This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
File: 95dc9741-559d-4d9b-9f8d-be3560754ffd.cer (raw, json)
Hash identifier: FNOLx8b1TceRB4+u6pdPObEO7DafZ51I9P3gvrgfH5I=
Subject key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584C59299899511B5CDE90B67FA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 29 Dec 2025 13:45:23 +0000
Certificate not after: Sun 02 Apr 2028 12:45:23 +0000
Subordinate resources: AS: 36007
AS: 54913
AS: 396948 -- 396949
IP: 43.231.232.0/22
IP: 45.61.48.0/20
IP: 52.144.44.0/22
IP: 66.55.64.0/20
IP: 78.138.0.0/24
IP: 78.138.17.0/24
IP: 78.138.24.0/24
IP: 78.138.31.0/24
IP: 78.138.46.0/24
IP: 78.138.51.0/24
IP: 83.229.3.0/24
IP: 83.229.5.0/24
IP: 83.229.35.0/24
IP: 83.229.39.0/24
IP: 83.229.67.0/24
IP: 83.229.112.0/24
IP: 83.229.115.0/24
IP: 103.54.56.0/22
IP: 103.89.12.0/22
IP: 103.90.160.0/22
IP: 103.98.212.0/22
IP: 103.101.200.0/22
IP: 104.128.64.0/22
IP: 104.129.128.0/22
IP: 104.225.140.0/22
IP: 104.238.212.0/22
IP: 138.128.240.0/21
IP: 146.71.76.0/22
IP: 147.185.238.0/23
IP: 147.185.242.0/23
IP: 162.251.146.0/23
IP: 192.175.22.0/23
IP: 194.113.194.0/23
IP: 194.113.210.0/23
IP: 195.88.24.0/23
IP: 195.88.56.0/23
IP: 198.22.162.0/24
IP: 198.52.244.0/23
IP: 199.19.72.0/22
IP: 199.244.48.0/22
IP: 207.126.160.0/21
IP: 209.182.216.0/22
IP: 213.255.209.0/24
IP: 213.255.227.0/24
IP: 213.255.247.0/24
IP: 2604:bc0::/32
IP: 2606:3a80::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:59:29:98:99:51:1b:5c:de:90:b6:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Dec 29 13:45:23 2025 GMT
Not After : Apr 2 12:45:23 2028 GMT
Subject: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:8b:da:6e:62:fb:33:e2:65:7d:81:72:5e:
27:42:a7:3d:91:d8:90:1e:64:54:80:c9:5c:ff:fb:
fb:04:9c:06:2c:c7:57:a4:6b:24:ac:3a:f3:00:93:
01:e4:13:50:eb:57:cc:a2:68:c0:f0:ba:05:7d:e9:
d4:b6:16:47:14:cf:47:b0:3f:d5:f7:41:11:0b:dd:
99:06:bf:90:75:cc:7b:27:63:5c:25:e2:6c:1b:ec:
9a:24:96:42:01:b3:5b:62:b0:e2:8f:d5:89:92:87:
58:94:34:37:fe:8e:6f:18:32:31:fc:2b:65:1d:7b:
46:01:73:a6:ee:cd:20:b2:66:41:74:ea:56:f7:a8:
e0:d1:c3:4c:48:94:62:fc:af:7a:2a:59:04:90:33:
09:d4:9f:79:aa:60:c5:78:bd:f7:7d:54:4e:9c:59:
67:7c:66:df:88:80:77:0b:68:da:ed:7e:94:fe:1a:
17:8e:25:5a:04:63:e3:06:bf:66:02:a3:82:74:6b:
99:b0:ae:40:99:5f:92:33:b6:f4:65:ac:0b:7b:4e:
8b:9f:fd:27:eb:b7:05:83:9e:73:78:43:4b:59:8e:
56:30:2c:d4:fc:7b:92:71:41:fa:b8:a7:9a:0b:34:
3a:b2:6d:85:61:4a:b7:32:cd:97:40:c0:86:19:cf:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
43.231.232.0/22
45.61.48.0/20
52.144.44.0/22
66.55.64.0/20
78.138.0.0/24
78.138.17.0/24
78.138.24.0/24
78.138.31.0/24
78.138.46.0/24
78.138.51.0/24
83.229.3.0/24
83.229.5.0/24
83.229.35.0/24
83.229.39.0/24
83.229.67.0/24
83.229.112.0/24
83.229.115.0/24
103.54.56.0/22
103.89.12.0/22
103.90.160.0/22
103.98.212.0/22
103.101.200.0/22
104.128.64.0/22
104.129.128.0/22
104.225.140.0/22
104.238.212.0/22
138.128.240.0/21
146.71.76.0/22
147.185.238.0/23
147.185.242.0/23
162.251.146.0/23
192.175.22.0/23
194.113.194.0/23
194.113.210.0/23
195.88.24.0/23
195.88.56.0/23
198.22.162.0/24
198.52.244.0/23
199.19.72.0/22
199.244.48.0/22
207.126.160.0/21
209.182.216.0/22
213.255.209.0/24
213.255.227.0/24
213.255.247.0/24
IPv6:
2604:bc0::/32
2606:3a80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36007
54913
396948-396949
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:50:c7:9d:f3:27:54:c0:fc:9f:19:e9:2e:3b:60:f1:06:67:
4c:46:d6:23:9f:02:45:c6:84:d1:2a:ac:0d:85:a9:37:30:80:
73:76:37:7f:2e:36:70:dc:b5:c4:e9:01:99:99:c9:1a:b7:67:
17:0b:78:d3:0a:36:33:ae:2f:43:65:72:e4:43:e6:2a:62:4e:
79:91:03:97:34:3c:6d:65:82:b0:c6:04:e9:6e:66:7a:15:c5:
49:79:d2:a1:0e:41:c8:f6:f2:96:7f:5d:3b:c8:d2:e0:a0:f4:
50:e5:9e:e6:0b:e1:d2:8e:c7:d1:14:a2:d6:f3:66:17:cf:d2:
ca:cd:35:2e:a4:bf:4c:f2:52:25:af:82:7e:91:2d:44:cd:7a:
64:a6:55:33:57:7c:9a:a9:ad:c2:1c:c8:67:4d:81:31:6a:ea:
c7:3f:02:d3:95:22:2b:28:5a:a9:4a:0a:c3:f9:4e:97:88:0f:
2b:0b:1c:97:88:56:d3:a7:d1:2c:ac:b9:c2:b7:41:68:a4:cd:
05:db:ed:c7:8d:ea:a2:8b:69:35:f8:20:f4:e8:2b:6f:6e:70:
38:a7:2e:d7:14:fd:42:d1:85:e2:06:49:c0:7e:a6:99:f3:b7:
eb:1d:15:94:42:a9:1a:a3:ce:61:45:75:64:2f:f2:32:68:c3:
6f:48:fc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:06 2026 by rpki-client