This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
File: e201ba8b-eda4-4920-948d-160d561b0e16.cer (raw, json)
Hash identifier: 44MmNmM4Xiou38NyyBmhtwMWFsKH2oMseSOMQOxBOiE=
Subject key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584C37A96424EADE4CBD10FA6000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 17 Dec 2025 13:45:23 +0000
Certificate not after: Tue 21 Mar 2028 12:45:23 +0000
Subordinate resources: AS: 17252
AS: 21769
AS: 33708
AS: 47007
AS: 47013
IP: 43.255.188.0/22
IP: 45.40.96.0/19
IP: 45.73.160.0/19
IP: 45.250.8.0/22
IP: 45.252.80.0/22
IP: 64.69.96.0/19
IP: 64.83.64.0/20
IP: 66.78.0.0/18
IP: 67.203.0.0/18
IP: 67.207.160.0/19
IP: 67.219.16.0/20
IP: 67.227.0.0/17
IP: 69.171.208.0 -- 69.171.219.255
IP: 74.114.116.0/22
IP: 76.9.96.0/20
IP: 89.208.52.0/22
IP: 89.208.180.0/22
IP: 92.38.208.0/22
IP: 95.163.148.0/22
IP: 103.48.32.0/22
IP: 103.51.32.0/22
IP: 103.56.86.0/23
IP: 103.76.186.0/23
IP: 103.87.252.0/23
IP: 103.108.96.0/23
IP: 103.219.16.0/22
IP: 103.251.220.0/22
IP: 104.129.240.0/20
IP: 104.143.96.0/20
IP: 104.224.64.0/19
IP: 104.247.152.0/21
IP: 147.185.114.0/23
IP: 173.46.80.0/20
IP: 173.211.0.0/17
IP: 173.214.176.0/20
IP: 174.140.192.0/18
IP: 180.131.144.0/22
IP: 180.149.32.0/22
IP: 184.174.0.0/17
IP: 185.176.48.0/22
IP: 185.185.28.0/22
IP: 185.188.76.0/22
IP: 185.193.72.0/22
IP: 185.194.116.0/22
IP: 185.194.228.0/22
IP: 185.197.16.0/22
IP: 185.201.228.0/22
IP: 185.202.168.0/22
IP: 185.205.196.0/22
IP: 185.206.220.0/22
IP: 185.207.96.0/22
IP: 185.210.76.0/22
IP: 198.89.96.0/21
IP: 198.89.120.0/21
IP: 198.102.8.0/21
IP: 199.182.168.0/21
IP: 205.147.236.0/22
IP: 205.196.128.0/19
IP: 206.206.64.0/18
IP: 207.8.240.0/22
IP: 208.70.248.0/21
IP: 208.76.248.0/21
IP: 208.86.196.0/22
IP: 208.93.4.0/22
IP: 208.94.224.0/21
IP: 209.92.160.0/19
IP: 209.137.160.0/19
IP: 209.236.192.0/19
IP: 213.219.252.0/22
IP: 216.10.0.0/19
IP: 216.74.64.0/18
IP: 216.75.64.0/19
IP: 216.107.128.0/20
IP: 216.122.160.0/19
IP: 216.183.224.0/19
IP: 2604:4840::/32
IP: 2605:a240::/32
IP: 2606:e7c0::/32
IP: 2607:f188::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:a9:64:24:ea:de:4c:bd:10:fa:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Dec 17 13:45:23 2025 GMT
Not After : Mar 21 12:45:23 2028 GMT
Subject: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3f:4a:4a:a4:47:f8:eb:dd:b3:37:58:30:ec:
7b:4b:91:30:87:23:d0:a2:2e:1a:0b:46:a1:bc:27:
3b:ff:9f:f8:d2:6c:12:be:e6:b4:1d:93:e4:66:dc:
d9:18:e3:47:5a:c2:18:3a:66:d7:ec:de:bf:8e:6b:
1f:de:89:02:be:48:25:c4:c2:e4:80:dc:f0:af:54:
7d:03:d3:b5:7f:48:31:d1:cd:be:4b:bc:66:47:64:
4d:16:b0:fc:24:8e:d6:aa:0a:4a:b4:6d:8c:62:82:
e5:97:a3:6c:9b:1b:d1:d9:d8:4f:5d:f8:db:23:45:
4b:f4:5e:14:ed:07:d0:6d:6b:53:bf:d3:94:c1:a2:
