This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
File: c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer (raw, json)
Hash identifier: mAhNHmpL5sDlOm2mnGqV6WK73R44Tk5Q9ID+WUIJ+9o=
Subject key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584C6CB45FE16A5A40DDC9836800
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 05 Jan 2026 13:45:22 +0000
Certificate not after: Sun 09 Apr 2028 12:45:22 +0000
Subordinate resources: AS: 33125
IP: 66.97.96.0/20
IP: 204.9.152.0/21
IP: 204.11.128.0/21
IP: 204.15.24.0/21
IP: 204.15.104.0/21
IP: 207.200.224.0/19
IP: 2604:9540::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 12 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:6c:b4:5f:e1:6a:5a:40:dd:c9:83:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Jan 5 13:45:22 2026 GMT
Not After : Apr 9 12:45:22 2028 GMT
Subject: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:cc:a2:3d:a8:63:f3:6d:dd:b9:5c:df:3a:
00:1d:da:bc:a5:e1:f4:1b:fd:c8:95:06:3b:9b:6b:
db:e2:03:85:a9:97:a3:86:96:4d:d5:a0:b0:6c:b5:
b2:88:ae:18:ca:35:17:af:0d:1c:fd:d4:cc:29:55:
e6:65:61:62:15:f0:ae:d4:26:ec:3c:dd:08:1b:1e:
65:14:9d:86:e3:e7:80:c5:16:ea:79:89:b0:44:40:
38:7e:83:e2:a8:ec:9f:be:04:b8:b4:5a:c4:91:83:
34:b4:5a:41:bc:4e:38:8d:78:34:3c:02:39:b9:66:
7b:26:92:58:b0:3a:f9:fe:c6:bf:7e:15:b8:ec:74:
82:0a:cd:d1:5f:6b:1d:59:83:4b:b7:3c:64:49:2f:
d5:34:85:63:cf:de:69:7c:41:8d:10:9d:dd:43:a5:
25:19:07:14:06:cb:40:69:3d:c9:45:9e:0d:c3:ad:
07:dd:81:40:d9:84:1c:e6:16:a8:77:24:cd:a1:90:
f1:2f:4d:46:b7:69:f3:73:01:71:c0:f0:cf:76:00:
2d:5e:2c:43:18:61:42:aa:d9:20:d1:0b:11:53:be:
60:eb:64:42:41:44:7b:d4:a0:9a:e9:fd:3c:9e:d9:
93:02:63:01:ac:01:21:47:99:33:47:f4:bc:87:88:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.97.96.0/20
204.9.152.0/21
204.11.128.0/21
204.15.24.0/21
204.15.104.0/21
207.200.224.0/19
IPv6:
2604:9540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33125
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:ca:b3:c3:53:6f:f1:7b:93:5f:88:77:a3:3f:b3:7c:a9:b7:
0b:3b:49:a3:8f:67:06:ea:8a:c8:bf:2e:31:df:f2:6a:1d:8e:
fb:ad:62:01:76:c8:93:1d:63:89:01:fe:01:d6:e5:45:1b:3c:
dd:ca:69:77:85:a4:82:e8:4b:2f:b9:3b:a8:01:53:f2:1c:ab:
d0:cd:37:41:d6:fc:c4:b4:6e:77:20:9a:73:84:a1:1e:27:ad:
7c:6e:c2:f1:5a:59:89:5c:9f:c7:2f:b3:a6:bb:3a:16:b0:fa:
9f:3f:9c:02:1b:2b:2c:72:fb:f6:ae:a7:85:fd:c0:fa:7a:87:
5a:e7:7a:49:68:87:1d:75:6e:f1:58:a7:75:41:91:2e:e8:b3:
ff:ff:f9:bb:24:36:66:a6:61:28:e2:97:01:62:38:dc:9b:ae:
69:cf:65:67:0c:bd:35:2c:74:c4:7a:1e:e8:82:f5:bb:7f:e7:
5a:6a:8c:ad:ef:ec:b9:63:03:3f:80:32:87:6c:ef:4a:6a:4d:
71:0c:ca:fa:1d:c7:4a:2a:7c:4e:81:59:8a:05:8b:31:8b:c8:
f4:48:ff:97:cd:31:f6:f8:fe:e5:80:a7:d4:d1:1c:c7:cb:ba:
9e:74:6a:a6:09:65:c9:07:0b:04:99:08:b2:20:52:f2:fc:96:
94:90:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 05:12:39 2026 by rpki-client