This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer File: 4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer (raw, json) Hash identifier: yMYr5s92Vi1W0ZMcrzoGngLosymEEiYEMej9EwNZCxY= Subject key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C645453FC4134EDF6116C36C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Jan 2026 13:45:23 +0000 Certificate not after: Thu 06 Apr 2028 12:45:23 +0000 Subordinate resources: AS: 14633 IP: 74.121.8.0/21 IP: 172.85.64.0/21 IP: 199.83.120.0/21 IP: 2605:6380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:54:53:fc:41:34:ed:f6:11:6c:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 2 13:45:23 2026 GMT Not After : Apr 6 12:45:23 2028 GMT Subject: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:02:e7:f4:9b:0e:86:db:1b:4c:21:53:f5:0f: 39:4a:10:6f:19:05:c9:c7:57:85:6d:a0:43:28:12: 2e:7c:51:7a:c9:52:d5:a8:f1:5c:76:3a:a9:aa:55: 0f:1f:b6:eb:21:aa:57:5e:2f:c9:78:b0:cd:f0:08: 50:2a:b7:35:4d:eb:b7:d7:e5:25:84:49:3c:8d:a2: a2:cf:e3:57:97:33:aa:84:7c:7a:7a:7e:72:e2:6f: 70:39:97:8b:c0:7c:4c:96:90:1d:7c:2f:94:18:e7: ca:25:7b:b1:76:bb:c5:fe:7c:34:9b:1f:8b:b7:d8: 38:ff:eb:f6:80:30:0d:b5:0b:f8:1c:4d:10:89:58: 8c:8c:e1:5b:46:18:cd:55:37:b4:82:4c:ce:36:5e: c0:47:33:be:bc:b9:84:63:c4:31:b0:4b:21:c8:f5: c7:2b:5b:31:7c:f8:62:8f:0a:e2:46:67:5d:ec:86: 7f:b5:17:a8:1a:94:f0:b8:b2:63:23:2a:54:82:81: f1:9e:7d:ed:3e:8f:8e:ce:50:29:cc:45:a6:34:58: b5:0b:78:f8:fd:3c:04:5c:1c:5d:ea:0a:fe:8e:0c: 7e:d7:97:d2:a0:f3:3c:33:c3:9a:73:2a:17:d2:55: 2d:c4:25:f0:31:d3:1f:8c:42:22:65:c9:42:6a:15: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.121.8.0/21 172.85.64.0/21 199.83.120.0/21 IPv6: 2605:6380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14633 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:51:0a:10:ad:f0:8e:84:4c:f2:83:2f:6b:d8:35:ca:ba:e2: 0b:39:16:61:28:58:d0:f6:5a:db:99:21:88:76:84:cb:95:c7: cb:eb:28:cb:45:e8:c3:91:17:4d:da:0c:51:45:28:de:20:8b: fa:03:30:68:57:fd:0b:99:e9:96:c2:63:da:b5:4a:94:1a:dc: 78:7e:00:c2:ea:7b:45:f7:fc:7e:a6:f2:94:b1:c3:51:09:8b: 82:0b:bc:b9:8b:03:99:36:94:19:c3:99:4a:0b:e4:d8:2d:f0: 2f:a5:d8:65:0c:01:19:50:09:b1:12:b6:71:5e:74:a4:87:12: 1b:c6:ea:bb:e1:e1:a3:d6:4d:c9:f5:93:a6:b5:92:77:3b:1e: 63:eb:3a:e6:43:65:cf:4d:ff:e2:f0:db:90:a0:fb:85:8a:f9: ec:f6:6a:bf:dc:7e:b2:8e:87:04:90:8d:c8:a9:06:09:ac:08: 8d:e2:1a:cb:a0:17:f3:6c:35:88:6d:00:69:e3:de:53:ac:3a: 78:72:e6:2b:aa:bd:54:03:61:9d:60:6c:6d:c1:eb:dc:89:9e: 92:80:7b:d0:a7:42:56:24:88:7a:d3:55:81:ea:0d:4e:48:31: 42:76:78:78:a4:a9:ab:7d:3b:37:85:62:49:c8:38:c3:8c:e3: 66:22:7d:7f -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWExkVFP8QTTt9hFsNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDEwMjEzNDUyM1oXDTI4MDQwNjEyNDUyM1owLzEtMCsGA1UEAxMk NGRiZTNjYTItNDliZC00NzU4LTgwNTQtNWQxNTU1YTkwYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgLn9JsOhtsbTCFT9Q85ShBvGQXJx1eFbaBD KBIufFF6yVLVqPFcdjqpqlUPH7brIapXXi/JeLDN8AhQKrc1Teu31+UlhEk8jaKi z+NXlzOqhHx6en5y4m9wOZeLwHxMlpAdfC+UGOfKJXuxdrvF/nw0mx+Lt9g4/+v2 gDANtQv4HE0QiViMjOFbRhjNVTe0gkzONl7ARzO+vLmEY8QxsEshyPXHK1sxfPhi jwriRmdd7IZ/tReoGpTwuLJjIypUgoHxnn3tPo+OzlApzEWmNFi1C3j4/TwEXBxd 6gr+jgx+15fSoPM8M8OacyoX0lUtxCXwMdMfjEIiZclCahVeFwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFFXNIcxTQOMD5tGWEMcdD4lgZw7rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 ZGJlM2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1NTVhOTBhMTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzRkYmUzY2EyLTQ5YmQtNDc1OC04 MDU0LTVkMTU1NWE5MGExMS80ZGJlM2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1NTVh OTBhMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBANKeQgDBAOsVUADBAPHU3gwDQQCAAIwBwMFACYF Y4AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICOSkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmVEKEK3wjoRM 8oMva9g1yrriCzkWYShY0PZa25khiHaEy5XHy+soy0Xow5EXTdoMUUUo3iCL+gMw aFf9C5nplsJj2rVKlBrceH4Awup7Rff8fqbylLHDUQmLggu8uYsDmTaUGcOZSgvk 2C3wL6XYZQwBGVAJsRK2cV50pIcSG8bqu+Hho9ZNyfWTprWSdzseY+s65kNlz03/ 4vDbkKD7hYr57PZqv9x+so6HBJCNyKkGCawIjeIay6AX82w1iG0AaePeU6w6eHLm K6q9VANhnWBsbcHr3ImekoB70KdCViSIetNVgeoNTkgxQnZ4eKSpq307N4ViScg4 w4zjZiJ9fw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:19:12 2026 by rpki-client