This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer File: 41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer (raw, json) Hash identifier: ohzzrLDQyKRIyq9ZlPrWI/wn57hSR+hUF2q/pctX88U= Subject key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BFE6E5C941EA0A52128829AC8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Nov 2025 01:45:23 +0000 Certificate not after: Wed 01 Mar 2028 01:45:23 +0000 Subordinate resources: AS: 8015 AS: 10464 AS: 18806 AS: 19149 AS: 26554 AS: 54111 AS: 54519 IP: 64.141.128.0/18 IP: 64.186.32.0/19 IP: 65.23.64.0/19 IP: 67.59.0.0/18 IP: 67.218.32.0/20 IP: 69.7.16.0/20 IP: 70.34.128.0/18 IP: 74.204.0.0/17 IP: 147.202.0.0/16 IP: 184.175.128.0/18 IP: 192.104.107.0 -- 192.104.110.255 IP: 208.42.0.0 -- 208.42.191.255 IP: 209.98.0.0/16 IP: 2001:18c8::/32 IP: 2607:1800::/32 IP: 2607:f7d8::/32 IP: 2620:a7:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:6e:5c:94:1e:a0:a5:21:28:82:9a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 27 01:45:23 2025 GMT Not After : Mar 1 01:45:23 2028 GMT Subject: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:4e:b6:b9:a4:86:cb:08:8d:55:aa:6e:12: 57:95:fc:12:67:12:9a:8a:16:1c:f4:ea:b8:a5:26: fb:62:e8:47:be:50:c6:f0:a0:97:2b:78:51:24:a7: f0:43:94:b7:ac:b0:58:01:be:75:77:8d:c3:4b:dd: 12:20:f7:bb:85:e2:aa:e3:21:45:8b:ba:ee:e5:e3: 1a:a5:d2:47:62:0c:e2:b0:70:2e:40:11:88:f4:c0: c3:fb:b7:85:26:7f:c1:b1:65:c7:b7:1b:77:30:8e: 13:ce:14:f5:c5:28:c6:84:1b:1e:be:46:69:5a:b4: 4d:8a:57:52:9e:d4:e6:36:22:a6:68:fe:56:3c:f5: cd:8d:dd:76:83:8a:53:b1:43:c5:15:b9:86:9f:01: 99:0f:90:51:92:24:de:62:7d:2a:ec:52:b3:fa:35: b8:9f:23:2c:cf:0f:f0:54:b3:6c:9a:c2:95:a5:08: 82:1d:be:c2:2e:74:ca:fb:09:a2:e0:64:df:41:c4: 48:a6:df:9f:c4:5e:8b:26:0b:5a:b2:cd:00:eb:ed: b2:3b:2f:65:70:35:3c:3c:49:4d:ce:d3:b5:2e:dd: d6:7a:1c:00:b1:dc:26:84:65:7e:47:a0:2a:72:8b: 43:8f:d7:e2:3a:c6:23:50:f8:57:85:de:23:cd:83: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.141.128.0/18 64.186.32.0/19 65.23.64.0/19 67.59.0.0/18 67.218.32.0/20 69.7.16.0/20 70.34.128.0/18 74.204.0.0/17 147.202.0.0/16 184.175.128.0/18 192.104.107.0-192.104.110.255 208.42.0.0-208.42.191.255 209.98.0.0/16 IPv6: 2001:18c8::/32 2607:1800::/32 2607:f7d8::/32 2620:a7:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8015 10464 18806 19149 26554 54111 54519 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:fd:3f:ed:c3:cd:9f:19:a2:83:f9:bc:9a:ea:34:5e:2a:30: