This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
File: 3abca546-ca81-48f5-bdd4-8c111ba523ea.cer (raw, json)
Hash identifier: vfQU8rcuyP3N0gFZKlamP9KrVtUCFN9Tu1V2YNH/fFw=
Subject key identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584BE97E3A65B3F86B346C713FC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 19 Nov 2025 13:45:23 +0000
Certificate not after: Tue 22 Feb 2028 13:45:23 +0000
Subordinate resources: AS: 4595
IP: 152.160.0.0/16
IP: 199.181.158.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 02 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e9:7e:3a:65:b3:f8:6b:34:6c:71:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Nov 19 13:45:23 2025 GMT
Not After : Feb 22 13:45:23 2028 GMT
Subject: CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:73:f8:5b:2b:2e:97:3f:4f:1e:e7:82:93:
29:63:12:15:77:96:0f:4e:a7:f6:cc:cf:a9:7a:fe:
8d:83:4c:d2:f6:c6:af:d1:5d:f0:c8:74:54:74:e8:
75:33:ea:d6:9e:fb:a8:21:96:74:d4:1d:74:fa:04:
84:af:97:2b:7a:4c:51:a9:66:ae:69:af:2e:ff:0a:
1a:26:24:8f:e3:4e:ce:75:21:87:53:3b:13:35:15:
d8:88:54:99:47:1d:20:84:f2:53:f5:e6:f2:ef:69:
62:14:b2:dd:6a:47:71:fe:47:e9:a7:03:49:e3:05:
ab:1a:83:39:f4:7b:c0:80:99:5c:2b:89:c5:dc:72:
4d:83:8d:8c:75:b8:d4:59:83:97:ff:b6:cb:3d:58:
1e:e0:a9:af:1a:8b:76:26:78:c7:76:34:c1:dd:21:
97:fd:ce:34:0b:27:12:cd:6b:de:03:66:c8:99:1d:
06:b8:fc:9f:27:36:52:98:95:43:fd:3e:cb:89:46:
90:ec:3a:aa:0f:31:d2:0d:a2:e7:76:e9:21:b5:26:
c4:81:f4:d8:d6:6a:98:c8:0f:5b:60:5b:c8:73:b4:
fd:c7:b2:55:a4:91:45:25:6f:fe:42:8b:20:7b:98:
65:c9:e5:68:c5:f9:6a:8b:c1:13:2c:7f:af:2e:78:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
152.160.0.0/16
199.181.158.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4595
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:e2:d4:47:82:12:8f:d6:a9:26:ea:ea:08:ab:ad:c7:9e:11:
5c:e5:4c:3c:90:0c:ad:b1:ed:70:7d:e1:62:75:07:78:4b:ca:
33:f8:72:1a:8a:c7:f4:dc:a8:55:0c:6a:26:ff:96:38:3d:8f:
4c:68:7a:34:b8:38:f9:76:3e:08:21:17:bc:5c:c3:e0:89:14:
61:cb:da:2c:e8:f7:6c:06:82:92:1f:1d:54:1c:ff:66:8b:df:
cc:c9:cc:df:0e:29:73:36:fe:74:93:38:66:37:a9:96:b4:33:
e2:59:4b:6c:f0:c0:3b:31:fa:b6:41:48:86:ab:a7:10:d5:a8:
8c:c6:35:0b:f2:9c:8b:a3:78:df:09:dd:2e:46:b4:b1:80:22:
f5:85:96:88:16:ae:ff:91:c1:ee:28:40:30:d3:98:c6:c7:25:
d0:dd:a3:e6:61:fa:1c:ff:d4:77:c0:80:b9:6b:09:dc:60:e9:
14:5c:36:40:03:35:41:18:33:25:68:49:80:99:71:fd:73:b7:
96:18:f4:dc:d5:61:06:f3:4c:b5:fb:98:f0:5b:fe:09:60:e4:
11:8e:e8:7c:1e:72:d9:c0:48:58:cf:b3:f7:65:4a:17:c2:84:
42:66:4d:86:a0:e0:e4:53:ac:95:e9:d4:c2:4c:bd:c8:9f:55:
98:8e:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 00:14:07 2025 by rpki-client