This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer
File: 375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer (raw, json)
Hash identifier: mqZtlwh7oUkKwqP5Cd9amnWOucyXCZJHIrG/rQoL2mg=
Subject key identifier: 5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584BD1C36AD8AEAA81C7D2B75000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 11 Nov 2025 01:45:23 +0000
Certificate not after: Mon 14 Feb 2028 01:45:23 +0000
Subordinate resources: AS: 393431
IP: 104.219.100.0/22
IP: 2620:80:c000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d1:c3:6a:d8:ae:aa:81:c7:d2:b7:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Nov 11 01:45:23 2025 GMT
Not After : Feb 14 01:45:23 2028 GMT
Subject: CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1c:02:eb:51:c3:93:c4:1d:50:7c:a2:84:26:
27:10:26:f0:2d:42:00:37:2e:9c:68:fd:8f:3f:26:
81:a0:68:67:2a:f2:4f:7b:10:48:24:c7:7e:a0:13:
33:a5:70:79:a2:2c:e7:e6:41:0e:77:bc:a2:bd:e1:
11:fd:d0:d8:72:a5:11:81:2e:4d:90:43:9c:44:b1:
0a:57:ac:20:d8:be:de:de:67:81:70:ee:14:04:de:
93:9a:b1:9e:ce:d2:71:7c:91:cd:b4:4e:d0:07:1c:
c9:51:71:b2:0a:f3:d4:28:7b:72:3a:ef:fd:0d:91:
17:2e:10:ec:7a:36:50:df:74:c3:69:68:9e:e9:d2:
50:03:9b:8f:0f:fb:e1:83:e9:a4:94:3f:67:fd:90:
79:c8:30:03:22:30:64:6a:aa:cf:df:ab:f6:5b:18:
6a:fc:f2:cf:71:16:1d:c6:04:f7:ee:d4:94:9d:b5:
c4:6b:68:81:c6:7a:1c:71:88:b6:45:0e:24:e9:fd:
7c:91:84:da:6e:4e:86:b9:aa:7c:4a:37:3a:1f:8a:
e2:f1:63:8f:c3:f9:d4:da:91:80:7a:76:0b:f4:89:
cc:6e:aa:8c:d2:37:c0:29:4a:8c:8e:02:f2:04:c0:
5d:13:e6:4b:22:f0:c5:8b:f4:d1:2c:74:05:12:3e:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.100.0/22
IPv6:
2620:80:c000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393431
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:7b:04:50:15:bf:cf:1f:2f:ae:11:45:b9:fa:6e:b5:ad:53:
39:45:b3:bb:76:df:79:18:66:aa:e7:89:51:f2:a2:ba:79:22:
f4:8c:3a:5b:8c:35:fc:1b:cd:2e:3b:67:1c:9e:ce:a8:21:1d:
77:11:31:16:45:ee:2a:34:dd:29:d5:c3:ae:fe:21:f4:91:49:
e4:b2:37:3d:db:bb:b1:b3:ea:74:0f:eb:2d:e5:26:74:50:39:
1e:b9:7f:0c:bc:cd:01:4f:69:f2:71:1a:a2:89:cd:91:6f:50:
b1:23:37:26:4d:2a:a7:63:4e:7f:3b:47:f0:be:92:8e:0b:b0:
01:a3:dd:e8:ca:d9:14:f4:c6:c2:b4:d9:a9:a6:71:a4:50:e1:
83:53:26:98:62:6b:0c:9a:db:20:f7:1c:46:89:96:6d:3b:81:
ef:f0:a9:7b:f0:aa:f0:21:66:16:bf:47:01:06:25:d4:d2:66:
78:94:ab:57:d3:3b:28:fb:15:de:2f:c8:02:8a:3e:e4:42:d8:
97:46:52:9c:ab:97:39:b2:b8:a2:fc:9a:f1:78:0b:a1:10:77:
58:48:17:5f:c2:37:a5:10:5a:30:1d:51:da:fb:76:ba:50:3a:
5e:74:50:b7:4c:6b:31:8a:a5:a7:4b:32:a7:4b:df:44:01:39:
9c:e9:c5:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 23 23:09:14 2025 by rpki-client