This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/592ea939-ad52-43e9-ba2d-12f0a0d6d504.cer File: 592ea939-ad52-43e9-ba2d-12f0a0d6d504.cer (raw, json) Hash identifier: BzrBFBad1oD9KVXTVTlTcoEXOJ0BfA/WFDNoEdCiBA0= Subject key identifier: 53:A3:37:C9:6F:78:BF:D7:AB:96:00:74:36:04:8D:17:D6:00:E2:DA Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BF7B592208D2F40D4826BE600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/592ea939-ad52-43e9-ba2d-12f0a0d6d504/592ea939-ad52-43e9-ba2d-12f0a0d6d504.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/592ea939-ad52-43e9-ba2d-12f0a0d6d504/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Nov 2025 15:58:12 +0000 Certificate not after: Sun 27 Feb 2028 15:58:12 +0000 Subordinate resources: IP: 192.210.11.0/24 IP: 2620:11:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:b5:92:20:8d:2f:40:d4:82:6b:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 24 15:58:12 2025 GMT Not After : Feb 27 15:58:12 2028 GMT Subject: CN=592ea939-ad52-43e9-ba2d-12f0a0d6d504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:e5:b9:ef:20:8e:91:c5:de:83:f4:d8:52: 0f:ee:e0:76:3a:6e:28:4b:ea:39:00:dd:58:b2:f0: 30:68:58:fe:23:f9:ac:d6:0b:57:15:22:32:d5:35: 7b:a8:1d:4d:9e:80:68:f3:8b:c6:e9:29:b5:37:c8: b3:9e:f2:c4:11:6c:01:d9:51:5b:ef:a9:ea:dc:7a: f5:9a:65:52:f6:8c:ef:91:a9:bc:90:0b:73:37:59: 13:44:1e:be:40:18:cf:ab:53:95:55:8a:55:2a:07: 5d:17:56:06:64:b9:9b:2e:43:4f:4e:53:12:f2:be: 85:25:60:bb:62:61:57:d7:b2:78:f3:a2:e2:cc:eb: 61:8c:84:c1:19:10:11:24:f2:00:63:70:2b:c8:36: 88:bd:26:69:82:af:24:93:73:3e:eb:99:5a:be:13: de:a9:7a:e1:b0:a6:ab:77:d9:04:a0:75:2e:08:43: 4c:45:a0:5b:30:03:a0:30:19:ca:2d:b3:51:8f:67: 3b:d5:23:4e:aa:e1:f4:59:3b:02:f6:c9:4e:4e:81: 62:01:e1:98:e1:0e:0b:11:dd:13:a3:9d:2d:8c:f6: a6:38:8f:68:4e:8b:60:6c:f4:35:c3:5b:f6:44:fc: 68:0a:1c:76:5b:ed:43:6b:9d:97:b6:75:09:a2:4a: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A3:37:C9:6F:78:BF:D7:AB:96:00:74:36:04:8D:17:D6:00:E2:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/592ea939-ad52-43e9-ba2d-12f0a0d6d504/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/592ea939-ad52-43e9-ba2d-12f0a0d6d504/592ea939-ad52-43e9-ba2d-12f0a0d6d504.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.210.11.0/24 IPv6: 2620:11:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:10:ad:1e:2c:08:3a:7d:f1:72:15:b4:2c:9d:c0:79:3b:12: f9:a4:c3:d3:bc:ca:83:15:de:be:22:eb:3d:76:07:76:0a:56: ac:d4:f5:6d:99:c0:19:a1:e9:ee:d5:02:89:a3:d7:b8:7e:b1: 0e:d1:a9:87:24:88:21:bc:00:cc:fa:91:0e:ab:64:be:f8:1c: 6c:39:8b:30:cf:a9:04:86:42:e3:0f:10:6c:a7:25:29:ec:33: fb:9b:55:f5:d0:a2:99:17:3f:57:d8:c4:0b:04:15:f7:c6:9a: 68:ea:72:bf:66:a8:05:60:fd:dd:48:21:fd:ce:34:31:33:4d: 36:57:eb:9d:7f:ab:67:36:6a:33:71:c1:6f:71:32:cc:be:a0: 69:91:47:03:35:1c:03:17:88:70:7e:b9:16:8f:88:7d:7e:5b: f2:40:f4:7b:98:c1:14:3f:0e:81:f5:2c:a8:64:c1:14:7e:9e: ab:60:69:13:6f:1a:4e:f3:cd:54:ef:f6:26:26:1f:71:4e:8d: 50:5d:ce:48:72:96:78:65:ef:c2:cf:d4:e0:d9:65:57:62:10: e1:d8:f4:86:9b:a7:40:28:8a:11:9f:55:55:04:88:56:b3:83: 90:f0:5a:22:e9:85:1b:39:a0:65:fe:83:9a:70:9c:50:ab:d9: 71:c4:b5:aa -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEv3tZIgjS9A1IJr5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTEyNDE1NTgxMloXDTI4MDIyNzE1NTgxMlowLzEtMCsGA1UEAxMk NTkyZWE5MzktYWQ1Mi00M2U5LWJhMmQtMTJmMGEwZDZkNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYrlue8gjpHF3oP02FIP7uB2Om4oS+o5AN1Y svAwaFj+I/ms1gtXFSIy1TV7qB1NnoBo84vG6Sm1N8iznvLEEWwB2VFb76nq3Hr1 mmVS9ozvkam8kAtzN1kTRB6+QBjPq1OVVYpVKgddF1YGZLmbLkNPTlMS8r6FJWC7 YmFX17J486LizOthjITBGRARJPIAY3AryDaIvSZpgq8kk3M+65lavhPeqXrhsKar d9kEoHUuCENMRaBbMAOgMBnKLbNRj2c71SNOquH0WTsC9slOToFiAeGY4Q4LEd0T o50tjPamOI9oTotgbPQ1w1v2RPxoChx2W+1Da52XtnUJokqvgwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFFOjN8lveL/Xq5YAdDYEjRfWAOLaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 OTJlYTkzOS1hZDUyLTQzZTktYmEyZC0xMmYwYTBkNmQ1MDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU5MmVhOTM5LWFkNTItNDNlOS1i YTJkLTEyZjBhMGQ2ZDUwNC81OTJlYTkzOS1hZDUyLTQzZTktYmEyZC0xMmYwYTBk NmQ1MDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADA0gswDwQCAAIwCQMHACYgABGgADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBUEK0eLAg6ffFyFbQsncB5OxL5pMPTvMqDFd6+Ius9dgd2Clas1PVtmcAZoenu 1QKJo9e4frEO0amHJIghvADM+pEOq2S++BxsOYswz6kEhkLjDxBspyUp7DP7m1X1 0KKZFz9X2MQLBBX3xppo6nK/ZqgFYP3dSCH9zjQxM002V+udf6tnNmozccFvcTLM vqBpkUcDNRwDF4hwfrkWj4h9flvyQPR7mMEUPw6B9SyoZMEUfp6rYGkTbxpO881U 7/YmJh9xTo1QXc5IcpZ4Ze/Cz9Tg2WVXYhDh2PSGm6dAKIoRn1VVBIhWs4OQ8Foi 6YUbOaBl/oOacJxQq9lxxLWq -----END CERTIFICATE-----Generated at Fri Nov 28 09:05:49 2025 by rpki-client