This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
File: e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer (raw, json)
Hash identifier: 1y0eWNXJf6G+omHAmLS0Y/qhnXJoy0cEBbgbokHdX9c=
Subject key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584C3D3EC084A777853126D05480
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 19 Dec 2025 13:45:23 +0000
Certificate not after: Thu 23 Mar 2028 12:45:23 +0000
Subordinate resources: IP: 192.172.221.0/24
IP: 2602:fa6b::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3d:3e:c0:84:a7:77:85:31:26:d0:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Dec 19 13:45:23 2025 GMT
Not After : Mar 23 12:45:23 2028 GMT
Subject: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:46:8d:b2:81:30:5e:18:b9:20:44:6e:52:
cd:38:81:ba:30:d1:43:26:77:31:18:70:c3:b8:9c:
42:d5:91:6b:99:e2:7c:38:ff:4c:f9:14:17:ec:05:
39:3d:43:e5:c9:ed:90:c4:f2:e2:58:f9:31:d9:dc:
cb:8d:f2:4d:5f:6b:ce:ee:d5:ce:6d:c4:68:93:ce:
f0:b1:ac:6c:b2:fe:3a:4f:96:22:c4:77:e9:ff:96:
ba:07:82:e1:a0:f0:a9:2d:45:a1:e8:4b:85:55:d1:
b9:79:63:4a:36:f9:fb:19:b5:8b:f4:a0:52:42:9f:
82:60:31:be:c8:38:fe:f4:dd:1c:00:6f:e1:c9:89:
7d:65:29:e7:72:77:b2:4c:b1:e8:e2:6d:76:7a:37:
fe:70:38:b4:28:a3:fc:54:fb:5b:6d:dc:7b:32:15:
b3:a2:9e:0c:a1:62:66:6f:f5:e4:0a:93:1f:14:5a:
6d:7f:f7:06:98:c0:2a:cd:3a:78:2a:93:10:07:c5:
c2:da:14:96:03:b4:ac:ec:0a:a8:8d:6b:00:6c:38:
4f:45:82:8b:a1:aa:3e:f8:11:21:9d:ac:c4:b8:8b:
58:a0:e5:33:5e:14:e5:ab:d1:aa:f5:f0:5a:82:69:
6c:9d:3f:cf:2a:1c:9b:fe:95:29:51:2b:48:a0:e7:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.172.221.0/24
IPv6:
2602:fa6b::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:76:db:fe:85:ae:f3:70:32:07:35:f1:fc:83:63:92:f8:bf:
61:7c:49:dd:14:6b:eb:58:83:3a:35:a2:65:2f:c1:e3:3f:9d:
0d:95:7e:ba:fe:83:1f:cb:39:df:a0:21:cf:ed:26:ba:35:d1:
97:c6:24:25:76:72:81:d9:f3:43:60:f0:6c:8f:6b:13:e1:09:
5c:51:02:eb:33:b5:8a:70:1a:ab:00:f4:b9:1a:cb:8a:ee:38:
69:18:3e:a3:4c:54:e8:9c:45:5b:7e:1b:9b:c7:dd:d4:88:47:
92:ca:b7:97:7c:c0:a6:14:9b:d8:b0:ae:51:ae:2f:d8:7f:03:
db:2e:01:53:b2:3c:86:14:db:34:aa:f8:3e:18:b1:d8:65:e2:
c5:e4:ed:3f:47:ee:a8:8c:4b:0b:69:26:c8:a5:6a:a7:8d:c6:
17:f5:f0:59:d2:d0:76:b8:9b:3e:37:31:c3:54:dc:70:08:23:
6b:29:b8:a8:f5:c3:01:36:19:25:a9:fe:5d:b5:b5:bf:96:cb:
d7:c7:4d:07:6f:bb:b5:44:6c:e1:b2:2e:de:48:ef:d4:4b:f2:
70:c1:5e:27:1c:da:69:7f:26:c1:ad:dd:f1:0d:9f:29:ef:ad:
d0:61:82:50:64:70:ad:a6:01:f4:88:41:1a:21:e5:78:8c:4c:
09:d9:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:00:22 2025 by rpki-client