This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
File: 664e4c51-f7b5-453e-a7b0-8081a6404662.cer (raw, json)
Hash identifier: oZF8QOlM2PZW04rUSxSed594k30+9s8dFuAAmBszxxE=
Subject key identifier: AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584BDC85795E9466F11011595E80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 14 Nov 2025 22:14:28 +0000
Certificate not after: Thu 17 Feb 2028 22:14:28 +0000
Subordinate resources: AS: 62731
AS: 400041
IP: 23.148.0.0 -- 23.148.4.255
IP: 104.218.120.0/22
IP: 130.51.8.0/22
IP: 162.220.52.0/22
IP: 169.197.76.0/22
IP: 173.0.224.0/20
IP: 199.26.183.0/24
IP: 2602:ffa6::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:dc:85:79:5e:94:66:f1:10:11:59:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Nov 14 22:14:28 2025 GMT
Not After : Feb 17 22:14:28 2028 GMT
Subject: CN=664e4c51-f7b5-453e-a7b0-8081a6404662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5f:46:a6:71:c2:84:40:44:05:2c:41:70:d4:
16:34:b0:10:57:aa:2c:05:82:69:5f:c4:2c:fa:38:
0e:2f:34:ed:b7:84:2f:27:6d:a7:2f:7d:0b:32:bc:
32:d1:01:33:66:68:ee:95:6f:f3:dd:33:64:82:c1:
8d:33:62:b6:0c:94:cd:0f:2d:ac:3d:ed:f8:eb:44:
3b:a4:48:b1:fc:8f:0f:66:b9:3e:35:06:26:2b:ed:
92:e8:43:33:d9:e3:24:7b:7c:a5:b3:69:cc:30:bb:
ae:25:17:27:cb:30:f4:e2:da:6d:28:7e:9b:22:d7:
0c:a4:da:9d:11:e6:94:ea:eb:e3:85:83:78:72:b4:
5c:a8:3d:2c:a8:96:b6:37:63:cc:46:35:24:fc:27:
ea:de:5f:7e:d6:18:c3:53:99:ca:f9:80:17:03:62:
a8:b3:88:55:48:da:40:13:00:ef:27:cb:7e:8e:f0:
35:72:a2:76:9d:eb:8c:65:2f:2b:84:d1:7b:fe:d6:
6c:6a:a2:60:d0:86:41:23:d8:ec:76:e9:3f:1d:d4:
76:87:e3:de:06:9f:ed:45:42:da:75:98:97:e0:94:
61:0e:d2:c9:81:c8:f6:14:de:7e:1b:0e:2b:60:c3:
68:67:c3:80:9e:98:19:af:11:56:01:32:ac:39:c0:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.0.0-23.148.4.255
104.218.120.0/22
130.51.8.0/22
162.220.52.0/22
169.197.76.0/22
173.0.224.0/20
199.26.183.0/24
IPv6:
2602:ffa6::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62731
400041
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:44:4a:12:89:1e:5e:dd:74:7a:21:ad:9f:70:d9:8a:9e:64:
3c:19:c2:1c:ce:82:aa:9d:5c:57:b0:9f:c2:cc:64:18:6a:d6:
6a:2f:6c:7a:28:30:8e:c9:85:e4:d4:4e:47:a4:2e:64:02:71:
2b:c7:51:69:90:3d:ca:19:b0:3d:fc:68:fb:0d:ff:41:fc:dc:
79:e6:8f:c3:68:1d:a6:55:47:0d:60:81:35:5c:35:0f:f1:bb:
ae:d4:70:16:e1:72:d9:4a:54:7c:fc:02:db:4c:be:72:66:e2:
6e:af:27:ca:33:01:c3:81:12:0f:b0:c1:6e:51:05:01:84:89:
89:f6:16:b2:20:34:02:f5:f0:a4:14:45:9e:77:ed:ad:8c:4b:
d1:dc:20:d2:9c:a0:74:02:17:47:07:3d:10:aa:30:e5:7b:d7:
3a:9f:87:bd:c6:3b:db:0c:46:8b:8c:11:ce:72:4f:a5:c9:4e:
28:ba:c5:a9:2a:5f:67:51:e6:24:10:df:5b:18:52:24:7e:2f:
4e:7e:ff:96:55:fa:f4:73:f4:e9:76:dc:5f:80:66:2b:18:de:
70:01:45:14:f0:3f:f3:40:7a:9e:36:41:8f:11:0c:80:9b:a7:
5b:dd:fd:a0:9a:bb:cd:19:a9:3c:b4:08:7d:ef:ae:71:38:d3:
98:bc:31:48
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWEvchXlelGbxEBFZXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI1MTExNDIyMTQyOFoXDTI4MDIxNzIyMTQyOFowLzEtMCsGA1UEAxMk
NjY0ZTRjNTEtZjdiNS00NTNlLWE3YjAtODA4MWE2NDA0NjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh19GpnHChEBEBSxBcNQWNLAQV6osBYJpX8Qs
+jgOLzTtt4QvJ22nL30LMrwy0QEzZmjulW/z3TNkgsGNM2K2DJTNDy2sPe3460Q7
pEix/I8PZrk+NQYmK+2S6EMz2eMke3yls2nMMLuuJRcnyzD04tptKH6bItcMpNqd
EeaU6uvjhYN4crRcqD0sqJa2N2PMRjUk/Cfq3l9+1hjDU5nK+YAXA2Kos4hVSNpA
EwDvJ8t+jvA1cqJ2neuMZS8rhNF7/tZsaqJg0IZBI9jsduk/HdR2h+PeBp/tRULa
dZiX4JRhDtLJgcj2FN5+Gw4rYMNoZ8OAnpgZrxFWATKsOcCyrQIDAQABo4IEWjCC
BFYwHQYDVR0OBBYEFK4FSpu7qZTwcKyDG1UFtF0F48R0MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82
NjRlNGM1MS1mN2I1LTQ1M2UtYTdiMC04MDgxYTY0MDQ2NjIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzY2NGU0YzUxLWY3YjUtNDUzZS1h
N2IwLTgwODFhNjQwNDY2Mi82NjRlNGM1MS1mN2I1LTQ1M2UtYTdiMC04MDgxYTY0
MDQ2NjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwWQYIKwYBBQUH
AQcBAf8ESjBIMDcEAgABMDEwCwMDAheUAwQAF5QEAwQCaNp4AwQCgjMIAwQCotw0
AwQCqcVMAwQErQDgAwQAxxq3MA0EAgACMAcDBQAmAv+mMB8GCCsGAQUFBwEIAQH/
BBAwDqAMMAoCAwD1CwIDBhqpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABJEShKJHl7ddHohrZ9w2YqeZDwZ
whzOgqqdXFewn8LMZBhq1movbHooMI7JheTUTkekLmQCcSvHUWmQPcoZsD38aPsN
/0H83Hnmj8NoHaZVRw1ggTVcNQ/xu67UcBbhctlKVHz8AttMvnJm4m6vJ8ozAcOB
Eg+wwW5RBQGEiYn2FrIgNAL18KQURZ537a2MS9HcINKcoHQCF0cHPRCqMOV71zqf
h73GO9sMRouMEc5yT6XJTii6xakqX2dR5iQQ31sYUiR+L05+/5ZV+vRz9Ol23F+A
ZisY3nABRRTwP/NAep42QY8RDICbp1vd/aCau80ZqTy0CH3vrnE405i8MUg=
-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:41 2025 by rpki-client