This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad.cer
File: d552454d-e3f4-40f7-b63f-882285340cad.cer (raw, json)
Hash identifier: +DxrlGK74m7mz0o9MF0vhtyQjT3YLq/tD8JYjzRk52k=
Subject key identifier: 7A:22:46:E9:65:7B:CF:B4:8E:10:63:4D:37:79:76:E1:A4:5C:78:D2
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584BFE03BE3C5E654FE61A858880
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad/d552454d-e3f4-40f7-b63f-882285340cad.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 26 Nov 2025 22:10:34 +0000
Certificate not after: Tue 29 Feb 2028 22:10:34 +0000
Subordinate resources: AS: 398924
IP: 23.130.132.0/24
IP: 142.248.222.0/24
IP: 2602:f789::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fe:03:be:3c:5e:65:4f:e6:1a:85:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Nov 26 22:10:34 2025 GMT
Not After : Feb 29 22:10:34 2028 GMT
Subject: CN=d552454d-e3f4-40f7-b63f-882285340cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:0e:47:4c:ad:04:6b:75:ae:23:91:9f:46:
e1:cb:7b:4b:ee:45:43:a5:4a:19:ef:a9:5c:17:00:
54:be:86:99:8f:31:c1:b0:e8:0d:b1:a1:94:59:9c:
0b:61:83:f9:c1:fb:be:b9:09:e1:0b:d4:90:90:41:
e1:78:77:a6:b5:17:c8:37:a1:24:bd:11:ee:e5:87:
a0:c2:f1:8b:9f:2e:3b:24:66:49:b1:61:21:2a:bf:
8c:bb:67:e7:9b:ab:6b:d1:d3:55:4c:1b:0b:b2:fe:
58:91:e1:f4:eb:3b:85:fa:7f:f0:76:d2:70:4f:19:
ff:c3:79:71:63:65:78:46:54:d7:bc:35:8a:ea:6f:
b1:90:db:da:ae:01:11:76:b4:96:e6:6f:c2:7e:bc:
ef:f5:6c:87:35:0c:75:b9:eb:89:9f:f8:67:f5:27:
ca:bc:81:ca:33:af:6f:bf:de:08:7f:94:f7:58:98:
5c:90:c0:17:7a:f0:e7:53:18:22:c2:88:57:ad:29:
7c:92:b5:13:dd:0c:4d:e7:be:a3:c8:7e:63:8d:b3:
44:92:c3:6c:86:f1:6d:d4:ad:7d:2e:44:54:b4:f7:
6e:dc:8c:67:ad:10:9d:3b:5f:93:05:a9:53:de:89:
44:87:1d:e9:02:83:58:c3:0b:c5:c0:87:96:8f:8c:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:46:E9:65:7B:CF:B4:8E:10:63:4D:37:79:76:E1:A4:5C:78:D2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad/d552454d-e3f4-40f7-b63f-882285340cad.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.132.0/24
142.248.222.0/24
IPv6:
2602:f789::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398924
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:0f:57:9e:d6:dc:81:19:cc:3a:bd:4d:eb:2e:23:d7:a0:9b:
3e:81:2a:66:ce:0b:2e:1a:35:3f:1a:43:88:f4:4f:57:71:d4:
bd:ee:5c:a2:58:f0:49:66:8f:cb:3a:eb:24:06:75:1a:9e:fa:
05:83:73:f6:f2:6f:94:94:c2:ae:c6:d6:dc:67:2a:40:ef:f9:
80:37:d1:91:13:b9:85:30:d9:14:00:b1:55:d7:e8:22:96:ee:
bd:a5:7c:fd:dd:61:aa:39:f5:45:b2:05:17:33:4f:20:f1:b4:
4e:06:22:22:e4:23:e6:ae:00:16:16:0a:a3:ef:e0:f8:9f:5c:
38:09:b8:37:d4:a7:cf:6c:02:cd:66:cc:4c:45:a0:96:f2:0f:
f0:12:17:ba:01:7d:14:72:4c:8c:17:b9:bd:a3:a4:19:6a:12:
11:df:bb:50:2a:bf:e2:1a:e7:62:38:a6:3d:15:35:26:f3:1b:
6e:21:bc:cc:5b:9b:4f:b9:2d:e0:f9:de:92:b4:55:35:a6:9a:
9e:3b:39:20:66:0c:99:b2:f3:08:8d:48:b6:91:0b:33:67:23:
98:b8:54:bd:42:06:91:9c:d5:21:a0:81:f6:c7:1c:93:35:c8:
49:e2:ea:e5:04:b5:13:21:52:a5:84:3f:ca:eb:dc:df:7b:7b:
9a:07:8e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:41 2025 by rpki-client