This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer File: 798448e2-55be-4c24-8014-28c2c70dfc84.cer (raw, json) Hash identifier: jbKHQlZu+FlSGU4erZw4jxEYPjgrSkdMphgxra2+wbM= Subject key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C056913C4957D65D750F7A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 29 Nov 2025 13:45:24 +0000 Certificate not after: Fri 03 Mar 2028 13:45:24 +0000 Subordinate resources: AS: 36601 IP: 172.83.248.0/24 IP: 192.109.92.0/23 IP: 2607:e580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:69:13:c4:95:7d:65:d7:50:f7:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 29 13:45:24 2025 GMT Not After : Mar 3 13:45:24 2028 GMT Subject: CN=798448e2-55be-4c24-8014-28c2c70dfc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:d3:3d:cd:fa:db:72:86:8d:fc:65:d3:bf: 25:fc:db:f1:e3:4f:6d:e5:42:ed:fc:50:66:36:62: 73:f1:21:86:25:8b:50:7e:9d:9b:a0:7b:d1:56:9a: 3b:32:7f:15:59:eb:cc:9e:1b:84:29:9c:11:e5:00: dd:7e:49:e3:96:cd:35:14:b4:92:c6:62:06:4a:83: a8:b3:9b:3f:f5:8b:25:2e:67:d7:87:ff:64:20:fe: 6a:c5:da:ba:80:fa:5e:4a:63:48:5d:fc:9a:c4:d0: 8c:f6:0d:be:b3:34:72:51:5b:74:e3:de:bb:e1:f1: ab:14:04:db:54:58:0a:0e:1e:f9:da:9b:fe:f6:b9: f4:61:b2:13:88:98:8e:ce:61:3a:21:93:07:76:06: 56:f9:ac:90:ae:25:b2:84:30:b9:b2:1a:1d:13:c1: c7:c5:78:8a:dc:5f:67:c5:3e:60:e3:be:32:78:84: 59:6a:90:5c:f6:41:a2:a1:60:63:a0:19:74:fb:90: 80:24:27:5e:e6:98:a5:a5:69:36:20:84:79:a7:cd: fc:c6:be:d3:41:fb:82:5d:16:12:03:7c:89:3b:a9: 04:50:74:ee:3a:fa:6b:35:38:f1:d5:7d:98:9b:03: f3:12:b4:f1:3e:8e:f6:69:18:a1:92:0e:77:5c:3e: 07:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 172.83.248.0/24 192.109.92.0/23 IPv6: 2607:e580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36601 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:97:41:40:0f:e4:3b:f2:b9:1b:bb:10:bf:82:d6:70:0e:1b: a9:07:4e:d5:6b:6b:2b:d9:ec:0c:e7:5c:cc:d1:58:c7:f7:66: f2:37:1f:7c:4f:5c:82:e3:4e:dc:85:3f:55:3e:3d:d2:0e:5d: 5a:8f:3a:8c:ce:6a:61:42:1d:c6:b4:25:33:e1:cc:65:d8:36: 52:87:b9:b7:89:44:33:7a:7e:66:df:fb:09:49:78:27:ac:49: 58:27:8f:71:2f:69:78:e5:f0:ec:e0:ed:21:03:b3:b5:ba:5f: 65:f6:e8:1a:31:d6:1f:a8:ea:01:a7:2e:e6:79:dd:cb:2f:33: 43:5f:60:12:de:73:a5:91:26:3e:9d:a1:94:51:b9:75:78:39: 91:50:71:10:4b:80:b2:ea:72:2d:88:89:01:32:23:e6:4d:c6: da:8f:70:24:f6:19:46:6f:2d:31:80:5d:03:62:3a:18:1a:c0: 8d:b9:f3:65:0d:59:d7:64:00:a2:d9:95:07:35:d3:d8:2e:52: f8:f8:9b:de:37:88:49:c4:a6:58:0d:c0:ec:0c:9a:49:0a:cf: 64:0e:6e:56:55:b7:75:a8:78:8e:9d:31:b3:ab:bb:f1:a5:54: f5:fe:66:55:0a:6d:6d:35:11:59:92:56:41:7b:ce:8b:f6:d5: e2:c1:ef:4b -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEwFaRPElX1l11D3oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTEyOTEzNDUyNFoXDTI4MDMwMzEzNDUyNFowLzEtMCsGA1UEAxMk Nzk4NDQ4ZTItNTViZS00YzI0LTgwMTQtMjhjMmM3MGRmYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJzTPc3623KGjfxl078l/Nvx409t5ULt/FBm NmJz8SGGJYtQfp2boHvRVpo7Mn8VWevMnhuEKZwR5QDdfknjls01FLSSxmIGSoOo s5s/9YslLmfXh/9kIP5qxdq6gPpeSmNIXfyaxNCM9g2+szRyUVt049674fGrFATb VFgKDh752pv+9rn0YbITiJiOzmE6IZMHdgZW+ayQriWyhDC5shodE8HHxXiK3F9n xT5g474yeIRZapBc9kGioWBjoBl0+5CAJCde5pilpWk2IIR5p838xr7TQfuCXRYS A3yJO6kEUHTuOvprNTjx1X2YmwPzErTxPo72aRihkg53XD4HqwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFMZwJV05fecNJXIBpyu963KE0tbXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 OTg0NDhlMi01NWJlLTRjMjQtODAxNC0yOGMyYzcwZGZjODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc5ODQ0OGUyLTU1YmUtNGMyNC04 MDE0LTI4YzJjNzBkZmM4NC83OTg0NDhlMi01NWJlLTRjMjQtODAxNC0yOGMyYzcw ZGZjODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBACsU/gDBAHAbVwwDQQCAAIwBwMFACYH5YAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAI75MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIiXQUAP5DvyuRu7EL+C 1nAOG6kHTtVrayvZ7AznXMzRWMf3ZvI3H3xPXILjTtyFP1U+PdIOXVqPOozOamFC Hca0JTPhzGXYNlKHubeJRDN6fmbf+wlJeCesSVgnj3EvaXjl8Ozg7SEDs7W6X2X2 6Box1h+o6gGnLuZ53csvM0NfYBLec6WRJj6doZRRuXV4OZFQcRBLgLLqci2IiQEy I+ZNxtqPcCT2GUZvLTGAXQNiOhgawI2582UNWddkAKLZlQc109guUvj4m943iEnE plgNwOwMmkkKz2QOblZVt3WoeI6dMbOru/GlVPX+ZlUKbW01EVmSVkF7zov21eLB 70s= -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:46 2025 by rpki-client