This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer File: ac4576d4-b383-4f58-8da4-316d12d38f36.cer (raw, json) Hash identifier: 2RXfFo7YRV8+tdWXxYVdi6b36sMvDfg57kOO7xsvkCA= Subject key identifier: 88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C2708886193CEA47E328F4000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Dec 2025 14:48:21 +0000 Certificate not after: Tue 14 Mar 2028 15:54:56 +0000 Subordinate resources: AS: 12032 IP: 170.124.0.0/16 IP: 194.164.102.0/23 IP: 194.164.112.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:27:08:88:61:93:ce:a4:7e:32:8f:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 11 14:48:21 2025 GMT Not After : Mar 14 15:54:56 2028 GMT Subject: CN=ac4576d4-b383-4f58-8da4-316d12d38f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:41:a9:d1:e9:32:74:41:15:9d:1e:78:c3: b2:95:1f:22:d5:fe:dd:a5:66:d7:78:2a:7f:a0:44: 21:f6:ed:ad:24:22:85:26:8f:d0:a8:09:13:da:41: 55:f6:ef:e1:9c:e2:81:35:52:9f:d8:24:6a:7e:a8: 66:90:94:fb:f0:a7:fd:e8:23:58:d1:27:86:5b:2b: 1d:be:9f:0d:14:87:c2:99:7b:e8:87:61:b2:7d:34: b8:8e:c2:1c:9a:76:5c:2b:cb:ad:9d:d4:ae:54:41: 75:b9:9c:c8:92:68:58:cb:30:86:a0:ad:2f:89:c0: ff:d9:a7:6a:9a:b3:d5:42:40:00:3c:4c:a3:ce:58: ea:65:be:37:4c:8a:84:90:47:50:06:7b:43:7c:bd: 9a:5b:e1:dd:d0:ae:e4:e0:f2:51:39:8a:55:eb:e6: 95:ba:5f:1f:81:c5:7c:e5:70:0a:16:0a:8d:ab:90: 5d:59:76:49:8f:f3:78:ec:34:59:fd:f8:c9:e7:9f: 6a:61:b1:99:b1:1e:40:09:07:c1:90:0d:c0:92:c5: 62:45:e7:a1:c9:2c:df:27:9b:0e:a4:e0:b2:ea:78: d5:44:86:ab:ff:72:be:3c:d3:49:9a:0f:bf:15:5b: a2:ef:c6:bb:d5:8f:dc:7b:ef:e1:36:f6:14:3f:e8: 5f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 170.124.0.0/16 194.164.102.0/23 194.164.112.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12032 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ae:23:e0:14:01:cd:af:cc:1c:79:68:7f:a2:1d:7b:14:5b: 72:c7:da:d0:21:2c:80:55:e5:f2:69:6b:31:fd:1c:2d:e1:a6: 67:4c:33:06:2d:e7:38:57:58:c0:6d:de:49:8d:97:c0:43:22: 9b:13:06:64:ab:0d:46:9a:e0:47:35:e9:7f:51:36:fd:9a:af: ff:37:89:ec:7d:4b:01:a7:72:51:82:89:49:79:6d:00:c0:3c: 87:59:c9:91:91:73:7f:ba:88:31:c4:44:0d:df:81:e7:3d:bf: 3b:3f:c3:37:42:55:71:42:06:b5:b3:9c:f6:2f:c1:ab:67:46: fc:58:f8:d7:45:36:f6:8f:22:ba:e5:f7:70:91:4c:56:40:08: a5:92:21:56:f5:e9:05:6a:37:45:01:b2:64:5d:1e:d4:c0:60: 47:5e:c9:d5:ce:9a:ae:62:1d:db:3d:43:2b:47:f8:81:b1:1c: d7:f3:34:63:84:8f:50:6d:f6:a5:be:86:e1:5b:65:7a:22:11: dc:05:11:52:5a:73:58:c2:52:c5:9a:42:a3:23:67:6a:ab:65: a4:d5:28:b9:72:d1:da:a1:7a:c3:e2:03:83:39:e9:75:58:73: 12:4f:5e:5c:fb:ec:54:2d:60:d6:2f:d9:25:f4:02:c9:96:43: 2f:90:a7:63 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEwnCIhhk86kfjKPQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTIxMTE0NDgyMVoXDTI4MDMxNDE1NTQ1NlowLzEtMCsGA1UEAxMk YWM0NTc2ZDQtYjM4My00ZjU4LThkYTQtMzE2ZDEyZDM4ZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ1BqdHpMnRBFZ0eeMOylR8i1f7dpWbXeCp/ oEQh9u2tJCKFJo/QqAkT2kFV9u/hnOKBNVKf2CRqfqhmkJT78Kf96CNY0SeGWysd vp8NFIfCmXvoh2GyfTS4jsIcmnZcK8utndSuVEF1uZzIkmhYyzCGoK0vicD/2adq mrPVQkAAPEyjzljqZb43TIqEkEdQBntDfL2aW+Hd0K7k4PJROYpV6+aVul8fgcV8 5XAKFgqNq5BdWXZJj/N47DRZ/fjJ559qYbGZsR5ACQfBkA3AksViReehySzfJ5sO pOCy6njVRIar/3K+PNNJmg+/FVui78a71Y/ce+/hNvYUP+hf9QIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFIiFeZJc2eM4LSrQPd8A0maSyafvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h YzQ1NzZkNC1iMzgzLTRmNTgtOGRhNC0zMTZkMTJkMzhmMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FjNDU3NmQ0LWIzODMtNGY1OC04 ZGE0LTMxNmQxMmQzOGYzNi9hYzQ1NzZkNC1iMzgzLTRmNTgtOGRhNC0zMTZkMTJk MzhmMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwCqfAMEAcKkZgMEAcKkcDAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgIvADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8riPgFAHNr8wceWh/oh17FFtyx9rQISyA VeXyaWsx/Rwt4aZnTDMGLec4V1jAbd5JjZfAQyKbEwZkqw1GmuBHNel/UTb9mq// N4nsfUsBp3JRgolJeW0AwDyHWcmRkXN/uogxxEQN34HnPb87P8M3QlVxQga1s5z2 L8GrZ0b8WPjXRTb2jyK65fdwkUxWQAilkiFW9ekFajdFAbJkXR7UwGBHXsnVzpqu Yh3bPUMrR/iBsRzX8zRjhI9QbfalvobhW2V6IhHcBRFSWnNYwlLFmkKjI2dqq2Wk 1Si5ctHaoXrD4gODOel1WHMST15c++xULWDWL9kl9ALJlkMvkKdj -----END CERTIFICATE-----Generated at Sun Dec 14 04:53:15 2025 by rpki-client