This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer
File: 5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer (raw, json)
Hash identifier: o8Qex8bTObvFYxv71rlLh6ay25581BAg1oMH/LoHdJ8=
Subject key identifier: 06:CF:E3:01:1E:92:B2:C6:66:CD:51:98:4D:60:12:A8:51:9D:08:09
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584BFA3E57BE717193425BBC23C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 25 Nov 2025 13:45:24 +0000
Certificate not after: Mon 28 Feb 2028 13:45:24 +0000
Subordinate resources: AS: 40943
IP: 199.167.208.0/22
IP: 208.91.184.0/22
IP: 2604:3d40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fa:3e:57:be:71:71:93:42:5b:bc:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Nov 25 13:45:24 2025 GMT
Not After : Feb 28 13:45:24 2028 GMT
Subject: CN=5b68d593-6e81-44a9-9e8b-fede7b5621ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:3c:19:4b:c1:99:c6:6c:65:cf:d0:a7:3e:
75:c7:27:8d:cf:fd:87:fb:e9:29:a3:fa:ab:87:ae:
83:fe:15:5c:b5:e2:12:f6:81:8f:de:a9:8a:37:82:
df:d9:bf:cf:0b:7a:04:d1:9b:b3:0c:af:49:0b:b4:
e3:e8:c9:5a:c0:6d:6f:62:70:94:9f:52:7f:da:29:
f1:b5:fd:65:76:d1:be:fc:77:a2:52:b1:57:b7:94:
51:59:3c:b7:97:dc:37:96:86:6b:9a:a3:a0:27:95:
03:5a:7c:6e:09:64:9e:c1:31:74:d5:e7:0a:d3:16:
75:e4:14:6a:d3:3b:a4:92:83:fd:2f:b2:53:c8:d2:
ee:a6:95:29:c7:54:c1:14:8f:d3:e9:5a:ce:20:4d:
e1:6a:4a:5b:98:3b:53:26:d5:35:36:65:a6:96:4e:
9e:29:f1:b7:76:b7:80:84:43:6b:0f:a2:0e:1a:a4:
60:87:2a:45:60:68:13:7f:dc:82:2c:f0:32:68:f8:
7b:07:67:53:1d:91:38:a6:a0:16:ec:a9:b4:99:da:
e2:02:12:5c:f9:79:ea:fa:0b:68:26:af:19:f5:a2:
ed:46:d9:bb:71:66:e5:af:47:44:82:49:25:54:70:
cb:b2:5e:5a:30:d7:62:bf:d3:e8:9a:45:85:02:5e:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CF:E3:01:1E:92:B2:C6:66:CD:51:98:4D:60:12:A8:51:9D:08:09
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.208.0/22
208.91.184.0/22
IPv6:
2604:3d40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40943
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:8c:cc:af:ff:77:de:e8:fe:9b:f5:b3:51:59:b6:bf:4d:b1:
b7:5c:96:1f:37:dd:29:44:fd:90:36:6f:fd:85:cf:64:cb:62:
6c:a6:b2:60:af:1f:8c:94:76:84:12:86:d8:ed:a8:c4:b0:9a:
7b:e5:8e:3a:d3:2b:a1:6e:40:5d:10:aa:f0:b4:cb:d4:33:f8:
2a:28:9e:93:3c:d8:c4:a2:4b:d5:ce:3f:d6:3a:99:6b:a3:9d:
32:07:6b:37:c3:7c:bc:d9:7c:68:1e:62:f8:ec:32:fe:5c:d2:
68:96:58:d5:b1:34:03:1f:18:b6:2f:c6:b5:e7:0d:4b:a0:16:
3e:eb:31:20:fa:96:81:bb:fd:80:f9:d3:23:8a:a5:b5:48:89:
24:36:cb:18:68:dd:73:57:f7:f5:cb:a0:46:80:1a:a8:58:a9:
7c:3f:7c:d0:1d:7b:1a:7b:09:30:45:3f:e5:09:cf:c4:1a:28:
1f:2c:04:ca:2a:ac:7f:c8:f0:d2:4e:ac:20:48:ba:17:fd:7b:
6e:65:82:bb:50:19:ad:40:d6:f5:0e:66:84:2c:c8:e4:64:51:
2f:75:d6:f7:61:01:02:3f:99:e7:4b:5f:58:7c:7e:ee:79:df:
6e:5c:b8:87:d5:61:35:fe:e3:fa:a3:aa:2c:6d:01:21:e7:6d:
ec:3e:08:b0
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEv6Ple+cXGTQlu8I8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI1MTEyNTEzNDUyNFoXDTI4MDIyODEzNDUyNFowLzEtMCsGA1UEAxMk
NWI2OGQ1OTMtNmU4MS00NGE5LTllOGItZmVkZTdiNTYyMWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYM8GUvBmcZsZc/Qpz51xyeNz/2H++kpo/qr
h66D/hVcteIS9oGP3qmKN4Lf2b/PC3oE0ZuzDK9JC7Tj6MlawG1vYnCUn1J/2inx
tf1ldtG+/HeiUrFXt5RRWTy3l9w3loZrmqOgJ5UDWnxuCWSewTF01ecK0xZ15BRq
0zukkoP9L7JTyNLuppUpx1TBFI/T6VrOIE3hakpbmDtTJtU1NmWmlk6eKfG3dreA
hENrD6IOGqRghypFYGgTf9yCLPAyaPh7B2dTHZE4pqAW7Km0mdriAhJc+Xnq+gto
Jq8Z9aLtRtm7cWblr0dEgkklVHDLsl5aMNdiv9PomkWFAl76ewIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFAbP4wEekrLGZs1RmE1gEqhRnQgJMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81
YjY4ZDU5My02ZTgxLTQ0YTktOWU4Yi1mZWRlN2I1NjIxZWQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzViNjhkNTkzLTZlODEtNDRhOS05
ZThiLWZlZGU3YjU2MjFlZC81YjY4ZDU5My02ZTgxLTQ0YTktOWU4Yi1mZWRlN2I1
NjIxZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBALHp9ADBALQW7gwDQQCAAIwBwMFACYEPUAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAJ/vMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGKMzK//d97o/pv1s1FZ
tr9Nsbdclh833SlE/ZA2b/2Fz2TLYmymsmCvH4yUdoQShtjtqMSwmnvljjrTK6Fu
QF0QqvC0y9Qz+CoonpM82MSiS9XOP9Y6mWujnTIHazfDfLzZfGgeYvjsMv5c0miW
WNWxNAMfGLYvxrXnDUugFj7rMSD6loG7/YD50yOKpbVIiSQ2yxho3XNX9/XLoEaA
GqhYqXw/fNAdexp7CTBFP+UJz8QaKB8sBMoqrH/I8NJOrCBIuhf9e25lgrtQGa1A
1vUOZoQsyORkUS911vdhAQI/medLX1h8fu55325cuIfVYTX+4/qjqixtASHnbew+
CLA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:34:08 2025 by rpki-client