This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3.cer
File: 35c5f411-12ac-483d-b922-257c112f06c3.cer (raw, json)
Hash identifier: 8jEhFmsYq2/zFkPuRU5D6+TiWkcv6dJTHr2bY+cFzAE=
Subject key identifier: 3D:41:D9:27:87:86:A2:1D:80:20:8E:55:37:6D:42:32:99:94:8C:11
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584C0DC91F8E04D28CD473467638
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3/35c5f411-12ac-483d-b922-257c112f06c3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 02 Dec 2025 13:45:23 +0000
Certificate not after: Mon 06 Mar 2028 13:45:23 +0000
Subordinate resources: AS: 63294
IP: 216.10.76.0/24
IP: 2605:64c0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0d:c9:1f:8e:04:d2:8c:d4:73:46:76:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Dec 2 13:45:23 2025 GMT
Not After : Mar 6 13:45:23 2028 GMT
Subject: CN=35c5f411-12ac-483d-b922-257c112f06c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:1a:80:4d:75:77:4f:5b:df:5e:6f:7f:dd:
ab:a8:30:2b:e7:2b:e7:e2:32:df:74:58:e9:c5:47:
72:f9:2e:83:d5:b0:55:b7:a4:64:2a:2a:88:ff:3a:
ce:00:d6:3b:52:e0:24:99:9f:db:db:8a:43:47:d6:
d0:ee:fe:33:09:a8:51:3d:a4:d9:22:ad:72:70:b9:
24:88:84:4e:b3:0c:51:55:ce:77:83:2f:83:2c:fc:
12:67:18:69:d0:36:48:ce:25:cb:bc:81:19:0e:d5:
a6:40:70:d4:2c:f3:52:87:88:a7:cc:8c:21:ac:51:
5a:01:e6:93:5b:4a:03:1a:4b:c1:d4:95:89:6f:71:
e1:67:55:f7:a6:b2:c5:7a:83:9b:99:9c:79:05:ae:
4e:5e:92:59:c5:c1:3e:ce:56:f8:91:e6:36:55:8f:
18:b7:e9:98:27:6d:7b:71:a4:14:90:f5:84:ad:7e:
04:0b:73:47:82:dc:67:38:2d:52:6c:0d:eb:2e:f2:
80:38:09:38:5b:76:0f:7b:1c:d0:db:fb:15:f7:9c:
61:5a:d4:e1:49:4a:b6:65:b1:9e:81:2d:5b:a9:dc:
0b:3c:eb:11:4e:84:8d:5d:1d:a3:e8:3c:5c:67:94:
32:20:a2:d2:db:9b:59:f8:6f:75:97:05:d0:36:88:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:41:D9:27:87:86:A2:1D:80:20:8E:55:37:6D:42:32:99:94:8C:11
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3/35c5f411-12ac-483d-b922-257c112f06c3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.10.76.0/24
IPv6:
2605:64c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63294
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:ba:9c:4d:6d:ee:76:4e:42:af:4c:34:fc:53:28:60:b4:c2:
bc:fe:f3:a7:e5:95:29:6a:e6:55:cd:81:38:b4:7f:79:5b:7e:
93:4a:0c:1c:a8:ae:f3:fd:20:8a:c3:ee:44:f2:13:ce:1a:81:
30:4b:da:37:a7:cd:c6:d9:c8:dc:82:25:ec:6c:b0:69:6b:11:
cb:c2:14:c9:ad:59:28:a0:99:ec:28:85:8a:3b:e7:e2:39:4f:
e6:dc:2a:4d:84:20:85:81:12:45:df:d7:9f:af:12:f2:80:d3:
6b:72:00:66:a3:06:8c:90:dd:5c:84:f2:06:53:a4:61:71:38:
4d:df:41:ee:71:dc:a8:da:46:7b:26:cc:4c:9b:1d:e1:23:fc:
cd:4e:41:4a:1f:dc:1b:1b:55:60:3b:52:51:1c:12:7f:23:b2:
9d:96:f0:30:b7:96:8c:6e:5c:83:05:fa:c2:2c:3a:3e:55:a9:
13:90:45:fa:3d:9f:05:69:20:23:fe:e9:a7:58:af:e7:6c:25:
78:35:80:97:a4:c2:32:70:9f:a9:3e:60:42:30:cd:61:70:87:
21:44:8c:79:cb:5a:d6:7f:dd:b7:2f:43:ed:19:a8:64:fc:64:
22:54:c3:4c:c4:79:46:44:d1:ba:24:c2:88:30:4c:1d:89:9a:
3a:b3:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:30:54 2025 by rpki-client