This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.cer
File: 0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.cer (raw, json)
Hash identifier: sG6lJlwm6/McRApgxpykKxjo7WuKr3FHNACTYM8Cgbk=
Subject key identifier: F4:84:DA:23:24:5E:15:9E:3F:4F:82:F2:37:8E:CB:F9:BB:3A:4D:54
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584C8E34967ED010D8AB98717000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 17 Jan 2026 13:45:23 +0000
Certificate not after: Fri 21 Apr 2028 12:45:23 +0000
Subordinate resources: IP: 130.253.0.0/16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8e:34:96:7e:d0:10:d8:ab:98:71:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Jan 17 13:45:23 2026 GMT
Not After : Apr 21 12:45:23 2028 GMT
Subject: CN=0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:e2:41:a9:17:3e:f7:c2:20:31:42:45:73:
54:ae:fa:7d:04:59:f7:d8:68:ca:69:93:e4:89:82:
62:24:62:fd:fd:ea:68:38:65:ce:13:3d:c5:04:89:
aa:1c:0d:38:c3:ca:a1:1f:96:69:40:6b:4d:48:9f:
f4:f5:01:b8:ec:93:86:e8:48:21:3b:d2:44:bc:bb:
d2:a7:d1:95:8e:76:d0:cd:d8:da:a9:97:2c:40:80:
7b:60:79:fd:08:57:12:2c:74:0d:41:82:95:e9:cd:
d5:c4:16:2a:32:8f:c3:9e:3d:d3:17:0b:de:16:38:
03:a0:91:c0:0f:0f:8e:8c:80:e7:21:3b:f9:65:c4:
74:47:c1:b5:83:21:9c:d9:be:38:95:49:98:8b:63:
82:28:1d:4f:44:6c:35:c6:57:8c:45:95:60:02:8d:
e3:e5:7f:f1:5b:3d:15:e7:27:97:ea:76:19:50:ef:
5d:d2:39:1f:d9:21:ed:35:6a:ac:45:cf:5c:6f:86:
29:18:93:06:a5:b0:e4:89:d4:f2:a3:cb:08:ed:a0:
1f:7c:6f:e5:46:7a:bc:7a:6a:d4:76:2d:92:24:ae:
e5:7b:3b:5d:bb:6b:72:83:59:5e:e2:a9:12:ec:c1:
bc:60:61:a1:12:4e:db:f3:c7:af:73:19:be:00:5f:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:84:DA:23:24:5E:15:9E:3F:4F:82:F2:37:8E:CB:F9:BB:3A:4D:54
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
130.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:85:69:53:7f:bb:11:ac:fd:77:1c:65:3f:89:f8:f8:90:64:
23:d2:aa:98:d1:77:73:9c:a4:59:0d:c5:6f:9e:c9:b3:94:74:
25:62:20:53:68:8e:61:7a:33:ef:d9:38:41:55:69:f6:29:50:
2b:45:40:72:5c:52:0f:51:0f:30:6c:2e:b7:7f:21:c9:b3:93:
8a:eb:f4:20:ca:22:c1:62:57:a1:7b:e6:ae:3c:c5:e4:f0:d0:
5e:5f:3b:82:f4:d1:ad:89:25:37:55:0d:dd:07:72:84:ff:da:
f5:50:a8:57:0c:e7:57:75:54:63:fd:20:6a:6e:72:06:00:0c:
ec:5b:61:97:7e:72:ae:bd:1f:a7:a5:60:cd:10:2c:48:e5:e1:
d2:d6:c4:88:a1:12:62:b3:d0:9a:93:3d:ba:11:dc:9b:3e:1a:
02:c8:60:b3:f9:bd:e2:d8:8a:8e:87:7b:b5:6a:13:69:ee:46:
67:c8:8d:84:f4:10:47:71:50:09:ec:c7:a4:27:bc:f9:a7:23:
70:03:60:66:54:15:14:4f:13:e8:08:73:ef:9d:34:76:06:6d:
cf:d4:96:77:87:9f:7b:47:71:78:ab:38:ca:5d:cc:f0:d2:f4:
18:71:05:4d:56:99:a1:ce:0e:69:4b:af:91:f9:99:f1:44:c5:
e8:4d:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:38 2026 by rpki-client