This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
File: 0a609de0-040f-42a5-990f-417b65a086a6.cer (raw, json)
Hash identifier: fvoi0keb5hMMTiZdn/0KI+BMzHbF8ux3CD/YF5ubgSc=
Subject key identifier: F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584C416EC8E999306132A0E76F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 21 Dec 2025 01:45:24 +0000
Certificate not after: Sat 25 Mar 2028 00:45:24 +0000
Subordinate resources: AS: 20347
IP: 24.51.0.0/19
IP: 66.22.128.0/19
IP: 2605:7540::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:41:6e:c8:e9:99:30:61:32:a0:e7:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Dec 21 01:45:24 2025 GMT
Not After : Mar 25 00:45:24 2028 GMT
Subject: CN=0a609de0-040f-42a5-990f-417b65a086a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:a1:df:75:cc:ec:3f:54:16:7a:02:e2:aa:
d1:12:9a:47:a2:a1:b2:47:05:d7:4b:62:48:a6:7c:
ac:e1:8a:b1:bb:65:21:d3:16:c8:d4:5c:30:6f:f1:
8b:87:f2:4e:36:e5:3b:d1:1f:4a:76:da:8b:4f:38:
5a:95:22:39:c3:ea:50:9e:04:d7:20:06:0b:e8:71:
5d:27:23:ce:88:b8:0a:61:9d:34:f8:ff:13:13:6a:
65:a8:ab:57:21:f6:66:fa:a0:34:92:fa:16:9d:8b:
e5:18:82:ff:7f:fa:f2:91:ce:f0:85:6b:a5:5d:b1:
39:35:7e:0d:c9:37:69:32:6b:8d:1d:d0:00:53:c1:
f1:3c:9b:52:9c:83:f3:3d:f1:2a:a3:4b:ef:0b:cb:
75:14:50:dc:7d:4f:1c:39:70:0e:fd:df:cc:54:47:
e6:64:49:22:f7:b2:f3:43:da:d1:9b:e3:c4:00:e7:
23:c7:f4:23:28:1f:3b:58:77:3b:55:6a:c9:11:a2:
aa:b6:33:d6:b0:60:81:82:1f:a8:04:92:28:b0:8b:
d1:ec:1a:7e:d9:e8:8d:89:61:e0:b0:b8:68:76:fb:
f6:f7:c0:3e:77:3b:dd:12:2e:9a:4a:57:61:51:1a:
ba:4a:65:2e:15:b0:b7:0f:5c:bb:15:b0:6b:f0:d3:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
24.51.0.0/19
66.22.128.0/19
IPv6:
2605:7540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20347
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:26:66:01:28:57:b0:44:41:33:c5:61:cc:2c:85:46:b6:25:
7d:08:11:20:e2:0e:af:6b:1a:73:e0:f8:f1:5b:fe:43:99:42:
7b:14:27:f3:f0:4d:6b:cd:0b:29:72:d5:69:08:0c:dd:5a:1a:
1b:68:5a:88:71:59:d0:fd:4c:f2:69:83:00:17:b8:15:76:19:
8a:1e:0d:1d:d5:25:58:ff:69:d1:6a:c4:6c:57:1b:4e:ec:f8:
a0:0e:cd:7c:2f:d1:88:e5:e1:68:88:20:22:be:f0:3b:c7:02:
ae:11:20:61:4e:fb:00:11:c1:37:2a:1d:78:10:49:25:c4:cb:
9c:c3:8c:c6:2c:92:84:84:bf:5d:8d:6e:03:0a:1e:4d:0e:4a:
23:6a:75:a7:de:e5:3a:81:f9:c9:f7:c5:e7:8d:65:f6:64:83:
3e:34:1e:bc:e2:d0:30:e8:97:e5:fd:87:e2:00:a6:78:15:e2:
3c:a2:d5:15:d4:b0:04:96:94:24:04:08:3c:9a:1a:a9:fd:e1:
b9:84:ab:be:f3:9e:78:df:05:7f:d7:d9:68:67:88:09:a7:33:
f0:e0:8f:75:10:ab:70:d2:0e:5c:b4:24:37:a5:d4:0e:70:1b:
26:1a:b9:c6:70:33:13:d8:61:91:86:79:63:d8:b2:2c:54:65:
6e:09:6a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:24:05 2025 by rpki-client