This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
File: 491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer (raw, json)
Hash identifier: D2Vtm0miWNNnpOErH+ThsuBpKqPfgjPlTdhifsSA18c=
Subject key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584BD5F3708845D42B0EF1C6FBC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 12 Nov 2025 13:45:23 +0000
Certificate not after: Tue 15 Feb 2028 13:45:23 +0000
Subordinate resources: IP: 23.185.200.0/24
IP: 2602:f859::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d5:f3:70:88:45:d4:2b:0e:f1:c6:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Nov 12 13:45:23 2025 GMT
Not After : Feb 15 13:45:23 2028 GMT
Subject: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:79:60:6d:ac:8a:0a:b4:b4:71:51:a9:3d:
71:ae:fe:b3:96:81:ef:f7:88:07:8b:5e:b9:ca:46:
30:39:81:9c:66:b4:05:95:0a:9c:63:c9:e9:20:7e:
e7:b4:69:33:36:82:8b:a9:2a:56:2f:ce:d3:40:83:
88:65:aa:1f:bb:9b:dd:95:ad:1b:1d:ad:42:40:ae:
6e:17:1d:93:84:23:32:71:0a:31:0b:45:56:b7:47:
2a:9f:7e:84:6f:68:cb:34:ce:2e:73:85:fb:41:e6:
81:a5:ea:b3:31:97:51:f8:1e:9a:da:40:4a:f8:89:
78:9b:f2:4d:b6:c4:c3:f8:f9:81:e1:54:5b:a8:77:
82:fe:ff:6c:4c:b5:e8:de:4c:a3:26:a0:8b:a8:1b:
e6:0e:d4:b6:a2:0d:19:5f:72:25:d3:5c:14:68:4c:
27:7c:59:07:33:db:e8:0f:e6:4e:05:ba:f6:b3:a6:
1b:54:3a:58:3d:a3:dc:a8:5d:e0:5d:6b:42:b0:c3:
8f:a6:53:4b:a7:f0:31:e1:66:a3:86:cc:12:f5:6b:
19:be:56:53:ac:89:4c:4d:0b:9d:a6:6f:ad:3f:aa:
00:17:32:5d:f4:f8:7c:0d:88:2c:93:95:3f:77:35:
37:38:d5:c5:1c:20:14:b9:89:97:ec:01:65:2c:e2:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
23.185.200.0/24
IPv6:
2602:f859::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:3d:3d:4f:73:c0:6b:89:97:c2:3a:c0:fe:19:8a:68:d8:ea:
8a:2c:e1:e6:24:a1:5d:12:55:d5:b3:f7:11:e5:44:2c:ff:0e:
e4:8e:34:55:5f:55:54:27:bc:85:11:15:b6:0e:eb:ba:1c:85:
7a:0d:f9:6e:28:f2:f4:24:e3:9f:8c:34:d8:8e:d9:11:49:9f:
1c:eb:13:61:83:c2:de:46:84:e1:8d:67:bc:8f:b3:c0:10:99:
55:ee:1e:24:7e:ca:ed:05:4a:8d:6c:66:a3:83:c8:cb:d7:c1:
8b:64:24:8f:aa:e7:41:29:f6:be:fe:0b:13:f0:5b:10:b5:8c:
bf:f9:5a:d8:0a:bb:87:16:36:85:16:05:25:0c:5d:e6:f9:7c:
02:23:f9:a0:4f:0b:bd:93:c7:2a:e8:f5:f9:9c:66:d6:7b:c3:
58:01:e9:72:fd:76:03:4d:7b:d3:6f:3a:15:d3:5d:68:3b:48:
17:8a:f4:ee:d5:a9:78:af:36:3a:cb:c3:4c:cb:f2:46:27:bc:
1b:53:6a:06:96:ad:e2:b6:c6:57:84:b4:f5:5c:81:37:02:81:
83:9f:32:12:7a:d5:04:e0:ab:bd:ea:ab:30:bb:b6:7c:57:e4:
c8:3e:02:19:00:e1:c5:e3:4c:f3:62:c9:9a:3a:9c:79:19:f3:
90:83:47:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 19:26:04 2025 by rpki-client