This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer File: 8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer (raw, json) Hash identifier: yXoI9upiv+Aj+K/hGMr4OH4havVRir2W8N7vbvu4aOE= Subject key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C241E992C7C76FFAFC6DAC340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Dec 2025 13:45:23 +0000 Certificate not after: Tue 14 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 19504 IP: 64.6.112.0/20 IP: 66.109.112.0/21 IP: 68.171.176.0/20 IP: 104.200.208.0/21 IP: 107.151.48.0/20 IP: 206.168.16.0/20 IP: 216.122.152.0/21 IP: 216.147.224.0/20 IP: 2604:1c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:1e:99:2c:7c:76:ff:af:c6:da:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 10 13:45:23 2025 GMT Not After : Mar 14 12:45:23 2028 GMT Subject: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:b1:2f:00:70:90:76:af:c2:c3:6a:9a:c8: 6b:7d:cd:96:97:fb:f7:a5:2e:ae:8b:94:6d:f3:e0: 91:84:af:c8:1a:bd:82:ef:ad:8b:5e:7b:80:6e:28: b7:6f:8b:2b:61:e9:e8:63:ef:42:00:81:aa:e3:94: 24:59:1f:7d:e9:d3:04:b8:e6:53:1a:0d:bb:42:4d: 57:f3:40:e3:6c:b0:ac:d1:de:4d:9a:b5:71:f6:0a: e0:9e:a8:96:bb:c8:59:a3:32:5f:7d:19:6e:45:72: 53:f6:de:15:53:75:cb:54:db:47:38:ac:3e:1f:04: 08:1b:15:a8:68:4c:cc:f2:98:a5:a4:b6:88:f3:a8: e4:58:6c:f2:7e:04:ff:55:05:5e:e5:c0:82:2b:c0: 26:1c:63:54:d5:e4:83:32:56:a2:30:3f:32:9a:0b: cb:26:f1:ac:65:0c:4f:eb:6d:2c:55:10:72:66:bd: a5:e7:ef:8d:62:8c:88:08:95:90:8a:0f:77:90:7a: d4:b6:4a:60:5c:af:5b:0a:70:11:12:5c:11:1f:f9: 5e:cb:af:d9:44:a4:27:9d:35:8e:12:25:0e:3c:61: b2:9f:ba:c0:86:2d:d4:31:43:39:ea:2a:6a:1a:ac: c2:d4:35:f1:8d:f1:50:f0:0d:e7:d9:f3:9b:03:02: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.6.112.0/20 66.109.112.0/21 68.171.176.0/20 104.200.208.0/21 107.151.48.0/20 206.168.16.0/20 216.122.152.0/21 216.147.224.0/20 IPv6: 2604:1c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19504 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:fb:3b:d8:b2:37:98:19:6c:86:59:e4:8d:8e:63:b2:29:e9: 39:2f:c2:a2:55:08:32:00:39:9d:25:d7:06:69:21:52:d8:ad: 4e:c9:d8:b6:98:a2:bc:c4:29:ad:2a:bb:47:c8:d1:08:e3:ce: be:ba:1e:09:ac:9a:23:89:7c:e7:18:33:9a:80:64:c7:4c:85: bf:cd:48:b2:6a:86:90:b8:51:09:38:93:4d:63:aa:4d:f2:ec: d7:a0:6c:c1:6c:17:38:3d:98:1a:8d:cd:b1:f5:79:08:00:62: 24:fe:1b:21:38:d0:17:8a:3c:f1:21:cc:97:e2:49:03:92:5c: a8:16:89:63:0e:20:88:33:59:fd:7d:ae:8b:7a:35:5f:c8:1d: 72:69:21:38:c2:6b:bb:4d:60:d1:ed:c8:05:c9:8e:16:93:08: 9e:5a:4b:aa:61:51:65:78:f8:0a:45:8b:0b:e5:da:cf:be:60: 3e:e8:88:d9:4d:8c:41:36:11:e5:21:08:da:af:c8:07:f6:42: a4:dd:97:38:51:fb:5b:34:a6:87:a4:e9:53:53:83:6b:a6:ee: c9:28:83:fa:c8:cb:00:a6:4a:17:a7:16:78:68:64:59:16:c9: b8:a0:aa:54:27:13:c3:93:eb:22:c3:ed:49:21:64:fb:74:46: 14:2f:c4:6d -----BEGIN CERTIFICATE----- MIIHQTCCBimgAwIBAgIUAQ0Mn0MoWEwkHpksfHb/r8baw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTIxMDEzNDUyM1oXDTI4MDMxNDEyNDUyM1owLzEtMCsGA1UEAxMk OGQ3N2UzYTQtYWIxYi00MGMzLWFlNTQtOWU1MGEyMTM0Y2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3exLwBwkHavwsNqmshrfc2Wl/v3pS6ui5Rt 8+CRhK/IGr2C762LXnuAbii3b4srYenoY+9CAIGq45QkWR996dMEuOZTGg27Qk1X 80DjbLCs0d5NmrVx9grgnqiWu8hZozJffRluRXJT9t4VU3XLVNtHOKw+HwQIGxWo aEzM8pilpLaI86jkWGzyfgT/VQVe5cCCK8AmHGNU1eSDMlaiMD8ymgvLJvGsZQxP 620sVRByZr2l5++NYoyICJWQig93kHrUtkpgXK9bCnARElwRH/ley6/ZRKQnnTWO EiUOPGGyn7rAhi3UMUM56ipqGqzC1DXxjfFQ8A3n2fObAwJHoQIDAQABo4IEUzCC BE8wHQYDVR0OBBYEFDNITdfzHIUPGV1RJbd5EMHar/CmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 ZDc3ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUwYTIxMzRjZDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzhkNzdlM2E0LWFiMWItNDBjMy1h ZTU0LTllNTBhMjEzNGNkMy84ZDc3ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUwYTIx MzRjZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBARABnADBANCbXADBAREq7ADBANoyNADBARrlzAD BATOqBADBAPYepgDBATYk+AwDQQCAAIwBwMFACYEAcAwGQYIKwYBBQUHAQgBAf8E CjAIoAYwBAICTDAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAYPs72LI3mBlshlnkjY5jsinpOS/ColUIMgA5 nSXXBmkhUtitTsnYtpiivMQprSq7R8jRCOPOvroeCayaI4l85xgzmoBkx0yFv81I smqGkLhRCTiTTWOqTfLs16BswWwXOD2YGo3NsfV5CABiJP4bITjQF4o88SHMl+JJ A5JcqBaJYw4giDNZ/X2ui3o1X8gdcmkhOMJru01g0e3IBcmOFpMInlpLqmFRZXj4 CkWLC+Xaz75gPuiI2U2MQTYR5SEI2q/IB/ZCpN2XOFH7WzSmh6TpU1ODa6buySiD +sjLAKZKF6cWeGhkWRbJuKCqVCcTw5PrIsPtSSFk+3RGFC/EbQ== -----END CERTIFICATE-----Generated at Sun Dec 14 05:00:24 2025 by rpki-client