This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer
File: 9477d25a-981d-4eb4-9fd8-7eea914a2840.cer (raw, json)
Hash identifier: B3JiaCvO+tIGXjNAWopftEmGI3laiEn2ibwb/zCrgvk=
Subject key identifier: 15:0B:A4:99:6B:62:D4:0B:05:3C:1C:13:D4:B4:2E:49:A5:44:8B:B1
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584B8F624AD5E1F32D66B9D14880
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 18 Oct 2025 07:06:20 +0000
Certificate not after: Fri 21 Jan 2028 08:06:20 +0000
Subordinate resources: IP: 23.147.148.0/24
IP: 2602:f514::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:8f:62:4a:d5:e1:f3:2d:66:b9:d1:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Oct 18 07:06:20 2025 GMT
Not After : Jan 21 08:06:20 2028 GMT
Subject: CN=9477d25a-981d-4eb4-9fd8-7eea914a2840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:15:eb:24:cf:00:70:11:2b:44:76:ef:07:
9d:e6:1b:88:fc:22:b1:2d:fa:94:68:cb:ef:c7:28:
36:c9:5e:c7:6b:2d:77:99:43:af:58:5f:ca:75:ff:
9b:fb:dc:b0:eb:d9:15:ee:be:c5:12:63:0e:06:61:
dc:d6:61:ef:5c:20:5b:e9:a6:3d:92:e2:06:99:8d:
94:93:c8:28:44:44:73:6e:d0:c2:73:8b:82:94:ab:
cc:6a:75:5e:5a:8d:d1:b9:00:14:8d:7d:ee:81:ab:
aa:05:7c:e2:e2:f9:51:68:b2:71:88:1c:74:19:10:
29:2b:a2:79:d1:9f:5c:66:b5:2e:c2:b5:82:bc:ce:
07:45:34:f7:f4:de:1d:91:c0:d8:6b:b6:a2:64:a4:
c9:4c:4d:3f:aa:9c:b9:b8:d8:c8:88:5a:30:b5:85:
7b:99:c1:bf:9a:93:95:3c:e8:29:dd:47:c2:92:31:
ff:8d:9f:7a:b9:10:1a:d6:0c:ff:0a:7f:65:7b:5e:
7d:48:96:d7:89:01:a2:ce:56:b2:25:a1:e8:f4:ee:
bd:43:28:21:ca:02:71:60:d4:6e:54:99:17:20:99:
ed:be:fd:5d:a2:54:97:42:7d:47:01:aa:58:a6:dc:
ad:56:d6:e8:a5:f3:1c:97:1e:26:91:11:e8:8a:57:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0B:A4:99:6B:62:D4:0B:05:3C:1C:13:D4:B4:2E:49:A5:44:8B:B1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.148.0/24
IPv6:
2602:f514::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:97:12:2d:a7:8c:9f:de:6a:c2:b0:63:4c:e7:3a:ce:06:1b:
75:b3:1d:29:8d:40:b1:c8:33:44:af:e8:20:d5:14:4e:60:a2:
4d:2c:6c:0e:ab:9e:e8:57:ff:12:76:6b:9b:82:5f:e1:ca:2f:
de:c0:87:97:ec:ae:9e:c0:ee:aa:0e:10:c7:35:00:a5:ad:d8:
6b:fc:39:25:93:c0:d2:27:04:cc:36:7d:0d:09:73:ec:9b:c5:
fb:1c:4f:65:28:bf:4e:79:90:7b:1c:a2:a4:38:2e:6a:53:15:
c6:80:f5:8f:14:62:47:20:f1:08:c8:70:ba:87:62:79:63:2d:
02:66:38:78:84:72:da:90:14:e1:33:c1:2f:d9:90:85:b4:59:
2c:95:03:0e:80:e1:96:0c:01:06:53:35:0e:6e:02:98:5a:c2:
02:8c:a3:c3:52:1e:dc:d2:94:8f:94:f7:0b:f6:6d:80:c9:e7:
53:c8:ee:6a:79:e2:5a:8f:c8:20:8e:70:b9:44:4a:22:74:c8:
0c:43:fb:a5:a8:7e:93:d4:79:fb:57:cf:99:ea:63:8f:c2:30:
78:b2:f4:c9:05:d8:92:77:c3:03:7f:05:6e:07:a3:f0:3e:4e:
13:f9:69:c1:5c:f1:86:80:4c:1a:5d:d1:90:e5:90:93:f6:9a:
b1:b9:f3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:11:45 2025 by rpki-client