This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer File: 2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer (raw, json) Hash identifier: EF3rCO8owcawRWmtgWzQSWnagnFzIYzGG4lO+s9GAbo= Subject key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C702D409C01187F3E6D3A8900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Jan 2026 19:36:21 +0000 Certificate not after: Mon 11 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 400427 IP: 66.33.58.0/23 IP: 66.33.78.0/23 IP: 72.51.12.0/22 IP: 206.225.0.0/22 IP: 216.120.144.0/23 IP: 2606:ad40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:70:2d:40:9c:01:18:7f:3e:6d:3a:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 6 19:36:21 2026 GMT Not After : Oct 11 00:45:36 2027 GMT Subject: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:38:b1:f2:f5:cd:fc:96:e2:0f:d1:4a:6a: b5:89:7f:aa:07:71:8e:1f:b8:89:2e:bd:b2:e9:21: b8:ab:09:18:6a:12:2a:90:64:ff:07:e4:0d:6a:2c: fe:74:24:f8:ce:2f:85:93:4d:20:01:f8:36:e3:fe: 2d:3c:95:d2:89:14:1c:1d:71:d7:88:a8:27:61:f2: 5e:9b:a9:70:8e:93:2f:25:29:50:9e:cf:f5:b6:65: 4b:83:13:c1:45:a0:05:32:f7:80:8f:aa:7e:8b:f3: a3:b8:2c:4e:11:5a:f6:d8:2e:64:77:1d:1f:42:18: 2b:75:7d:5a:22:33:f0:1d:86:36:86:59:28:12:cf: 9e:c2:de:05:49:87:fd:c2:3d:83:eb:c3:4f:41:66: 33:1e:f2:9b:94:65:65:ea:d7:92:8c:12:b8:7d:3e: 93:a3:e5:9c:46:41:c2:31:28:97:27:99:e9:7f:f2: e7:a7:b3:64:2b:6c:e5:ed:5c:83:fd:4e:0e:1f:33: 93:1c:33:a6:45:36:0a:f8:c4:b5:7d:28:77:a8:ae: f2:0c:36:ca:55:81:a5:15:68:17:0c:69:11:bf:cb: f0:61:81:65:19:8f:e3:0e:ad:79:6d:23:1d:42:7f: 39:ae:1e:9c:f1:08:82:69:cf:88:35:74:c9:ca:a7: 53:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.33.58.0/23 66.33.78.0/23 72.51.12.0/22 206.225.0.0/22 216.120.144.0/23 IPv6: 2606:ad40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:73:9c:9a:58:8b:0a:58:79:61:0c:2e:26:4a:2b:42:cf:a8: 24:39:85:64:40:b2:c8:7f:2e:e9:3c:92:71:c3:4b:e0:eb:16: c3:7e:2f:b4:4b:eb:2b:e7:c3:60:ee:ca:ee:5e:8d:a9:8b:63: f0:5d:ba:6d:e1:94:1e:94:e5:d9:ab:50:f8:6a:98:58:20:50: 65:c1:0f:61:b9:48:4d:52:71:95:54:af:77:e4:c2:15:7e:4a: 8b:de:cb:86:24:b0:8f:81:17:5a:1c:0a:47:45:ae:74:98:a1: 0e:b5:28:d1:f5:0d:c3:dd:74:ef:80:7d:8d:f8:93:e4:6b:b5: ce:eb:c6:27:ed:7e:c4:b0:bf:04:e8:25:b7:3e:a1:23:62:eb: 76:b2:af:59:9b:88:cb:d2:ba:46:c8:f0:f2:a5:5a:6a:94:22: 8e:5a:37:ed:38:77:cd:dd:48:ff:90:fe:d7:eb:3a:f7:a9:c0: 76:0e:fe:ef:57:93:29:59:dc:a1:9e:5f:19:8a:27:df:5a:01: 96:65:68:44:0a:0e:e0:bb:48:2c:76:de:b6:3c:c3:f6:81:72: 28:9c:1b:53:40:af:12:cc:48:0e:b9:3e:c2:33:a0:00:e8:46: 22:e1:7d:2b:d6:e7:e9:a1:70:34:e4:e9:fc:a3:dc:37:6f:f1: 70:bf:ae:b8 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWExwLUCcARh/Pm06iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDEwNjE5MzYyMVoXDTI3MTAxMTAwNDUzNlowLzEtMCsGA1UEAxMk MmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW84sfL1zfyW4g/RSmq1iX+qB3GOH7iJLr2y 6SG4qwkYahIqkGT/B+QNaiz+dCT4zi+Fk00gAfg24/4tPJXSiRQcHXHXiKgnYfJe m6lwjpMvJSlQns/1tmVLgxPBRaAFMveAj6p+i/OjuCxOEVr22C5kdx0fQhgrdX1a IjPwHYY2hlkoEs+ewt4FSYf9wj2D68NPQWYzHvKblGVl6teSjBK4fT6To+WcRkHC MSiXJ5npf/Lnp7NkK2zl7VyD/U4OHzOTHDOmRTYK+MS1fSh3qK7yDDbKVYGlFWgX DGkRv8vwYYFlGY/jDq15bSMdQn85rh6c8QiCac+INXTJyqdTcQIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFOBGlZEoEy/VjmO4jypDUsTDoTmOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y ZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJlNjdhMzc0LWRiZDMtNGJmYS1i ODJjLTZkYmZkNjRlNTc4Zi8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0 ZTU3OGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAFCIToDBAFCIU4DBAJIMwwDBALO4QADBAHYeJAw DQQCAAIwBwMFACYGrUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhwrMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAJVznJpYiwpYeWEMLiZKK0LPqCQ5hWRAssh/Luk8knHDS+DrFsN+L7RL6yvn w2Duyu5ejamLY/Bdum3hlB6U5dmrUPhqmFggUGXBD2G5SE1ScZVUr3fkwhV+Sove y4YksI+BF1ocCkdFrnSYoQ61KNH1DcPddO+AfY34k+Rrtc7rxiftfsSwvwToJbc+ oSNi63ayr1mbiMvSukbI8PKlWmqUIo5aN+04d83dSP+Q/tfrOvepwHYO/u9XkylZ 3KGeXxmKJ99aAZZlaEQKDuC7SCx23rY8w/aBciicG1NArxLMSA65PsIzoADoRiLh fSvW5+mhcDTk6fyj3Ddv8XC/rrg= -----END CERTIFICATE-----Generated at Sun Jan 25 13:52:40 2026 by rpki-client