This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.cer
File: 0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.cer (raw, json)
Hash identifier: HMSGYwNZCDGrsIgIQ6QUVFJbSHxuxU/3UgR4QVYlmKs=
Subject key identifier: CD:12:39:46:4A:15:CD:A8:8B:37:E8:16:AF:14:72:09:D5:20:2B:32
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584A4D13D20D591F3ACF7E1BF680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 24 Jun 2025 20:17:56 +0000
Certificate not after: Mon 27 Sep 2027 20:17:56 +0000
Subordinate resources: IP: 198.202.27.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 11 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:4d:13:d2:0d:59:1f:3a:cf:7e:1b:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jun 24 20:17:56 2025 GMT
Not After : Sep 27 20:17:56 2027 GMT
Subject: CN=0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e0:14:91:56:15:e7:7d:8f:12:0b:af:00:b8:
8b:c9:0e:0a:ae:4d:ad:ba:2a:d7:6b:d2:e8:31:87:
5e:ac:16:1d:22:9b:3d:8f:d6:68:dc:a3:67:90:98:
46:7c:7d:9c:dc:1e:61:6f:ed:a8:d0:23:d3:26:fc:
9e:20:a0:8f:fa:83:36:a9:be:2d:1f:96:1d:98:d6:
54:eb:bd:aa:5d:f0:e4:e0:44:10:a4:7c:9a:fd:0b:
cf:be:d7:81:63:b2:ed:95:53:ad:19:45:89:2b:c6:
9c:bf:f0:6b:3a:e2:5b:09:fa:d3:98:41:b5:04:e0:
0a:43:4d:a9:dc:fc:07:03:8d:54:8f:ba:25:ba:8a:
4e:a4:bc:6b:b0:bb:dd:cd:4a:04:e5:e1:89:15:c3:
0d:87:fb:ff:f9:f8:f6:b9:cc:6e:d6:f2:e3:da:cb:
56:62:fd:0f:d8:4d:23:eb:1b:bf:01:bd:c8:a2:fe:
00:9b:1b:d3:a5:de:5b:22:df:89:f5:e8:c7:b9:53:
8a:10:0d:ab:ed:7e:45:b2:2d:8c:ef:ff:4d:00:21:
15:05:12:bb:3f:04:54:93:ea:75:4d:26:01:6f:f9:
9b:00:0c:e7:38:de:75:9f:4e:85:c7:e4:7c:93:f7:
fa:e9:47:92:e8:ff:c9:ac:dc:f6:9a:31:e2:79:af:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:39:46:4A:15:CD:A8:8B:37:E8:16:AF:14:72:09:D5:20:2B:32
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.202.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:3b:4f:02:89:a6:8b:27:d3:56:85:f2:50:e3:88:60:63:b5:
5b:de:b2:65:21:4b:ce:2d:d2:4a:cf:d3:4c:e8:fd:b7:53:b9:
02:86:da:55:33:42:5a:96:57:8a:f0:f9:ba:52:be:33:b2:13:
78:3e:c0:40:2f:5d:87:8b:bf:cf:c0:0c:0f:72:1f:cb:0b:c0:
b3:34:48:bc:15:49:c3:15:63:9c:cf:7d:4b:4b:25:12:d0:b7:
9c:7f:12:dd:c3:e1:a4:43:20:ba:af:f6:8d:61:1f:7e:39:0e:
f1:40:68:fe:01:87:a1:27:e2:6d:35:fc:17:58:fc:12:28:db:
04:08:c2:e1:fc:e3:6a:f0:6e:7a:eb:a5:c5:06:df:37:68:5d:
9d:35:31:1e:01:50:5e:72:66:93:4f:a2:c1:43:1a:fc:a3:51:
21:e2:4f:51:12:eb:9b:ce:24:43:8b:00:cd:f5:29:d2:d3:8e:
3d:b3:6a:e9:dd:59:95:fe:32:01:60:b9:ec:d7:6b:5e:ac:32:
4e:28:74:4d:81:35:cd:a4:94:d1:98:db:71:f3:ca:25:31:a5:
11:27:69:a6:4c:09:74:79:74:aa:1a:d0:09:01:43:dc:cc:f3:
31:a0:a8:4d:cd:7b:3a:5e:76:4c:c5:1b:06:b7:0c:f7:f5:08:
9e:a1:b7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 18:07:12 2025 by rpki-client