This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
File: 1b03e342-d588-4239-8704-6688d01760d9.cer (raw, json)
Hash identifier: ioooIdsv0CnjOgJSksj8gUIWKn8rpUjuCtMWc9r6OHI=
Subject key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584C0E2FDA7A319EAC6A139BDA00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 02 Dec 2025 17:12:22 +0000
Certificate not after: Sun 09 Jan 2028 01:45:25 +0000
Subordinate resources: AS: 23340
AS: 397031
IP: 23.150.160.0/22
IP: 162.248.100.0/22
IP: 204.235.248.0/22
IP: 216.146.0.0/22
IP: 2602:fda1::/36
IP: 2620:57:e000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0e:2f:da:7a:31:9e:ac:6a:13:9b:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Dec 2 17:12:22 2025 GMT
Not After : Jan 9 01:45:25 2028 GMT
Subject: CN=1b03e342-d588-4239-8704-6688d01760d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:7f:d6:b9:2c:f9:ea:3e:95:dc:b2:92:74:
c7:55:e7:60:69:64:35:58:ec:f9:31:a5:83:04:1b:
a5:2d:bc:87:b5:47:ea:d6:81:4d:42:8f:95:24:58:
b5:93:c7:e4:8b:4f:07:fa:df:6f:eb:ff:b4:01:d6:
2c:e6:8a:2a:d5:21:97:92:6b:3e:ec:b6:d2:47:39:
da:23:89:8a:79:f8:96:d1:91:65:6a:83:24:6d:ce:
da:0b:99:04:31:70:2f:7e:d9:9d:02:6b:12:91:6b:
7a:6f:e4:46:a5:ea:e0:31:1a:49:ea:05:fa:06:12:
0d:b2:54:1e:c0:18:d7:be:33:9e:e7:ba:a9:24:f1:
7d:90:35:f7:e0:23:70:b6:60:c9:c7:69:fd:6e:92:
d9:2b:41:b7:54:a4:2d:21:fa:6d:11:e4:35:ec:43:
e5:66:e0:7e:64:09:78:ec:d7:13:37:cf:9d:05:17:
bc:af:01:30:26:7a:71:1a:e9:7e:29:da:fe:35:2d:
a6:95:b5:af:de:8d:d8:d7:32:41:b2:1b:72:0f:55:
f6:6f:a1:85:40:aa:6e:4d:68:e4:d4:4f:2f:1d:e9:
e7:f8:ed:13:5c:04:d9:a3:d6:d6:0a:57:d5:cf:a0:
e4:8d:47:c3:f8:3e:8f:eb:e8:da:c4:8a:2c:24:b4:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.160.0/22
162.248.100.0/22
204.235.248.0/22
216.146.0.0/22
IPv6:
2602:fda1::/36
2620:57:e000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23340
397031
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:aa:a0:b5:cf:e3:b5:fd:66:ae:ea:5e:5d:d4:bb:3d:93:3f:
c8:5b:74:ae:91:05:de:b0:f7:96:cb:38:3e:f9:7f:5c:46:74:
ff:00:55:3c:c5:95:95:3a:20:7a:d7:ab:75:d5:bf:13:91:90:
0f:cf:29:a2:b2:f9:f4:6e:d6:1e:f8:02:7b:54:c1:d1:64:f7:
fd:6c:89:01:44:f2:11:57:16:e8:dd:7f:d6:26:49:7b:8e:b5:
cd:36:1d:9f:b4:b6:a2:21:8e:81:39:35:73:89:92:2e:b5:e3:
98:f4:8e:04:82:93:95:d1:ab:ba:7b:1f:15:ee:c5:05:54:50:
6c:6c:14:98:1e:37:35:bd:ae:91:a8:67:71:0a:09:06:85:ca:
1b:8f:de:30:71:86:f6:ad:73:cb:aa:6d:11:3d:9b:a9:b6:77:
e7:56:e1:63:5a:34:52:58:a8:f4:ea:a8:6e:01:00:f7:d7:b5:
83:26:fb:84:e0:fc:52:fb:32:55:12:4f:7e:f1:80:aa:f2:38:
85:b1:12:55:ea:79:f6:2a:d5:98:2d:34:08:7c:50:b0:a4:7e:
97:a1:92:61:cd:f6:0b:c3:96:3c:75:13:24:bd:0d:ea:a2:95:
8a:6d:b7:b7:86:3e:eb:0f:64:67:d9:82:08:4f:f6:01:bd:49:
05:4a:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:30:51 2025 by rpki-client