This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a.cer
File: 29ab13cd-3871-4ec1-95ed-a304a58c633a.cer (raw, json)
Hash identifier: hO+3RbO9N2lexzGMHUDf8BI1Khz4vzFnCUuvZNQzS8k=
Subject key identifier: 88:42:5B:0A:8D:23:14:15:F4:75:73:03:FA:C5:14:64:7B:7A:94:77
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584BD36CF1977A2547D438A87B80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a/29ab13cd-3871-4ec1-95ed-a304a58c633a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 11 Nov 2025 16:02:46 +0000
Certificate not after: Mon 14 Feb 2028 16:02:46 +0000
Subordinate resources: AS: 401738
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d3:6c:f1:97:7a:25:47:d4:38:a8:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Nov 11 16:02:46 2025 GMT
Not After : Feb 14 16:02:46 2028 GMT
Subject: CN=29ab13cd-3871-4ec1-95ed-a304a58c633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:fd:dc:6b:e9:7d:ae:d8:23:ea:d6:b1:ba:
c6:37:fb:cd:f4:73:ff:66:ab:14:06:95:ec:64:fe:
7c:5b:05:ad:2d:1c:3b:aa:3b:25:c3:ff:28:a1:56:
7b:e4:80:b5:bb:40:cf:cf:07:10:1a:8f:9a:a4:69:
e8:41:bb:f0:d0:3a:f4:62:85:fc:62:68:a6:cf:c1:
0e:36:ee:3a:1e:e4:a7:07:c1:4d:46:64:3a:ca:c7:
1e:b4:f8:99:f9:9b:9e:44:8b:c3:96:0e:fa:00:00:
a0:86:e7:06:70:44:a9:fd:15:26:22:1f:61:56:fd:
02:ff:c0:b1:6e:c2:63:5b:33:f4:e2:62:c8:f6:6d:
98:56:e0:12:70:6e:e1:0c:d5:5b:b1:97:89:36:5c:
d8:0b:16:75:7c:b9:4b:b4:4e:4d:1c:9a:76:98:c8:
7d:2f:1d:e5:29:bc:bf:d1:e2:fe:e1:32:41:1c:05:
ae:9b:9a:0f:d0:7e:34:9e:1d:c1:66:00:c4:52:38:
14:97:16:c1:e4:07:5d:46:5f:2e:5c:ea:ed:f5:39:
c2:4d:4c:8c:9f:e4:e4:fd:aa:b5:1d:77:3d:a1:39:
68:ed:9b:11:2a:87:34:e9:9d:45:46:d4:a8:6d:2e:
94:ed:64:44:e1:a4:76:24:77:5c:fe:49:be:ab:9a:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:42:5B:0A:8D:23:14:15:F4:75:73:03:FA:C5:14:64:7B:7A:94:77
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a/29ab13cd-3871-4ec1-95ed-a304a58c633a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401738
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:c7:84:6c:f5:1c:1d:86:8d:df:b3:6b:a9:6e:93:84:cf:9b:
bb:44:19:db:6a:a1:b4:2d:21:6e:62:0a:d7:30:93:88:4a:12:
10:2e:44:1e:4e:e2:0e:68:14:61:88:60:2d:06:8d:3c:5b:81:
e1:55:e0:08:8b:84:cb:f6:92:9c:02:c0:da:22:d3:d1:c4:bf:
5a:48:08:e4:51:74:88:c8:83:ea:b9:b9:97:69:f5:5a:a6:4e:
6e:cc:29:b9:40:d1:95:5a:a5:8c:e7:5e:b3:0a:26:e8:8c:43:
d8:c7:9c:84:b5:d3:97:0c:52:bf:7f:2e:9e:5b:97:31:82:ef:
a1:30:a9:b2:9b:81:3a:ac:4f:e8:bc:22:32:57:fe:9e:b7:6a:
06:4c:81:54:1b:86:6d:0f:29:5e:76:97:8a:98:ab:b0:7a:23:
29:b9:be:e6:05:00:f0:f7:77:a8:e0:5a:79:38:d8:e7:5b:4c:
c4:e3:b2:90:dc:fa:16:c2:d5:6a:78:5d:c5:cc:95:5f:3c:1c:
9a:e8:b1:8c:20:d1:86:36:09:aa:3c:ef:e1:9a:0e:f7:88:b4:
1d:96:fe:ce:35:25:d1:73:18:83:77:68:0b:53:b2:51:83:cc:
ae:af:a7:84:7b:f9:25:aa:00:4a:83:09:07:3e:24:7d:f2:a7:
dd:7f:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:12:11 2025 by rpki-client