This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer File: 7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer (raw, json) Hash identifier: ZPRhdF0iY35bA5g9vVDB5RZCIAOOEBueXDebPxLEKPg= Subject key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BC268A6A1195173EDD5AB1940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Nov 2025 13:45:23 +0000 Certificate not after: Tue 08 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 19108 AS: 25994 IP: 24.31.17.0/24 IP: 24.48.160.0/24 IP: 24.49.189.0/24 IP: 24.49.194.0/24 IP: 24.49.200.0/24 IP: 24.54.114.0/24 IP: 24.54.116.0/22 IP: 24.72.175.0/24 IP: 24.72.186.0/23 IP: 24.75.113.0/24 IP: 24.75.116.0/23 IP: 24.75.123.0 -- 24.75.124.255 IP: 24.75.126.0/24 IP: 24.121.0.0/16 IP: 24.156.0.0/17 IP: 24.213.120.0/24 IP: 24.223.81.0/24 IP: 24.223.86.0/24 IP: 24.224.36.0/23 IP: 24.224.44.0/24 IP: 24.224.55.0 -- 24.224.56.255 IP: 24.224.58.0 -- 24.224.63.255 IP: 24.245.68.0/23 IP: 24.245.72.0/22 IP: 47.208.0.0/12 IP: 50.24.0.0/14 IP: 64.139.227.0/24 IP: 64.139.229.0/24 IP: 64.139.234.0/24 IP: 64.139.246.0/24 IP: 64.234.0.0/23 IP: 64.234.8.0/24 IP: 64.234.13.0/24 IP: 64.234.16.0/24 IP: 64.234.30.0/23 IP: 64.234.34.0/24 IP: 64.234.47.0/24 IP: 64.234.52.0/24 IP: 64.234.55.0/24 IP: 64.234.67.0 -- 64.234.68.255 IP: 64.234.74.0/24 IP: 64.234.78.0/24 IP: 66.76.0.0/16 IP: 67.21.185.0/24 IP: 69.59.64.0/24 IP: 69.59.73.0/24 IP: 69.59.82.0/24 IP: 69.59.95.0/24 IP: 69.59.100.0/24 IP: 69.59.104.0/24 IP: 74.192.0.0 -- 74.197.255.255 IP: 75.108.0.0/14 IP: 173.80.0.0/15 IP: 173.216.0.0/14 IP: 207.192.192.0/18 IP: 208.91.57.0/24 IP: 208.180.0.0/16 IP: 209.207.0.0/18 IP: 2600:5400::/27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:68:a6:a1:19:51:73:ed:d5:ab:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 5 13:45:23 2025 GMT Not After : Feb 8 13:45:23 2028 GMT Subject: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:9e:df:b9:33:51:17:ec:13:95:f1:85:05: 43:41:bd:1d:2b:2a:c5:59:69:19:ec:fa:64:6c:53: f6:ec:fc:59:73:13:cf:91:f3:da:77:22:fc:f5:b3: 12:2b:89:e5:68:dd:1e:b8:78:74:56:49:7d:42:32: 42:10:53:f7:f4:1c:34:fe:5a:ff:a1:8b:cb:b7:27: a4:78:6c:9c:df:bf:1b:d9:f1:b6:a3:03:40:08:d5: 68:d4:56:a5:59:01:8f:bc:c1:58:b2:f0:99:f6:46: 