This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer
File: 4d929512-7541-4207-be46-8af4cc4a4800.cer (raw, json)
Hash identifier: 5L/sqn2ZvyOSxexBQsMu5LKQBE6rAZcMwwGg4PVw3wc=
Subject key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584BE6B38D116CEEFE0A0E3CEB00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 18 Nov 2025 13:45:23 +0000
Certificate not after: Mon 21 Feb 2028 13:45:23 +0000
Subordinate resources: AS: 14884
IP: 45.33.240.0/20
IP: 104.232.96.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e6:b3:8d:11:6c:ee:fe:0a:0e:3c:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Nov 18 13:45:23 2025 GMT
Not After : Feb 21 13:45:23 2028 GMT
Subject: CN=4d929512-7541-4207-be46-8af4cc4a4800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:1c:28:67:fb:aa:cf:d2:0b:62:8d:b6:4b:
f5:a0:2f:b1:c9:9d:3c:e2:fa:b1:e7:76:34:48:dd:
3c:a7:24:6b:76:68:85:cb:37:ab:13:aa:91:57:b9:
58:71:38:3b:6f:3f:84:da:89:c6:1d:3b:64:b1:44:
1c:0d:ae:60:1b:7a:f2:6d:fb:b4:7b:67:56:6b:ab:
61:4e:21:e9:78:8c:7a:67:5f:a3:40:52:9e:b3:d3:
4f:9d:6d:5d:b8:13:04:9d:6a:1e:24:fc:a9:eb:97:
b9:e1:30:ca:bb:cd:a2:66:fa:23:ee:66:32:a9:e9:
9d:54:24:82:a8:ba:5a:ac:d4:b3:12:c2:87:cc:8f:
ce:65:4c:4c:69:45:25:73:b3:25:83:56:5f:08:64:
d6:db:d7:cf:3f:3b:65:dc:15:10:fa:a8:0a:f0:3e:
6a:19:7d:cf:2d:52:3f:87:16:03:f4:d4:9f:8d:05:
ae:10:79:2a:5a:09:cc:06:e7:95:d6:f1:5f:8a:c6:
e7:31:2a:8a:63:fd:78:99:69:13:82:e5:0c:9b:a4:
6b:72:13:2f:d2:c9:f5:c4:b3:8d:2a:65:54:ae:4b:
98:76:58:42:c2:bd:43:fe:64:eb:a6:5a:e3:30:9f:
ba:eb:83:01:9b:18:47:b4:85:98:0c:48:f5:69:f0:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
45.33.240.0/20
104.232.96.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14884
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:f1:ec:bf:50:65:f9:9c:3b:42:0a:06:7c:86:cd:9b:7e:ee:
ab:d3:cb:56:75:44:be:85:a1:5c:11:37:fa:64:5f:58:c9:66:
1c:b3:4f:f5:da:0e:3d:11:6a:97:b3:e7:e2:fc:c9:4c:67:43:
5c:c2:f5:78:66:53:4f:55:95:22:6a:29:d5:b3:af:e8:5e:9a:
49:09:1a:9d:34:c6:dc:9f:47:25:80:97:47:ce:29:52:6d:c6:
30:9d:52:e9:14:a1:8b:e3:52:bd:5a:2c:52:e3:5a:ca:0d:3d:
d8:37:56:eb:56:ba:bb:1a:d3:a9:cf:6a:31:65:1f:fa:68:dd:
69:72:c5:4f:35:ad:40:99:e3:4e:6b:71:88:6e:db:28:f5:74:
d0:b9:ca:6c:91:72:a1:5d:e9:7a:89:32:70:63:d2:39:57:20:
c2:30:d0:8c:4a:4a:98:65:9a:db:54:cf:da:b5:75:d3:af:29:
98:d6:e7:ae:e6:a9:1b:87:59:5d:de:06:76:5d:d2:2a:7c:f6:
75:e7:46:4f:ad:fd:7f:a3:17:e7:ad:cd:9e:8e:23:44:a3:32:
3b:9c:9a:a2:e2:47:8c:3d:dd:ad:8f:e1:ed:f6:67:27:f9:a7:
e0:fe:a2:e3:09:82:e8:b5:a4:0f:79:dd:c1:04:22:3a:c0:da:
ad:df:5f:5b
-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEvms40RbO7+Cg486wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI1MTExODEzNDUyM1oXDTI4MDIyMTEzNDUyM1owLzEtMCsGA1UEAxMk
NGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0ODAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfEcKGf7qs/SC2KNtkv1oC+xyZ084vqx53Y0
SN08pyRrdmiFyzerE6qRV7lYcTg7bz+E2onGHTtksUQcDa5gG3rybfu0e2dWa6th
TiHpeIx6Z1+jQFKes9NPnW1duBMEnWoeJPyp65e54TDKu82iZvoj7mYyqemdVCSC
qLparNSzEsKHzI/OZUxMaUUlc7Mlg1ZfCGTW29fPPztl3BUQ+qgK8D5qGX3PLVI/
hxYD9NSfjQWuEHkqWgnMBueV1vFfisbnMSqKY/14mWkTguUMm6RrchMv0sn1xLON
KmVUrkuYdlhCwr1D/mTrplrjMJ+664MBmxhHtIWYDEj1afAKPwIDAQABo4IEIDCC
BBwwHQYDVR0OBBYEFFB2xrAOT7/d60X8xALnT1bLXTU4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80
ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzRkOTI5NTEyLTc1NDEtNDIwNy1i
ZTQ2LThhZjRjYzRhNDgwMC80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0
YTQ4MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAQtIfADBARo6GAwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICOiQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAcfHsv1Bl+Zw7QgoGfIbNm37uq9PLVnVEvoWhXBE3
+mRfWMlmHLNP9doOPRFql7Pn4vzJTGdDXML1eGZTT1WVImop1bOv6F6aSQkanTTG
3J9HJYCXR84pUm3GMJ1S6RShi+NSvVosUuNayg092DdW61a6uxrTqc9qMWUf+mjd
aXLFTzWtQJnjTmtxiG7bKPV00LnKbJFyoV3peokycGPSOVcgwjDQjEpKmGWa21TP
2rV1068pmNbnruapG4dZXd4Gdl3SKnz2dedGT639f6MX563Nno4jRKMyO5yaouJH
jD3drY/h7fZnJ/mn4P6i4wmC6LWkD3ndwQQiOsDard9fWw==
-----END CERTIFICATE-----
Generated at Sun Nov 23 19:25:58 2025 by rpki-client