This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453.cer File: c17dbfd2-c39f-4314-88e6-57ca9f713453.cer (raw, json) Hash identifier: 87EeZ9XmFEswhUygdMpWh/jQd7vNKBcjeP/DSmNtkTM= Subject key identifier: 71:A5:32:04:76:BE:69:12:D7:AE:16:6B:20:6D:15:3C:1E:A8:04:10 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584C671F0400855B96E0858E7200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Jan 2026 13:45:23 +0000 Certificate not after: Fri 07 Apr 2028 12:45:23 +0000 Subordinate resources: AS: 32150 IP: 198.49.126.0/24 IP: 2602:fbef::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:67:1f:04:00:85:5b:96:e0:85:8e:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 3 13:45:23 2026 GMT Not After : Apr 7 12:45:23 2028 GMT Subject: CN=c17dbfd2-c39f-4314-88e6-57ca9f713453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:9d:fe:1b:dd:2a:82:fc:d3:54:e1:cd:00: 77:67:42:ed:17:61:4a:84:54:f0:0c:2d:18:28:85: fa:63:61:a6:57:9c:6a:dd:0d:94:b7:df:81:a7:59: 26:21:d6:7a:95:30:c5:ec:22:7d:e6:10:6c:36:9f: 44:1c:60:68:c3:be:cf:6c:11:cb:29:7b:f3:8f:a5: 3a:9a:2b:31:85:d9:b0:a7:ac:e1:3b:2b:ee:ab:c8: 69:2e:58:3f:d6:ce:27:54:01:85:8d:02:c9:81:60: bb:d2:ac:a8:6e:3a:2e:21:fd:62:e1:11:16:81:03: b4:25:78:d9:7a:34:a7:02:5a:fa:5e:2c:c1:e4:4f: a5:e2:74:0b:b9:7c:6d:f5:cc:42:aa:a4:c0:b9:00: ce:0d:11:8e:a1:a5:4e:70:00:e3:3b:47:0e:cd:71: 0f:59:15:f3:5b:5f:79:b8:e0:c1:cb:16:14:ba:f5: 8d:b2:9b:b8:77:12:9f:8e:5c:f2:64:e4:b0:83:93: b6:1e:1f:ea:48:63:fd:59:ca:5d:8a:6b:d6:42:b7: 05:91:58:4d:b1:a8:72:e6:48:bc:a3:24:97:85:49: 87:1c:c4:93:da:31:ac:cc:9e:44:da:c9:f5:1e:ff: 16:e4:a5:c4:d2:4d:53:6d:a1:24:80:21:71:e2:dc: da:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A5:32:04:76:BE:69:12:D7:AE:16:6B:20:6D:15:3C:1E:A8:04:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c17dbfd2-c39f-4314-88e6-57ca9f713453/c17dbfd2-c39f-4314-88e6-57ca9f713453.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 198.49.126.0/24 IPv6: 2602:fbef::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32150 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:42:40:2d:80:e9:61:e0:6c:e6:4e:c6:cb:30:c9:3e:8f:4c: 40:3b:64:c4:86:a7:aa:a7:b9:63:ef:99:54:9a:0b:8a:9c:17: 98:63:0d:fe:bc:6d:bc:79:5b:10:c4:5d:49:a7:66:2e:3a:4b: 2d:9a:64:b8:f3:9a:8e:1d:8d:f1:76:4f:d2:bd:56:f3:a8:ba: 4b:ca:d7:e4:f7:d0:b9:8a:0b:1d:a1:22:58:da:34:4a:2e:08: 3b:c5:89:32:5a:36:53:9d:9a:ed:f0:74:19:8a:4a:42:8d:b1: 4d:80:1a:a3:dc:7e:da:87:0a:7e:8e:67:21:52:77:06:e1:1d: 31:a6:bb:74:4b:37:c5:a4:57:41:43:50:66:85:78:46:27:b9: 97:4b:cc:15:d5:7d:0b:43:57:35:9d:5f:32:12:fe:d4:d7:c1: 69:fe:c0:e3:71:bb:09:f5:3b:5b:e5:f6:68:a7:f7:11:e6:b9: 0f:af:d7:9b:bf:1c:76:7c:09:05:91:43:cd:c2:fc:5d:85:fc: d1:3c:5f:f5:13:9e:5a:44:14:17:07:b6:90:f2:37:10:bc:bf: 4b:43:4f:96:6b:ab:54:e0:3b:0a:88:67:5b:85:b5:24:96:6d: c7:2b:7a:dc:2e:4e:fe:3d:63:9d:ae:80:2b:02:09:eb:10:e6: a5:3e:d5:4b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWExnHwQAhVuW4IWOcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDEwMzEzNDUyM1oXDTI4MDQwNzEyNDUyM1owLzEtMCsGA1UEAxMk YzE3ZGJmZDItYzM5Zi00MzE0LTg4ZTYtNTdjYTlmNzEzNDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFWd/hvdKoL801ThzQB3Z0LtF2FKhFTwDC0Y KIX6Y2GmV5xq3Q2Ut9+Bp1kmIdZ6lTDF7CJ95hBsNp9EHGBow77PbBHLKXvzj6U6 misxhdmwp6zhOyvuq8hpLlg/1s4nVAGFjQLJgWC70qyobjouIf1i4REWgQO0JXjZ ejSnAlr6XizB5E+l4nQLuXxt9cxCqqTAuQDODRGOoaVOcADjO0cOzXEPWRXzW195 uODByxYUuvWNspu4dxKfjlzyZOSwg5O2Hh/qSGP9WcpdimvWQrcFkVhNsahy5ki8 oySXhUmHHMST2jGszJ5E2sn1Hv8W5KXE0k1TbaEkgCFx4tzaxQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFHGlMgR2vmkS164WayBtFTweqAQQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j MTdkYmZkMi1jMzlmLTQzMTQtODhlNi01N2NhOWY3MTM0NTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2MxN2RiZmQyLWMzOWYtNDMxNC04 OGU2LTU3Y2E5ZjcxMzQ1My9jMTdkYmZkMi1jMzlmLTQzMTQtODhlNi01N2NhOWY3 MTM0NTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGMX4wDgQCAAIwCAMGACYC++8AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAn2WMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAElCQC2A6WHgbOZOxsswyT6PTEA7 ZMSGp6qnuWPvmVSaC4qcF5hjDf68bbx5WxDEXUmnZi46Sy2aZLjzmo4djfF2T9K9 VvOoukvK1+T30LmKCx2hIljaNEouCDvFiTJaNlOdmu3wdBmKSkKNsU2AGqPcftqH Cn6OZyFSdwbhHTGmu3RLN8WkV0FDUGaFeEYnuZdLzBXVfQtDVzWdXzIS/tTXwWn+ wONxuwn1O1vl9min9xHmuQ+v15u/HHZ8CQWRQ83C/F2F/NE8X/UTnlpEFBcHtpDy NxC8v0tDT5Zrq1TgOwqIZ1uFtSSWbccretwuTv49Y52ugCsCCesQ5qU+1Us= -----END CERTIFICATE-----Generated at Sun Jan 25 07:23:00 2026 by rpki-client