMDAKxtMA0EAgACMAcDBQAmBk2AMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFB2/4Y+lGizRw3C ZMWUTbppy9TeRGsrg5E6RdEVU8BJiCDiHAZ1ZZBBnT3cycAIpmSbWWlY171fs903 VaNk/kBTDSLKzqsbv73fvqTKMTvrMVIcUp4aVbLJ91gCU0JLrG7dzRN1JNL9JnYO OFpzhuspc73mdzbw+SvzXZmEXCFxS4rn25EXeYajuEKHIGvW9LqC5tEL4G6jG4AY 3lnuXrz1N5uVzC1WnDLH0drDVMH1lmen9j6wWZqH2dHD+WtPhfMGpu/hFoMEHuxt hXky+qG7ZbBXNXPoH07piznnicInCwgOPP8mw5PgsUYOBVsQQEY0kpx1W0/xyvHr 42p/vIE= -----END CERTIFICATE-----Generated at Sun Jan 18 12:03:09 2026 by rpki-client