This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945.cer
File: 7363c75e-c9d4-47b4-9294-7a310c041945.cer (raw, json)
Hash identifier: 7pvX4Dw3FfU/vwPpqd7MHh7Dd42bUDrtevKwRKJstg0=
Subject key identifier: 3F:12:0C:B9:D9:5A:71:99:5C:88:46:39:6C:34:8B:DB:F5:26:4B:8B
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584B82364151E1783D27E347CC00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/7363c75e-c9d4-47b4-9294-7a310c041945.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 13 Oct 2025 13:52:06 +0000
Certificate not after: Sun 16 Jan 2028 14:52:06 +0000
Subordinate resources: AS: 20443
IP: 23.130.180.0/24
IP: 142.248.128.0/22
IP: 2602:f774::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:82:36:41:51:e1:78:3d:27:e3:47:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Oct 13 13:52:06 2025 GMT
Not After : Jan 16 14:52:06 2028 GMT
Subject: CN=7363c75e-c9d4-47b4-9294-7a310c041945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:8b:08:73:7c:38:a9:96:ea:a8:85:ba:bf:
29:d3:3d:fa:c2:09:ff:30:9e:2f:ab:7f:e6:9e:ac:
8d:69:eb:9d:cc:bf:44:9e:34:d7:89:07:d6:6e:1a:
2e:2d:3a:75:ae:09:98:ee:40:2d:2d:91:e9:0e:14:
c5:85:41:35:55:d3:ed:a9:e4:81:42:e6:57:f0:86:
86:c9:2d:66:68:49:9a:da:b4:31:b2:fc:1a:0a:11:
ee:e8:c2:c0:a4:f2:11:73:ea:63:54:22:c9:4a:49:
af:a4:fe:49:41:e4:ee:01:04:d7:0b:3e:22:58:77:
bc:c5:45:ab:a3:2b:9c:49:c1:19:30:d7:bf:8a:36:
d7:82:30:57:91:94:1d:2e:8b:ea:f3:a0:9e:4b:68:
ab:7a:14:bc:ee:38:3a:d5:c7:b7:ee:0e:0f:8f:9b:
96:84:23:27:26:1e:ab:67:15:68:73:91:50:15:a4:
ad:67:c4:33:e9:1a:4b:83:6b:2b:bc:de:2d:f4:4a:
e2:2b:6d:53:fe:01:21:24:d4:bd:8d:28:c0:c4:4c:
b2:06:24:d7:86:fc:23:e6:a2:de:be:7b:38:d3:c7:
96:ad:a7:46:09:c6:88:dc:88:11:7c:38:18:57:f4:
d8:de:36:42:17:63:7e:47:0c:7f:8b:d4:95:1a:95:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:12:0C:B9:D9:5A:71:99:5C:88:46:39:6C:34:8B:DB:F5:26:4B:8B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/7363c75e-c9d4-47b4-9294-7a310c041945.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.180.0/24
142.248.128.0/22
IPv6:
2602:f774::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20443
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:45:2c:48:01:79:bf:36:dd:8d:bf:0d:5d:8b:5b:0f:d8:ee:
79:4f:4e:f5:1f:ac:72:93:bf:f0:a7:67:ff:d5:d7:60:b4:46:
12:1e:e6:c1:1c:d4:6e:e0:84:87:57:39:e9:d7:d1:61:db:ae:
00:b7:a3:50:03:5d:e0:8d:47:ee:73:6c:13:50:b9:4e:d8:2f:
b4:a8:d4:ed:a1:50:89:64:5f:b0:80:87:41:1a:55:0f:96:57:
77:7c:5a:5b:59:51:64:98:e0:63:ce:55:69:8d:1a:9a:36:fe:
aa:48:38:54:50:66:d7:19:86:e1:02:47:39:e3:45:67:5b:ea:
df:44:59:b3:19:44:5d:da:94:e1:a3:ec:ed:31:cc:2d:f8:90:
d8:10:c8:f7:66:5f:80:0b:f8:1d:f8:44:46:e1:3a:08:77:16:
79:ce:ec:00:d8:2b:e4:12:ad:d2:38:df:a0:a0:b2:77:51:9b:
95:01:50:0a:a0:40:55:3c:51:91:11:9a:9a:5e:de:52:62:88:
ac:b2:54:50:1e:a3:db:d7:32:71:ce:56:d1:70:60:b2:d1:96:
fe:00:c6:6f:90:04:af:4b:f6:b5:fa:d6:ff:be:4d:16:9d:60:
91:62:d5:58:88:ce:66:b2:7f:0e:14:f8:74:ad:da:c6:2c:6f:
b6:06:4c:1c
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEuCNkFR4Xg9J+NHzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI1MTAxMzEzNTIwNloXDTI4MDExNjE0NTIwNlowLzEtMCsGA1UEAxMk
NzM2M2M3NWUtYzlkNC00N2I0LTkyOTQtN2EzMTBjMDQxOTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHGLCHN8OKmW6qiFur8p0z36wgn/MJ4vq3/m
nqyNaeudzL9EnjTXiQfWbhouLTp1rgmY7kAtLZHpDhTFhUE1VdPtqeSBQuZX8IaG
yS1maEma2rQxsvwaChHu6MLApPIRc+pjVCLJSkmvpP5JQeTuAQTXCz4iWHe8xUWr
oyucScEZMNe/ijbXgjBXkZQdLovq86CeS2irehS87jg61ce37g4Pj5uWhCMnJh6r
ZxVoc5FQFaStZ8Qz6RpLg2srvN4t9EriK21T/gEhJNS9jSjAxEyyBiTXhvwj5qLe
vns408eWradGCcaI3IgRfDgYV/TY3jZCF2N+Rwx/i9SVGpVffwIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFD8SDLnZWnGZXIhGOWw0i9v1JkuLMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83
MzYzYzc1ZS1jOWQ0LTQ3YjQtOTI5NC03YTMxMGMwNDE5NDUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzczNjNjNzVlLWM5ZDQtNDdiNC05
Mjk0LTdhMzEwYzA0MTk0NS83MzYzYzc1ZS1jOWQ0LTQ3YjQtOTI5NC03YTMxMGMw
NDE5NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXgrQDBAKO+IAwDgQCAAIwCAMGACYC93QAMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAk/bMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADtFLEgBeb823Y2/DV2L
Ww/Y7nlPTvUfrHKTv/CnZ//V12C0RhIe5sEc1G7ghIdXOenX0WHbrgC3o1ADXeCN
R+5zbBNQuU7YL7So1O2hUIlkX7CAh0EaVQ+WV3d8WltZUWSY4GPOVWmNGpo2/qpI
OFRQZtcZhuECRznjRWdb6t9EWbMZRF3alOGj7O0xzC34kNgQyPdmX4AL+B34REbh
Ogh3FnnO7ADYK+QSrdI436CgsndRm5UBUAqgQFU8UZERmppe3lJiiKyyVFAeo9vX
MnHOVtFwYLLRlv4Axm+QBK9L9rX61v++TRadYJFi1ViIzmayfw4U+HSt2sYsb7YG
TBw=
-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:31 2025 by rpki-client