This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer File: 84facd9b-9eda-4887-bc69-899a3c3aec64.cer (raw, json) Hash identifier: pWhPgjTphZSbXCTn4W8uu3YRVlJjdj8PCPOA+z4FATE= Subject key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C4C99838CA822CD30FB325280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 25 Dec 2025 01:45:23 +0000 Certificate not after: Wed 29 Mar 2028 00:45:23 +0000 Subordinate resources: AS: 63183 IP: 23.190.88.0/24 IP: 142.249.180.0/22 IP: 2602:f7fc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:99:83:8c:a8:22:cd:30:fb:32:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 25 01:45:23 2025 GMT Not After : Mar 29 00:45:23 2028 GMT Subject: CN=84facd9b-9eda-4887-bc69-899a3c3aec64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:75:db:3b:07:6d:f5:48:c5:44:1b:e0:d2: 3b:8c:1f:ad:c9:0f:9a:64:bf:23:df:20:b9:a3:27: 04:90:cc:e3:57:09:99:d5:c0:73:68:2e:a6:fa:6e: 0a:7a:c6:1b:40:2a:3d:5e:7a:b7:04:84:bf:67:09: a2:dd:49:f9:ec:15:17:ce:61:ec:0e:e6:da:c6:ec: b0:85:f9:7f:5b:da:e0:f6:90:02:e8:61:88:c1:28: fd:eb:40:82:60:65:17:4b:f7:b2:bb:d2:1d:e6:2d: 8f:41:d2:7f:36:b2:d4:7e:f7:14:33:bf:f1:58:35: 9e:87:97:9c:17:2b:c8:f6:4b:ee:0f:14:3e:08:f5: 97:58:14:e4:03:71:0a:6c:2f:64:9f:17:10:88:e0: be:25:5c:85:5a:18:4a:ff:a0:c6:ef:1c:6c:c7:2c: 09:6b:17:d5:a0:e7:8e:84:43:33:c9:3f:11:1b:99: 82:e1:90:3b:4d:7f:7c:7d:6f:8f:49:98:79:b2:4a: cb:64:5a:86:8d:6b:12:de:83:39:57:e1:99:64:3d: ba:6f:3c:36:e8:39:55:ae:1b:d6:aa:38:2a:90:f8: dd:97:a0:ba:23:ec:31:f2:0a:f9:b6:cb:9b:de:fd: af:e0:fd:f2:f3:4b:8b:c3:1f:e5:42:6f:19:01:83: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.190.88.0/24 142.249.180.0/22 IPv6: 2602:f7fc::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63183 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c3:bf:7c:80:7e:3a:ba:2b:59:73:a3:95:d3:43:fc:3c:c0: 2e:8e:d4:ba:30:72:09:71:34:5b:40:2d:36:19:d9:06:35:c4: f9:69:c4:4c:80:80:bf:a3:a2:96:fc:20:cc:62:8d:8d:65:3c: c7:6e:09:3c:a0:c2:d8:79:d0:13:a3:ca:16:fd:0d:81:2b:c3: c1:d7:60:82:25:a1:77:b5:24:74:0c:1c:78:85:d3:81:d4:f9: 5b:f7:bf:0d:7a:a2:5d:31:09:cc:e9:0f:63:52:47:02:16:25: 7e:1e:50:bb:c4:c7:de:b4:b8:f4:6a:13:da:03:d8:20:72:0e: 68:dc:2c:05:6f:b6:5e:ec:b3:21:a1:21:87:40:6c:23:e3:b2: 24:99:d2:96:2b:3b:0a:44:e2:94:4f:be:a0:dc:ef:e3:33:ed: 6d:89:f4:b4:73:b8:1d:a1:b1:9f:12:d9:89:14:f8:4e:c1:6d: 73:37:8b:3e:4e:7d:b1:ff:b0:bd:d3:aa:2e:6e:93:da:af:d8: fc:14:ff:41:bd:60:1c:cc:6f:6e:4f:13:b0:87:c4:3a:a9:7d: 0d:50:dc:47:9e:01:f6:2b:b7:0e:44:ed:ed:79:27:19:9d:c7: a3:14:fb:8b:33:d8:e2:c1:ad:b4:3f:fb:77:a3:18:7b:4f:d1: ed:a9:ed:e6 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWExMmYOMqCLNMPsyUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTIyNTAxNDUyM1oXDTI4MDMyOTAwNDUyM1owLzEtMCsGA1UEAxMk ODRmYWNkOWItOWVkYS00ODg3LWJjNjktODk5YTNjM2FlYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs512zsHbfVIxUQb4NI7jB+tyQ+aZL8j3yC5 oycEkMzjVwmZ1cBzaC6m+m4KesYbQCo9Xnq3BIS/Zwmi3Un57BUXzmHsDubaxuyw hfl/W9rg9pAC6GGIwSj960CCYGUXS/eyu9Id5i2PQdJ/NrLUfvcUM7/xWDWeh5ec FyvI9kvuDxQ+CPWXWBTkA3EKbC9knxcQiOC+JVyFWhhK/6DG7xxsxywJaxfVoOeO hEMzyT8RG5mC4ZA7TX98fW+PSZh5skrLZFqGjWsS3oM5V+GZZD26bzw26DlVrhvW qjgqkPjdl6C6I+wx8gr5tsub3v2v4P3y80uLwx/lQm8ZAYM1yQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFMiX6p2SZs2o6Q6RY7EAcF+JgeaMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 NGZhY2Q5Yi05ZWRhLTQ4ODctYmM2OS04OTlhM2MzYWVjNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzg0ZmFjZDliLTllZGEtNDg4Ny1i YzY5LTg5OWEzYzNhZWM2NC84NGZhY2Q5Yi05ZWRhLTQ4ODctYmM2OS04OTlhM2Mz YWVjNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXvlgDBAKO+bQwDgQCAAIwCAMGBCYC9/wAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD2zzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmw798gH46uitZc6OV 00P8PMAujtS6MHIJcTRbQC02GdkGNcT5acRMgIC/o6KW/CDMYo2NZTzHbgk8oMLY edATo8oW/Q2BK8PB12CCJaF3tSR0DBx4hdOB1Plb978NeqJdMQnM6Q9jUkcCFiV+ HlC7xMfetLj0ahPaA9ggcg5o3CwFb7Ze7LMhoSGHQGwj47IkmdKWKzsKROKUT76g 3O/jM+1tifS0c7gdobGfEtmJFPhOwW1zN4s+Tn2x/7C906oubpPar9j8FP9BvWAc zG9uTxOwh8Q6qX0NUNxHngH2K7cORO3teScZncejFPuLM9jiwa20P/t3oxh7T9Ht qe3m -----END CERTIFICATE-----Generated at Thu Dec 25 07:12:43 2025 by rpki-client