This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer File: 41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer (raw, json) Hash identifier: Jl8FwyH1gE5mRc6BPCdpweraShgBrTZUJYJmaeOXS6s= Subject key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C24678A76C982C55B67C01F20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Dec 2025 16:12:22 +0000 Certificate not after: Wed 01 Mar 2028 01:45:23 +0000 Subordinate resources: AS: 8015 AS: 10464 AS: 18806 AS: 18982 AS: 19149 AS: 26326 AS: 26554 AS: 54111 AS: 54519 IP: 64.141.128.0/18 IP: 64.186.32.0/19 IP: 65.23.64.0/19 IP: 67.59.0.0/18 IP: 67.218.32.0/20 IP: 69.7.16.0/20 IP: 70.34.128.0/18 IP: 74.204.0.0/17 IP: 147.202.0.0/16 IP: 184.175.128.0/18 IP: 192.104.107.0 -- 192.104.110.255 IP: 208.42.0.0 -- 208.42.191.255 IP: 209.98.0.0/16 IP: 2001:18c8::/32 IP: 2607:1800::/32 IP: 2607:f7d8::/32 IP: 2620:a7:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:67:8a:76:c9:82:c5:5b:67:c0:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 10 16:12:22 2025 GMT Not After : Mar 1 01:45:23 2028 GMT Subject: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:4e:b6:b9:a4:86:cb:08:8d:55:aa:6e:12: 57:95:fc:12:67:12:9a:8a:16:1c:f4:ea:b8:a5:26: fb:62:e8:47:be:50:c6:f0:a0:97:2b:78:51:24:a7: f0:43:94:b7:ac:b0:58:01:be:75:77:8d:c3:4b:dd: 12:20:f7:bb:85:e2:aa:e3:21:45:8b:ba:ee:e5:e3: 1a:a5:d2:47:62:0c:e2:b0:70:2e:40:11:88:f4:c0: c3:fb:b7:85:26:7f:c1:b1:65:c7:b7:1b:77:30:8e: 13:ce:14:f5:c5:28:c6:84:1b:1e:be:46:69:5a:b4: 4d:8a:57:52:9e:d4:e6:36:22:a6:68:fe:56:3c:f5: cd:8d:dd:76:83:8a:53:b1:43:c5:15:b9:86:9f:01: 99:0f:90:51:92:24:de:62:7d:2a:ec:52:b3:fa:35: b8:9f:23:2c:cf:0f:f0:54:b3:6c:9a:c2:95:a5:08: 82:1d:be:c2:2e:74:ca:fb:09:a2:e0:64:df:41:c4: 48:a6:df:9f:c4:5e:8b:26:0b:5a:b2:cd:00:eb:ed: b2:3b:2f:65:70:35:3c:3c:49:4d:ce:d3:b5:2e:dd: d6:7a:1c:00:b1:dc:26:84:65:7e:47:a0:2a:72:8b: 43:8f:d7:e2:3a:c6:23:50:f8:57:85:de:23:cd:83: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.141.128.0/18 64.186.32.0/19 65.23.64.0/19 67.59.0.0/18 67.218.32.0/20 69.7.16.0/20 70.34.128.0/18 74.204.0.0/17 147.202.0.0/16 184.175.128.0/18 192.104.107.0-192.104.110.255 208.42.0.0-208.42.191.255 209.98.0.0/16 IPv6: 2001:18c8::/32 2607:1800::/32 2607:f7d8::/32 2620:a7:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8015 10464 18806 18982 19149 26326 26554 54111 54519 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3c:aa:f4:64:ec:2b:ca:a2:cf:1e:33:5e:23:b6:ca:f5:46: 