This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
File: e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer (raw, json)
Hash identifier: cn7rEXQsVwFlpGfsT2dlt9kbuKqpOvtrdALjezQHYLE=
Subject key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584C3A74117934308E714EA33360
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 18 Dec 2025 13:45:23 +0000
Certificate not after: Wed 22 Mar 2028 12:45:23 +0000
Subordinate resources: AS: 399805
IP: 23.179.144.0/23
IP: 2602:fc88::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3a:74:11:79:34:30:8e:71:4e:a3:33:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Dec 18 13:45:23 2025 GMT
Not After : Mar 22 12:45:23 2028 GMT
Subject: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:0a:8d:30:11:27:e3:26:5b:d1:85:3a:69:
f9:a0:3f:2e:29:b2:e8:f7:65:8b:d0:c3:82:8a:6d:
15:d8:10:a2:22:30:65:eb:ae:54:37:4c:4e:0a:ab:
1a:bb:6c:4e:ad:54:5e:27:db:97:b9:ce:e6:4d:bc:
8b:66:3c:8c:ac:27:47:9e:7c:32:ab:d5:af:b2:0e:
56:2a:81:1d:ce:12:99:f8:ca:c2:dd:ca:0b:90:9a:
58:0e:f3:ca:ca:9c:a3:ea:e3:61:05:55:f3:fc:27:
be:e1:cc:fe:f4:f7:41:54:36:11:fe:ab:67:8f:ab:
a6:7e:90:17:a7:ff:53:82:83:c4:0a:8e:80:a5:c1:
46:83:c8:c8:25:df:fe:bf:8f:f7:9e:ef:c2:11:90:
67:c2:49:d0:92:dd:86:51:f7:be:c6:28:65:13:f8:
e5:95:00:da:56:df:a6:4e:3c:a3:e4:86:0f:ca:11:
d2:38:17:87:9a:2a:ef:92:25:e8:82:52:54:4e:71:
39:2a:ef:30:49:76:08:7c:21:4c:fd:04:e8:51:89:
ab:ea:66:f1:f1:8f:51:bf:65:3e:75:8f:f8:00:86:
74:a6:6e:1f:dd:b2:45:99:7e:ad:9c:a6:4a:3e:f7:
4f:a6:ef:d4:50:d4:74:84:2c:70:30:0c:68:5b:5f:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.179.144.0/23
IPv6:
2602:fc88::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399805
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:4a:1e:80:46:6d:5f:ef:65:3f:18:81:dd:1a:49:00:40:5f:
65:45:97:af:18:80:61:53:64:b4:ce:9c:f0:c9:37:e1:45:b5:
54:11:85:a3:b1:ad:48:b9:be:1d:5a:f5:1f:ee:cc:95:c5:ac:
f2:5a:38:6d:b7:2e:c6:f6:9b:3f:00:2a:35:9d:28:02:db:9b:
32:49:65:78:f5:d4:d0:41:95:9a:d2:28:d6:36:97:20:90:84:
5c:84:21:fe:5e:e9:38:09:d6:84:94:8f:a4:2c:42:96:a1:86:
0e:76:e7:b9:54:5e:85:fe:d4:2c:17:71:e3:10:38:d8:42:0a:
07:a0:45:69:27:4e:80:40:ef:bc:2f:95:50:a8:8a:68:fa:76:
45:95:f5:c9:72:78:bc:f7:2b:0f:1b:bf:fe:30:e1:a6:8d:29:
06:fb:9a:ba:2b:bd:be:47:33:91:dc:e8:4b:eb:04:ce:0a:6e:
0a:f5:07:79:4a:ca:95:52:ec:59:40:91:6d:51:71:4a:64:1b:
54:c8:52:79:9f:89:39:a5:17:fa:1a:7a:e0:cf:14:63:51:43:
c6:bd:bd:c5:ea:13:1a:e5:04:4d:86:c8:ba:aa:46:52:77:4e:
12:98:f5:cf:20:fe:0a:84:1e:cc:f0:06:3c:f7:4b:f6:97:14:
96:b3:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:47:31 2025 by rpki-client