0e:3d:6b:87:ab:cb:d0:ac:01:3a:da:a0:97:5d:3b: b3:03:f7:43:bd:47:2b:5d:e5:29:c8:cd:aa:5d:6d: ff:27:f0:64:b4:2c:51:dd:ef:be:60:6f:f9:58:48: f5:52:15:dc:39:ba:a8:ce:5d:e4:df:0d:05:e1:a2: 76:c7:a2:29:d5:be:f3:bf:24:48:02:6f:bc:1a:31: bc:45:50:80:2d:7a:2e:8a:41:23:1e:eb:4b:e5:f7: 76:f2:2b:d5:43:5d:22:d3:51:53:2d:9d:52:14:85: d8:73:35:dc:9d:5e:92:ca:6b:2f:13:53:5e:55:ea: e8:22:72:fd:10:8b:22:c4:d8:b5:72:b5:e7:0e:62: 34:0d:ad:5e:fa:9e:8f:99:77:af:fd:93:fc:17:f6: 27:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 24.31.17.0/24 24.48.160.0/24 24.49.189.0/24 24.49.194.0/24 24.49.200.0/24 24.54.114.0/24 24.54.116.0/22 24.72.175.0/24 24.72.186.0/23 24.75.113.0/24 24.75.116.0/23 24.75.123.0-24.75.124.255 24.75.126.0/24 24.121.0.0/16 24.156.0.0/17 24.213.120.0/24 24.223.81.0/24 24.223.86.0/24 24.224.36.0/23 24.224.44.0/24 24.224.55.0-24.224.56.255 24.224.58.0-24.224.63.255 24.245.68.0/23 24.245.72.0/22 47.208.0.0/12 50.24.0.0/14 64.139.227.0/24 64.139.229.0/24 64.139.234.0/24 64.139.246.0/24 64.234.0.0/23 64.234.8.0/24 64.234.13.0/24 64.234.16.0/24 64.234.30.0/23 64.234.34.0/24 64.234.47.0/24 64.234.52.0/24 64.234.55.0/24 64.234.67.0-64.234.68.255 64.234.74.0/24 64.234.78.0/24 66.76.0.0/16 67.21.185.0/24 69.59.64.0/24 69.59.73.0/24 69.59.82.0/24 69.59.95.0/24 69.59.100.0/24 69.59.104.0/24 74.192.0.0-74.197.255.255 75.108.0.0/14 173.80.0.0/15 173.216.0.0/14 207.192.192.0/18 208.91.57.0/24 208.180.0.0/16 209.207.0.0/18 IPv6: 2600:5400::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19108 25994 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a3:50:ff:0e:08:48:b4:ab:75:3c:83:d1:f7:7e:87:dc:50: f5:7e:7d:dc:8a:e8:39:04:a0:d0:46:47:75:f7:8a:da:2b:82: b2:da:9f:d8:19:ae:43:12:e9:95:7c:7f:ed:55:01:18:b8:9d: df:4d:db:62:f7:5c:43:a6:b2:16:52:24:d2:fe:75:39:58:7a: fa:8a:cb:f1:f0:11:4b:7c:1d:80:9c:9b:ce:1f:82:a1:51:b3: 10:5c:06:ac:05:19:b0:d6:b2:51:54:aa:da:27:c9:6f:2c:16: 2f:4e:25:34:d3:9f:e2:db:b8:08:30:2f:49:5c:c1:4d:02:7f: 3b:4c:ab:c3:c0:9c:1f:a2:2a:05:ba:a7:e0:e5:15:1f:0d:1d: f4:b8:c0:2d:f9:37:0f:29:ff:5c:9e:23:60:d2:2b:63:66:2c: 7a:0a:ab:ab:7c:80:50:da:20:80:c2:ff:3e:e4:af:53:b1:f0: 08:4a:3b:3f:b0:c3:70:dc:b8:6a:45:14:e4:05:17:ea:51:8e: 70:fe:ed:16:86:a6:7b:97:72:6b:96:08:80:ca:ca:fd:9d:a0: