This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer File: 85154141-f81d-4a16-94db-ba21a7f28a12.cer (raw, json) Hash identifier: XTlrqntEuYp6Psq5iucggc6hrz9nxDYS9sdssUltbZc= Subject key identifier: 48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C1E521C5C4B9C4879CC0EE610 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Dec 2025 11:54:20 +0000 Certificate not after: Tue 21 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 53464 IP: 64.20.212.0/22 IP: 216.38.224.0/22 IP: 2607:1340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:52:1c:5c:4b:9c:48:79:cc:0e:e6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 8 11:54:20 2025 GMT Not After : Sep 21 00:45:35 2027 GMT Subject: CN=85154141-f81d-4a16-94db-ba21a7f28a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:31:87:67:0b:31:4b:a4:d7:0e:93:13:87: 22:9a:62:32:93:fa:e3:c4:a6:8d:4c:52:3b:2e:97: b8:e4:21:18:db:74:3d:e0:e9:23:01:62:e7:61:e4: f7:99:42:41:92:a2:b9:ea:2e:f9:ca:0a:d4:1e:1d: 44:70:57:6f:96:29:7a:8d:1e:93:84:4d:01:c8:86: d2:7b:fa:b5:8a:49:32:4e:c8:09:6d:ba:60:89:17: c6:84:e9:4c:4c:c3:51:5e:88:13:2c:38:e9:8e:8d: a4:de:79:ef:b9:9c:fc:40:2f:99:33:24:35:25:35: 93:42:ed:43:77:f8:5e:51:49:18:06:17:2d:43:47: 15:e0:77:15:7c:7a:d2:ef:b4:e0:2f:86:46:a5:ec: 84:18:b7:21:a9:f0:a6:72:e2:63:57:64:56:f8:09: ae:0b:a9:21:7b:b2:4d:74:90:5a:ca:39:ca:83:2c: 1c:de:cc:fc:67:d4:fa:22:07:16:c6:d4:b3:02:14: 70:1f:f5:a8:41:d9:36:61:20:36:a3:ea:70:0e:9a: b0:f4:52:7c:34:3c:c0:f6:2d:20:63:2b:25:bf:4e: dd:e8:56:25:01:6c:ca:75:d6:aa:5f:00:04:b1:da: 48:15:30:cb:eb:d0:40:c4:59:12:6e:90:89:c3:76: ed:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.20.212.0/22 216.38.224.0/22 IPv6: 2607:1340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53464 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f0:9f:53:52:c9:ba:44:82:08:8c:14:5d:62:54:68:f1:8c: 45:92:cb:fb:88:6f:68:f4:15:d9:2f:ea:99:61:3d:a4:62:d1: 19:ee:15:a0:e7:51:81:d6:bf:68:02:d5:8f:07:4a:2f:80:ef: e8:88:48:50:1e:65:6d:3f:7c:fc:58:2a:7a:52:40:36:70:82: 90:52:72:9a:a0:5d:bb:94:fa:26:a4:a7:c2:69:23:bc:bf:5b: 6b:c0:46:e0:73:27:fc:31:ef:a5:d8:24:e6:44:e7:18:85:b4: da:e8:9e:d1:c5:56:4c:47:47:89:6d:98:0c:f0:b3:10:f0:33: 6b:7a:a6:24:c3:a5:e4:f1:08:bf:3e:d7:5c:4f:10:92:7c:8b: a3:bb:40:26:32:4b:2b:41:23:0d:e4:35:10:4f:90:6c:bf:73: 6b:17:d5:d8:ab:c3:e5:1f:fe:0e:5a:3b:d0:78:72:da:d7:6d: 99:63:ed:1e:21:78:50:f4:4a:38:37:d8:18:02:f6:de:e3:62: 30:e2:0d:b5:84:b7:07:93:ca:bb:3c:cd:b4:00:03:30:ce:51: 01:d7:65:c8:80:4c:a2:19:ba:4d:9c:56:92:9c:b6:de:1d:2c: 4a:6b:42:02:20:ba:1b:b9:b9:8c:03:f9:02:97:a9:30:bd:a1: a0:6c:0d:ab -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEweUhxcS5xIecwO5hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTIwODExNTQyMFoXDTI3MDkyMTAwNDUzNVowLzEtMCsGA1UEAxMk ODUxNTQxNDEtZjgxZC00YTE2LTk0ZGItYmEyMWE3ZjI4YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApusxh2cLMUuk1w6TE4cimmIyk/rjxKaNTFI7 Lpe45CEY23Q94OkjAWLnYeT3mUJBkqK56i75ygrUHh1EcFdvlil6jR6ThE0ByIbS e/q1ikkyTsgJbbpgiRfGhOlMTMNRXogTLDjpjo2k3nnvuZz8QC+ZMyQ1JTWTQu1D d/heUUkYBhctQ0cV4HcVfHrS77TgL4ZGpeyEGLchqfCmcuJjV2RW+AmuC6khe7JN dJBayjnKgywc3sz8Z9T6IgcWxtSzAhRwH/WoQdk2YSA2o+pwDpqw9FJ8NDzA9i0g Yyslv07d6FYlAWzKddaqXwAEsdpIFTDL69BAxFkSbpCJw3btXQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFEiWkJugPz1flDhB7vkGTklkQzvsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 NTE1NDE0MS1mODFkLTRhMTYtOTRkYi1iYTIxYTdmMjhhMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzg1MTU0MTQxLWY4MWQtNGExNi05 NGRiLWJhMjFhN2YyOGExMi84NTE1NDE0MS1mODFkLTRhMTYtOTRkYi1iYTIxYTdm MjhhMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJAFNQDBALYJuAwDQQCAAIwBwMFACYHE0AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANDYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGvwn1NSybpEggiMFF1i VGjxjEWSy/uIb2j0Fdkv6plhPaRi0RnuFaDnUYHWv2gC1Y8HSi+A7+iISFAeZW0/ fPxYKnpSQDZwgpBScpqgXbuU+iakp8JpI7y/W2vARuBzJ/wx76XYJOZE5xiFtNro ntHFVkxHR4ltmAzwsxDwM2t6piTDpeTxCL8+11xPEJJ8i6O7QCYySytBIw3kNRBP kGy/c2sX1dirw+Uf/g5aO9B4ctrXbZlj7R4heFD0Sjg32BgC9t7jYjDiDbWEtweT yrs8zbQAAzDOUQHXZciATKIZuk2cVpKctt4dLEprQgIguhu5uYwD+QKXqTC9oaBs Das= -----END CERTIFICATE-----Generated at Sun Dec 21 03:53:35 2025 by rpki-client