This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer
File: 1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer (raw, json)
Hash identifier: QGXOskCsh+lKJUDGzYF0Fc9FrXrnCi3t6IZd+rpwphs=
Subject key identifier: D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584CB54A28B1B030A1CA020CAFA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 31 Jan 2026 13:45:22 +0000
Certificate not after: Fri 05 May 2028 12:45:22 +0000
Subordinate resources: AS: 394043
IP: 142.202.129.0/24
IP: 192.169.5.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 12 Feb 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:4a:28:b1:b0:30:a1:ca:02:0c:af:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jan 31 13:45:22 2026 GMT
Not After : May 5 12:45:22 2028 GMT
Subject: CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:40:ac:31:53:60:62:da:b0:38:a3:73:6a:
9b:f1:26:8a:2b:ca:0e:eb:17:2e:55:08:cc:f5:12:
c7:38:4f:43:ae:5f:cb:e3:69:9d:25:f3:40:a1:4e:
02:1a:3e:33:6f:60:1e:ae:03:18:e5:c2:e0:23:d8:
88:32:d9:00:9c:26:1c:09:e4:15:b4:8b:7e:d6:f5:
ea:c2:33:58:8c:e2:5a:bb:33:f3:e6:06:4d:5f:82:
6e:9e:0c:03:af:4c:9f:e0:3d:0a:8e:b1:58:ff:c8:
b4:70:66:ba:19:0e:7a:fb:08:90:79:bd:a8:32:87:
8f:98:17:e3:25:66:ba:63:80:ef:5f:b9:c1:85:51:
3d:3e:bb:38:89:81:61:57:82:37:93:36:10:77:4f:
3f:83:12:ba:7c:7e:1b:3a:f1:0d:ea:ce:7d:91:c9:
4e:1e:60:53:bb:db:80:91:be:89:1f:5d:8f:95:6f:
38:91:c5:85:83:b6:d6:4f:87:7d:10:c6:03:e0:75:
5f:ee:e1:dc:98:1e:7d:ac:fe:6e:4d:55:4f:b5:71:
e6:98:cc:da:06:89:58:d0:ed:7d:40:55:ae:c6:f5:
3f:a1:b7:3d:d3:a8:2e:9d:e9:a4:82:ed:65:5e:a0:
6a:b3:8d:e6:df:c6:c1:32:13:95:a8:8c:fb:06:b7:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.129.0/24
192.169.5.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394043
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:89:cb:b1:fa:d1:5d:d6:49:d6:a2:9e:a4:89:f3:5a:94:b3:
50:f0:4d:05:59:04:d7:55:e6:50:af:e3:c7:94:02:25:18:27:
d9:93:f7:cd:ec:0f:97:10:40:f9:35:6b:b9:4c:bb:9f:bc:d3:
35:94:a5:39:4f:b4:73:44:fe:11:05:93:a1:91:10:99:e7:42:
ab:89:a0:6d:ac:32:4c:45:0d:c3:1c:eb:96:3e:aa:df:ec:69:
76:cd:43:44:1d:ef:88:d9:85:c9:47:5f:55:e1:07:7f:61:3a:
09:09:02:54:57:3d:7c:fb:75:63:1f:ce:27:61:13:5c:2c:92:
dc:38:54:61:91:df:11:63:cc:ad:22:8b:cc:54:28:1f:9e:27:
ca:4f:08:7c:19:6a:d0:23:58:9c:a2:5f:c0:cc:ae:be:56:89:
ad:30:f8:09:88:2c:91:93:4c:38:2d:f2:93:02:d3:b4:37:4a:
11:86:2d:1b:a3:81:f1:19:31:c3:ea:05:a6:b3:fb:ed:54:c4:
a7:5f:9c:d8:f5:ff:0d:f5:16:60:e0:66:e2:d5:ab:4c:8e:63:
ca:9b:77:37:03:04:f1:65:6a:83:9f:66:76:4c:47:12:ed:ab:
91:5d:00:6e:6d:3a:29:91:93:de:34:50:7c:db:6f:cd:4d:73:
53:ae:d4:b7
-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEy1SiixsDChygIMr6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI2MDEzMTEzNDUyMloXDTI4MDUwNTEyNDUyMlowLzEtMCsGA1UEAxMk
MWNjZmUyNjYtMDYwOS00OWNkLWIyYmEtNjcxYTY0ZWZkYzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9dArDFTYGLasDijc2qb8SaKK8oO6xcuVQjM
9RLHOE9Drl/L42mdJfNAoU4CGj4zb2AergMY5cLgI9iIMtkAnCYcCeQVtIt+1vXq
wjNYjOJauzPz5gZNX4JungwDr0yf4D0KjrFY/8i0cGa6GQ56+wiQeb2oMoePmBfj
JWa6Y4DvX7nBhVE9Prs4iYFhV4I3kzYQd08/gxK6fH4bOvEN6s59kclOHmBTu9uA
kb6JH12PlW84kcWFg7bWT4d9EMYD4HVf7uHcmB59rP5uTVVPtXHmmMzaBolY0O19
QFWuxvU/obc906gunemkgu1lXqBqs43m38bBMhOVqIz7BrdrbQIDAQABo4IEITCC
BB0wHQYDVR0OBBYEFNL5abPVgOnVpp85myeJ6OJzaREZMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x
Y2NmZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFhNjRlZmRjN2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzFjY2ZlMjY2LTA2MDktNDljZC1i
MmJhLTY3MWE2NGVmZGM3Yy8xY2NmZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFhNjRl
ZmRjN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBACOyoEDBADAqQUwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDBgM7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBABqJy7H60V3WSdainqSJ81qUs1DwTQVZBNdV5lCv
48eUAiUYJ9mT983sD5cQQPk1a7lMu5+80zWUpTlPtHNE/hEFk6GREJnnQquJoG2s
MkxFDcMc65Y+qt/saXbNQ0Qd74jZhclHX1XhB39hOgkJAlRXPXz7dWMfzidhE1ws
ktw4VGGR3xFjzK0ii8xUKB+eJ8pPCHwZatAjWJyiX8DMrr5Wia0w+AmILJGTTDgt
8pMC07Q3ShGGLRujgfEZMcPqBaaz++1UxKdfnNj1/w31FmDgZuLVq0yOY8qbdzcD
BPFlaoOfZnZMRxLtq5FdAG5tOimRk940UHzbb81Nc1Ou1Lc=
-----END CERTIFICATE-----
Generated at Wed Feb 11 05:47:47 2026 by rpki-client