This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34.cer File: d72c0e49-8b50-4964-9116-2214693f2f34.cer (raw, json) Hash identifier: XmJk2FCif4ofzsqmjWFpcjuFz2DikgEqayoRgudr+Zo= Subject key identifier: E8:6B:71:64:5B:C2:6D:A9:D2:72:25:F7:D3:57:7A:C2:E9:A5:45:DC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BE97E3A8640D40E13509F2A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34/d72c0e49-8b50-4964-9116-2214693f2f34.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Nov 2025 13:45:23 +0000 Certificate not after: Tue 22 Feb 2028 13:45:23 +0000 Subordinate resources: IP: 208.99.63.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e9:7e:3a:86:40:d4:0e:13:50:9f:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 19 13:45:23 2025 GMT Not After : Feb 22 13:45:23 2028 GMT Subject: CN=d72c0e49-8b50-4964-9116-2214693f2f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ac:85:8d:68:bc:3c:ea:d4:a1:39:d6:76:c9: 31:47:3c:8d:3b:35:11:34:84:fe:6a:b7:61:e2:32: 97:9e:0e:35:c0:30:55:b0:2b:f7:a8:2e:df:11:a1: 8f:64:f7:fe:78:d2:c5:5f:08:6b:f6:fa:37:7d:4a: 80:b4:89:0f:fa:23:3b:a5:f8:c4:7d:e6:3c:80:a6: a3:5e:b1:34:1d:e0:11:e0:10:c9:86:10:13:cf:9d: 6d:df:9e:9b:68:2f:83:14:87:bf:05:f1:ab:7f:1e: c8:e1:1c:4b:6f:8a:b9:dc:bf:52:51:ea:71:9b:e5: 96:c1:e3:a3:6e:17:92:7a:d0:cb:7c:91:ad:48:86: be:cb:95:46:1d:e6:02:86:e5:d1:49:0d:33:25:f9: 18:7c:57:48:15:9f:84:cf:bf:a0:09:a6:4c:ee:80: cf:ac:29:f2:a0:07:6d:e6:6d:93:7f:41:0f:99:5c: d3:ae:e5:1f:5d:7f:71:2d:06:9e:42:65:56:7b:a8: 7b:6b:48:73:a8:3f:60:24:59:0d:ef:cf:e6:7c:3c: 85:60:ae:86:fa:36:40:df:21:fd:13:55:b2:b7:ee: 37:80:02:a6:b2:8c:f6:c7:54:77:04:45:57:63:d0: 4d:9b:1a:95:1f:5d:f2:1e:cd:46:f6:b2:b1:e1:ae: 5c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6B:71:64:5B:C2:6D:A9:D2:72:25:F7:D3:57:7A:C2:E9:A5:45:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d72c0e49-8b50-4964-9116-2214693f2f34/d72c0e49-8b50-4964-9116-2214693f2f34.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 208.99.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8b:5c:81:19:16:42:cc:1b:30:7e:4f:c3:9a:fc:2e:33:ae: 70:fa:34:0d:78:c6:db:3a:f9:de:62:d0:6a:fc:26:c1:8d:6d: ce:7b:a3:35:8b:73:15:0d:da:72:4f:da:39:48:ee:c3:2a:98: 76:70:76:d0:71:1e:67:cc:58:36:20:0b:d0:53:66:a9:0e:49: 44:3c:16:f2:4e:49:f7:49:46:0b:8c:f1:ed:9e:5d:4b:59:47: f5:2d:0c:ab:69:8d:d7:67:d7:da:b3:4d:04:82:87:72:2d:81: 1a:74:f3:7f:e7:c7:ae:f5:b6:0c:86:eb:ba:f2:f0:9d:99:f8: f6:01:08:05:19:61:34:fc:1d:54:3a:8f:e2:38:92:6e:69:6a: d8:d2:ff:e5:e1:cb:0d:b6:a2:a7:2c:0b:6d:05:3c:51:51:86: 35:a5:62:1d:37:be:91:49:b1:57:4b:de:48:d2:65:10:94:9e: fc:2e:02:a0:e2:59:bc:9b:3d:a4:f4:58:87:fd:48:7a:6f:07: 31:3f:7f:96:07:3f:ab:4c:4e:83:f8:63:3b:79:59:5c:3c:03: 0d:85:77:57:79:39:a5:9f:42:d6:06:32:36:04:4a:51:4b:05: ec:49:fa:47:58:94:8d:7c:02:3b:45:c9:0f:5d:4e:88:20:a1: f9:49:ac:a0 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEvpfjqGQNQOE1CfKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTExOTEzNDUyM1oXDTI4MDIyMjEzNDUyM1owLzEtMCsGA1UEAxMk ZDcyYzBlNDktOGI1MC00OTY0LTkxMTYtMjIxNDY5M2YyZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6yFjWi8POrUoTnWdskxRzyNOzURNIT+ardh 4jKXng41wDBVsCv3qC7fEaGPZPf+eNLFXwhr9vo3fUqAtIkP+iM7pfjEfeY8gKaj XrE0HeAR4BDJhhATz51t356baC+DFIe/BfGrfx7I4RxLb4q53L9SUepxm+WWweOj bheSetDLfJGtSIa+y5VGHeYChuXRSQ0zJfkYfFdIFZ+Ez7+gCaZM7oDPrCnyoAdt 5m2Tf0EPmVzTruUfXX9xLQaeQmVWe6h7a0hzqD9gJFkN78/mfDyFYK6G+jZA3yH9 E1Wyt+43gAKmsoz2x1R3BEVXY9BNmxqVH13yHs1G9rKx4a5cawIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOhrcWRbwm2p0nIl99NXesLppUXcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k NzJjMGU0OS04YjUwLTQ5NjQtOTExNi0yMjE0NjkzZjJmMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Q3MmMwZTQ5LThiNTAtNDk2NC05 MTE2LTIyMTQ2OTNmMmYzNC9kNzJjMGU0OS04YjUwLTQ5NjQtOTExNi0yMjE0Njkz ZjJmMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADQYz8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjYtcgRkWQswbMH5Pw5r8 LjOucPo0DXjG2zr53mLQavwmwY1tznujNYtzFQ3ack/aOUjuwyqYdnB20HEeZ8xY NiAL0FNmqQ5JRDwW8k5J90lGC4zx7Z5dS1lH9S0Mq2mN12fX2rNNBIKHci2BGnTz f+fHrvW2DIbruvLwnZn49gEIBRlhNPwdVDqP4jiSbmlq2NL/5eHLDbaipywLbQU8 UVGGNaViHTe+kUmxV0veSNJlEJSe/C4CoOJZvJs9pPRYh/1Iem8HMT9/lgc/q0xO g/hjO3lZXDwDDYV3V3k5pZ9C1gYyNgRKUUsF7En6R1iUjXwCO0XJD11OiCCh+Ums oA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:51 2025 by rpki-client