This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
File: 60f3bf9e-9df6-4935-a73a-d336655a686b.cer (raw, json)
Hash identifier: pz5uwPeDOBX55lGtCHFi/OEz/DAx1l0irZBaoIRyHV0=
Subject key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584C60244DF21E8578AFFE64A700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:45:23 +0000
Certificate not after: Wed 05 Apr 2028 00:45:23 +0000
Subordinate resources: AS: 19107
IP: 68.235.0.0/20
IP: 162.219.152.0/22
IP: 216.234.64.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:60:24:4d:f2:1e:85:78:af:fe:64:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Jan 1 01:45:23 2026 GMT
Not After : Apr 5 00:45:23 2028 GMT
Subject: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:28:3e:3e:f8:82:00:6d:66:0d:af:51:cc:
55:fd:48:52:ed:68:8b:e7:51:e0:06:01:b4:30:d2:
b6:84:a2:a6:12:dd:10:06:40:6d:cb:76:89:78:87:
53:c4:1c:4d:d1:89:5b:84:f0:5a:a3:86:88:07:6e:
ff:60:8f:48:9a:28:1c:4c:66:00:3c:68:14:20:76:
f4:7c:3f:37:7e:f6:3a:15:39:f7:5a:9c:88:7b:b5:
82:34:8c:29:2f:7e:71:59:a5:f7:cf:6c:91:1d:b6:
47:2c:45:a4:ee:4d:a1:2e:0d:f1:1f:68:a3:de:91:
5b:7c:2d:f4:8b:66:58:d0:a5:93:2d:40:0c:0f:55:
26:83:51:04:62:a5:8e:2d:8c:8a:13:50:1f:c5:c8:
5f:4c:11:e9:5c:60:68:d4:0f:c1:75:1e:c3:9e:7e:
03:5e:96:fc:b4:16:8e:27:d1:41:ff:a7:eb:4b:d5:
91:8d:44:84:69:2f:7b:98:c0:19:44:b9:9e:a4:42:
ad:b0:88:fe:a0:31:cd:27:fe:7c:9d:da:81:d2:42:
9a:fc:0c:f3:b7:fe:b9:90:79:61:09:42:40:98:86:
9f:e9:69:50:f9:b1:5d:c5:7a:43:48:f3:d7:66:df:
45:68:7d:1b:88:b1:24:83:fe:47:76:79:ac:33:c1:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
68.235.0.0/20
162.219.152.0/22
216.234.64.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19107
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:69:b4:15:4e:e6:30:c6:f5:4b:d9:97:d9:b8:15:c7:6d:92:
65:42:92:77:16:3c:a5:ed:23:22:0d:5e:f7:a0:81:61:f1:1d:
25:db:c5:06:26:63:65:ea:ab:db:c9:7c:94:4c:b2:db:bc:4d:
77:83:15:37:2e:03:1b:65:e7:78:b0:55:f7:3d:9b:64:ed:60:
2f:b4:c2:d3:9c:59:8a:f4:2e:b8:20:06:49:57:49:1c:f2:c0:
84:75:c4:93:6b:91:f6:83:cc:15:32:53:62:83:08:79:16:5e:
e9:ab:3c:7e:ae:51:7b:a5:e1:55:48:78:1a:10:8a:86:d1:64:
cd:51:02:a0:75:f4:36:0a:69:88:80:aa:e6:7f:28:a2:89:a2:
70:18:37:aa:8e:83:7b:85:41:da:40:5f:74:dc:9b:a3:e7:ec:
e6:97:6e:22:a7:b6:7b:39:fc:44:31:d7:88:e6:5e:34:40:84:
b9:74:fe:15:60:8a:13:08:1a:5b:9a:b5:cb:d9:f6:2a:ac:a7:
0a:f4:93:e2:94:78:91:af:8e:79:6a:b7:ea:23:e2:54:34:a8:
d6:03:1a:a1:c7:c6:03:ef:d7:04:47:ef:27:9e:51:7b:28:ad:
40:51:8c:c5:de:1c:f0:08:89:f7:41:08:15:ac:f1:c9:f4:9a:
36:03:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:19:56 2026 by rpki-client