This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer
File: 3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer (raw, json)
Hash identifier: FZ3dEip5Aj56Rmm1iWPjhkO1mMNRum+/9lse58kBCkU=
Subject key identifier: F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584C8309D9F835F2CCB82113BB80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 13 Jan 2026 13:45:22 +0000
Certificate not after: Mon 17 Apr 2028 12:45:22 +0000
Subordinate resources: AS: 31974
IP: 208.93.72.0/21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:83:09:d9:f8:35:f2:cc:b8:21:13:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jan 13 13:45:22 2026 GMT
Not After : Apr 17 12:45:22 2028 GMT
Subject: CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:7b:c0:aa:64:9c:25:84:7c:01:73:cc:18:
0c:43:89:cf:7a:b3:a6:cb:5f:37:3e:4c:75:c7:b4:
47:b9:94:fa:db:7f:bf:9b:f5:c0:5c:0a:9b:43:5f:
75:f5:37:bf:58:41:3c:a8:69:4d:a0:4a:60:03:07:
54:45:3e:d2:74:8c:92:12:55:44:9a:b6:f3:55:de:
02:9f:2e:cd:e6:98:fd:c3:f6:a3:34:f5:a7:da:3a:
aa:c3:0c:75:77:6a:41:e5:a9:13:c0:bc:3b:d4:6c:
33:4b:ab:f1:61:29:ae:37:07:4e:4d:4d:b5:48:07:
21:2c:88:a9:40:5d:34:7b:2e:40:2f:45:e9:da:2c:
70:aa:c8:c1:bd:47:28:52:61:55:b9:86:15:db:25:
dd:e4:5c:b2:83:62:23:c8:79:36:cd:80:29:77:3a:
b5:58:ea:da:0c:2b:a6:e3:85:ad:f8:a2:d6:c1:dc:
88:46:c4:17:60:a9:1a:4e:ba:ff:a0:6e:58:53:bd:
ee:11:67:4b:ec:26:18:2c:8d:c7:30:9d:93:2d:de:
df:e6:07:cc:0e:db:c5:a0:6d:09:71:5b:a4:a2:65:
b2:c0:cf:1f:9c:2b:82:d2:50:ec:ba:f8:61:6e:fd:
3e:c8:c4:28:e4:28:81:d6:0f:49:c9:5b:f1:ec:4a:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
208.93.72.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31974
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:f6:3f:41:62:0b:d0:54:b6:99:dc:56:dc:c9:4a:12:3b:bf:
5b:0e:24:8a:99:5f:72:a8:1f:2c:24:c4:e9:27:7b:bf:5d:ab:
79:fc:13:46:53:98:c8:7e:5b:81:e3:ed:da:40:f2:8c:c3:0b:
9e:b3:62:65:f0:60:e9:a1:33:0f:07:e6:29:9e:7d:01:9c:2f:
9b:ab:40:9d:af:67:c0:49:ec:f2:ef:22:14:88:4a:32:fe:0a:
5f:de:5a:7c:f8:46:ef:9f:8a:ae:c7:33:58:2d:99:d9:3d:3c:
2e:3e:35:91:4e:96:ff:bb:82:19:54:a2:04:da:c2:7d:db:e9:
2e:62:3f:3d:20:ee:b8:2b:be:e4:13:66:48:46:ee:f0:8b:f7:
97:57:03:f2:89:18:dd:2c:1a:6b:09:0c:86:32:36:0c:cf:c2:
01:3e:5f:a6:64:cc:c1:bb:60:4d:9f:1c:5e:99:d5:8f:0c:e4:
aa:02:12:ab:bc:e6:ac:99:b4:70:63:6b:cd:3a:f5:d7:06:63:
25:3c:c1:0e:96:8a:0b:fe:05:63:b4:46:4e:45:0d:13:4f:df:
10:a0:43:cf:f1:b7:78:40:ec:0c:83:2e:26:12:b0:30:bb:93:
37:31:d1:0b:a1:04:82:ca:14:5c:cb:df:da:11:4a:96:b0:ad:
3c:ae:c6:04
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEyDCdn4NfLMuCETu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI2MDExMzEzNDUyMloXDTI4MDQxNzEyNDUyMlowLzEtMCsGA1UEAxMk
M2E2ZDQwOWYtZjZjNi00YmE1LWE2NzQtNmI2MzY4ZDI0NzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh797wKpknCWEfAFzzBgMQ4nPerOmy183Pkx1
x7RHuZT623+/m/XAXAqbQ1919Te/WEE8qGlNoEpgAwdURT7SdIySElVEmrbzVd4C
ny7N5pj9w/ajNPWn2jqqwwx1d2pB5akTwLw71GwzS6vxYSmuNwdOTU21SAchLIip
QF00ey5AL0Xp2ixwqsjBvUcoUmFVuYYV2yXd5Fyyg2IjyHk2zYApdzq1WOraDCum
44Wt+KLWwdyIRsQXYKkaTrr/oG5YU73uEWdL7CYYLI3HMJ2TLd7f5gfMDtvFoG0J
cVukomWywM8fnCuC0lDsuvhhbv0+yMQo5CiB1g9JyVvx7EpjeQIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFPbUlNY0eWQiVZkes0Nl0FjE9bBoMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z
YTZkNDA5Zi1mNmM2LTRiYTUtYTY3NC02YjYzNjhkMjQ3OGEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzNhNmQ0MDlmLWY2YzYtNGJhNS1h
Njc0LTZiNjM2OGQyNDc4YS8zYTZkNDA5Zi1mNmM2LTRiYTUtYTY3NC02YjYzNjhk
MjQ3OGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPQXUgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
fOYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAefY/QWIL0FS2mdxW3MlKEju/Ww4kiplfcqgfLCTE6Sd7v12r
efwTRlOYyH5bgePt2kDyjMMLnrNiZfBg6aEzDwfmKZ59AZwvm6tAna9nwEns8u8i
FIhKMv4KX95afPhG75+KrsczWC2Z2T08Lj41kU6W/7uCGVSiBNrCfdvpLmI/PSDu
uCu+5BNmSEbu8Iv3l1cD8okY3SwaawkMhjI2DM/CAT5fpmTMwbtgTZ8cXpnVjwzk
qgISq7zmrJm0cGNrzTr11wZjJTzBDpaKC/4FY7RGTkUNE0/fEKBDz/G3eEDsDIMu
JhKwMLuTNzHRC6EEgsoUXMvf2hFKlrCtPK7GBA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:57:40 2026 by rpki-client