This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer
File: 5f4c623c-0d0c-4995-9560-0507df4828e8.cer (raw, json)
Hash identifier: XXUkSWMFlh4UrHetSjo/otLGstwTVxrLdBLKU6VgAlg=
Subject key identifier: 0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584C34DEB490592E47E9D53ED080
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 16 Dec 2025 13:45:23 +0000
Certificate not after: Mon 20 Mar 2028 12:45:23 +0000
Subordinate resources: AS: 54900
IP: 65.75.218.0/23
IP: 65.181.96.0/21
IP: 198.204.62.0/23
IP: 208.93.8.0/23
IP: 2620:91:c000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:34:de:b4:90:59:2e:47:e9:d5:3e:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Dec 16 13:45:23 2025 GMT
Not After : Mar 20 12:45:23 2028 GMT
Subject: CN=5f4c623c-0d0c-4995-9560-0507df4828e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:1c:fe:ed:3a:16:42:94:5c:73:e8:11:84:
e9:40:f3:d1:66:96:c7:02:17:0a:61:84:bb:9d:ba:
05:24:27:ef:30:3c:77:2e:c1:d2:8c:62:a2:87:2b:
ca:b3:d9:43:36:b6:70:02:9a:7a:21:14:94:6b:d8:
39:af:03:49:3e:c8:48:e3:63:c8:b2:d4:ca:20:a0:
16:b4:e4:2b:b4:50:de:a8:1a:64:d6:e5:b9:bb:9c:
a7:91:82:d3:c6:f1:df:22:16:16:f9:4f:d0:98:14:
6e:b6:77:62:f3:7d:d3:49:3f:54:c6:f1:ba:7b:6a:
94:00:25:3e:53:a5:18:a7:46:4a:c0:1a:ac:0b:20:
bf:1c:94:82:b3:f4:e0:dc:af:97:ee:57:22:f8:6b:
04:27:a7:46:8f:fc:e1:6c:f7:0b:58:57:9e:06:0d:
7b:a4:73:e0:dc:d8:27:48:2a:9c:0a:d8:64:c0:25:
29:85:9f:b5:e6:81:6c:a6:48:16:05:e9:f0:75:ef:
de:c3:fd:1e:8a:18:55:8d:ef:d6:15:07:53:07:68:
29:80:cb:50:50:86:57:14:19:6b:79:51:ce:f8:b8:
6a:9d:7a:58:05:ab:5d:d0:7a:66:ab:21:09:5b:cd:
d7:c6:9e:05:0e:75:53:c6:3e:2b:48:13:62:96:7f:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
65.75.218.0/23
65.181.96.0/21
198.204.62.0/23
208.93.8.0/23
IPv6:
2620:91:c000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54900
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:59:e3:40:22:a6:07:67:70:1e:a1:70:65:2d:fb:3d:02:63:
31:49:66:cd:ff:9a:b6:a5:c9:4b:2c:c7:8f:53:f7:93:c8:df:
d0:a2:90:1a:99:f0:e7:f5:d9:cd:d8:cc:1e:45:b7:e7:b4:14:
01:c2:65:19:75:f6:d7:e4:be:f1:73:12:ad:91:ae:60:ea:ac:
b9:0a:12:6e:c9:5e:36:80:7f:4e:80:4e:08:63:9f:17:68:8e:
5c:21:53:d4:14:99:23:ff:cc:42:1b:68:f2:10:ce:b2:d6:a6:
49:a2:26:4b:67:52:84:d1:b0:25:b4:02:bd:d6:70:79:57:ef:
51:41:46:87:13:4c:55:8d:0e:c2:11:c0:4a:fa:e5:52:97:a4:
ca:db:c1:e8:75:73:2a:f8:da:71:65:e8:24:ad:10:c2:ed:42:
1b:72:5a:c3:d5:ce:1e:28:47:f0:6d:e7:71:26:82:d7:74:94:
46:b0:97:a3:15:9e:34:84:a7:79:4c:70:b0:3e:6e:65:cb:a4:
4c:46:44:1f:e9:66:ab:98:70:63:65:3f:c5:08:97:46:7a:76:
31:0d:48:d1:48:b2:d6:74:3a:a9:01:c1:35:71:0f:89:1c:04:
65:8e:b6:4f:22:b0:9c:5c:e4:b9:4d:22:f1:ca:0a:34:29:12:
48:c3:00:26
-----BEGIN CERTIFICATE-----
MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEw03rSQWS5H6dU+0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI1MTIxNjEzNDUyM1oXDTI4MDMyMDEyNDUyM1owLzEtMCsGA1UEAxMk
NWY0YzYyM2MtMGQwYy00OTk1LTk1NjAtMDUwN2RmNDgyOGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmUc/u06FkKUXHPoEYTpQPPRZpbHAhcKYYS7
nboFJCfvMDx3LsHSjGKihyvKs9lDNrZwApp6IRSUa9g5rwNJPshI42PIstTKIKAW
tOQrtFDeqBpk1uW5u5ynkYLTxvHfIhYW+U/QmBRutndi833TST9UxvG6e2qUACU+
U6UYp0ZKwBqsCyC/HJSCs/Tg3K+X7lci+GsEJ6dGj/zhbPcLWFeeBg17pHPg3Ngn
SCqcCthkwCUphZ+15oFspkgWBenwde/ew/0eihhVje/WFQdTB2gpgMtQUIZXFBlr
eVHO+LhqnXpYBatd0HpmqyEJW83Xxp4FDnVTxj4rSBNiln90tQIDAQABo4IEPjCC
BDowHQYDVR0OBBYEFAoHIVVVrcMGNA/rHyDtsr80E2d2MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81
ZjRjNjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3ZGY0ODI4ZTgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzVmNGM2MjNjLTBkMGMtNDk5NS05
NTYwLTA1MDdkZjQ4MjhlOC81ZjRjNjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3ZGY0
ODI4ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQgYIKwYBBQUH
AQcBAf8EMzAxMB4EAgABMBgDBAFBS9oDBANBtWADBAHGzD4DBAHQXQgwDwQCAAIw
CQMHBCYgAJHAADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA1nQwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
BlnjQCKmB2dwHqFwZS37PQJjMUlmzf+atqXJSyzHj1P3k8jf0KKQGpnw5/XZzdjM
HkW357QUAcJlGXX21+S+8XMSrZGuYOqsuQoSbsleNoB/ToBOCGOfF2iOXCFT1BSZ
I//MQhto8hDOstamSaImS2dShNGwJbQCvdZweVfvUUFGhxNMVY0OwhHASvrlUpek
ytvB6HVzKvjacWXoJK0Qwu1CG3Jaw9XOHihH8G3ncSaC13SURrCXoxWeNISneUxw
sD5uZcukTEZEH+lmq5hwY2U/xQiXRnp2MQ1I0Uiy1nQ6qQHBNXEPiRwEZY62TyKw
nFzkuU0i8coKNCkSSMMAJg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:54:34 2025 by rpki-client