This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92.cer
File: db6ef8c3-b94d-429a-91a7-213b66ee5e92.cer (raw, json)
Hash identifier: kOygy/MkqGSBRgRl3UHab0TFwDJgT6H/bAW8XVwNPSQ=
Subject key identifier: AC:CF:C5:9E:36:BF:AE:C3:69:6E:48:9F:0A:9B:45:6C:69:40:09:50
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584BA992CF99C097C1E1E5D68980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92/db6ef8c3-b94d-429a-91a7-213b66ee5e92.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 27 Oct 2025 16:15:07 +0000
Certificate not after: Sun 30 Jan 2028 17:15:07 +0000
Subordinate resources: AS: 401019
IP: 131.143.109.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:92:cf:99:c0:97:c1:e1:e5:d6:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Oct 27 16:15:07 2025 GMT
Not After : Jan 30 17:15:07 2028 GMT
Subject: CN=db6ef8c3-b94d-429a-91a7-213b66ee5e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5f:a2:71:27:b6:9e:6e:4a:ff:81:7f:93:4b:
7d:d8:97:62:90:16:d4:e8:da:8f:30:1a:bb:2e:70:
1a:4b:9a:b5:5b:74:c1:65:2c:62:63:a2:1e:d2:9f:
7f:65:20:1c:41:98:6a:a2:8d:9c:cf:53:fa:84:04:
7f:38:bc:4c:6f:8a:57:e2:31:d3:b2:d7:e4:3f:8c:
c4:e9:2a:cc:1d:9f:05:d9:0f:4c:6c:c1:87:e2:6a:
b1:e0:39:62:0c:84:59:ca:63:84:8a:c7:5c:a6:f0:
9a:f1:06:43:ae:3e:3c:10:36:7a:b9:48:e0:cb:a9:
61:36:69:e4:62:0e:34:98:84:d2:95:1c:e0:ad:76:
8a:12:fc:03:9f:b3:52:38:3b:4c:82:7e:0f:2c:2e:
39:c1:e4:7f:ba:75:88:ef:2c:38:ce:dd:58:25:8e:
f9:82:d1:8d:7f:d5:b9:5c:79:58:5e:e6:88:90:f7:
63:02:58:8c:f5:ec:49:3e:4b:d0:55:ae:32:81:59:
5e:c6:0b:fe:a6:e8:bb:8e:31:11:18:d2:8b:7a:d5:
7d:ee:d5:1e:dd:54:49:b4:a9:43:54:da:2b:58:90:
2a:0b:a7:83:89:5a:86:bd:ce:b9:fc:3c:a0:a9:56:
67:16:57:ec:1f:a6:b6:a6:2e:e3:b6:5f:66:83:57:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CF:C5:9E:36:BF:AE:C3:69:6E:48:9F:0A:9B:45:6C:69:40:09:50
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db6ef8c3-b94d-429a-91a7-213b66ee5e92/db6ef8c3-b94d-429a-91a7-213b66ee5e92.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
131.143.109.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401019
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:aa:f9:cd:2e:d1:15:b4:39:a4:6f:37:7a:09:40:da:c4:40:
d0:d7:7c:34:ff:13:1e:03:9f:84:17:2b:b2:45:1b:08:81:51:
2e:bb:f1:bc:48:45:8f:ab:54:6a:e1:60:4b:bc:0c:11:b5:c2:
53:ec:21:9c:10:2e:3d:c3:6b:04:c0:cf:74:35:2d:66:5f:44:
c2:ea:88:55:e2:da:28:2f:cd:3a:0f:3c:91:aa:8f:71:0c:4a:
d0:3f:f4:c5:19:5e:08:60:d2:34:9e:a9:79:ec:ca:5b:08:95:
5c:e0:92:20:db:23:bf:66:c3:6a:c3:97:45:4f:a7:66:e8:f3:
e9:a3:52:ec:bf:6b:91:0e:bc:b3:9a:aa:65:97:dd:7f:70:ff:
f3:ef:80:9a:a9:7e:09:3c:e9:f3:c2:86:1c:e2:19:6f:bc:ce:
65:f1:f5:5d:6a:3f:f5:65:7e:0f:0e:a4:52:76:5c:c0:85:77:
5d:17:4b:40:54:86:2e:ab:73:b6:ad:50:8c:b6:a1:25:56:b1:
e7:e6:a9:4b:54:a0:99:74:04:6f:09:5c:82:25:91:eb:8d:c8:
75:d8:d3:ba:73:df:38:b8:1f:67:da:a2:05:2c:04:22:cd:a2:
59:27:60:b2:19:b8:e0:ab:51:04:bd:e8:48:bd:54:82:08:98:
4f:9e:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:52 2025 by rpki-client