This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
File: e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer (raw, json)
Hash identifier: 4giTbnBDcVEfpnnRvss78yqe4VNlbe1ZZOk6RMPwnh4=
Subject key identifier: 23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584C0833C11C1CB49657A6B1BD00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 30 Nov 2025 13:45:23 +0000
Certificate not after: Sat 04 Mar 2028 13:45:23 +0000
Subordinate resources: AS: 10930
IP: 209.251.224.0 -- 209.251.229.255
IP: 209.251.232.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:08:33:c1:1c:1c:b4:96:57:a6:b1:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Nov 30 13:45:23 2025 GMT
Not After : Mar 4 13:45:23 2028 GMT
Subject: CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:d7:59:78:53:9e:fb:ff:9c:b7:fc:bc:96:
fe:22:c4:0d:a1:32:bf:90:25:14:56:a2:cd:06:e4:
73:11:df:20:1f:56:f4:00:b2:d8:9e:64:22:da:4b:
22:d5:51:9e:fe:c4:8b:21:7d:3d:63:b5:ab:f5:77:
5b:fa:cb:ed:5b:4c:4d:2a:20:08:f8:e1:1a:10:c3:
36:1f:d2:84:d2:fe:34:bf:bf:88:96:0b:88:1c:40:
c1:dd:51:cf:44:02:c2:74:d5:69:94:8e:6a:09:7a:
5f:ea:0c:1d:29:29:4c:29:d7:12:2e:23:80:1f:88:
6f:ef:33:a1:b9:08:e9:83:70:28:5b:3c:c9:e5:f5:
18:33:40:a7:91:e3:4d:ca:c1:b8:dd:d1:a0:7a:7c:
05:b1:ca:58:86:4c:2c:69:1f:73:e7:44:84:a6:cb:
00:72:fa:b5:f3:c5:24:29:74:92:a8:00:40:33:f9:
24:15:48:f8:25:75:aa:f5:5c:a8:74:40:82:34:b9:
55:ce:46:2d:b6:21:cb:bf:1b:3a:c9:59:c7:68:5f:
97:27:2d:9e:55:0b:13:a4:16:ca:a7:7e:23:a0:90:
c4:ab:c7:7a:7f:a0:77:67:ea:6d:57:88:99:87:eb:
73:86:fc:84:80:c5:5a:bf:e4:fd:17:e7:c5:41:cf:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
209.251.224.0-209.251.229.255
209.251.232.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10930
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:6f:63:c4:c0:07:80:d5:f4:9f:4b:a0:5d:02:97:36:12:e8:
a7:3e:e5:77:67:ce:c1:af:f3:c6:29:a5:c7:d0:69:8b:98:f5:
fc:0c:35:ee:8e:e0:35:0b:54:ff:f4:45:57:08:24:56:81:a6:
16:7d:9b:ff:d9:31:e1:4f:c3:ba:ef:dd:32:ed:7c:41:97:2d:
22:6d:4c:de:3a:24:be:22:10:65:3d:cc:9d:70:e2:1e:20:2b:
4e:6d:12:6b:ae:e9:74:06:b5:e7:a9:6d:b4:e9:7b:ba:e4:7b:
d9:9c:aa:b5:4e:df:66:35:e4:45:d0:1b:38:7f:89:36:55:80:
7f:4b:80:bf:01:b6:71:2d:66:6d:17:f8:0a:95:6f:87:38:8d:
07:d8:5c:e4:cf:00:8f:98:f2:e2:0f:8b:3b:88:b9:50:d0:a6:
89:fa:5b:6f:bc:96:c8:0f:de:60:7d:06:99:46:ca:8a:1a:c5:
b5:85:27:d8:b8:6b:6d:69:db:24:3a:99:70:8d:0a:30:3c:d9:
cf:87:02:23:24:be:2c:34:dd:66:b3:a9:56:e1:7c:e4:b1:c3:
fe:df:06:b0:17:61:9c:5f:a6:16:50:6a:09:2b:55:9c:0a:87:
03:64:c1:7f:8d:62:d9:8f:fb:68:a9:f3:08:0d:e5:be:ba:d9:
9a:96:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:01:30 2025 by rpki-client