This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b35d3870-877c-47ce-ad8b-d5f3a21627b2.cer File: b35d3870-877c-47ce-ad8b-d5f3a21627b2.cer (raw, json) Hash identifier: thPQEzRumE8oyr2fzGVgP7nxLTp95q/H8QQJKazwm2o= Subject key identifier: ED:02:34:4E:D0:D9:4A:AE:EF:4D:F6:7D:DD:2F:67:24:8B:DB:EE:6B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584C8A24B8F623FB0532EC7AF680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b35d3870-877c-47ce-ad8b-d5f3a21627b2/b35d3870-877c-47ce-ad8b-d5f3a21627b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b35d3870-877c-47ce-ad8b-d5f3a21627b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Jan 2026 02:50:11 +0000 Certificate not after: Thu 20 Apr 2028 01:50:11 +0000 Subordinate resources: AS: 14971 IP: 23.168.96.0/23 IP: 208.80.80.0/22 IP: 2604:2140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 17 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:24:b8:f6:23:fb:05:32:ec:7a:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 16 02:50:11 2026 GMT Not After : Apr 20 01:50:11 2028 GMT Subject: CN=b35d3870-877c-47ce-ad8b-d5f3a21627b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:38:89:84:c4:32:5b:70:64:af:14:4d:c9: cf:69:29:74:01:6b:17:1e:a0:5c:85:f0:7e:d0:9e: 20:e1:09:fe:c5:e8:87:aa:ff:2c:b8:68:96:91:da: f7:cb:11:ac:13:0b:93:5f:69:b6:fc:12:ae:d8:b4: 7b:f3:13:e5:c7:2a:ec:70:2f:fa:fc:f5:54:3e:dc: 5a:9c:be:a8:01:95:5c:9d:56:78:7d:f6:1e:8f:ff: 3e:89:2a:d8:5d:e6:5d:df:5a:d9:ba:3d:4a:b1:42: b2:63:18:dd:29:22:51:31:35:9e:f8:2f:35:73:a9: 40:26:b6:0a:ef:ad:f8:c8:0e:a6:3f:4d:ce:2b:00: 3a:a3:2d:d0:65:4e:f9:1b:f4:7b:9e:21:7f:ad:03: 29:9d:8d:ad:03:bf:dd:7c:f0:1c:a5:de:5d:05:c8: 04:3e:bc:30:2f:9f:51:6f:c9:42:ed:17:80:6c:fa: c3:3d:ec:5f:a5:54:f5:c8:b1:f7:1c:02:44:35:33: d3:fa:8d:bd:a6:fd:79:a1:a1:f5:7f:8d:5e:84:72: c4:32:5c:32:80:46:cd:40:f7:c1:21:8c:3c:2e:c6: eb:bf:f1:ce:dc:22:99:73:b5:1c:3e:ee:f8:22:71: 42:ae:6a:e4:3b:a7:ac:84:c6:d2:47:fb:06:79:c8: 18:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:02:34:4E:D0:D9:4A:AE:EF:4D:F6:7D:DD:2F:67:24:8B:DB:EE:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b35d3870-877c-47ce-ad8b-d5f3a21627b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b35d3870-877c-47ce-ad8b-d5f3a21627b2/b35d3870-877c-47ce-ad8b-d5f3a21627b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.168.96.0/23 208.80.80.0/22 IPv6: 2604:2140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14971 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:06:b5:51:2c:5c:09:35:06:d3:c4:3d:74:3f:55:20:3c:e1: 94:16:30:49:56:35:90:d2:49:bb:c6:79:fa:19:b7:27:c5:0d: 08:4d:42:f9:97:c0:f2:a7:31:01:e1:49:5c:cf:30:15:fc:74: b1:27:f1:73:12:0f:cf:be:7c:bf:ed:83:35:00:57:c1:95:e8: 20:98:59:1f:46:c2:ad:53:dd:d4:bf:31:f5:75:14:97:7f:d3: 5c:9c:63:7b:1e:67:81:58:98:5a:9b:04:28:70:4f:ec:ce:6c: b1:bd:d0:fa:a9:74:57:bc:2d:31:f5:a6:8d:06:e8:89:82:9b: 30:ec:65:34:82:f2:12:43:20:40:a8:ec:b0:6a:2f:9f:c1:9b: d2:ec:4d:c4:1d:6c:10:1c:c4:89:df:29:bc:9b:ef:a0:0e:5a: 6f:2a:12:7e:d0:bf:40:ad:46:d4:5c:43:fc:38:3d:c6:3a:fe: 8d:d0:b5:ee:8c:57:4b:ad:39:51:9d:a7:df:e2:a0:25:0f:95: 29:43:e7:dd:1a:29:2d:14:9c:03:dc:ba:68:d3:cb:64:d0:7d: 44:d5:55:41:2a:72:98:82:e5:40:3f:14:99:32:7f:6c:e4:8c: 41:07:da:c2:03:ca:6d:84:a5:9c:b3:f6:23:67:fd:7f:85:94: 60:97:97:56 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEyKJLj2I/sFMux69oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDExNjAyNTAxMVoXDTI4MDQyMDAxNTAxMVowLzEtMCsGA1UEAxMk YjM1ZDM4NzAtODc3Yy00N2NlLWFkOGItZDVmM2EyMTYyN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj44iYTEMltwZK8UTcnPaSl0AWsXHqBchfB+ 0J4g4Qn+xeiHqv8suGiWkdr3yxGsEwuTX2m2/BKu2LR78xPlxyrscC/6/PVUPtxa nL6oAZVcnVZ4ffYej/8+iSrYXeZd31rZuj1KsUKyYxjdKSJRMTWe+C81c6lAJrYK 7634yA6mP03OKwA6oy3QZU75G/R7niF/rQMpnY2tA7/dfPAcpd5dBcgEPrwwL59R b8lC7ReAbPrDPexfpVT1yLH3HAJENTPT+o29pv15oaH1f41ehHLEMlwygEbNQPfB IYw8Lsbrv/HO3CKZc7UcPu74InFCrmrkO6eshMbSR/sGecgYswIDAQABo4IELzCC BCswHQYDVR0OBBYEFO0CNE7Q2Uqu7032fd0vZySL2+5rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i MzVkMzg3MC04NzdjLTQ3Y2UtYWQ4Yi1kNWYzYTIxNjI3YjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2IzNWQzODcwLTg3N2MtNDdjZS1h ZDhiLWQ1ZjNhMjE2MjdiMi9iMzVkMzg3MC04NzdjLTQ3Y2UtYWQ4Yi1kNWYzYTIx NjI3YjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAEXqGADBALQUFAwDQQCAAIwBwMFACYEIUAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICOnswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPQa1USxcCTUG08Q9dD9V IDzhlBYwSVY1kNJJu8Z5+hm3J8UNCE1C+ZfA8qcxAeFJXM8wFfx0sSfxcxIPz758 v+2DNQBXwZXoIJhZH0bCrVPd1L8x9XUUl3/TXJxjex5ngViYWpsEKHBP7M5ssb3Q +ql0V7wtMfWmjQboiYKbMOxlNILyEkMgQKjssGovn8Gb0uxNxB1sEBzEid8pvJvv oA5abyoSftC/QK1G1FxD/Dg9xjr+jdC17oxXS605UZ2n3+KgJQ+VKUPn3RopLRSc A9y6aNPLZNB9RNVVQSpymILlQD8UmTJ/bOSMQQfawgPKbYSlnLP2I2f9f4WUYJeX Vg== -----END CERTIFICATE-----Generated at Fri Jan 16 11:32:54 2026 by rpki-client