This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
File: 78369c58-f0b4-454b-ad08-df84f1fd007c.cer (raw, json)
Hash identifier: esezhgyvchLC91HhEy+QzRYLrJtSFnii7BLOoHdL6wI=
Subject key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584BCEF8BAAD68D2E025E6CBAB00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 10 Nov 2025 01:45:22 +0000
Certificate not after: Sun 13 Feb 2028 01:45:22 +0000
Subordinate resources: AS: 22822
AS: 23059
AS: 23135
AS: 23164
AS: 25804
AS: 26506
AS: 27191
IP: 68.142.64.0/18
IP: 69.28.128.0/18
IP: 69.164.0.0/18
IP: 200.110.232.0/21
IP: 206.223.120.0/23
IP: 208.69.176.0/21
IP: 208.111.128.0/18
IP: 2001:504:18::/48
IP: 2001:504:1c::/48
IP: 2607:f4e8::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ce:f8:ba:ad:68:d2:e0:25:e6:cb:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Nov 10 01:45:22 2025 GMT
Not After : Feb 13 01:45:22 2028 GMT
Subject: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:5a:27:76:f1:23:a7:ec:23:ef:dc:8a:b6:
49:d3:11:49:07:99:23:cb:f6:e5:b1:18:f2:3e:3d:
69:03:8c:aa:56:38:19:96:94:bb:c1:18:da:e3:05:
84:52:b1:1c:e5:e3:81:3a:32:af:dc:5f:f1:c4:19:
9c:7f:3f:73:75:4b:6c:fe:e3:e6:a0:b3:1e:61:15:
68:f5:e5:d1:93:cb:87:cc:16:42:2e:c3:f3:67:97:
1b:50:4f:02:7c:64:6b:c0:5f:9d:3b:54:ca:d0:89:
be:88:9c:58:28:ff:a4:f6:6c:63:0e:73:3f:1a:11:
ae:0a:11:78:d6:39:54:20:1b:fe:3d:4a:15:3b:27:
9a:c0:07:2a:48:75:a6:ce:74:1e:33:04:7d:38:c6:
c6:70:bb:8e:0e:17:f3:81:f9:44:3b:2c:a7:41:5a:
73:f3:d5:6f:ed:51:86:63:df:2a:34:f0:d6:98:42:
96:bb:dd:31:ee:58:ed:0f:56:73:33:8e:e3:6f:8f:
26:0c:ad:b5:0a:91:dd:66:4b:ec:be:31:a1:d2:6a:
90:b6:43:6b:4d:6c:6f:3d:b8:0d:c5:da:d3:f3:85:
0e:69:b7:98:ce:28:44:a4:d0:e3:c4:eb:82:fa:5c:
78:8b:22:3f:5f:4a:d8:8a:1c:f0:5c:a1:51:68:ef:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
68.142.64.0/18
69.28.128.0/18
69.164.0.0/18
200.110.232.0/21
206.223.120.0/23
208.69.176.0/21
208.111.128.0/18
IPv6:
2001:504:18::/48
2001:504:1c::/48
2607:f4e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22822
23059
23135
23164
25804
26506
27191
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:3a:92:60:2b:d1:97:d4:82:f8:e3:4c:88:e9:14:0a:b0:9e:
37:e3:6b:a0:d1:8c:0e:8f:44:b1:25:22:51:21:9b:bd:d3:4d:
bd:d8:f4:99:cf:bd:ef:8b:e7:8f:5d:49:96:3d:3c:6a:0d:d5:
89:6e:0d:65:11:79:db:48:2c:c7:17:86:9e:e6:4a:e9:11:23:
94:37:a5:56:57:db:35:bf:78:76:a0:49:04:b0:2b:82:0c:d0:
a9:bf:7c:fe:40:d2:07:3c:61:8e:90:e7:59:0f:10:94:24:cd:
c7:ec:b7:40:95:9d:c5:7f:9b:9f:8b:ad:cc:23:f9:c2:48:d8:
d2:38:66:c3:ec:e8:f4:31:e0:b8:59:c6:3e:74:02:66:58:ad:
7a:d5:d8:ac:d1:57:24:13:ed:28:2b:e6:2e:66:56:1e:b8:62:
63:71:18:49:8e:8f:42:ab:26:d5:47:44:4a:42:ff:97:aa:97:
4f:fd:d6:dc:46:5f:29:a3:65:a0:c7:27:ad:30:a1:e7:c7:4c:
d8:ca:dd:3d:6b:58:f8:13:4e:71:2c:1c:5c:06:bd:92:98:dd:
68:26:01:e1:31:fc:d7:89:1f:7f:2a:8a:a8:ec:18:9d:2e:d4:
59:53:03:50:22:b4:f8:3c:15:3f:51:d2:96:2b:82:1b:10:33:
7e:d8:2b:2a
-----BEGIN CERTIFICATE-----
MIIHZTCCBk2gAwIBAgIUAQ0Mn0MoWEvO+LqtaNLgJebLqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI1MTExMDAxNDUyMloXDTI4MDIxMzAxNDUyMlowLzEtMCsGA1UEAxMk
NzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQwMDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGNaJ3bxI6fsI+/cirZJ0xFJB5kjy/blsRjy
Pj1pA4yqVjgZlpS7wRja4wWEUrEc5eOBOjKv3F/xxBmcfz9zdUts/uPmoLMeYRVo
9eXRk8uHzBZCLsPzZ5cbUE8CfGRrwF+dO1TK0Im+iJxYKP+k9mxjDnM/GhGuChF4
1jlUIBv+PUoVOyeawAcqSHWmznQeMwR9OMbGcLuODhfzgflEOyynQVpz89Vv7VGG
Y98qNPDWmEKWu90x7ljtD1ZzM47jb48mDK21CpHdZkvsvjGh0mqQtkNrTWxvPbgN
xdrT84UOabeYzihEpNDjxOuC+lx4iyI/X0rYihzwXKFRaO/9PwIDAQABo4IEdzCC
BHMwHQYDVR0OBBYEFN8LngkGMdfBcOIaiG0pAaJUdTllMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83
ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc4MzY5YzU4LWYwYjQtNDU0Yi1h
ZDA4LWRmODRmMWZkMDA3Yy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFm
ZDAwN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwZAYIKwYBBQUH
AQcBAf8EVTBTMDAEAgABMCoDBAZEjkADBAZFHIADBAZFpAADBAPIbugDBAHO33gD
BAPQRbADBAbQb4AwHwQCAAIwGQMHACABBQQAGAMHACABBQQAHAMFACYH9OgwMQYI
KwYBBQUHAQgBAf8EIjAgoB4wHAICWSYCAloTAgJaXwICWnwCAmTMAgJnigICajcw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXTqSYCvRl9SC+ONMiOkUCrCeN+NroNGMDo9EsSUiUSGbvdNNvdj0
mc+974vnj11Jlj08ag3ViW4NZRF520gsxxeGnuZK6REjlDelVlfbNb94dqBJBLAr
ggzQqb98/kDSBzxhjpDnWQ8QlCTNx+y3QJWdxX+bn4utzCP5wkjY0jhmw+zo9DHg
uFnGPnQCZlitetXYrNFXJBPtKCvmLmZWHrhiY3EYSY6PQqsm1UdESkL/l6qXT/3W
3EZfKaNloMcnrTCh58dM2MrdPWtY+BNOcSwcXAa9kpjdaCYB4TH814kffyqKqOwY
nS7UWVMDUCK0+DwVP1HSliuCGxAzftgrKg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:55:42 2025 by rpki-client