4a:6f:43:b9:b2:8e:02:5e:52:12:db:29:57:3b:83:fd:4b:5e: ab:c8:e3:25:cd:d1:69:bc:13:58:11:ac:f2:90:52:c4:a3:05: 47:08:2d:a8:09:0c:e9:8f:74:8f:46:a3:40:e7:5b:ac:e3:00: a7:6f:55:9f:e5:39:0b:a7:51:5b:47:7a:85:16:b6:20:f7:50: 0e:ca:1f:b6:44:d4:4a:df:ea:f5:2f:d8:ca:2f:15:3c:02:56: 3a:01:f7:e0:0f:92:3b:52:b7:8c:3d:7a:40:71:69:96:6f:14: ec:4f:e9:ad:df:b2:28:82:79:1a:2e:6d:96:80:69:57:74:c4: 5a:a9:25:85:8b:49:93:34:e4:81:a9:de:8b:fa:e5:f6:0a:84: 97:0b:23:39:a6:a5:8d:95:1b:4e:b2:11:31:d9:e1:f2:fa:65: d4:33:e6:a6:d4:9c:5d:60:7d:ee:97:15:a6:2f:07:0c:18:95: 2e:aa:ad:f2:7f:27:72:6c:15:87:3e:ca:00:53:41:ef:27:96: 03:6a:15:2f:6d:05:e6:d8:f1:bd:3a:d1:b8:4f:aa:86:0b:c6: 98:90:79:48:c2:94:3f:25:2b:d9:57:a5:e8:af:d9:bd:b3:71: 65:06:6f:91 -----BEGIN CERTIFICATE----- MIIHqDCCBpCgAwIBAgIUAQ0Mn0MoWEwkZ4p2yYLFW2fAHyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTIxMDE2MTIyMloXDTI4MDMwMTAxNDUyM1owLzEtMCsGA1UEAxMk NDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMyZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xOtrmkhssIjVWqbhJXlfwSZxKaihYc9Oq4 pSb7YuhHvlDG8KCXK3hRJKfwQ5S3rLBYAb51d43DS90SIPe7heKq4yFFi7ru5eMa pdJHYgzisHAuQBGI9MDD+7eFJn/BsWXHtxt3MI4TzhT1xSjGhBsevkZpWrRNildS ntTmNiKmaP5WPPXNjd12g4pTsUPFFbmGnwGZD5BRkiTeYn0q7FKz+jW4nyMszw/w VLNsmsKVpQiCHb7CLnTK+wmi4GTfQcRIpt+fxF6LJgtass0A6+2yOy9lcDU8PElN ztO1Lt3WehwAsdwmhGV+R6AqcotDj9fiOsYjUPhXhd4jzYMM7wIDAQABo4IEujCC BLYwHQYDVR0OBBYEFL95Fr63j2n7/WOmv4kZfZ6o8sq3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQxZTM4ZGE1LWRlNGYtNDAwZC04 M2FiLTY1ZWUyZTJjMmQyNC80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUy YzJkMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgZwGCCsGAQUF BwEHAQH/BIGMMIGJMGEEAgABMFsDBAZAjYADBAVAuiADBAVBF0ADBAZDOwADBARD 2iADBARFBxADBAZGIoADBAdKzAADAwCTygMEBrivgDAMAwQAwGhrAwQAwGhuMAsD AwHQKgMEBtAqgAMDANFiMCQEAgACMB4DBQAgARjIAwUAJgcYAAMFACYH99gDBwAm IACngAAwOwYIKwYBBQUHAQgBAf8ELDAqoCgwJgICH08CAijgAgJJdgICSiYCAkrN AgJm1gICZ7oCAwDTXwIDANT3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABE8qvRk7CvKos8eM14jtsr1Rkpv Q7myjgJeUhLbKVc7g/1LXqvI4yXN0Wm8E1gRrPKQUsSjBUcILagJDOmPdI9Go0Dn W6zjAKdvVZ/lOQunUVtHeoUWtiD3UA7KH7ZE1Erf6vUv2MovFTwCVjoB9+APkjtS t4w9ekBxaZZvFOxP6a3fsiiCeRoubZaAaVd0xFqpJYWLSZM05IGp3ov65fYKhJcL IzmmpY2VG06yETHZ4fL6ZdQz5qbUnF1gfe6XFaYvBwwYlS6qrfJ/J3JsFYc+ygBT Qe8nlgNqFS9tBebY8b060bhPqoYLxpiQeUjClD8lK9lXpeiv2b2zcWUGb5E= -----END CERTIFICATE-----Generated at Sun Dec 21 09:05:53 2025 by rpki-client