This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer File: 71effefa-6381-4c3d-8487-95f07e37a7cf.cer (raw, json) Hash identifier: m81nHRdYLC7yLj9U/n/KEZcVXH3qFEvCqJ/HMwVddwA= Subject key identifier: CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BEC48EA1C6BB07D6A218219F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Nov 2025 13:45:23 +0000 Certificate not after: Wed 23 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 62599 IP: 23.139.224.0/24 IP: 2604:e040::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:48:ea:1c:6b:b0:7d:6a:21:82:19:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 20 13:45:23 2025 GMT Not After : Feb 23 13:45:23 2028 GMT Subject: CN=71effefa-6381-4c3d-8487-95f07e37a7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:b2:e2:97:bb:b6:e1:e7:a5:3a:c0:53:58: 51:36:2d:98:b9:52:3a:58:fe:b9:3f:1f:d8:0e:5d: 00:3f:f4:7d:04:52:0e:14:04:74:3f:6e:d0:05:e6: 65:f9:ff:cd:5e:63:b1:4c:3d:78:6f:e4:66:db:69: c0:82:94:a8:7c:ec:de:29:04:72:b2:0c:d7:08:53: 71:64:d7:8e:97:56:0f:70:6f:89:63:3d:0f:df:db: bc:83:ef:a2:4c:0d:3f:f0:ee:39:86:86:05:03:32: 46:3e:da:ce:d8:37:4c:3e:38:97:2c:cb:a5:79:cb: 05:88:16:42:2a:e8:0d:61:ae:b4:aa:d6:17:9d:67: 10:a1:8d:03:1a:1d:c9:e6:28:6b:cb:6c:90:86:ab: eb:3f:86:50:05:f3:1e:ca:40:dc:78:29:d8:58:8e: fb:da:e9:2b:c4:26:b8:25:53:65:4f:89:46:06:fd: 53:56:a3:d2:08:a6:5a:68:4b:b6:31:04:27:76:76: cd:00:da:8a:42:93:66:68:c8:f4:7b:17:f4:c1:b6: e6:29:c6:9c:2f:14:b9:89:da:a7:03:79:65:21:ed: 28:cb:05:91:3c:19:a3:92:16:ba:f1:3e:ed:82:bf: 3b:21:e2:30:74:b1:3a:90:56:5f:45:4c:53:15:d6: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.139.224.0/24 IPv6: 2604:e040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62599 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:1d:98:7a:4d:0b:f9:0d:21:70:5c:44:24:5c:78:11:fc:dc: e2:9c:5b:16:71:8f:14:99:f7:75:c6:a9:7f:f6:9d:79:e3:7b: aa:96:c3:8f:ea:c6:af:3e:5d:0c:1a:12:7b:67:63:bf:ee:03: a1:35:33:b6:35:a7:d6:cc:63:3c:77:36:dc:a1:1c:d8:94:3f: cb:57:e4:9b:0c:9e:fd:fd:bd:42:95:60:cc:76:e8:bb:d6:dc: a0:46:b0:53:74:8b:2e:88:4c:83:1d:a2:38:7f:e9:71:28:fd: 59:d4:6e:08:29:af:75:58:69:27:dc:e9:f2:bc:e2:a3:e7:0a: 87:70:6c:4e:01:d8:2a:bf:cd:ec:e5:b1:f3:7a:b0:c2:e9:d0: 9c:e8:35:c8:67:74:b4:a0:cf:59:35:53:8f:c8:1d:a4:b2:b2: c5:8d:b9:4a:47:eb:78:c8:f2:34:79:5b:aa:f9:63:e4:17:ca: 23:f6:a4:d5:77:92:a2:04:6f:90:3d:01:e1:d1:60:b1:9e:0e: fa:92:fa:8b:dd:12:37:b3:b6:18:b6:11:ba:b7:0a:2f:ab:db: 22:f7:64:dc:ae:dd:d3:bb:ac:2f:0a:4b:ac:4e:96:44:87:a3: d8:c1:c2:7c:5c:52:13:21:d1:6d:3d:83:90:ff:05:ec:37:5f: 7a:5a:6d:5f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEvsSOoca7B9aiGCGfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTEyMDEzNDUyM1oXDTI4MDIyMzEzNDUyM1owLzEtMCsGA1UEAxMk NzFlZmZlZmEtNjM4MS00YzNkLTg0ODctOTVmMDdlMzdhN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtiy4pe7tuHnpTrAU1hRNi2YuVI6WP65Px/Y Dl0AP/R9BFIOFAR0P27QBeZl+f/NXmOxTD14b+Rm22nAgpSofOzeKQRysgzXCFNx ZNeOl1YPcG+JYz0P39u8g++iTA0/8O45hoYFAzJGPtrO2DdMPjiXLMulecsFiBZC KugNYa60qtYXnWcQoY0DGh3J5ihry2yQhqvrP4ZQBfMeykDceCnYWI772ukrxCa4 JVNlT4lGBv1TVqPSCKZaaEu2MQQndnbNANqKQpNmaMj0exf0wbbmKcacLxS5idqn A3llIe0oywWRPBmjkha68T7tgr87IeIwdLE6kFZfRUxTFdbhSwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFM6mR1Od4KNdDVJ4h5VNzIP3M3/YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 MWVmZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYwN2UzN2E3Y2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04 NDg3LTk1ZjA3ZTM3YTdjZi83MWVmZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYwN2Uz N2E3Y2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXi+AwDQQCAAIwBwMFACYE4EAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPSHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEAdmHpNC/kNIXBcRCRceBH83OKc WxZxjxSZ93XGqX/2nXnje6qWw4/qxq8+XQwaEntnY7/uA6E1M7Y1p9bMYzx3Ntyh HNiUP8tX5JsMnv39vUKVYMx26LvW3KBGsFN0iy6ITIMdojh/6XEo/VnUbggpr3VY aSfc6fK84qPnCodwbE4B2Cq/zezlsfN6sMLp0JzoNchndLSgz1k1U4/IHaSyssWN uUpH63jI8jR5W6r5Y+QXyiP2pNV3kqIEb5A9AeHRYLGeDvqS+ovdEjezthi2Ebq3 Ci+r2yL3ZNyu3dO7rC8KS6xOlkSHo9jBwnxcUhMh0W09g5D/Bew3X3pabV8= -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:08 2025 by rpki-client