This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
File: cb2539db-3965-4bf1-baef-b7f85ca967bd.cer (raw, json)
Hash identifier: hvXI7NeZ3xSWYrv/RCFUlJR4fTDaYP0CeJv1QxLiVew=
Subject key identifier: 35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584BB51975E7C26E6965EB3BD480
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 31 Oct 2025 19:20:19 +0000
Certificate not after: Thu 03 Feb 2028 20:20:19 +0000
Subordinate resources: AS: 401143
IP: 23.147.124.0/24
IP: 2602:f8b3::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b5:19:75:e7:c2:6e:69:65:eb:3b:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Oct 31 19:20:19 2025 GMT
Not After : Feb 3 20:20:19 2028 GMT
Subject: CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:50:67:0e:36:e9:fb:23:b2:51:e5:a3:8a:
b1:2e:5c:25:88:12:45:aa:9d:f0:80:c5:47:16:5a:
b6:94:87:f1:b2:e9:dc:7a:a7:73:56:bd:ed:62:30:
61:f6:3b:ab:5e:da:ae:26:5c:dc:57:d5:63:c2:fc:
38:9e:d0:12:79:0f:75:f4:17:1a:c5:c7:c5:35:b0:
75:a1:f9:06:dd:08:68:ee:7a:a7:0f:62:1f:e7:2e:
03:74:ea:63:3c:2d:7b:f2:0f:9c:89:0e:cc:21:7b:
b9:11:4c:5f:cd:51:54:5a:e1:08:ca:68:67:4b:1c:
47:cc:1c:d5:dc:d1:87:30:33:23:2b:ff:8a:d0:f0:
58:ff:e7:45:58:61:fd:db:fd:f9:14:b7:16:18:af:
4f:87:e4:4d:c0:4f:0f:cc:96:0d:45:9b:86:66:bd:
aa:6a:0b:77:47:7f:f4:7d:45:f6:91:09:0b:c1:d7:
f9:77:4e:f0:eb:ba:93:88:ec:f9:30:9a:33:3d:d0:
54:eb:4d:e1:2a:fd:25:c4:2a:78:fb:3c:07:e2:8d:
6d:eb:42:07:8a:eb:5e:e6:5c:6d:ec:fc:99:15:12:
0e:ad:8b:a2:a0:08:40:82:dd:61:d1:de:e3:41:2a:
98:60:a2:e8:bd:49:b1:90:91:26:e6:26:6a:c9:9a:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.124.0/24
IPv6:
2602:f8b3::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401143
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:87:46:83:6b:4b:a1:5f:37:bb:e0:e9:9e:40:38:02:d2:68:
b0:ea:af:41:59:ed:56:b4:d5:d4:88:5a:15:43:68:81:30:e6:
ed:08:51:65:1c:7d:2c:3b:de:b0:2f:49:8c:32:93:75:68:1c:
e7:b3:7b:9e:1f:88:44:1a:5f:1d:75:7e:8c:46:ef:55:37:3c:
f0:95:c5:a8:93:dc:e6:b6:52:9c:b8:57:58:4d:1d:bd:32:63:
5a:df:a0:57:83:5f:8a:f9:6e:73:38:30:95:a8:22:92:54:1f:
29:07:9b:8a:7f:ed:f2:61:aa:84:5a:0b:f3:5b:c4:c9:04:f6:
7c:45:d2:46:c6:46:bd:c3:b7:e3:d6:49:f8:5a:e0:c4:c6:56:
55:64:7a:53:75:05:42:4a:46:61:ea:67:7a:8f:df:fe:15:0d:
b4:53:d4:ce:b4:56:74:ba:6f:fe:63:4c:5b:9c:47:bc:ea:ba:
19:c9:7b:2f:59:30:52:2d:f9:da:92:c2:42:97:13:48:e0:59:
50:4b:09:53:09:5f:56:26:ab:ce:94:b6:dc:bb:c9:e1:4f:9a:
02:50:7e:74:06:04:4c:26:cf:8c:0e:f6:a8:97:48:1c:c4:09:
e5:30:9f:bb:27:ef:e2:ef:08:3d:d3:f5:c3:82:74:ee:9e:e2:
ca:b5:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:40 2025 by rpki-client