This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c.cer
File: 7659d706-fdf7-4c2e-8e41-352e9090b48c.cer (raw, json)
Hash identifier: iPUU+JsPSnWDUmH4NWN2kbiD1Q3HY7FZxprVkraBzLA=
Subject key identifier: 5B:F0:62:7C:2E:6A:62:62:F9:52:DA:74:21:48:68:A7:FF:7B:01:5F
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584B96B7466B694F9083FD22E000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/7659d706-fdf7-4c2e-8e41-352e9090b48c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 20 Oct 2025 22:08:14 +0000
Certificate not after: Sun 23 Jan 2028 23:08:14 +0000
Subordinate resources: AS: 402070
IP: 131.143.91.0/24
IP: 2602:f523::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:96:b7:46:6b:69:4f:90:83:fd:22:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Oct 20 22:08:14 2025 GMT
Not After : Jan 23 23:08:14 2028 GMT
Subject: CN=7659d706-fdf7-4c2e-8e41-352e9090b48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:5c:31:f8:ba:ea:ec:34:67:f2:d4:0d:af:
63:80:1d:76:2d:f4:91:ec:8c:e0:55:30:cb:1e:7b:
40:53:5c:91:68:c2:35:9c:bf:ef:5d:19:e5:a3:f9:
4c:f7:dc:1a:f8:b4:51:4c:33:68:3a:e0:4e:dd:51:
d4:d9:bd:42:6b:5e:ca:3c:7f:b4:32:3e:2c:9c:9d:
9b:60:25:ff:70:8c:2e:94:86:ea:fb:87:02:18:b6:
fc:71:56:d2:60:a3:9b:22:a8:ee:45:b6:59:18:57:
b5:6b:82:98:b3:a8:fe:d6:a1:3a:6d:80:ff:f2:ba:
ef:63:82:54:9e:ac:4b:e9:62:cc:bc:ef:0a:52:38:
80:c9:1b:53:f3:00:ce:d9:f6:bb:55:21:ea:56:57:
7f:c5:dd:a2:52:3b:63:90:84:fd:a2:b2:0b:8a:9a:
d9:47:96:ec:b6:e9:8b:19:71:ec:be:bb:0f:7a:b0:
37:f0:3a:b0:9a:84:05:9f:35:24:9b:1f:35:24:a1:
02:5f:79:96:ac:c2:a6:e9:56:a6:2b:45:81:b9:dc:
e9:76:d9:33:a2:57:a7:91:b0:43:96:d6:2f:6b:57:
d5:fe:a0:2c:c7:8d:a8:92:10:59:80:17:4f:1c:32:
0b:60:27:1a:9f:cd:f3:46:eb:07:32:a6:20:36:65:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:62:7C:2E:6A:62:62:F9:52:DA:74:21:48:68:A7:FF:7B:01:5F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/7659d706-fdf7-4c2e-8e41-352e9090b48c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
131.143.91.0/24
IPv6:
2602:f523::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402070
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:13:72:68:86:48:c2:6a:7b:50:e7:49:7f:ee:69:33:b8:a4:
b0:52:a8:4a:d7:a5:0d:e0:35:86:15:fa:ed:02:77:bd:64:9a:
fd:92:eb:0e:98:c8:56:f1:31:ee:ee:fd:b9:f8:f9:18:47:7c:
a8:a4:47:d9:2a:16:eb:3a:11:43:38:03:4e:8f:cc:6f:e5:48:
dc:1c:7b:c9:9a:f8:d7:16:1b:b3:77:20:a5:fa:6c:6c:96:f7:
13:ea:c9:d2:61:1e:e9:3f:54:05:9d:1f:cf:83:0d:21:13:e3:
c1:20:66:37:0b:22:38:5b:48:c1:27:d2:77:ce:0c:d4:9f:65:
55:f8:84:6b:75:96:30:85:64:a2:87:af:99:d2:ad:0d:1c:46:
76:78:83:2d:6d:06:96:e9:18:d1:7b:9c:6a:9d:57:f1:91:a5:
b9:d9:22:bb:7d:35:02:5d:de:c6:af:fc:7f:5b:bd:2d:9a:10:
75:3b:57:cf:a2:35:89:16:ad:2f:81:55:7c:20:03:fb:63:a0:
88:17:1f:f1:53:6f:33:e5:c3:a4:31:46:94:11:8b:ff:76:22:
ca:7f:73:7a:74:1e:35:36:d1:79:c2:90:a9:ff:04:e6:42:a3:
09:8c:f2:84:27:12:96:ff:77:ec:35:6a:2f:7d:fe:f2:62:94:
69:5e:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:51 2025 by rpki-client