This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer
File: 3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer (raw, json)
Hash identifier: r7M8dQ7n0XYM0RjXoqHnFFozVyVTvPHXjsHROafjct0=
Subject key identifier: AC:A5:5E:A4:E0:25:37:B9:B1:F4:EB:74:50:DE:93:FC:E3:16:35:75
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584BF583141972627562D7792680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 23 Nov 2025 21:04:51 +0000
Certificate not after: Sat 26 Feb 2028 21:04:51 +0000
Subordinate resources: AS: 400848
IP: 140.235.236.0/23
IP: 2602:f7e3::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f5:83:14:19:72:62:75:62:d7:79:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Nov 23 21:04:51 2025 GMT
Not After : Feb 26 21:04:51 2028 GMT
Subject: CN=3fc35fc7-60a6-4d0e-a432-384335f12ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:8c:9e:5e:45:0b:7c:2d:fc:7b:89:18:73:
ce:f7:ca:51:3d:d1:2a:18:03:35:85:f0:10:5b:a6:
24:82:94:42:a9:00:08:c8:fd:67:93:fa:c0:e7:56:
dc:0f:fc:21:a7:62:00:51:91:5c:30:56:85:1b:4d:
ed:5b:f6:37:4c:a0:7a:68:1a:3d:47:5c:f8:5a:d5:
99:48:ba:2d:c2:3f:d6:59:05:a3:2f:a2:83:32:86:
9d:88:3c:f8:86:7e:20:f8:05:f8:4b:d4:5c:56:90:
ca:6b:bf:c0:f1:f2:76:e7:2a:4d:5a:fd:55:0d:02:
61:f0:8a:60:b3:e1:3e:dd:e1:be:0b:c1:31:ba:ac:
34:62:f2:06:31:f5:7d:f0:46:19:5d:f0:5f:05:0c:
53:3a:d9:ee:ed:19:0b:f2:a0:76:63:d1:c3:db:d7:
b5:9d:1a:fe:56:1b:b8:cc:e1:d3:c9:da:9a:7f:8d:
28:88:b3:01:76:66:88:62:aa:a0:51:16:44:50:7f:
80:61:67:a4:56:16:dd:4b:d0:fb:8c:b1:9e:0f:95:
fe:4b:53:cd:6a:4a:47:6c:a4:1b:cb:3f:59:5c:8f:
b2:93:11:07:b3:d9:ee:64:25:fa:00:5f:a5:f4:e1:
5b:06:cf:25:25:6a:24:45:37:1c:1a:13:86:db:ea:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A5:5E:A4:E0:25:37:B9:B1:F4:EB:74:50:DE:93:FC:E3:16:35:75
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.236.0/23
IPv6:
2602:f7e3::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400848
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:5c:d9:dc:4e:61:fb:f8:fa:42:93:68:0d:37:6d:21:73:f4:
65:6d:9e:ca:00:8d:78:03:7b:51:18:e4:70:03:0e:8d:d9:5f:
7a:69:19:4d:9e:2f:55:d5:a3:5b:70:e8:7f:5c:86:11:f6:17:
54:22:ad:2d:61:8d:66:21:5b:21:dd:35:be:9f:db:a4:aa:a4:
13:d9:fa:44:1e:dc:e9:20:c0:c8:1e:a6:db:c7:c0:e4:18:9f:
20:5a:fa:7b:df:71:e9:ae:38:e0:34:61:5a:3d:98:00:5c:d5:
65:e9:88:84:1d:27:bd:84:1c:e3:05:0f:f2:a5:37:a6:0a:bb:
44:ad:9e:c1:e2:ea:8b:00:c1:ba:69:1a:c8:6a:73:ba:2a:3b:
c3:8e:01:0d:1f:a3:05:0b:12:ad:2f:b0:55:b8:84:85:c6:bb:
b8:2e:34:68:9f:cc:1c:0a:78:1b:c0:41:d7:67:83:51:b0:7d:
74:54:fa:8b:39:5d:3f:0a:41:15:1f:b2:4f:81:81:49:af:29:
4d:7c:26:b8:c8:7b:f9:8c:6d:08:5d:e7:15:38:40:93:88:dd:
03:20:6f:6a:f5:5f:f3:5e:a8:9e:c8:02:6e:2c:a8:65:3d:41:
ea:2b:96:1f:20:5f:76:30:5d:34:05:93:c3:61:f1:cd:6e:2e:
e0:fd:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:41 2025 by rpki-client