This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer File: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer (raw, json) Hash identifier: 29D4/z5gYfq5IToh4wmIVA4qiL2fZEEXU6sYxhl2ve8= Subject key identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C48E9648935C46F8CA318AA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Dec 2025 18:03:06 +0000 Certificate not after: Mon 27 Mar 2028 17:03:06 +0000 Subordinate resources: AS: 63050 IP: 192.245.140.0/24 IP: 198.147.156.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:e9:64:89:35:c4:6f:8c:a3:18:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 23 18:03:06 2025 GMT Not After : Mar 27 17:03:06 2028 GMT Subject: CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:d1:14:21:57:4a:b6:22:1f:47:8f:9f:68: c4:f0:5e:12:27:d5:ef:86:99:08:e8:8a:33:41:05: 30:a0:af:3a:29:13:56:fe:b5:db:69:cd:c7:be:80: 41:4f:9c:43:d4:2c:1f:bf:98:8b:57:6e:87:ba:b7: 0b:84:79:4d:4d:b4:25:a1:1e:c7:cf:3d:b9:ed:02: 12:4b:22:a9:3f:d2:3c:b7:72:7a:10:66:7c:10:52: 69:61:d6:81:9e:93:fd:cf:8f:8b:be:8e:b0:8d:bc: c0:72:31:f2:92:1b:96:85:f4:d0:1c:87:34:2f:1c: 04:12:83:79:d6:a6:91:ff:01:84:ef:a6:f1:50:ad: d4:82:cf:9a:4f:0c:5c:2c:26:62:2f:0a:0b:a2:2c: a9:fc:42:36:29:75:e8:1f:e3:4f:49:8a:77:7a:15: bd:18:da:63:f8:fe:cc:16:25:95:10:39:9c:8a:81: 85:a9:f0:3f:db:8a:3c:cf:68:d3:b1:6e:25:22:24: 67:b4:40:4a:13:cf:24:85:8b:e4:df:5f:14:63:3f: 9b:26:c6:c0:94:a6:0f:01:d7:97:60:31:a7:57:72: 76:ad:15:ce:7d:c2:f5:33:71:6f:0e:2c:b7:d5:f9: e0:83:23:ad:39:9d:ba:2d:1f:8c:24:ce:10:03:4a: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.245.140.0/24 198.147.156.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63050 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c9:8b:81:66:6d:a1:df:60:f0:a3:3d:10:0f:e8:16:bc:b7: 15:4b:03:89:c1:6a:ab:47:f3:77:39:20:88:a4:e9:5c:82:2b: fc:f7:5e:98:fc:95:66:59:69:50:5b:c2:fe:d3:3d:ed:91:4c: 27:04:27:ae:03:bf:73:ee:22:59:f2:5d:49:20:bb:02:1c:22: 32:74:18:02:f1:5a:46:fc:7b:39:59:37:a5:b1:72:07:bc:c5: 55:22:57:36:30:41:68:3c:c4:25:db:eb:e8:e4:d7:e7:58:a5: 1d:3b:f8:15:cc:7b:07:cd:e1:e1:3d:f7:f5:a1:4f:36:16:3b: ab:56:73:e0:17:20:e0:62:0d:fc:6d:9d:11:11:a8:bb:e3:8f: f3:fe:46:a3:74:2e:43:8c:57:37:0e:ed:f5:ad:34:47:2a:08: d6:86:84:b8:c3:06:85:15:40:0b:7d:50:26:f7:7a:cd:41:33: 69:72:49:92:7f:88:ab:94:33:73:62:50:6d:ec:de:1d:a6:ca: 56:30:9c:a7:b0:b3:2a:5a:61:10:1c:ed:03:d9:f1:5a:b1:5f: 7a:d6:e4:19:1a:79:5e:a8:30:85:85:27:54:c1:ce:79:7b:94: ae:ff:1c:65:4d:b6:43:59:2e:bf:3b:c7:ae:17:e5:44:63:b1: bb:5a:e7:cc -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWExI6WSJNcRvjKMYqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTIyMzE4MDMwNloXDTI4MDMyNzE3MDMwNlowLzEtMCsGA1UEAxMk M2E1YTJiMWMtOWFkMy00NDk2LWJjZmMtMzIyOTc0YWNjZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgPRFCFXSrYiH0ePn2jE8F4SJ9XvhpkI6Ioz QQUwoK86KRNW/rXbac3HvoBBT5xD1Cwfv5iLV26HurcLhHlNTbQloR7Hzz257QIS SyKpP9I8t3J6EGZ8EFJpYdaBnpP9z4+Lvo6wjbzAcjHykhuWhfTQHIc0LxwEEoN5 1qaR/wGE76bxUK3Ugs+aTwxcLCZiLwoLoiyp/EI2KXXoH+NPSYp3ehW9GNpj+P7M FiWVEDmcioGFqfA/24o8z2jTsW4lIiRntEBKE88khYvk318UYz+bJsbAlKYPAdeX YDGnV3J2rRXOfcL1M3FvDiy31fnggyOtOZ26LR+MJM4QA0pokQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFKuR/Ugzemu+sa+v0tPMurebFjcgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z YTVhMmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5NzRhY2NkMzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzNhNWEyYjFjLTlhZDMtNDQ5Ni1i Y2ZjLTMyMjk3NGFjY2QzMi8zYTVhMmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5NzRh Y2NkMzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADA9YwDBADGk5wwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPZKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIDJi4FmbaHfYPCjPRAP6Ba8txVLA4nBaqtH83c5 IIik6VyCK/z3Xpj8lWZZaVBbwv7TPe2RTCcEJ64Dv3PuIlnyXUkguwIcIjJ0GALx Wkb8ezlZN6Wxcge8xVUiVzYwQWg8xCXb6+jk1+dYpR07+BXMewfN4eE99/WhTzYW O6tWc+AXIOBiDfxtnRERqLvjj/P+RqN0LkOMVzcO7fWtNEcqCNaGhLjDBoUVQAt9 UCb3es1BM2lySZJ/iKuUM3NiUG3s3h2mylYwnKewsypaYRAc7QPZ8VqxX3rW5Bka eV6oMIWFJ1TBznl7lK7/HGVNtkNZLr87x64X5URjsbta58w= -----END CERTIFICATE-----Generated at Mon Dec 29 21:11:43 2025 by rpki-client