This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4.cer
File: ae28425a-59dd-4da2-864c-2b324303abb4.cer (raw, json)
Hash identifier: 4YG7uOOz6WJ0iMxv3aT8IWLGrcBOoGlqN2OotsALeCk=
Subject key identifier: 43:18:C3:87:2F:B6:7B:A0:1E:FD:88:8B:4F:BC:81:05:14:3D:BB:9F
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584C702624D91419561370E96080
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 06 Jan 2026 19:22:02 +0000
Certificate not after: Mon 10 Apr 2028 18:22:02 +0000
Subordinate resources: AS: 54794
IP: 216.235.220.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:70:26:24:d9:14:19:56:13:70:e9:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jan 6 19:22:02 2026 GMT
Not After : Apr 10 18:22:02 2028 GMT
Subject: CN=ae28425a-59dd-4da2-864c-2b324303abb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:ab:27:48:4d:b0:c8:e3:0b:c5:f5:c3:cd:
c7:89:dd:95:18:e0:e2:c5:21:a5:74:34:4b:02:65:
f2:be:d6:10:05:7b:b6:10:a9:7f:3d:79:3e:05:a7:
a8:a4:bf:ae:fb:e8:4f:89:e2:fb:0f:be:83:6d:5b:
81:76:c3:63:58:59:b5:ae:4f:f2:7e:57:a9:34:8c:
2f:8d:93:ef:c2:be:7b:f8:64:b0:e8:19:5f:11:ea:
f0:cb:6f:ae:5a:7c:f0:6e:c0:f0:79:c5:6e:0f:8a:
dd:ab:f4:d0:8d:38:a8:4c:5c:68:5e:bb:85:33:d3:
0e:e3:1b:cb:0a:d8:5f:01:3a:35:25:ae:c9:3a:72:
fa:81:8a:98:71:ca:56:3b:d4:25:1e:40:b9:a6:33:
b4:61:3a:d0:4e:2a:73:11:15:9e:0f:7a:d4:1c:60:
a5:29:50:33:88:f3:f7:46:50:54:95:ad:1e:ee:b2:
6f:fd:b8:f7:a2:ed:40:b9:9d:e4:90:26:58:77:e3:
35:f5:ca:77:74:13:18:c2:8a:11:71:74:df:d0:a2:
bc:dc:09:8e:33:e6:14:e0:e0:03:33:b5:22:5e:fc:
cf:ee:c8:6a:62:ec:c7:6a:41:1d:a5:0c:d1:fd:df:
1a:9a:b6:6b:cf:d5:4b:8f:64:09:88:83:e0:dc:6f:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:C3:87:2F:B6:7B:A0:1E:FD:88:8B:4F:BC:81:05:14:3D:BB:9F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
216.235.220.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54794
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:34:64:02:d4:40:5b:56:8b:3a:7a:c8:0e:94:44:5a:0f:51:
25:96:bc:89:4d:f3:b9:f0:c2:d1:80:f3:5e:a0:cd:a8:ea:4c:
03:c4:4e:a6:95:ad:e0:22:cc:e9:78:ed:4d:53:d9:cc:b2:0d:
29:be:a7:bf:68:e2:58:e0:e9:76:94:89:57:e3:85:c0:fd:6c:
1b:93:cb:90:38:1f:56:bb:45:c4:f3:37:6b:fa:2c:9d:20:b0:
93:05:8c:74:bd:3e:df:f6:35:3e:10:42:5b:82:b1:6a:f9:ad:
4a:d9:17:88:a2:75:90:15:db:eb:3b:dd:87:89:0a:b0:89:21:
fb:13:a6:c4:2e:d2:71:98:54:f9:f4:33:b7:0c:56:63:3c:f7:
36:93:8a:55:23:6b:0d:d6:09:17:97:ba:72:aa:72:6a:25:02:
a4:51:f6:33:7f:07:47:7a:90:39:ab:a2:4e:8f:b0:a7:3f:49:
58:73:6b:49:e1:09:a6:0d:ba:36:74:24:2f:fe:5a:94:81:a7:
47:fd:e6:f2:52:26:23:3a:c1:52:94:4a:eb:8d:ae:c9:67:e7:
88:37:51:00:51:07:80:65:79:16:e9:ad:9d:31:0d:a1:e9:65:
fb:b2:5a:23:f7:9b:d7:37:7f:66:4d:ff:8d:9c:92:f3:c1:76:
30:40:78:b0
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWExwJiTZFBlWE3DpYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI2MDEwNjE5MjIwMloXDTI4MDQxMDE4MjIwMlowLzEtMCsGA1UEAxMk
YWUyODQyNWEtNTlkZC00ZGEyLTg2NGMtMmIzMjQzMDNhYmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGKrJ0hNsMjjC8X1w83Hid2VGODixSGldDRL
AmXyvtYQBXu2EKl/PXk+BaeopL+u++hPieL7D76DbVuBdsNjWFm1rk/yflepNIwv
jZPvwr57+GSw6BlfEerwy2+uWnzwbsDwecVuD4rdq/TQjTioTFxoXruFM9MO4xvL
CthfATo1Ja7JOnL6gYqYccpWO9QlHkC5pjO0YTrQTipzERWeD3rUHGClKVAziPP3
RlBUla0e7rJv/bj3ou1AuZ3kkCZYd+M19cp3dBMYwooRcXTf0KK83AmOM+YU4OAD
M7UiXvzP7shqYuzHakEdpQzR/d8amrZrz9VLj2QJiIPg3G9dJwIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFEMYw4cvtnugHv2Ii0+8gQUUPbufMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h
ZTI4NDI1YS01OWRkLTRkYTItODY0Yy0yYjMyNDMwM2FiYjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FlMjg0MjVhLTU5ZGQtNGRhMi04
NjRjLTJiMzI0MzAzYWJiNC9hZTI4NDI1YS01OWRkLTRkYTItODY0Yy0yYjMyNDMw
M2FiYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADY69wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
ANYKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHY0ZALUQFtWizp6yA6URFoPUSWWvIlN87nwwtGA816gzajq
TAPETqaVreAizOl47U1T2cyyDSm+p79o4ljg6XaUiVfjhcD9bBuTy5A4H1a7RcTz
N2v6LJ0gsJMFjHS9Pt/2NT4QQluCsWr5rUrZF4iidZAV2+s73YeJCrCJIfsTpsQu
0nGYVPn0M7cMVmM89zaTilUjaw3WCReXunKqcmolAqRR9jN/B0d6kDmrok6PsKc/
SVhza0nhCaYNujZ0JC/+WpSBp0f95vJSJiM6wVKUSuuNrsln54g3UQBRB4BleRbp
rZ0xDaHpZfuyWiP3m9c3f2ZN/42ckvPBdjBAeLA=
-----END CERTIFICATE-----
Generated at Sat Jan 10 06:41:37 2026 by rpki-client