This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738.cer
File: 0a590b75-f68e-4b76-ac6c-42096c2d7738.cer (raw, json)
Hash identifier: UfNe5UrNReFzYGYq5kxUIcIwcGmUMgPWKgKdEkrmwOk=
Subject key identifier: 5B:E3:C8:58:A6:2A:D0:83:69:51:79:6E:D1:EE:39:7D:0E:7F:14:8C
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584BDA01893C63775C57DE9588A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 14 Nov 2025 00:37:01 +0000
Certificate not after: Thu 17 Feb 2028 00:37:01 +0000
Subordinate resources: IP: 23.149.116.0/24
IP: 2602:f4d1::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:da:01:89:3c:63:77:5c:57:de:95:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Nov 14 00:37:01 2025 GMT
Not After : Feb 17 00:37:01 2028 GMT
Subject: CN=0a590b75-f68e-4b76-ac6c-42096c2d7738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:ce:50:24:f7:58:c2:fd:6b:c4:19:77:83:
eb:de:dd:5c:3d:03:a5:2f:0e:93:87:74:d6:c3:a7:
b5:80:de:fb:66:0c:e8:5d:19:7a:52:bf:02:5e:6b:
ad:50:80:e6:9f:04:2e:9c:d6:ff:44:a9:bc:d2:fb:
20:24:02:50:e5:a8:54:af:08:d0:a8:3d:cd:15:8b:
a4:6a:4f:6d:5c:82:57:f6:88:45:f2:b2:46:5b:76:
6e:af:8c:3b:58:09:8f:23:59:32:6e:d8:69:09:d0:
c8:b7:70:94:68:a2:dc:c4:df:28:48:f7:3a:d6:6f:
47:09:68:9c:33:4d:74:2b:8a:c6:f9:0a:9c:81:6a:
44:dc:a8:a0:09:65:51:ce:57:ac:f6:72:dd:9e:d0:
89:fb:2a:dd:d5:8b:4e:c5:8e:bc:4b:22:fb:06:41:
2a:45:7d:75:b6:49:e6:26:d4:be:5a:98:16:74:07:
8d:f2:72:8f:a7:34:97:31:9a:a4:e8:9e:27:81:9a:
9c:33:89:6c:83:59:21:78:b1:ac:be:b0:a1:9c:9d:
79:ff:1c:d3:04:f5:c5:99:b1:8d:3b:b5:ec:4a:88:
2c:cf:df:f2:11:20:51:34:f9:ce:4b:05:9d:0e:1d:
d2:ca:f1:9b:62:e0:18:e0:4f:65:48:05:3c:fc:b9:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:C8:58:A6:2A:D0:83:69:51:79:6E:D1:EE:39:7D:0E:7F:14:8C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.116.0/24
IPv6:
2602:f4d1::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:3f:4c:b8:96:6a:4f:f6:be:cb:bc:36:48:61:13:9e:31:87:
fa:51:10:0e:d0:31:f1:82:2f:3e:44:24:1a:23:34:ad:06:90:
66:6e:8e:b4:43:ce:62:b7:e3:da:b2:fb:b3:9e:21:03:ff:42:
64:09:d5:4f:eb:20:77:0b:78:c5:48:bd:55:52:a1:47:78:f9:
60:48:4c:b2:99:e1:75:40:6b:88:44:c9:51:27:71:82:53:1a:
b3:9d:0c:83:7b:e6:7e:25:7d:bd:de:cc:d2:db:6f:bc:b0:54:
ee:e0:a6:06:b6:9f:01:ac:27:3e:21:2f:da:85:b3:2e:f0:1e:
81:2e:6e:e2:6b:65:2a:e3:1c:4f:c3:89:b2:b8:a4:eb:29:e9:
c3:67:6e:6c:94:0a:2b:7f:41:84:e2:d2:8d:17:02:f1:2d:c3:
25:83:af:7e:0b:3a:c1:3f:7e:f5:aa:db:d4:c3:3a:35:22:4d:
9e:b4:2a:e0:9d:90:2c:76:04:a3:9c:58:06:b1:c8:ce:e0:fc:
b5:3a:19:55:d2:c4:80:d3:fc:f9:e8:74:93:c8:c2:38:3e:8f:
df:44:5c:cf:d0:5e:c1:18:1d:fc:0f:78:92:b4:df:14:e2:d3:
c1:9d:d3:15:d0:a6:d1:69:b3:81:a3:fc:10:51:8a:3f:b3:d3:
9c:d7:73:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 20:52:10 2025 by rpki-client