This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de51819d-e124-43d7-928f-f83cbaa9cbb0.cer
File: de51819d-e124-43d7-928f-f83cbaa9cbb0.cer (raw, json)
Hash identifier: jRgxOfYxdCPF5NwWkt02Dn90jUJLD8DcUwZISmd5/mo=
Subject key identifier: 22:3C:5D:FA:E8:23:24:38:70:44:62:8D:1F:84:7B:A8:BD:13:FE:D3
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584C143B904A460A27DD21DBA220
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de51819d-e124-43d7-928f-f83cbaa9cbb0/de51819d-e124-43d7-928f-f83cbaa9cbb0.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de51819d-e124-43d7-928f-f83cbaa9cbb0/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 04 Dec 2025 21:10:49 +0000
Certificate not after: Wed 08 Mar 2028 21:10:49 +0000
Subordinate resources: AS: 394737
IP: 104.251.184.0/22
IP: 2602:fcc6::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:14:3b:90:4a:46:0a:27:dd:21:db:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Dec 4 21:10:49 2025 GMT
Not After : Mar 8 21:10:49 2028 GMT
Subject: CN=de51819d-e124-43d7-928f-f83cbaa9cbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9a:dc:6a:18:d5:16:c8:6c:31:98:a6:09:7a:
44:81:cb:4a:4a:d2:0d:47:6c:7e:80:d1:12:06:c1:
ad:96:69:6e:0b:05:eb:22:a3:47:21:1e:c8:b7:e1:
91:25:09:13:3e:23:36:f9:a5:c6:03:98:db:cf:f5:
a5:81:37:30:df:4e:12:e1:8b:65:b2:a8:03:f3:f8:
32:96:5a:4e:06:8c:05:10:3b:9e:a2:53:dd:19:9f:
ba:92:85:75:54:38:29:cc:54:92:a6:63:c9:80:ec:
5b:59:4a:93:46:ef:9e:67:e9:0a:c6:17:3b:d6:25:
09:52:e0:9e:34:7b:d7:f6:42:bd:e1:7e:68:3e:58:
44:dd:bc:b4:c9:b6:68:3e:c2:44:b7:a4:4d:c9:dc:
46:2b:41:30:66:0b:e6:a5:29:bd:0c:ea:53:18:25:
39:d5:11:e1:6f:79:44:e0:28:32:45:0f:3e:6f:b1:
e0:5a:79:40:9c:5d:2f:b1:be:39:8e:f4:a9:30:70:
e9:17:27:df:54:26:e3:4a:a9:f9:90:bd:7a:7a:13:
8e:93:c9:de:89:9a:7b:ac:ce:1c:10:dc:08:f3:b4:
8f:f7:b6:3e:29:d4:35:45:a5:f1:ea:35:59:46:b0:
28:db:cc:7e:5c:e1:f3:59:e1:15:98:2a:dd:44:5f:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3C:5D:FA:E8:23:24:38:70:44:62:8D:1F:84:7B:A8:BD:13:FE:D3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de51819d-e124-43d7-928f-f83cbaa9cbb0/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de51819d-e124-43d7-928f-f83cbaa9cbb0/de51819d-e124-43d7-928f-f83cbaa9cbb0.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.184.0/22
IPv6:
2602:fcc6::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394737
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:8a:b9:d2:c1:d6:62:8a:56:d6:a4:fa:2a:e5:20:0d:4f:12:
a5:d3:b6:36:30:a9:c2:23:b4:31:bd:8c:40:75:2f:5c:f5:0f:
f4:9d:8d:86:c8:f6:e2:79:8a:fa:ca:95:d7:9e:64:5f:6e:7c:
10:c2:37:1f:7e:cd:eb:90:c6:91:b8:1e:86:6b:d8:25:b2:9f:
cb:32:50:0d:74:84:de:5d:15:64:42:fc:f4:1c:a6:d1:30:39:
4c:54:8d:99:59:20:37:b5:ff:ab:14:ec:fc:6e:cd:c5:ab:67:
cc:2a:af:32:03:1b:ca:25:90:71:e7:71:af:af:97:57:94:c7:
1a:07:b7:af:a0:ce:71:a5:68:db:6f:e6:df:cc:79:25:73:42:
5e:53:c3:3b:b8:92:d5:79:d8:71:b8:d8:0e:ef:bb:f8:8d:db:
71:d3:06:c1:e5:79:56:c7:88:18:04:69:ba:2d:c1:9c:7e:f4:
b9:70:b2:26:89:dc:a4:55:be:2d:a6:39:85:2b:e3:6b:6d:75:
f9:95:99:de:6f:88:95:72:e0:84:b8:30:4c:ac:10:0f:2c:48:
80:2d:7b:a3:e0:fa:9a:df:2d:2c:88:eb:73:37:0e:92:da:6d:
4c:91:8b:2f:39:13:69:55:c0:8a:84:4a:15:f8:ff:8f:8f:b2:
e2:cf:3f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:36:35 2025 by rpki-client