This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
File: 4696412f-57d7-49ba-b514-6b1c6ab433a4.cer (raw, json)
Hash identifier: fEE2/okSLGmunmASBswp/gz8+wsXam33fowaFBOfTMw=
Subject key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584BE6B38CBB3032CFA1F199B640
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 18 Nov 2025 13:45:23 +0000
Certificate not after: Mon 21 Feb 2028 13:45:23 +0000
Subordinate resources: IP: 45.59.16.0/20
IP: 172.102.192.0/19
IP: 216.158.192.0/19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e6:b3:8c:bb:30:32:cf:a1:f1:99:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Nov 18 13:45:23 2025 GMT
Not After : Feb 21 13:45:23 2028 GMT
Subject: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:48:bb:e8:4c:79:28:41:b7:4f:6b:6a:0e:
c3:d1:df:9d:16:16:19:62:b8:46:17:61:72:cf:1e:
0f:a4:21:fb:15:9d:ce:84:70:8f:43:ec:24:fc:71:
9f:27:39:ed:fd:33:63:b6:22:1f:4d:8f:22:4f:a0:
f7:0f:f9:be:95:1e:68:10:f7:82:31:83:87:01:0e:
7d:3a:eb:ee:f1:38:75:6f:09:28:a1:42:d6:a3:aa:
58:4e:46:25:73:e0:e7:74:a4:18:11:72:f0:83:12:
f0:37:8c:f9:e6:dd:95:48:1d:33:c5:c7:c4:40:bb:
21:10:3f:0b:ea:d3:b8:a4:1a:0f:32:20:f5:95:51:
c2:64:39:8c:d4:93:1e:a4:c6:e0:30:92:bb:29:7f:
ee:5c:32:5f:6d:5f:83:29:c2:bd:0f:1c:95:82:7e:
e0:50:44:b4:0e:32:08:ff:fd:b7:99:20:b5:21:fc:
05:a7:f9:a6:fd:3e:30:23:20:5d:ac:b4:63:f0:e8:
de:cf:ed:ce:73:aa:a7:1e:2d:9d:78:89:f7:76:f3:
60:46:1c:d1:12:37:4b:0e:97:d6:5f:a9:aa:9f:13:
1f:a1:79:a2:18:d7:3e:4b:61:4e:3a:9f:e9:c8:17:
11:03:f7:72:61:72:47:97:90:c7:ee:61:9e:2f:20:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.16.0/20
172.102.192.0/19
216.158.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:f3:c3:12:31:45:a8:53:2a:2a:76:e4:d6:2f:69:15:41:8a:
cc:e4:f0:68:b6:5c:65:11:7f:cb:1f:b9:15:86:82:fb:ed:1a:
d9:c6:80:52:86:20:2a:8e:06:dc:79:5c:8b:7a:54:bd:91:91:
98:e9:6c:2b:f6:2d:09:e1:d0:44:31:bc:aa:74:09:1e:8c:7d:
73:18:a7:cd:d5:b5:85:3f:44:f2:81:d7:52:7f:89:df:34:8d:
e1:db:cc:f1:57:9b:d8:84:1f:bb:6e:2a:98:67:db:32:30:75:
39:39:53:7b:79:47:77:47:ab:37:5b:6e:60:cc:3d:2d:f5:88:
77:f2:1b:30:eb:d2:be:a3:7d:5a:b3:cb:2f:0d:0b:48:e2:1b:
a3:e8:3b:0c:18:88:f5:f2:f7:68:de:a0:1a:ee:4a:7d:60:1f:
0d:95:eb:a1:39:b5:08:65:89:7e:da:2c:cc:f2:03:cb:71:f3:
e3:35:31:92:32:d8:90:60:1b:20:22:35:2d:5d:c8:9f:ea:bf:
33:00:0d:1f:fd:89:e7:0e:4a:7b:7a:9c:a5:23:76:b3:66:e0:
cb:c6:e0:ca:4e:7a:71:0f:64:ba:3a:a7:5b:2c:df:b5:14:50:
3a:e6:17:e9:f3:28:95:29:67:1d:59:5c:e5:ac:2d:ee:58:bc:
b4:bc:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:16:44 2025 by rpki-client