This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer (raw, json) Hash identifier: lgEeBSF6miaGXQFVxLthtPY4eOe65ZItdstR9LDMLEk= Subject key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C50C98B7006F6B23A6958A340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Dec 2025 13:45:23 +0000 Certificate not after: Thu 30 Mar 2028 12:45:23 +0000 Subordinate resources: IP: 137.57.0.0/16 IP: 146.152.0.0/16 IP: 192.55.32.0 -- 192.55.45.255 IP: 192.55.233.0/24 IP: 204.128.183.0/24 IP: 204.130.196.0/24 IP: 2620:104:9000::/44 IP: 2620:148::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:c9:8b:70:06:f6:b2:3a:69:58:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 26 13:45:23 2025 GMT Not After : Mar 30 12:45:23 2028 GMT Subject: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:dc:1a:dc:66:8a:c6:df:f3:a5:e6:d6:7b: 27:ee:98:12:ef:ba:90:21:7b:af:69:f3:92:e2:c6: b7:9d:6d:08:e2:42:3b:1c:2a:14:d1:30:5d:22:07: 57:28:a7:61:f3:73:b2:74:06:d2:ef:33:f5:74:ea: 81:79:ce:4a:0a:30:89:57:b1:21:bf:f3:41:71:dd: e9:a4:95:8a:e6:83:54:dc:5c:e0:71:aa:36:c5:7f: 06:5e:1d:92:07:7b:95:45:63:c0:b5:2a:91:72:99: e4:a3:b0:be:be:50:29:1a:28:fe:d1:08:5e:f4:4f: 9a:25:35:24:2b:bd:68:b2:e0:81:50:28:c4:c1:e3: ee:3b:fc:0e:d0:91:5c:88:be:74:08:f1:26:3f:69: 18:dc:04:fd:8c:2c:17:f2:f5:9c:1f:fc:69:b4:50: 51:46:4e:aa:21:bc:13:7d:d7:88:04:6d:06:2c:e5: a9:cd:02:12:ac:20:85:ba:bc:42:4f:5a:41:cf:59: 68:5f:da:6f:1b:b1:2d:16:b1:d0:a1:b8:0e:bb:0c: ae:18:17:15:1e:b4:a4:e9:f2:aa:ad:c8:49:28:8e: c3:35:27:bf:81:50:b8:14:4d:65:09:24:dd:4f:ab: 9d:00:b1:78:6d:4b:2e:af:d0:2c:82:d5:32:1d:9f: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 137.57.0.0/16 146.152.0.0/16 192.55.32.0-192.55.45.255 192.55.233.0/24 204.128.183.0/24 204.130.196.0/24 IPv6: 2620:104:9000::/44 2620:148::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6c:82:88:72:4f:dc:93:3b:8e:09:e4:ea:50:f1:90:d5:3c: 99:18:8e:33:2c:ee:6e:7f:a6:99:f1:cd:f6:dc:08:b1:32:45: 74:22:c4:cc:bf:5f:7f:bd:36:93:84:e7:12:43:c0:9a:23:30: 17:e8:85:3c:f3:99:d2:16:37:e0:02:4e:c5:71:5f:da:02:6e: b9:8d:b9:65:e2:ac:4a:df:0b:e8:a9:71:52:9e:0f:b0:b2:9b: 8a:d5:76:8c:ad:ea:26:31:a8:74:32:c9:b9:11:aa:6b:73:07: 5a:28:48:25:49:53:69:ae:77:87:50:54:7f:71:f4:a1:ce:7a: 29:11:a7:97:51:d4:32:48:c3:78:6b:c3:52:33:4c:d9:c4:52: 45:2e:c1:f6:6a:34:aa:e4:f0:c0:63:62:3d:27:79:6a:cd:87: f4:60:42:15:f5:b0:a5:ac:a2:90:ac:07:73:9e:08:f2:47:d8: 27:67:2b:e1:ba:24:5e:3b:d6:c9:c0:81:a1:1a:d3:84:9b:e9: 05:05:26:85:bd:eb:83:8e:c2:fc:25:7e:36:7a:e6:c7:76:47: 02:5a:11:15:8d:b1:24:a5:33:69:7d:77:ec:35:fb:e7:f9:bd: 79:35:16:a3:a6:d3:ae:90:13:45:ee:e1:69:40:50:c1:ba:45: 61:39:5d:c3 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWExQyYtwBvayOmlYo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTIyNjEzNDUyM1oXDTI4MDMzMDEyNDUyM1owLzEtMCsGA1UEAxMk NzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXzcGtxmisbf86Xm1nsn7pgS77qQIXuvafOS 4sa3nW0I4kI7HCoU0TBdIgdXKKdh83OydAbS7zP1dOqBec5KCjCJV7Ehv/NBcd3p pJWK5oNU3Fzgcao2xX8GXh2SB3uVRWPAtSqRcpnko7C+vlApGij+0Qhe9E+aJTUk K71osuCBUCjEwePuO/wO0JFciL50CPEmP2kY3AT9jCwX8vWcH/xptFBRRk6qIbwT fdeIBG0GLOWpzQISrCCFurxCT1pBz1loX9pvG7EtFrHQobgOuwyuGBcVHrSk6fKq rchJKI7DNSe/gVC4FE1lCSTdT6udALF4bUsur9AsgtUyHZ/zmQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFFIt1muHBQab4kQ+jUHLtTfMODGXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzcwNGE3NjFmLWI3MWEtNGZhMi1i MGU3LWRiNTI3OGUyM2RjMy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhl MjNkYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwXAYIKwYBBQUH AQcBAf8ETTBLMDAEAgABMCoDAwCJOQMDAJKYMAwDBAXANyADBAHANywDBADAN+kD BADMgLcDBADMgsQwFwQCAAIwEQMHBCYgAQSQAAMGBCYgAUgAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEZs gohyT9yTO44J5OpQ8ZDVPJkYjjMs7m5/ppnxzfbcCLEyRXQixMy/X3+9NpOE5xJD wJojMBfohTzzmdIWN+ACTsVxX9oCbrmNuWXirErfC+ipcVKeD7Cym4rVdoyt6iYx qHQyybkRqmtzB1ooSCVJU2mud4dQVH9x9KHOeikRp5dR1DJIw3hrw1IzTNnEUkUu wfZqNKrk8MBjYj0neWrNh/RgQhX1sKWsopCsB3OeCPJH2CdnK+G6JF471snAgaEa 04Sb6QUFJoW964OOwvwlfjZ65sd2RwJaERWNsSSlM2l9d+w1++f5vXk1FqOm066Q E0Xu4WlAUMG6RWE5XcM= -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:56 2026 by rpki-client