a8:dd:5f:f3:18:95:0f:bf:02:86:a8:aa:98:fc:cb:9d:f2:8d: 1e:30:44:07:7c:60:30:5b:85:20:e0:f7:e5:f0:c2:2d:12:46: 26:2d:7b:36:47:74:86:34:ee:a2:67:18:83:b2:b7:d9:c0:ef: f5:a9:da:ff:ee:ee:bf:f3:dc:85:43:76:61:8a:ff:85:4f:06: eb:63:ac:96:6b:17:cb:6c:c5:bc:af:cc:d8:49:0f:35:12:c5: 7e:9f:19:d0:60:76:91:fc:94:b3:2f:a0:de:b1:cf:93:0f:14: 17:e1:49:2e:7a:0c:e3:78:ae:e3:36:82:d1:d3:46:f7:c2:36: 84:f5:12:b9:bb:d0:d9:e1:2c:cd:54:cf:7d:09:f0:d0:f6:f3: 64:af:50:e5:b2:84:8b:fb:86:c5:54:0c:42:31:eb:5c:e9:a5: b7:11:9f:cc:ac:05:ef:36:83:7a:09:0d:e5:42:aa:a7:27:54: c8:29:79:a0:97:2c:63:30:7d:04:52:16:1d:3b:ea:2f:60:38: a3:50:45:be:c9:06:25:f1:c9:cd:0e:44:15:49:d2:b9:50:9f: 23:de:ef:79:a7:c4:e9:2a:7f:fe:e4:a2:0a:f1:c5:bc:b1:df: 19:84:7a:15 -----BEGIN CERTIFICATE----- MIIHoDCCBoigAwIBAgIUAQ0Mn0MoWEv+blyUHqClISiCmsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTEyNzAxNDUyM1oXDTI4MDMwMTAxNDUyM1owLzEtMCsGA1UEAxMk NDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMyZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xOtrmkhssIjVWqbhJXlfwSZxKaihYc9Oq4 pSb7YuhHvlDG8KCXK3hRJKfwQ5S3rLBYAb51d43DS90SIPe7heKq4yFFi7ru5eMa pdJHYgzisHAuQBGI9MDD+7eFJn/BsWXHtxt3MI4TzhT1xSjGhBsevkZpWrRNildS ntTmNiKmaP5WPPXNjd12g4pTsUPFFbmGnwGZD5BRkiTeYn0q7FKz+jW4nyMszw/w VLNsmsKVpQiCHb7CLnTK+wmi4GTfQcRIpt+fxF6LJgtass0A6+2yOy9lcDU8PElN ztO1Lt3WehwAsdwmhGV+R6AqcotDj9fiOsYjUPhXhd4jzYMM7wIDAQABo4IEsjCC BK4wHQYDVR0OBBYEFL95Fr63j2n7/WOmv4kZfZ6o8sq3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQxZTM4ZGE1LWRlNGYtNDAwZC04 M2FiLTY1ZWUyZTJjMmQyNC80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUy YzJkMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgZwGCCsGAQUF BwEHAQH/BIGMMIGJMGEEAgABMFsDBAZAjYADBAVAuiADBAVBF0ADBAZDOwADBARD 2iADBARFBxADBAZGIoADBAdKzAADAwCTygMEBrivgDAMAwQAwGhrAwQAwGhuMAsD AwHQKgMEBtAqgAMDANFiMCQEAgACMB4DBQAgARjIAwUAJgcYAAMFACYH99gDBwAm IACngAAwMwYIKwYBBQUHAQgBAf8EJDAioCAwHgICH08CAijgAgJJdgICSs0CAme6 AgMA018CAwDU9zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBz/T/tw82fGaKD+bya6jReKjCo3V/zGJUPvwKG qKqY/Mud8o0eMEQHfGAwW4Ug4Pfl8MItEkYmLXs2R3SGNO6iZxiDsrfZwO/1qdr/ 7u6/89yFQ3Zhiv+FTwbrY6yWaxfLbMW8r8zYSQ81EsV+nxnQYHaR/JSzL6Desc+T DxQX4UkuegzjeK7jNoLR00b3wjaE9RK5u9DZ4SzNVM99CfDQ9vNkr1DlsoSL+4bF VAxCMetc6aW3EZ/MrAXvNoN6CQ3lQqqnJ1TIKXmglyxjMH0EUhYdO+ovYDijUEW+ yQYl8cnNDkQVSdK5UJ8j3u95p8TpKn/+5KIK8cW8sd8ZhHoV -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:20 2025 by rpki-client