This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73.cer
File: 7befaca5-f1e5-400b-a1f2-8c6e82630b73.cer (raw, json)
Hash identifier: 24bYjaepLNnGb9B4kYJ1tZwGuPwOjPXkvEggY/fvK/E=
Subject key identifier: BC:C0:00:DC:08:E4:B5:6A:AF:BF:66:58:A6:09:24:72:7B:37:08:FC
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584BC268A7033924AAC41688A0C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/7befaca5-f1e5-400b-a1f2-8c6e82630b73.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 05 Nov 2025 13:45:23 +0000
Certificate not after: Tue 08 Feb 2028 13:45:23 +0000
Subordinate resources: AS: 11754
AS: 16841
IP: 199.48.96.0/22
IP: 199.66.224.0/22
IP: 199.167.236.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:68:a7:03:39:24:aa:c4:16:88:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Nov 5 13:45:23 2025 GMT
Not After : Feb 8 13:45:23 2028 GMT
Subject: CN=7befaca5-f1e5-400b-a1f2-8c6e82630b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:75:48:4c:94:60:1c:9f:44:b4:14:03:85:10:
5e:83:8a:d2:41:cb:9f:24:ef:2f:30:e7:af:14:62:
c5:1c:0c:dc:34:c1:8e:1d:ab:73:90:3a:eb:d4:f6:
d6:96:3c:4a:7a:16:32:1c:4a:c8:dc:f2:4e:af:0e:
ac:49:f1:c7:54:5f:f2:70:8c:32:8d:f9:90:14:6d:
e8:f0:3e:3b:ac:1e:2d:d8:9c:93:7c:3b:5f:b3:6a:
8e:1b:6f:6d:b8:df:f5:34:1d:6a:30:fd:ab:0a:be:
1c:d8:b7:e9:0c:f0:5e:6f:06:9d:b2:2e:64:f8:42:
19:0c:4f:da:d6:1c:1b:9a:d9:56:54:bf:19:a0:c9:
ea:29:66:fb:29:f3:bc:e3:cc:dc:00:d9:53:f4:64:
be:35:9a:c1:0a:04:59:3b:64:dc:65:47:9d:4b:21:
56:00:10:13:4e:e4:b9:1c:fb:88:20:37:3e:70:76:
aa:c9:7a:0d:a4:16:5a:e9:99:c0:d2:f7:41:fc:ff:
12:ea:38:4a:ed:08:d2:49:08:61:c9:9c:6e:9e:47:
a5:93:69:22:57:41:c3:5e:9f:d5:76:39:19:9d:ca:
7f:31:f6:36:2a:8a:b7:a3:4a:f5:51:60:60:6c:c2:
15:66:b0:22:60:46:40:aa:95:7c:8b:03:5a:34:84:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:00:DC:08:E4:B5:6A:AF:BF:66:58:A6:09:24:72:7B:37:08:FC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/7befaca5-f1e5-400b-a1f2-8c6e82630b73.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.96.0/22
199.66.224.0/22
199.167.236.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11754
16841
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:ae:af:96:77:f8:76:96:de:df:90:f6:12:d7:f9:01:01:ba:
ea:a8:9f:53:a7:de:b6:d0:74:34:73:b5:e7:f9:c3:6e:db:89:
1d:8a:92:5b:ef:9a:5e:2e:ff:e8:ca:29:5b:f2:50:ac:91:7f:
e7:0a:39:72:75:53:ee:05:09:61:13:7b:29:b4:7c:88:c3:57:
77:ac:37:d3:90:a6:6f:ff:3e:c2:cc:4d:86:cd:23:ca:4d:64:
ec:cc:98:35:9d:65:3a:29:df:0a:79:0a:34:0b:33:78:3f:1c:
50:04:c7:f4:06:94:c0:3a:52:c8:b9:48:c2:32:5e:fe:ff:12:
ee:cc:d3:d1:51:75:8e:73:77:fd:f9:4f:79:e3:b5:38:ac:ce:
f5:de:ac:75:d1:5f:bf:e5:32:76:f2:78:d1:a5:13:87:6a:0f:
65:8f:a4:cf:53:dd:a9:99:66:da:01:e1:de:c8:ba:41:9f:3c:
40:34:c6:41:a1:37:27:48:4d:57:c4:45:4d:7a:f9:60:80:87:
45:85:f4:6f:a7:3f:1d:c3:c9:5e:54:f6:d0:36:f9:6c:d4:28:
d2:04:40:ee:eb:17:84:b2:2a:87:23:bf:58:fe:79:7b:46:5a:
08:0f:35:d0:f4:03:86:08:54:c0:48:c1:aa:d7:d4:36:1a:9f:
92:74:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 23:09:22 2025 by rpki-client