This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer
File: 3923a777-f0da-4edf-8bcc-42b47f48310a.cer (raw, json)
Hash identifier: kL9bANWpXlFq9aUQAsogN4gydgYitFC89qXqdnFjF+g=
Subject key identifier: E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584A66B8D4581A54E8E39369EE80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 04 Jul 2025 00:45:37 +0000
Certificate not after: Thu 07 Oct 2027 00:45:37 +0000
Subordinate resources: IP: 64.45.128.0/19
Validation: Failed, certificate revoked on Thu 04 Sep 2025 10:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:66:b8:d4:58:1a:54:e8:e3:93:69:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jul 4 00:45:37 2025 GMT
Not After : Oct 7 00:45:37 2027 GMT
Subject: CN=3923a777-f0da-4edf-8bcc-42b47f48310a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:25:82:d1:fa:79:2e:a9:d2:3d:18:d8:ca:
b4:97:56:25:ac:23:aa:3b:ee:8f:25:b7:66:d3:e5:
f1:a9:c9:20:18:3e:aa:ec:30:3f:90:50:c4:67:43:
ec:ea:90:f2:12:e3:85:19:df:4d:c5:57:f6:4d:ab:
75:0e:ee:f2:aa:ea:0e:3d:0f:3f:5c:55:5b:4a:01:
e0:c3:07:be:14:7f:6f:1f:a9:49:7c:c9:f2:56:f0:
5d:ab:9d:d5:17:53:33:21:65:4e:d0:27:b8:98:1a:
6f:22:6c:71:2e:c5:a3:39:24:a2:1e:36:1c:9a:b4:
f9:70:56:f9:04:b2:cf:2c:1e:b0:9e:65:6f:c3:0a:
e5:7a:1c:53:fd:44:07:8a:e4:b9:af:67:00:c2:26:
87:32:c8:05:aa:f3:fd:41:87:d2:b2:24:6e:b7:80:
e2:ae:a5:dd:24:a6:aa:95:79:35:40:bc:fc:82:04:
22:39:07:07:4d:53:d2:67:10:c7:29:05:57:3d:0a:
bf:82:71:b1:2d:a7:0a:d5:6f:2d:9b:4a:ec:38:6a:
99:ef:9e:54:6f:d0:f5:bb:cc:ea:16:25:6f:3d:91:
db:41:fc:1f:4f:e9:6d:08:de:48:d6:41:b8:a6:6f:
ec:e1:f5:69:ed:90:40:86:a1:58:3b:78:65:20:d6:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
64.45.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:fd:4b:35:97:9e:6d:f5:0a:cc:7a:a4:dd:a1:95:97:77:0a:
6b:9b:30:4e:48:01:88:00:fd:3f:e5:01:80:24:82:92:a6:31:
7c:e7:4d:c5:6d:ba:a9:8f:3e:c6:e2:d1:86:6c:47:31:d3:a8:
89:ca:da:6f:eb:50:e2:f7:c4:b3:b5:55:14:be:fa:c0:73:96:
9d:3c:79:ac:02:78:85:73:d9:df:2e:a9:10:d2:ea:14:1c:5d:
a1:40:79:94:61:14:84:2e:e7:b5:e7:41:0c:c9:0c:75:a5:6b:
2e:59:f2:9f:39:81:09:4c:79:7e:40:29:09:ef:b1:58:8d:ee:
c5:92:c3:59:ab:13:5f:77:0c:f9:16:28:f7:ce:78:56:f4:d8:
6a:0a:d3:4a:5e:60:ec:a2:c4:25:f9:a8:64:9c:27:93:ef:52:
3b:4f:77:12:b3:14:88:7f:de:32:18:03:66:74:4e:15:19:54:
de:31:ef:e6:65:7d:cf:0a:9e:b6:bc:73:d8:e4:1f:7d:1c:2d:
e8:a0:29:9e:37:01:00:6a:81:e7:59:c9:c7:2a:4d:80:05:f3:
f8:3a:73:d8:eb:ab:c8:9b:55:04:99:67:ed:db:88:d1:fe:48:
4a:9e:9b:f0:98:83:30:96:5a:0c:da:d8:7c:ba:0b:a9:7a:73:
41:86:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:12:48 2025 by rpki-client