This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer
File: a920645f-6928-416c-87e9-a0135e5720e4.cer (raw, json)
Hash identifier: 5DEC/7M8E56i5MkQoCt8y53pkUlJ7IygMrAxsj1eGXA=
Subject key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584C8309DA560054FA268053EF80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 13 Jan 2026 13:45:22 +0000
Certificate not after: Mon 17 Apr 2028 12:45:22 +0000
Subordinate resources: AS: 13657
IP: 67.215.192.0/20
IP: 104.242.0.0 -- 104.242.223.255
IP: 216.235.0.0/20
IP: 2001:4900::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:83:09:da:56:00:54:fa:26:80:53:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jan 13 13:45:22 2026 GMT
Not After : Apr 17 12:45:22 2028 GMT
Subject: CN=a920645f-6928-416c-87e9-a0135e5720e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:07:6f:ae:ef:ee:08:b1:c5:9d:f1:96:83:
36:e1:53:e1:0d:e5:da:c8:2c:28:0e:86:7c:a1:96:
ce:92:02:3a:2e:4c:18:d3:7a:aa:cc:30:91:d7:79:
7a:30:95:e8:c6:5d:2d:60:53:14:c6:3e:56:20:92:
98:fe:50:3b:c5:20:56:b7:56:f9:ed:7c:1c:00:be:
c7:42:a8:fb:7c:68:0f:c0:b3:cf:b7:57:69:ed:2b:
6c:e9:57:7e:83:64:d7:fb:28:57:42:08:bd:d6:8e:
6e:39:e2:a3:eb:a8:dd:72:45:7f:ef:1a:d3:a8:9b:
91:f6:d1:5f:60:09:48:ec:0d:7e:23:e0:89:0f:fe:
0c:f5:52:65:3f:bc:ab:7a:b2:a5:0b:2d:aa:fb:29:
0c:da:8b:9a:90:61:90:38:c3:45:0d:70:73:ae:f0:
4d:f9:c0:f0:23:65:7b:34:ae:bf:31:20:4c:d2:1d:
1e:b0:1a:fa:66:0e:81:00:a5:e0:2e:d6:f0:0d:fa:
d3:49:6c:89:3d:21:a9:5d:72:2d:04:1d:ac:9a:5c:
a5:e6:3f:2f:76:92:e7:e3:de:64:39:a0:f8:c2:b0:
00:6f:d1:1f:95:9c:68:d2:f0:ff:c2:1c:3d:2b:db:
d2:45:43:50:2d:6a:b8:e1:a0:10:85:a9:cd:ef:10:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
67.215.192.0/20
104.242.0.0-104.242.223.255
216.235.0.0/20
IPv6:
2001:4900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13657
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:85:b6:9a:02:31:0e:92:06:ca:d7:7e:de:b4:fc:a5:66:b4:
c7:0d:05:17:ba:2e:e0:6c:8a:d2:7f:6b:5d:ea:dd:77:49:3a:
95:45:0b:c7:ab:09:30:1c:ad:44:f7:c6:1b:ae:e0:38:e4:b5:
0a:0f:e5:7e:95:44:b3:42:a2:a1:b0:dd:99:c1:a8:5b:53:e5:
94:62:d0:fd:b6:a9:76:61:d9:d7:bb:27:cf:63:ab:f6:8d:e2:
5a:b9:54:b7:d2:a6:45:c4:8d:39:b6:0f:7c:b1:62:5f:e8:ca:
59:8c:d2:72:a6:c1:a3:38:22:3b:b5:31:13:59:d0:d3:78:83:
5e:f8:1e:be:88:1f:95:cf:a7:f0:59:9d:9a:a2:7e:c6:0b:3f:
51:71:e0:64:8c:cf:90:ec:d1:6a:b9:7b:08:88:41:dc:15:1f:
36:ed:f1:c4:4c:9b:94:44:26:3a:8f:83:02:1a:1e:0b:f5:65:
54:85:47:02:64:dc:7b:6e:49:bb:e1:a1:a9:ec:0f:e3:c3:9f:
36:1d:f4:57:f7:82:b6:95:99:7d:01:21:f3:61:e8:bf:10:f8:
8f:ef:2f:a4:48:88:48:2a:06:04:8b:30:4b:d5:7f:d4:23:11:
77:45:9f:a6:fb:4a:ed:1d:64:fd:37:13:76:03:33:01:31:dc:
58:33:f6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:33 2026 by rpki-client