This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8.cer
File: 108d0589-c0d8-4414-978d-7eeb5898f3f8.cer (raw, json)
Hash identifier: VfnLS2VL85APhHKF0pB+0YcFlqQl6wXeViePsaqskLU=
Subject key identifier: 11:EC:89:8D:97:2B:C0:8A:8A:47:66:3D:5A:32:43:1B:03:37:BC:AD
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584BE4F4B761338E3C385463C900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 17 Nov 2025 22:45:05 +0000
Certificate not after: Sun 20 Feb 2028 22:45:05 +0000
Subordinate resources: AS: 12102
IP: 74.120.152.0/22
IP: 2620:156::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e4:f4:b7:61:33:8e:3c:38:54:63:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Nov 17 22:45:05 2025 GMT
Not After : Feb 20 22:45:05 2028 GMT
Subject: CN=108d0589-c0d8-4414-978d-7eeb5898f3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:08:47:25:10:07:89:4f:0c:29:eb:31:79:7c:
8a:61:35:f6:60:b6:3a:a3:cd:48:8f:86:b2:1b:bb:
30:c7:3b:e1:db:7e:45:98:67:9d:d2:a6:8d:bb:73:
41:e5:56:84:31:12:d8:b8:68:86:46:7c:58:44:db:
a9:e2:01:96:12:31:26:7e:84:13:c6:b8:af:13:34:
e4:d7:23:c4:12:03:e8:ae:eb:05:20:5e:86:e3:d2:
03:fb:8b:d8:32:b0:26:97:0d:5c:ab:43:f5:12:1a:
eb:2c:67:b2:04:b9:5d:eb:52:ac:3f:21:b5:5f:24:
6f:dd:ad:3a:87:cd:de:49:8f:d2:d5:b3:91:dd:a8:
78:11:d5:29:66:46:a3:c5:31:b4:8d:da:37:33:56:
91:91:de:35:37:b4:94:c0:3d:19:17:6e:43:43:22:
da:93:8f:71:dc:31:5d:bb:36:c3:a1:56:a6:18:bb:
03:54:85:3a:b1:cc:13:14:cd:34:17:34:e8:96:2e:
b3:18:ff:19:93:37:35:d0:6c:57:8d:45:35:ae:e0:
6a:6e:ef:bc:c0:19:9c:c7:93:b0:6b:a8:2d:42:d5:
41:44:3d:3d:8c:d7:f5:0f:57:7d:b6:11:5c:11:d3:
ef:0b:d1:ca:78:8c:ef:1a:89:ce:eb:46:dd:f5:ec:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EC:89:8D:97:2B:C0:8A:8A:47:66:3D:5A:32:43:1B:03:37:BC:AD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/108d0589-c0d8-4414-978d-7eeb5898f3f8/108d0589-c0d8-4414-978d-7eeb5898f3f8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
74.120.152.0/22
IPv6:
2620:156::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12102
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:7a:cf:01:67:ad:42:5d:c3:dc:36:d2:56:69:22:a5:23:37:
ff:97:fb:d8:91:9f:d4:27:5c:0e:04:b2:cf:b2:db:9e:ff:ea:
80:70:e8:93:52:b7:e1:f5:06:9e:c9:3f:27:c5:bb:0b:db:fd:
8a:47:44:f9:3a:ef:a4:40:76:ab:50:24:dc:22:77:f0:07:1e:
29:4e:1f:1e:12:f1:a4:cc:40:20:0f:bc:46:f3:59:b9:4e:32:
0b:c6:c9:e0:77:c6:79:62:8f:c6:d3:d7:e6:c6:2f:00:a4:95:
69:5e:5a:60:67:d2:13:fc:3e:ba:5c:9f:ef:ad:5b:19:40:56:
88:73:20:67:c5:a6:7d:4d:c7:40:b0:fd:26:46:c4:55:b9:b3:
ff:c1:90:20:96:08:dc:bd:3a:69:22:6b:cb:a2:a4:f5:9e:a5:
13:6b:2e:a5:c3:f8:a0:9d:f2:4c:2a:0f:dd:7c:21:00:6f:d4:
8a:68:e5:bd:bc:94:dd:3f:93:ed:a4:e7:65:ab:75:fb:8c:48:
dd:09:c5:9a:81:df:16:5c:fa:e0:f1:95:06:d0:1a:59:63:2e:
40:e6:fb:90:38:d7:70:7a:0b:0b:0c:28:21:e5:55:04:66:42:
46:f9:44:4e:13:03:5e:70:e0:2a:6b:2e:40:7c:fe:99:80:a5:
d8:a4:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:50 2025 by rpki-client