This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d.cer
File: 5435538b-fc51-4bec-ae5c-304b1aaa155d.cer (raw, json)
Hash identifier: TulL4wKJEStaSwdkvBRk+RIbeVP0VNQ/0Cvd+fJNcTM=
Subject key identifier: 25:44:40:34:92:B6:70:84:02:62:7F:3A:77:3E:EF:50:C6:6C:93:FA
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584C5BCA8FB4B985320E3DF5D700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/5435538b-fc51-4bec-ae5c-304b1aaa155d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 30 Dec 2025 12:21:20 +0000
Certificate not after: Mon 10 May 2027 00:45:34 +0000
Subordinate resources: AS: 5758
IP: 74.188.128.0/18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5b:ca:8f:b4:b9:85:32:0e:3d:f5:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Dec 30 12:21:20 2025 GMT
Not After : May 10 00:45:34 2027 GMT
Subject: CN=5435538b-fc51-4bec-ae5c-304b1aaa155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dd:2a:3e:5e:f8:b3:a0:54:ca:9f:31:32:55:
8d:33:a5:fe:43:d1:df:7b:21:57:df:a3:26:18:87:
e0:3e:c8:88:48:13:e3:ba:24:b1:0f:21:ac:bf:a0:
51:f9:32:df:12:91:ae:40:6c:6e:c3:65:03:b1:b8:
71:1b:a7:bb:0c:3e:1d:b8:f4:b7:63:b0:f8:3e:db:
32:5d:cf:f1:b3:9a:d6:b4:c1:96:fd:d6:c9:6e:f2:
19:aa:f1:38:44:0b:b5:af:33:ca:3c:fc:9b:3d:28:
33:01:9d:f6:80:01:82:2a:6a:18:cc:f7:94:47:21:
8d:5a:28:78:d2:77:c1:4b:d2:0c:b6:f7:44:86:8c:
ae:84:2c:b3:4f:07:60:eb:85:15:b1:4e:00:03:d8:
02:8a:38:0c:6d:aa:30:8a:7c:2a:89:bb:4f:7b:16:
4a:11:3a:14:b9:ed:d7:f2:a4:4e:dd:bf:2d:c0:4d:
7d:77:94:cd:5d:bb:07:32:fe:d0:65:77:84:5d:6a:
e5:5b:4a:2c:20:6a:9a:97:38:23:d5:8c:67:96:55:
5f:18:fa:c9:cb:b3:15:c7:52:96:8f:bb:cc:bb:ed:
09:0a:0d:d4:a2:75:e1:40:da:de:a0:0e:30:a2:b0:
1d:41:2d:34:6f:0a:30:ef:4a:9e:14:64:aa:ef:ce:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:44:40:34:92:B6:70:84:02:62:7F:3A:77:3E:EF:50:C6:6C:93:FA
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/5435538b-fc51-4bec-ae5c-304b1aaa155d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
74.188.128.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5758
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:20:1a:90:eb:27:31:3f:3d:af:16:b7:af:e0:48:44:3b:80:
be:99:43:b1:da:f7:09:5f:6b:c3:e7:fd:b3:3d:44:c7:2d:75:
2e:38:97:22:3c:83:cf:fe:2f:7c:b9:d4:cf:51:59:49:39:98:
1a:2e:4b:be:9d:d6:21:c7:ca:9e:48:60:96:a9:7f:88:d9:65:
0e:43:02:24:5d:c8:b5:ad:5e:36:0c:0e:2b:22:45:f7:35:d9:
f9:1e:27:11:e7:85:84:58:3d:81:ec:59:95:2f:6c:ba:55:7b:
b2:23:57:2e:08:40:41:1b:51:8a:a8:37:c2:69:df:0a:9c:3c:
4f:02:0d:f2:aa:39:e7:16:11:33:fb:b6:a9:48:22:5a:4f:66:
06:6f:a9:81:e0:b2:30:7b:02:a8:0b:a7:ce:89:1c:9d:a3:5d:
dd:04:09:49:1f:60:88:cd:fd:96:2d:68:43:58:60:cb:7b:b3:
45:da:54:61:52:06:98:44:84:d5:0b:b7:76:93:01:08:57:06:
9f:4a:b7:0b:18:aa:f6:99:ce:37:1e:90:6a:0b:20:9f:e9:64:
3e:c2:21:90:61:a0:67:3d:33:b3:29:1c:e3:ce:1f:ba:ee:85:
c9:63:e6:91:61:2f:88:7b:d6:8f:9c:45:5b:6f:9e:5c:ce:b6:
78:49:71:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 01:46:07 2026 by rpki-client