This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
File: 22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer (raw, json)
Hash identifier: K7AQJT+h55m/Gq00GqTNG4hhEFKYlvco9AGdihE5vVc=
Subject key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584C2DE3FDD0A5A448BB73365840
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 14 Dec 2025 01:45:23 +0000
Certificate not after: Sat 18 Mar 2028 00:45:23 +0000
Subordinate resources: IP: 23.187.40.0/24
IP: 130.12.80.0/22
IP: 2602:f838::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:2d:e3:fd:d0:a5:a4:48:bb:73:36:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Dec 14 01:45:23 2025 GMT
Not After : Mar 18 00:45:23 2028 GMT
Subject: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:d1:5d:52:c4:08:0e:01:b4:8c:99:91:cf:
d8:fb:08:56:e6:99:52:50:d4:4f:e0:e9:c1:87:2d:
bb:70:6f:6f:64:d4:1a:c6:0d:4b:46:78:18:c4:06:
be:31:31:64:01:a1:80:c1:b7:62:bc:0e:79:37:3c:
c1:16:71:ab:d9:dd:6d:e4:8d:9c:7c:c8:ef:5e:c3:
91:84:96:6f:e5:30:99:c7:6b:b1:32:fc:7f:15:6b:
52:e3:43:48:db:df:4e:0c:9b:3c:04:43:17:4a:73:
89:8c:d9:69:6b:2e:26:62:eb:10:7e:55:de:28:1a:
2e:be:a5:da:6d:87:53:bb:22:8e:e5:a4:85:e0:32:
85:a8:af:b7:21:0d:a2:9b:e8:f7:19:1c:14:21:f4:
e7:8c:b9:4d:a3:67:ff:cf:ba:5c:55:82:17:14:97:
b6:15:02:95:cc:c7:23:b9:62:9b:51:d5:17:aa:16:
cd:02:42:f9:2e:98:ab:04:e5:a5:e3:e5:53:42:44:
05:cd:f5:3a:4c:07:40:ef:34:f4:60:12:6c:e5:7e:
09:3b:a7:2b:1a:b7:ba:37:e5:62:3d:33:db:89:2e:
08:f9:30:75:e2:63:12:f7:f4:6f:fa:0f:68:6a:82:
4e:0c:bb:ac:63:50:32:4f:34:c6:18:50:00:13:da:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.40.0/24
130.12.80.0/22
IPv6:
2602:f838::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:c6:22:24:1c:28:10:f4:28:f0:87:ba:57:30:fd:80:b1:39:
4f:23:68:2d:8b:8f:b6:f7:27:f0:6b:3e:7f:71:2b:3e:02:f6:
55:ed:99:99:5b:23:96:a9:b0:5f:8a:57:5f:bb:72:70:52:a0:
57:4f:11:8b:3d:f9:91:73:76:d5:54:2f:d1:ef:83:1e:0d:2f:
a2:18:60:44:57:90:f6:70:86:b1:9d:d1:b5:c2:b0:c5:a0:3e:
2a:07:c7:39:92:76:cd:10:6e:b5:9f:0b:e6:86:2d:ce:fb:90:
ba:34:4b:1e:fd:33:b2:bc:41:5c:dd:f7:4f:82:bd:b2:a9:2a:
af:f4:14:1b:0b:b1:64:86:9a:9d:ee:24:ae:f5:38:bc:36:c1:
c5:0b:59:76:c0:6d:46:a2:67:cf:e4:47:20:6c:2c:ea:d2:47:
02:f6:c2:5d:58:6e:f7:10:b1:1b:be:96:aa:e9:6c:d9:aa:b8:
5f:f1:5a:c2:47:86:2a:6c:dc:d4:26:ac:59:80:75:2d:13:2f:
d2:4f:cc:c6:af:fe:74:e3:f8:b9:68:c5:a5:90:64:18:06:67:
bc:f9:69:a9:bd:d4:dd:cf:7d:d7:07:36:cb:ab:77:76:65:45:
0c:11:19:fc:3b:bd:67:92:dd:ef:9d:b4:78:44:0c:39:41:8c:
08:68:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 06:13:34 2025 by rpki-client