This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c.cer File: 40b182ba-ba4e-4386-b8b1-4724485bfc5c.cer (raw, json) Hash identifier: JZMm/yVpjP/gxgg4YMOT7rEHHud0usTEDqsx5DW/GFY= Subject key identifier: AB:63:4D:D3:43:AD:D4:80:79:CB:62:E1:C5:B1:4A:E4:46:E0:96:30 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C5BF447B3EFEDB617A68D69C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/40b182ba-ba4e-4386-b8b1-4724485bfc5c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Dec 2025 13:45:23 +0000 Certificate not after: Mon 03 Apr 2028 12:45:23 +0000 Subordinate resources: AS: 14296 IP: 104.36.227.0/24 IP: 2602:80e:8000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5b:f4:47:b3:ef:ed:b6:17:a6:8d:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 30 13:45:23 2025 GMT Not After : Apr 3 12:45:23 2028 GMT Subject: CN=40b182ba-ba4e-4386-b8b1-4724485bfc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:31:f2:39:33:98:14:f0:5e:c2:22:18:50: 8d:ed:1e:e5:09:11:51:b7:0f:1c:66:3a:bf:dd:c8: db:63:99:ab:d3:6c:c8:98:15:b6:26:d4:d7:4b:d5: 52:50:f3:92:be:c0:36:70:eb:f5:cc:88:70:a0:06: 96:cd:a8:55:8e:23:be:fd:81:86:4e:b3:f8:36:7b: db:58:0a:7b:84:21:05:e4:12:ed:b5:28:62:ff:b7: 3f:64:3c:c6:73:4c:96:f9:96:0d:65:b7:a7:13:91: 11:68:74:c5:21:a7:ae:fc:ea:ee:79:cb:e8:e2:b2: d2:b6:ef:59:c9:58:6c:96:d3:ce:8d:ac:65:8a:b2: 88:cb:dd:6d:a2:2f:e1:4f:c3:cd:00:f9:d6:96:e9: bb:d8:48:7a:98:5c:8e:30:05:54:20:9a:ba:4c:0c: 58:cf:60:9e:88:3c:08:c3:76:57:4b:03:fa:fa:67: 2a:6d:1d:ce:c0:1c:8a:d1:d4:de:90:72:30:a3:f8: 5c:33:59:38:86:80:87:81:45:61:86:7c:a6:69:d6: 01:78:3d:8f:96:c1:56:c8:5d:57:cd:8c:56:73:23: a4:a0:ab:33:4f:c5:8e:89:5e:19:f2:e1:41:8a:b7: 85:f3:28:75:ec:f6:f2:27:6b:7e:29:80:97:6b:05: 5f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:63:4D:D3:43:AD:D4:80:79:CB:62:E1:C5:B1:4A:E4:46:E0:96:30 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/40b182ba-ba4e-4386-b8b1-4724485bfc5c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.36.227.0/24 IPv6: 2602:80e:8000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14296 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3c:f0:86:17:9b:76:60:5a:fc:8a:36:45:3f:06:76:bf:98: 2d:75:d6:33:2f:24:69:f1:c2:d4:de:2b:88:b2:d5:91:bc:e4: 2d:d2:58:81:ce:dc:2d:57:c4:65:41:40:8f:87:b6:ba:58:a9: 6f:f6:68:df:9a:f6:36:7b:9b:81:8f:14:da:33:29:c9:76:43: 34:d8:e7:0c:f3:44:49:6f:3b:a7:5b:17:46:45:61:d1:a8:64: ea:ba:1d:8a:7a:3d:0d:d5:89:af:72:fe:b2:d3:cd:bc:ed:f6: 0c:7c:d9:2d:eb:61:9f:23:19:de:05:d5:37:81:32:7e:b5:6c: e8:9f:71:99:29:20:eb:ab:cd:aa:18:dd:b4:17:30:d5:1f:f7: 66:4b:01:2d:bd:60:ba:e2:cb:31:a9:07:3d:ca:6f:8e:4b:57: 1a:2f:f3:85:50:06:58:f7:34:9c:62:d4:ce:e2:7e:0e:81:6a: 3a:30:b7:e7:dd:08:32:d9:42:e1:6b:83:e3:2b:c1:12:e3:94: 66:f1:e9:b7:96:43:53:d5:39:5b:ff:9f:4e:53:9e:5d:75:c1: a4:10:76:39:1c:bc:81:96:68:7b:06:c5:53:01:51:c5:a9:4c: e2:ce:66:a3:0f:0c:0a:de:57:12:61:99:9a:3c:d9:cf:c2:bc: ed:54:7f:8b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWExb9Eez7+22F6aNacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTIzMDEzNDUyM1oXDTI4MDQwMzEyNDUyM1owLzEtMCsGA1UEAxMk NDBiMTgyYmEtYmE0ZS00Mzg2LWI4YjEtNDcyNDQ4NWJmYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvox8jkzmBTwXsIiGFCN7R7lCRFRtw8cZjq/ 3cjbY5mr02zImBW2JtTXS9VSUPOSvsA2cOv1zIhwoAaWzahVjiO+/YGGTrP4Nnvb WAp7hCEF5BLttShi/7c/ZDzGc0yW+ZYNZbenE5ERaHTFIaeu/Oruecvo4rLStu9Z yVhsltPOjaxlirKIy91toi/hT8PNAPnWlum72Eh6mFyOMAVUIJq6TAxYz2CeiDwI w3ZXSwP6+mcqbR3OwByK0dTekHIwo/hcM1k4hoCHgUVhhnymadYBeD2PlsFWyF1X zYxWcyOkoKszT8WOiV4Z8uFBireF8yh17PbyJ2t+KYCXawVf3wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKtjTdNDrdSAecti4cWxSuRG4JYwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MGIxODJiYS1iYTRlLTQzODYtYjhiMS00NzI0NDg1YmZjNWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQwYjE4MmJhLWJhNGUtNDM4Ni1i OGIxLTQ3MjQ0ODViZmM1Yy80MGIxODJiYS1iYTRlLTQzODYtYjhiMS00NzI0NDg1 YmZjNWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBABoJOMwDwQCAAIwCQMHBCYCCA6AADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgI32DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQPPCGF5t2YFr8ijZFPwZ2v5gt ddYzLyRp8cLU3iuIstWRvOQt0liBztwtV8RlQUCPh7a6WKlv9mjfmvY2e5uBjxTa MynJdkM02OcM80RJbzunWxdGRWHRqGTquh2Kej0N1Ymvcv6y08287fYMfNkt62Gf IxneBdU3gTJ+tWzon3GZKSDrq82qGN20FzDVH/dmSwEtvWC64ssxqQc9ym+OS1ca L/OFUAZY9zScYtTO4n4OgWo6MLfn3Qgy2ULha4PjK8ES45Rm8em3lkNT1Tlb/59O U55ddcGkEHY5HLyBlmh7BsVTAVHFqUzizmajDwwK3lcSYZmaPNnPwrztVH+L -----END CERTIFICATE-----Generated at Wed Dec 31 03:41:58 2025 by rpki-client