This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf.cer
File: f64099bb-9c22-4781-89a0-e4774501bccf.cer (raw, json)
Hash identifier: hCzsTbm3IEmuplVm1cpCA6iFez9XJH5Ixeg/WYduZB4=
Subject key identifier: 9D:EA:69:49:9B:E2:E8:3D:5B:B9:A1:89:42:6A:80:55:EA:FA:D2:54
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584C7ED9D4EB39060A121620A280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 12 Jan 2026 01:45:23 +0000
Certificate not after: Sun 16 Apr 2028 00:45:23 +0000
Subordinate resources: AS: 36294
IP: 208.74.68.0/22
IP: 216.10.64.0/22
IP: 2602:fc2c::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7e:d9:d4:eb:39:06:0a:12:16:20:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jan 12 01:45:23 2026 GMT
Not After : Apr 16 00:45:23 2028 GMT
Subject: CN=f64099bb-9c22-4781-89a0-e4774501bccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:06:c2:52:58:1d:28:e7:76:88:79:e3:9a:
1d:bd:fc:ea:28:64:47:9f:0d:67:3b:d2:e2:e2:db:
d6:0b:35:54:7f:ac:e7:91:1d:80:a6:22:99:0f:b2:
27:28:64:12:f4:5e:3f:6e:39:7b:a1:3d:fa:b4:52:
be:95:22:9c:04:8d:c5:87:41:65:2b:90:d7:96:3c:
72:51:65:44:cb:d0:8a:51:84:de:d5:e5:4c:ef:7b:
ad:f4:48:6c:c2:f0:d1:8b:e6:62:d5:c1:37:13:b7:
52:9d:c3:b3:79:90:7e:1e:ff:ce:fc:f0:dd:c2:90:
9c:d2:06:a4:24:be:0b:8d:f4:4c:2a:71:b0:cf:f2:
da:ab:cc:fe:23:64:0a:3a:e2:7b:7f:ea:e9:c3:28:
59:f8:34:6f:ae:46:15:f5:bb:e3:e0:30:2b:f2:bd:
e6:87:53:2d:bd:ca:de:c3:56:f1:17:24:6f:c1:c4:
a1:63:0c:d6:f0:c6:d2:52:ef:fb:e7:7e:d8:0c:2a:
66:3f:cb:3b:2c:9e:b8:66:1c:a6:75:f9:d0:9f:e4:
6f:8c:e4:ca:e1:89:94:ab:4b:4b:b0:d7:0f:ed:6b:
1c:40:02:0b:32:92:e2:aa:79:53:14:fa:1f:8c:5f:
c5:e3:b3:1c:9a:33:c6:cf:54:2e:af:9b:41:c6:ee:
44:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:69:49:9B:E2:E8:3D:5B:B9:A1:89:42:6A:80:55:EA:FA:D2:54
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
208.74.68.0/22
216.10.64.0/22
IPv6:
2602:fc2c::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36294
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:10:7a:6a:77:3b:bc:f7:94:24:1b:9d:c3:36:09:2d:b7:7f:
da:71:ea:45:2b:76:0f:bf:71:ff:03:85:71:e4:41:75:85:e0:
4b:1e:d8:88:47:9c:d9:3a:15:af:44:01:96:77:17:f1:e2:c7:
36:58:82:2c:f8:8e:c9:02:79:5b:59:24:a4:e7:a3:4d:fa:30:
9d:6f:09:1e:d9:21:bb:c7:51:c5:a8:23:41:a6:7d:bd:07:08:
9a:5f:10:49:25:c7:73:27:50:f4:bf:db:57:a9:2a:98:a1:22:
bb:11:ca:0b:00:a8:7f:7d:23:2e:29:ba:4f:4d:30:82:c4:09:
aa:40:2c:f1:5c:0d:1e:bd:ad:e2:17:fb:0b:0a:6a:c7:3b:51:
16:5c:41:3d:1b:81:b3:f7:e6:c3:e9:c6:f1:1e:c6:49:e1:80:
83:45:52:1f:e9:13:b1:0a:e9:9b:5b:6b:ff:53:76:82:f5:30:
64:6b:27:12:23:5d:dc:4b:24:c8:ae:cb:1f:ce:9f:16:9c:36:
e6:7a:89:55:00:ef:c8:03:d4:63:e0:43:89:2c:5c:78:0d:1b:
f3:ad:5b:a4:90:06:d1:ff:8a:e8:f6:43:1e:b6:47:84:aa:6f:
04:cd:ce:a7:35:91:b1:4c:1c:40:08:6b:33:2d:f4:00:f6:89:
74:11:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:36:02 2026 by rpki-client