73:46:ed:02:3a:19:16:9c:c0:e8:40:c9:08:8b:93:
7d:87:0a:f6:1a:ee:c2:9d:da:7f:7e:e2:d8:88:29:
94:56:ac:2b:a7:12:da:5e:23:de:7a:e0:96:c5:10:
ac:89:d0:82:4a:1d:e9:5c:86:31:38:2e:9f:67:cd:
8e:f4:24:22:1c:92:73:e6:f6:2a:5e:bc:62:50:0a:
ac:38:25:e0:24:b8:ef:fc:d6:4b:b4:c4:6b:1f:93:
f7:6c:9a:41:7f:7d:57:c4:91:20:aa:0f:a2:08:9c:
cd:43:d6:cf:eb:fd:22:60:7f:de:3e:37:28:4d:8a:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
43.255.188.0/22
45.40.96.0/19
45.73.160.0/19
45.250.8.0/22
45.252.80.0/22
64.69.96.0/19
64.83.64.0/20
66.78.0.0/18
67.203.0.0/18
67.207.160.0/19
67.219.16.0/20
67.227.0.0/17
69.171.208.0-69.171.219.255
74.114.116.0/22
76.9.96.0/20
89.208.52.0/22
89.208.180.0/22
92.38.208.0/22
95.163.148.0/22
103.48.32.0/22
103.51.32.0/22
103.56.86.0/23
103.76.186.0/23
103.87.252.0/23
103.108.96.0/23
103.219.16.0/22
103.251.220.0/22
104.129.240.0/20
104.143.96.0/20
104.224.64.0/19
104.247.152.0/21
147.185.114.0/23
173.46.80.0/20
173.211.0.0/17
173.214.176.0/20
174.140.192.0/18
180.131.144.0/22
180.149.32.0/22
184.174.0.0/17
185.176.48.0/22
185.185.28.0/22
185.188.76.0/22
185.193.72.0/22
185.194.116.0/22
185.194.228.0/22
185.197.16.0/22
185.201.228.0/22
185.202.168.0/22
185.205.196.0/22
185.206.220.0/22
185.207.96.0/22
185.210.76.0/22
198.89.96.0/21
198.89.120.0/21
198.102.8.0/21
199.182.168.0/21
205.147.236.0/22
205.196.128.0/19
206.206.64.0/18
207.8.240.0/22
208.70.248.0/21
208.76.248.0/21
208.86.196.0/22
208.93.4.0/22
208.94.224.0/21
209.92.160.0/19
209.137.160.0/19
209.236.192.0/19
213.219.252.0/22
216.10.0.0/19
216.74.64.0/18
216.75.64.0/19
216.107.128.0/20
216.122.160.0/19
216.183.224.0/19
IPv6:
2604:4840::/32
2605:a240::/32
2606:e7c0::/32
2607:f188::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17252
21769
33708
47007
47013
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:9a:1f:4d:d5:1e:ab:72:b8:9d:00:fa:6e:b4:af:cd:3a:b0:
01:e3:77:82:59:26:7a:7a:59:bb:fe:6f:6d:4d:cc:4f:39:96:
7d:07:56:2a:af:af:96:b3:d7:f3:4a:0b:17:ba:cb:62:87:f2:
40:81:3a:5f:61:5e:d6:28:45:a3:bb:98:15:ac:eb:19:6d:85:
2b:06:aa:34:70:01:e4:dd:d5:b3:10:3b:7e:83:06:a2:e5:a8:
66:bd:ac:9b:e5:44:f3:cb:7b:33:45:8a:d8:f0:2c:a2:55:bb:
d6:8b:44:40:e2:3a:7d:b1:ff:7b:8c:c4:7a:b5:4a:7b:72:9f:
ef:08:fa:21:53:5e:a1:bc:95:e3:0d:73:59:d7:3b:01:2e:71:
81:91:31:b1:69:83:4a:b3:1c:4b:f0:f5:69:ba:31:f3:b2:5c:
4b:90:06:8a:1a:bb:a0:e7:50:e2:c1:71:68:03:b8:24:f1:63:
c6:dd:d6:d3:fa:4c:7b:20:1e:44:dc:35:60:01:3d:ce:65:be:
39:b1:84:55:d8:b0:60:71:c9:51:e7:1a:f6:2f:15:05:84:72:
4d:18:aa:72:f2:14:d5:10:0f:70:ae:2e:27:c2:39:67:ed:d8:
eb:07:1d:87:20:91:d4:b6:56:ac:19:95:6a:2f:bb:db:63:be:
3e:55:58:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:51:46 2025 by rpki-client