This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5197c386-7ea8-41c6-b63f-e3da0b892a92.cer
File: 5197c386-7ea8-41c6-b63f-e3da0b892a92.cer (raw, json)
Hash identifier: +RHey8qX2OB1MDeQnhf4D7O/m/xLVRD3DFu8qwp0FKA=
Subject key identifier: 75:50:61:3D:3A:15:F7:3D:F9:B6:8E:83:B7:FB:B3:45:EB:C2:45:E8
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584BDBBAD150A5856450FA483080
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5197c386-7ea8-41c6-b63f-e3da0b892a92/5197c386-7ea8-41c6-b63f-e3da0b892a92.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5197c386-7ea8-41c6-b63f-e3da0b892a92/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 14 Nov 2025 15:26:09 +0000
Certificate not after: Thu 17 Feb 2028 15:26:09 +0000
Subordinate resources: AS: 23486
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:db:ba:d1:50:a5:85:64:50:fa:48:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Nov 14 15:26:09 2025 GMT
Not After : Feb 17 15:26:09 2028 GMT
Subject: CN=5197c386-7ea8-41c6-b63f-e3da0b892a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:b3:d7:99:40:4f:b2:b8:c8:3b:e0:27:d2:
30:ca:55:be:92:3e:28:f0:8a:cb:ba:06:ba:a0:57:
42:c4:54:f1:f3:d8:6d:e7:ad:df:3a:cd:4a:7c:86:
cf:a1:ce:a9:cb:3b:ed:4e:b4:fa:b4:62:0d:47:1f:
26:f6:e3:87:87:b6:e3:74:e6:5e:53:68:ff:61:45:
91:47:01:da:93:7c:5b:ec:65:a5:26:a8:11:cc:b4:
8d:6c:8b:ef:0e:15:f4:9f:54:79:17:65:21:5e:30:
51:5a:ed:47:69:1a:eb:7e:fb:e8:1c:c7:fb:e9:29:
bb:48:d9:f0:0d:4d:b8:b2:ec:5a:a1:04:69:de:ba:
9b:e3:71:0d:b4:30:86:e4:82:b7:19:5d:1e:8c:b6:
ff:c5:29:8f:2f:5f:04:6d:e0:fd:1f:e1:4f:7e:f9:
f7:bc:9d:9c:9d:d9:96:56:6b:17:fa:16:c5:b7:12:
69:4f:20:28:21:c0:ac:b7:b7:84:01:6e:78:ab:48:
ae:d0:9f:2f:a9:a4:34:59:72:1c:47:92:23:e3:ab:
64:57:05:cf:f8:22:db:95:6b:fd:4b:8d:2c:97:97:
31:b9:7c:05:c2:ff:8c:a0:e1:ca:e5:68:23:f7:d8:
4c:77:9c:50:65:b2:67:f0:1b:df:84:49:f4:99:99:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:50:61:3D:3A:15:F7:3D:F9:B6:8E:83:B7:FB:B3:45:EB:C2:45:E8
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5197c386-7ea8-41c6-b63f-e3da0b892a92/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5197c386-7ea8-41c6-b63f-e3da0b892a92/5197c386-7ea8-41c6-b63f-e3da0b892a92.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23486
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:35:0b:e1:28:f7:1f:31:11:7e:ad:c9:7f:62:da:5f:33:09:
4a:bb:f5:33:65:ea:4c:3f:ab:c9:03:73:90:24:ac:45:6a:a1:
c3:54:30:4b:2b:2e:9e:34:8d:6e:ac:87:4b:dd:03:ff:9a:76:
22:a8:42:dd:ce:19:7e:41:4f:85:fd:09:60:8e:b4:a1:41:17:
d1:6c:89:da:f5:f7:ea:e7:9a:4b:7e:a1:27:52:94:20:4b:1a:
47:03:aa:4e:52:a7:ad:e5:dd:38:4f:8d:c3:2e:f8:90:3c:df:
b9:3f:d0:9a:26:8e:e7:be:66:ac:75:cf:88:1a:3e:14:98:d0:
c3:13:da:f6:dd:1a:64:a8:99:9b:6d:42:7f:74:ca:10:b8:41:
f0:30:ba:cd:c1:19:a5:2e:5e:a7:5d:b4:8a:f7:72:1c:4f:35:
36:c9:e4:83:bf:8b:19:cb:33:a7:ec:38:df:50:0d:85:90:ba:
f2:9c:46:ef:4e:ef:77:00:73:ae:37:2f:db:ad:ad:86:45:84:
5b:79:32:98:9f:40:5a:d5:ae:e6:68:e8:3e:ba:c6:a8:c8:96:
76:f3:56:49:ac:0f:52:7d:cf:f9:af:33:d8:c7:35:cc:2a:66:
93:db:ef:2c:9c:ac:09:ed:2a:6e:61:37:7e:64:f2:6a:28:e3:
7b:96:c4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:11:43 2025 by rpki-client