This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer File: f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer (raw, json) Hash identifier: OziD4crE/9+vHHCg4Q0bliyvawWNQgljllldtHoLzIo= Subject key identifier: E5:F0:1F:26:87:96:B9:D0:16:5C:86:6A:BB:7A:57:97:ED:D8:9F:27 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BEF139A8615CD1948D003E080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Nov 2025 13:45:23 +0000 Certificate not after: Thu 24 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 32582 IP: 64.49.48.0/23 IP: 208.99.56.0/23 IP: 2602:fc3c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:13:9a:86:15:cd:19:48:d0:03:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 21 13:45:23 2025 GMT Not After : Feb 24 13:45:23 2028 GMT Subject: CN=f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:78:12:8c:41:d1:f8:ee:df:64:af:35:fa:e2: e8:6c:fb:99:df:76:37:65:ac:09:1c:33:f7:21:63: 11:4e:e1:33:f2:ff:f2:46:3b:c6:af:e1:21:28:85: 41:94:a8:33:9b:47:af:78:a7:74:fb:ff:7d:c6:51: 59:03:d7:56:b2:09:91:7c:f1:4c:08:27:d9:a7:6e: 9a:82:b1:d3:5b:1b:06:06:8c:f5:63:fc:f9:12:18: fa:c5:af:5f:4a:a5:29:91:99:c9:e2:7f:01:d2:93: 54:7e:0e:c9:c3:6d:5c:cc:eb:7c:0f:ba:b0:35:4d: 9d:05:f8:00:5e:10:f1:e8:43:52:80:50:4b:e1:f4: 94:e1:7b:3f:31:6e:17:4f:52:6e:3e:c2:67:9d:a5: d2:7b:d1:53:52:b6:7e:23:33:c7:cf:6b:27:e8:08: 1b:0d:90:f5:e3:b4:3e:b4:64:53:45:8d:d1:5f:63: dd:a6:9f:ee:36:63:57:a6:74:68:9e:15:89:bb:30: 34:b3:c1:7f:5a:7f:e6:4f:a8:1c:b2:e8:b8:78:19: a8:d3:5f:22:3a:64:9b:6c:ee:f7:b2:cc:a4:4e:03: ed:ef:8d:81:1d:9c:cf:98:3c:f1:33:73:1a:5c:ef: 06:1f:d4:ea:19:96:25:a3:da:e8:0d:f6:35:ce:21: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F0:1F:26:87:96:B9:D0:16:5C:86:6A:BB:7A:57:97:ED:D8:9F:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.49.48.0/23 208.99.56.0/23 IPv6: 2602:fc3c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32582 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f0:df:3e:44:cb:db:a9:da:21:78:2a:57:53:e6:5e:57:65: ed:b9:ab:24:d7:f3:02:05:54:9e:c1:99:18:d8:9c:af:c0:69: 60:15:ba:a4:fd:e3:47:da:b5:71:bb:d9:02:99:42:a7:a3:5f: 2d:0c:90:e5:d2:a3:4a:02:ae:b9:fa:d0:1f:af:13:f1:4f:47: 81:8c:20:c6:2b:2c:10:f8:41:55:e9:5e:5b:3a:98:81:12:e7: ff:56:63:dd:d6:7c:c0:96:6b:7a:94:e0:64:44:1c:98:2a:ab: 28:b7:de:f9:43:c1:d3:f8:5a:a7:c5:14:d0:26:35:e4:b5:00: 09:1b:b0:ab:73:b5:1f:17:d8:84:1e:9b:d8:49:cc:38:64:7c: 7d:2c:ee:9c:c2:f5:6c:c5:f4:00:77:f1:fa:84:10:d0:e6:86: d1:86:ae:95:6d:53:4e:72:a9:c6:42:94:44:98:4b:92:03:dd: c2:e0:b4:8b:09:6f:c9:5c:67:db:28:ee:2b:c8:97:d7:00:f4: a9:dd:fa:8c:64:32:c5:c3:07:8f:1d:a4:ac:9e:19:55:88:12: 94:c3:f3:3b:99:eb:a7:49:ef:f2:1a:95:d4:f4:5b:ef:51:c5: d8:f9:c5:c5:bb:fa:45:1d:22:4d:d9:6b:eb:13:94:61:f1:3f: 69:c6:fd:6b -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEvvE5qGFc0ZSNAD4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTEyMTEzNDUyM1oXDTI4MDIyNDEzNDUyM1owLzEtMCsGA1UEAxMk ZjkxNWQzZDMtMWI4Zi00MmM3LThjNGQtZjlmY2U4MGQ5YTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ngSjEHR+O7fZK81+uLobPuZ33Y3ZawJHDP3 IWMRTuEz8v/yRjvGr+EhKIVBlKgzm0eveKd0+/99xlFZA9dWsgmRfPFMCCfZp26a grHTWxsGBoz1Y/z5Ehj6xa9fSqUpkZnJ4n8B0pNUfg7Jw21czOt8D7qwNU2dBfgA XhDx6ENSgFBL4fSU4Xs/MW4XT1JuPsJnnaXSe9FTUrZ+IzPHz2sn6AgbDZD147Q+ tGRTRY3RX2Pdpp/uNmNXpnRonhWJuzA0s8F/Wn/mT6gcsui4eBmo018iOmSbbO73 ssykTgPt742BHZzPmDzxM3MaXO8GH9TqGZYlo9roDfY1ziGKhQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOXwHyaHlrnQFlyGart6V5ft2J8nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m OTE1ZDNkMy0xYjhmLTQyYzctOGM0ZC1mOWZjZTgwZDlhMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Y5MTVkM2QzLTFiOGYtNDJjNy04 YzRkLWY5ZmNlODBkOWEyYi9mOTE1ZDNkMy0xYjhmLTQyYzctOGM0ZC1mOWZjZTgw ZDlhMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAFAMTADBAHQYzgwDgQCAAIwCAMGBCYC/DwAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAn9GMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACLw3z5Ey9up2iF4KldT 5l5XZe25qyTX8wIFVJ7BmRjYnK/AaWAVuqT940fatXG72QKZQqejXy0MkOXSo0oC rrn60B+vE/FPR4GMIMYrLBD4QVXpXls6mIES5/9WY93WfMCWa3qU4GREHJgqqyi3 3vlDwdP4WqfFFNAmNeS1AAkbsKtztR8X2IQem9hJzDhkfH0s7pzC9WzF9AB38fqE ENDmhtGGrpVtU05yqcZClESYS5ID3cLgtIsJb8lcZ9so7ivIl9cA9Knd+oxkMsXD B48dpKyeGVWIEpTD8zuZ66dJ7/IaldT0W+9Rxdj5xcW7+kUdIk3Za+sTlGHxP2nG /Ws= -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:02 2025 by rpki-client