This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer File: eff73345-b771-45fd-be81-1f41a7f777ec.cer (raw, json) Hash identifier: wKD5KscTK2sclBrAHbmEl8ihirCeGil5EqW3KcCYdrE= Subject key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C82FC6EABAEA00FF0144E9A60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Jan 2026 13:18:21 +0000 Certificate not after: Sun 17 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 36168 AS: 400967 IP: 23.175.120.0/24 IP: 45.42.172.0 -- 45.42.174.255 IP: 2602:f922::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:82:fc:6e:ab:ae:a0:0f:f0:14:4e:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 13 13:18:21 2026 GMT Not After : Oct 17 00:45:36 2027 GMT Subject: CN=eff73345-b771-45fd-be81-1f41a7f777ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4c:f2:6b:81:e8:e3:aa:a3:09:a3:47:90:ed: 1d:38:71:a6:9e:fd:13:b6:1a:25:40:82:e0:d4:91: 25:a6:24:6c:78:71:04:c1:4c:7c:3d:63:6e:98:96: ff:97:fe:68:2c:71:06:b5:f1:65:bf:77:5c:48:8e: e0:f9:57:f6:82:b0:5c:48:7f:71:26:88:6e:f1:89: de:87:c0:94:0a:07:d2:56:b8:ee:d5:4a:ee:48:ef: d7:e4:9f:b4:64:e8:b6:09:f2:26:df:6f:df:51:09: 25:41:9d:66:25:f0:00:98:34:30:76:d1:7b:f1:84: 89:70:38:f4:ae:04:85:f9:b9:4f:ec:ab:3e:47:b3: c5:c8:93:a3:48:5a:77:f5:81:25:89:52:f4:a2:a0: 23:90:3c:ff:93:d5:9a:bb:c4:9f:3a:9b:e4:07:c4: 7d:d0:68:dd:f9:42:e1:9c:3d:c4:3e:d5:7d:f5:00: 9c:dc:06:46:38:47:b9:65:d8:8c:c1:bb:0f:7c:f4: cb:0d:fb:44:fd:be:74:5a:1c:31:4d:d2:83:6d:07: e1:82:63:fe:fb:30:1a:cc:0b:3f:76:ef:3e:c8:48: cd:0b:f0:8b:77:62:7a:21:c6:d7:6e:c4:8b:8b:1a: 57:de:a5:9d:ca:26:fc:c4:aa:e0:48:ce:27:5a:f7: f2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.175.120.0/24 45.42.172.0-45.42.174.255 IPv6: 2602:f922::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36168 400967 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:db:3f:d9:4c:c9:98:59:35:9d:5d:70:ce:75:20:d4:72:1a: c9:30:f2:a7:47:ee:d0:fc:f9:ed:d7:25:cb:55:28:b5:5a:0d: 5c:bb:13:69:07:19:4c:8d:93:49:27:44:51:bc:1e:a1:d9:12: c4:0b:39:cc:18:8d:b2:af:09:8d:fe:35:50:36:bd:c3:dd:73: a1:79:6c:91:01:c8:94:d8:d0:b1:8f:e6:5f:f0:3c:d0:1a:a2: 01:8d:9c:c8:0b:aa:14:bf:3e:ef:8b:60:49:ae:32:82:92:1c: 8b:80:55:1e:16:d6:dc:a3:c7:d1:37:88:5a:37:3c:0d:3c:0f: 6a:de:be:70:38:8d:d2:3c:e6:c6:e5:20:80:f5:bb:88:42:44: b3:d2:76:98:bc:dc:a1:9b:c0:c4:e4:06:4b:98:a1:49:b6:0e: 32:33:54:ec:72:03:ba:80:ae:b1:df:67:27:1d:e3:2d:fa:5f: ba:05:07:35:fe:a1:10:1c:c5:56:b2:b8:bc:75:4b:77:94:d5: 18:43:97:3b:74:01:9d:49:5e:30:49:0e:ba:08:be:64:9a:92: 1f:b6:53:35:80:7b:c1:1c:67:18:0f:f3:85:7f:32:d0:08:20: e0:44:06:82:f1:a0:bd:31:69:78:9c:9d:31:9e:94:9b:60:e0: 80:c0:51:e7 -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEyC/G6rrqAP8BROmmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDExMzEzMTgyMVoXDTI3MTAxNzAwNDUzNlowLzEtMCsGA1UEAxMk ZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3N2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkzya4Ho46qjCaNHkO0dOHGmnv0TtholQILg 1JElpiRseHEEwUx8PWNumJb/l/5oLHEGtfFlv3dcSI7g+Vf2grBcSH9xJohu8Yne h8CUCgfSVrju1UruSO/X5J+0ZOi2CfIm32/fUQklQZ1mJfAAmDQwdtF78YSJcDj0 rgSF+blP7Ks+R7PFyJOjSFp39YEliVL0oqAjkDz/k9Wau8SfOpvkB8R90Gjd+ULh nD3EPtV99QCc3AZGOEe5ZdiMwbsPfPTLDftE/b50WhwxTdKDbQfhgmP++zAazAs/ du8+yEjNC/CLd2J6IcbXbsSLixpX3qWdyib8xKrgSM4nWvfyDQIDAQABo4IEPjCC BDowHQYDVR0OBBYEFJplP2l8cmr9IrQgGcFFMJZNFXJGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l ZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VmZjczMzQ1LWI3NzEtNDVmZC1i ZTgxLTFmNDFhN2Y3NzdlYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdm Nzc3ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMBoEAgABMBQDBAAXr3gwDAMEAi0qrAMEAC0qrjAOBAIAAjAIAwYA JgL5IgAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAI1IAgMGHkcwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA Lds/2UzJmFk1nV1wznUg1HIayTDyp0fu0Pz57dcly1UotVoNXLsTaQcZTI2TSSdE UbweodkSxAs5zBiNsq8Jjf41UDa9w91zoXlskQHIlNjQsY/mX/A80BqiAY2cyAuq FL8+74tgSa4ygpIci4BVHhbW3KPH0TeIWjc8DTwPat6+cDiN0jzmxuUggPW7iEJE s9J2mLzcoZvAxOQGS5ihSbYOMjNU7HIDuoCusd9nJx3jLfpfugUHNf6hEBzFVrK4 vHVLd5TVGEOXO3QBnUleMEkOugi+ZJqSH7ZTNYB7wRxnGA/zhX8y0Agg4EQGgvGg vTFpeJydMZ6Um2DggMBR5w== -----END CERTIFICATE-----Generated at Sun Jan 18 02:57:52 2026 by rpki-client