e6:39:59:99:46:7c:7c:86:0f:19:32:53:fd:72:a8:00:26:3b: 22:b1:7d:f5:f3:a6:be:aa:cb:39:27:c3:32:7d:ff:62:aa:fa: a3:37:0b:ec -----BEGIN CERTIFICATE----- MIIImTCCB4GgAwIBAgIUAQ0Mn0MoWEvCaKahGVFz7dWrGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTEwNTEzNDUyM1oXDTI4MDIwODEzNDUyM1owLzEtMCsGA1UEAxMk N2E3YWJlZmYtZmVhYy00Y2M5LTkwNzctODY2ZjBiYjFiOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqGe37kzURfsE5XxhQVDQb0dKyrFWWkZ7Ppk bFP27PxZcxPPkfPadyL89bMSK4nlaN0euHh0Vkl9QjJCEFP39Bw0/lr/oYvLtyek eGyc378b2fG2owNACNVo1FalWQGPvMFYsvCZ9kYOPWuHq8vQrAE62qCXXTuzA/dD vUcrXeUpyM2qXW3/J/BktCxR3e++YG/5WEj1UhXcObqozl3k3w0F4aJ2x6Ip1b7z vyRIAm+8GjG8RVCALXouikEjHutL5fd28ivVQ10i01FTLZ1SFIXYczXcnV6Symsv E1NeVeroInL9EIsixNi1crXnDmI0Da1e+p6PmXev/ZP8F/YnmQIDAQABo4IFqzCC BacwHQYDVR0OBBYEFPu/fjrlvbJrwt1AExuu8UW+rBI7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 YTdhYmVmZi1mZWFjLTRjYzktOTA3Ny04NjZmMGJiMWI4Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdhN2FiZWZmLWZlYWMtNGNjOS05 MDc3LTg2NmYwYmIxYjhjYy83YTdhYmVmZi1mZWFjLTRjYzktOTA3Ny04NjZmMGJi MWI4Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwggGqBggrBgEF BQcBBwEB/wSCAZkwggGVMIIBggQCAAEwggF6AwQAGB8RAwQAGDCgAwQAGDG9AwQA GDHCAwQAGDHIAwQAGDZyAwQCGDZ0AwQAGEivAwQBGEi6AwQAGEtxAwQBGEt0MAwD BAAYS3sDBAAYS3wDBAAYS34DAwAYeQMEBxicAAMEABjVeAMEABjfUQMEABjfVgME ARjgJAMEABjgLDAMAwQAGOA3AwQAGOA4MAwDBAEY4DoDBAYY4AADBAEY9UQDBAIY 9UgDAwQv0AMDAjIYAwQAQIvjAwQAQIvlAwQAQIvqAwQAQIv2AwQBQOoAAwQAQOoI AwQAQOoNAwQAQOoQAwQBQOoeAwQAQOoiAwQAQOovAwQAQOo0AwQAQOo3MAwDBABA 6kMDBABA6kQDBABA6koDBABA6k4DAwBCTAMEAEMVuQMEAEU7QAMEAEU7SQMEAEU7 UgMEAEU7XwMEAEU7ZAMEAEU7aDAKAwMGSsADAwFKxAMDAktsAwMBrVADAwKt2AME Bs/AwAMEANBbOQMDANC0AwQG0c8AMA0EAgACMAcDBQUmAFQAMB0GCCsGAQUFBwEI AQH/BA4wDKAKMAgCAkqkAgJlijBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRo1D/DghItKt1PIPR936H3FD1 fn3ciug5BKDQRkd194raK4Ky2p/YGa5DEumVfH/tVQEYuJ3fTdti91xDprIWUiTS /nU5WHr6isvx8BFLfB2AnJvOH4KhUbMQXAasBRmw1rJRVKraJ8lvLBYvTiU005/i 27gIMC9JXMFNAn87TKvDwJwfoioFuqfg5RUfDR30uMAt+TcPKf9cniNg0itjZix6 CqurfIBQ2iCAwv8+5K9TsfAISjs/sMNw3LhqRRTkBRfqUY5w/u0WhqZ7l3JrlgiA ysr9naDmOVmZRnx8hg8ZMlP9cqgAJjsisX3186a+qss5J8Myff9iqvqjNwvs -----END CERTIFICATE-----Generated at Sun Nov 23 21:28:30 2025 by rpki-client