This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer File: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer (raw, json) Hash identifier: 5X1cG16V/odvxnXScO64ZmMkaXOrZZiZYt35YMjO/yw= Subject key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C3DD51B19F3AC7742AC4B2F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Dec 2025 18:48:20 +0000 Certificate not after: Wed 19 May 2027 11:16:51 +0000 Subordinate resources: AS: 19684 IP: 23.174.152.0/23 IP: 69.67.164.0/22 IP: 72.4.72.0/21 IP: 162.254.224.0/21 IP: 207.29.192.0/21 IP: 2607:9540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:d5:1b:19:f3:ac:77:42:ac:4b:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 19 18:48:20 2025 GMT Not After : May 19 11:16:51 2027 GMT Subject: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:57:1a:01:da:cb:5d:73:80:e4:3d:0d:ea: b2:50:0c:d9:9d:ec:9a:60:e1:c8:91:c3:84:c3:66: da:a2:8a:ac:19:6e:b8:72:87:98:2c:f3:f0:d5:a6: fa:e9:49:31:b2:ce:fa:e7:27:37:37:47:ff:5f:c9: 33:8e:c0:f0:2d:06:3c:5a:92:87:18:2a:ac:84:a2: 93:83:79:d4:98:12:c9:16:22:32:40:7e:5b:fe:da: f7:cb:af:d4:9f:c1:64:e4:f1:97:14:f0:ec:a1:c4: 22:a0:3a:af:b3:c4:e4:65:cc:c3:12:77:25:75:ae: 71:bb:84:f2:9f:bf:f7:c4:b2:d3:f7:f8:73:85:a2: be:ad:16:93:5e:88:ef:15:be:7e:65:1e:ea:39:c3: cf:4c:32:5f:6a:e8:4a:32:b3:d0:a0:e6:83:78:2e: 50:d1:ef:ef:e5:6c:cc:1d:cd:61:48:cb:7a:a5:ec: 96:cd:fe:0c:20:5f:69:27:98:c9:d2:81:0d:13:a2: f0:07:15:ea:c4:95:25:18:fe:21:5c:56:7c:b1:64: 3e:41:23:1a:b6:4b:f6:04:2f:11:22:18:da:3b:0c: cc:24:8d:8e:07:63:16:45:44:ba:e3:e2:5a:c0:38: ea:f0:e1:a1:d7:65:e1:70:2e:dd:37:a2:fe:32:2d: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.174.152.0/23 69.67.164.0/22 72.4.72.0/21 162.254.224.0/21 207.29.192.0/21 IPv6: 2607:9540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19684 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:11:d5:f1:b8:39:11:b0:2c:28:37:7e:4f:4d:66:b5:88:78: e1:49:f1:aa:c8:50:72:64:c6:c6:50:4b:43:95:ee:1e:f8:0f: ff:33:de:a6:c3:a7:14:2d:f1:b9:7e:f4:07:14:8e:af:34:77: 17:be:9f:ca:b6:1a:8a:18:0e:f6:d4:dd:09:7b:8e:ba:75:34: 6c:7a:e1:17:7b:e7:4a:bc:37:52:9c:b7:7c:54:72:51:94:ae: 8a:db:fd:61:4a:40:2e:2f:57:5e:85:6b:7c:2a:5f:38:22:1b: 05:14:c4:a7:9d:dc:05:df:01:65:2c:25:7a:ce:81:76:c2:19: c0:3d:02:e7:49:9e:bf:6a:22:20:e8:f3:c5:8e:e5:8c:4c:e3: 9d:5e:58:69:31:6f:96:9d:93:da:fe:fd:b1:36:c5:6e:83:ac: a8:d4:ab:00:1b:7f:39:eb:3f:0f:41:7d:3e:c8:b5:bf:7f:f5: ee:bf:05:e2:ec:46:2f:27:31:e8:fc:37:61:d0:f0:d7:7a:1a: bc:71:30:3a:03:1a:fc:04:11:8c:15:53:34:66:8e:a4:42:a9: 2c:46:21:ee:4e:28:e5:57:ea:3b:bb:e6:87:14:37:f0:51:b0: 30:6f:de:de:30:bf:60:89:52:94:19:71:aa:0c:8a:18:31:5a: 69:e1:0f:f6 -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEw91RsZ86x3QqxLL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTIxOTE4NDgyMFoXDTI3MDUxOTExMTY1MVowLzEtMCsGA1UEAxMk NWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFhMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6BXGgHay11zgOQ9DeqyUAzZneyaYOHIkcOE w2baooqsGW64coeYLPPw1ab66Ukxss765yc3N0f/X8kzjsDwLQY8WpKHGCqshKKT g3nUmBLJFiIyQH5b/tr3y6/Un8Fk5PGXFPDsocQioDqvs8TkZczDEnclda5xu4Ty n7/3xLLT9/hzhaK+rRaTXojvFb5+ZR7qOcPPTDJfauhKMrPQoOaDeC5Q0e/v5WzM Hc1hSMt6peyWzf4MIF9pJ5jJ0oENE6LwBxXqxJUlGP4hXFZ8sWQ+QSMatkv2BC8R IhjaOwzMJI2OB2MWRUS64+JawDjq8OGh12XhcC7dN6L+Mi3Y1QIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFEmw1FM1eWToEA2I2oj4tyLSV+NjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzVmM2ZiYWUwLWFkNmYtNGQyNy1i YWJjLWQyYzZhZTExYTJjYi81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUx MWEyY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAEXrpgDBAJFQ6QDBANIBEgDBAOi/uADBAPPHcAw DQQCAAIwBwMFACYHlUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICTOQwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEARRHV8bg5EbAsKDd+T01mtYh44UnxqshQcmTGxlBLQ5XuHvgP/zPepsOnFC3x uX70BxSOrzR3F76fyrYaihgO9tTdCXuOunU0bHrhF3vnSrw3Upy3fFRyUZSuitv9 YUpALi9XXoVrfCpfOCIbBRTEp53cBd8BZSwles6BdsIZwD0C50mev2oiIOjzxY7l jEzjnV5YaTFvlp2T2v79sTbFboOsqNSrABt/Oes/D0F9Psi1v3/17r8F4uxGLycx 6Pw3YdDw13oavHEwOgMa/AQRjBVTNGaOpEKpLEYh7k4o5VfqO7vmhxQ38FGwMG/e 3jC/YIlSlBlxqgyKGDFaaeEP9g== -----END CERTIFICATE-----Generated at Sat Dec 20 10:27:12 2025 by rpki-client