This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer
File:                     e91007f4-8b69-443f-87b7-248480814a0d.cer (raw, json)
Hash identifier:          PFQ13Btrk1FrBkqFwNBHD0dmXMXURQ6GXtxQlISEIpg=
Subject key identifier:   A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584BDA23788F75661ED75D32F260
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Nov 2025 01:45:23 +0000
Certificate not after:    Thu 17 Feb 2028 01:45:23 +0000
Subordinate resources:    IP: 128.164.0.0/16
                          IP: 161.253.0.0/16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:da:23:78:8f:75:66:1e:d7:5d:32:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 14 01:45:23 2025 GMT
            Not After : Feb 17 01:45:23 2028 GMT
        Subject: CN=e91007f4-8b69-443f-87b7-248480814a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:35:28:39:19:ff:32:c3:69:87:5f:ea:81:
                    10:80:81:ee:a3:8d:9b:90:df:fc:95:dd:06:aa:a0:
                    51:d2:10:2d:78:50:b4:4f:5e:74:59:5b:3e:87:21:
                    91:4b:f1:f5:f4:9e:95:7c:19:a2:c7:b6:5f:b7:e3:
                    5d:b9:c9:ca:ff:9a:ff:d9:46:ad:d2:2a:a5:e6:be:
                    ab:0c:b4:60:45:81:41:8f:aa:3c:72:84:89:d0:5a:
                    fe:37:86:eb:ff:3e:ba:35:34:69:e6:d9:8b:bd:3d:
                    c9:bc:92:98:61:89:01:06:1c:b7:b9:9f:e6:74:32:
                    95:52:33:a5:bb:9e:fe:1c:1a:7d:52:73:86:c4:a7:
                    09:76:b8:a5:bb:b5:de:63:fa:22:8c:90:0d:5a:ff:
                    1b:d4:63:fb:57:5f:8d:4c:37:ff:28:dd:5e:9d:73:
                    6c:60:46:25:6c:0d:d2:dc:e6:b7:4e:2b:09:d8:99:
                    85:e2:3b:62:02:e9:10:93:96:e7:15:bb:39:33:2d:
                    c5:28:04:00:dc:9a:2e:d9:ec:ef:8f:e9:c6:b5:00:
                    1f:42:e3:34:cd:aa:29:52:3d:9e:84:78:6e:55:73:
                    3e:f8:cd:db:35:74:1c:fa:36:de:ee:7d:2d:42:54:
                    6a:e1:c5:fc:c4:83:05:f0:9b:f4:1b:99:62:6d:10:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.164.0.0/16
                  161.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c5:05:25:8d:2a:37:f8:ba:84:22:c8:cf:ac:c9:92:ee:40:
         f3:8e:d9:ed:61:e2:92:e0:84:38:a6:d7:c6:33:02:29:4c:a8:
         b2:01:91:dc:6f:e9:24:11:c0:5c:de:12:0f:e9:e8:da:29:4b:
         72:42:95:ec:5b:2a:95:ef:cb:70:f7:64:c9:4d:f6:ad:8c:a6:
         b4:d1:95:92:37:0d:55:f5:d9:91:7a:13:c0:12:d1:9a:0b:55:
         8d:84:7f:cf:f9:4e:47:b4:28:2a:4f:46:3c:0d:e5:3a:5f:a8:
         b3:09:9b:e1:43:e6:c7:7f:a3:27:f8:15:84:14:31:b0:4f:81:
         fe:79:4c:22:ae:ff:15:7b:d1:dd:5d:0d:d4:4a:dc:9a:45:5d:
         9b:e4:b1:fb:18:e0:09:52:ef:4c:c6:be:8d:65:1d:8c:32:3d:
         f2:ba:c1:6b:13:45:1b:65:cb:37:20:a3:92:a8:32:45:3d:41:
         87:f8:f9:d8:76:f8:09:e6:8f:eb:8b:0d:06:13:9b:58:d1:03:
         3d:b4:7e:e0:e4:ce:70:b1:a0:33:0f:d4:37:7d:ee:cc:a1:10:
         8a:3a:6c:ce:fd:66:f4:2a:13:ba:68:4f:c6:ed:fa:21:70:4f:
         50:58:9a:9f:f8:d5:08:a5:bc:99:f9:06:b1:ad:d4:f6:e0:e2:
         f6:9f:c6:ec
-----BEGIN CERTIFICATE-----
MIIG8TCCBdmgAwIBAgIUAQ0Mn0MoWEvaI3iPdWYe110y8mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI1MTExNDAxNDUyM1oXDTI4MDIxNzAxNDUyM1owLzEtMCsGA1UEAxMk
ZTkxMDA3ZjQtOGI2OS00NDNmLTg3YjctMjQ4NDgwODE0YTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEU1KDkZ/zLDaYdf6oEQgIHuo42bkN/8ld0G
qqBR0hAteFC0T150WVs+hyGRS/H19J6VfBmix7Zft+NducnK/5r/2Uat0iql5r6r
DLRgRYFBj6o8coSJ0Fr+N4br/z66NTRp5tmLvT3JvJKYYYkBBhy3uZ/mdDKVUjOl
u57+HBp9UnOGxKcJdrilu7XeY/oijJANWv8b1GP7V1+NTDf/KN1enXNsYEYlbA3S
3Oa3TisJ2JmF4jtiAukQk5bnFbs5My3FKAQA3Jou2ezvj+nGtQAfQuM0zaopUj2e
hHhuVXM++M3bNXQc+jbe7n0tQlRq4cX8xIMF8Jv0G5libRCtsQIDAQABo4IEAzCC
A/8wHQYDVR0OBBYEFKeVo6jhMXOMOkzcYeggr45PcOCPMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l
OTEwMDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0ODA4MTRhMGQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2U5MTAwN2Y0LThiNjktNDQzZi04
N2I3LTI0ODQ4MDgxNGEwZC9lOTEwMDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0ODA4
MTRhMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIwYIKwYBBQUH
AQcBAf8EFDASMBAEAgABMAoDAwCApAMDAKH9MFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFPFBSWNKjf4uoQi
yM+syZLuQPOO2e1h4pLghDim18YzAilMqLIBkdxv6SQRwFzeEg/p6NopS3JClexb
KpXvy3D3ZMlN9q2MprTRlZI3DVX12ZF6E8AS0ZoLVY2Ef8/5Tke0KCpPRjwN5Tpf
qLMJm+FD5sd/oyf4FYQUMbBPgf55TCKu/xV70d1dDdRK3JpFXZvksfsY4AlS70zG
vo1lHYwyPfK6wWsTRRtlyzcgo5KoMkU9QYf4+dh2+Anmj+uLDQYTm1jRAz20fuDk
znCxoDMP1Dd97syhEIo6bM79ZvQqE7poT8bt+iFwT1BYmp/41QilvJn5BrGt1Pbg
4vafxuw=
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:01:31 2025 by rpki-client