This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
File: dafe2535-2dc5-4d47-b03e-d44eea26032f.cer (raw, json)
Hash identifier: pvNinTw1xTFw+TOa+Z1CGS0++CCMR28H3fYhuODHZz0=
Subject key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584C4C9983B0F421E129841FDE80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 25 Dec 2025 01:45:23 +0000
Certificate not after: Wed 29 Mar 2028 00:45:23 +0000
Subordinate resources: AS: 20185
IP: 63.246.48.0/20
IP: 76.10.240.0/20
IP: 192.92.112.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 28 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:99:83:b0:f4:21:e1:29:84:1f:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Dec 25 01:45:23 2025 GMT
Not After : Mar 29 00:45:23 2028 GMT
Subject: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:b0:b7:eb:3d:3b:b4:81:98:15:39:0e:a5:
a4:db:64:75:6f:ed:4a:6f:cb:2d:2f:5a:7c:26:59:
a0:db:4a:f3:40:04:c6:a5:58:cb:f1:96:cd:41:ba:
e6:44:0b:f0:d3:63:31:e9:8b:75:c1:26:a3:8e:5c:
e0:e8:8d:16:86:69:bf:26:b9:0d:97:dd:ea:fb:54:
f7:13:ee:01:bd:92:5d:19:99:9d:60:d3:fc:49:19:
81:d7:72:23:f1:5e:d7:d3:98:96:eb:4a:0d:b5:95:
f7:ea:61:8c:65:56:46:f7:58:ed:e4:5b:43:78:f1:
6b:06:e7:6e:c8:27:d7:bb:c8:74:1d:10:31:94:c6:
90:c5:c0:c2:4f:ff:15:40:20:31:02:eb:0d:cd:63:
a5:6d:1c:2c:5b:28:d5:dd:83:dd:6c:97:14:ad:18:
ae:4e:df:7c:0a:89:49:d3:2f:b7:f6:4c:1f:0b:b0:
fe:d8:5e:18:2b:51:9f:35:6d:16:91:b9:f2:e5:c0:
35:34:28:37:6f:f6:a1:78:07:05:76:9c:b4:9b:2a:
57:cd:f1:3f:c9:5b:12:0d:18:8d:ce:95:f9:5c:43:
2d:d3:c4:a3:ca:66:4c:e7:ac:30:23:c8:a0:3b:d3:
dd:65:9c:81:52:42:20:80:1e:fc:6b:ff:29:6a:f7:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
63.246.48.0/20
76.10.240.0/20
192.92.112.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20185
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:2e:96:77:f5:b3:ee:a2:b8:46:e8:52:1e:02:e3:b1:98:6e:
01:f3:98:10:51:b2:17:39:7c:cd:b8:fd:0a:a2:4a:be:42:09:
c9:96:60:99:31:e9:a6:4e:84:47:ba:27:91:27:10:7a:13:2e:
8f:4b:df:8e:70:a3:36:97:95:ba:4c:88:70:74:18:d9:fc:a2:
3d:70:e8:fe:87:71:ed:7f:22:d9:e6:0a:59:82:86:70:89:55:
9c:ce:ba:2c:c6:54:2e:48:dd:42:d6:c6:6f:4c:d7:44:73:62:
1e:6c:45:d9:43:45:52:1c:32:77:30:68:df:94:c7:9b:13:78:
79:48:f1:02:c5:86:76:ba:c0:61:4d:df:76:8f:17:c9:bb:71:
7d:e2:e1:2a:8c:60:63:8e:30:55:c9:fe:2f:88:cd:a3:6a:ff:
a3:3b:89:de:76:b6:0f:bd:e6:1f:09:af:9f:36:9b:f9:68:eb:
77:46:60:29:aa:dd:b7:f0:b6:c9:e6:0d:0b:4e:50:c5:b1:2f:
f3:74:80:44:b8:59:db:8a:af:e9:3a:9b:1d:d7:68:5c:02:0c:
40:00:58:69:fa:d0:b9:0a:7d:c0:47:93:c7:7c:a1:87:2f:ba:
01:4c:a5:46:a0:93:65:ca:9f:7a:35:98:79:de:10:44:21:8c:
f8:23:6d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 07:48:18 2025 by rpki-client