This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer
File: 94cfb244-34f1-4c74-919b-4784f0348dd1.cer (raw, json)
Hash identifier: 83Uw2Qr/ax1nbYumIKzEaWS7XM8v6mcQQ7KNwtVZ8Xo=
Subject key identifier: BA:81:2A:A8:CA:E1:A0:4F:3D:80:1A:27:F3:CB:05:6A:4F:23:4A:D0
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584C381B1F58F382005BEFD93B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 17 Dec 2025 17:34:33 +0000
Certificate not after: Tue 21 Mar 2028 16:34:33 +0000
Subordinate resources: AS: 401908
IP: 70.35.157.0/24
IP: 2620:da:a000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:38:1b:1f:58:f3:82:00:5b:ef:d9:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Dec 17 17:34:33 2025 GMT
Not After : Mar 21 16:34:33 2028 GMT
Subject: CN=94cfb244-34f1-4c74-919b-4784f0348dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:35:61:42:8e:04:30:29:53:08:45:05:4b:
1c:fc:18:17:51:a5:69:21:02:e4:aa:ce:83:45:82:
de:13:8d:e1:9b:74:79:f8:22:1f:92:af:cb:b1:ae:
5d:8a:1e:f2:3b:53:ba:98:54:1d:99:a6:51:d9:37:
50:d1:be:d2:c8:de:da:7a:68:3c:62:a0:b0:8a:23:
16:8e:9e:2c:cd:d5:52:96:73:29:45:f6:0f:bc:4a:
e0:60:84:78:f7:db:2f:5a:f2:e3:e2:c3:df:28:cf:
49:3e:fe:96:36:47:f1:bc:b5:8c:ac:ba:c4:9b:e1:
4d:38:d5:5b:af:0f:aa:0f:41:18:97:53:b3:58:7b:
82:2e:a2:26:d1:77:54:6c:3a:8d:a3:3e:32:02:9e:
9c:32:e2:14:00:a3:b1:69:33:fb:84:3d:b1:c5:15:
35:7b:4d:95:92:fd:f9:a0:33:63:99:f0:a6:c6:20:
05:f4:64:ad:6c:b9:2e:55:e3:d6:56:26:ad:1f:e4:
40:2d:b4:98:09:3f:88:7e:d0:03:ea:a8:c1:14:1d:
f2:91:d7:dd:bd:9b:dc:07:71:48:36:c4:00:e8:f1:
78:db:60:3f:6a:10:06:50:26:fa:1c:fe:b5:42:cb:
a7:77:69:8e:94:09:32:01:66:16:17:b5:f6:4a:c0:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:81:2A:A8:CA:E1:A0:4F:3D:80:1A:27:F3:CB:05:6A:4F:23:4A:D0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.35.157.0/24
IPv6:
2620:da:a000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401908
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:45:08:5d:0d:fc:96:9a:de:89:8d:bd:99:4d:8f:bf:03:a8:
4e:44:9a:f7:18:27:5e:16:d5:df:36:af:9b:00:a8:4b:f7:fd:
c1:45:e8:e6:1b:26:58:ca:ee:8a:64:63:ac:63:a9:f6:c8:91:
c1:2f:b5:d9:2b:04:67:e0:e0:2b:89:29:1a:b8:9e:cc:69:fb:
33:49:3f:86:bc:f7:cc:03:68:e9:b3:da:31:6f:92:b7:97:71:
30:e3:45:b2:ab:9b:03:cf:02:32:c0:59:2e:51:c7:e8:d2:a9:
29:ac:a0:b7:5b:f9:db:91:8f:2a:97:72:5e:e8:08:05:63:68:
ea:a1:b4:90:e2:72:14:8c:d8:4a:c5:75:2b:d8:e6:93:3e:80:
e3:bb:93:0a:e6:22:cf:4f:01:1c:42:b4:f1:a1:d6:dc:44:c8:
75:b6:4d:70:c2:e1:1e:ba:a2:7c:fb:83:f5:35:b9:b6:86:a6:
c9:e0:7a:05:da:04:bc:04:fe:fd:a9:e6:99:4f:cb:4b:be:75:
5e:06:4c:93:be:3d:22:4d:0e:37:64:6f:05:dd:f4:40:c1:89:
f0:74:a6:91:d9:02:76:85:a7:b4:97:96:34:91:6f:44:d9:0c:
73:74:65:a8:d7:87:3b:c6:ad:ab:ea:f9:2e:b7:ab:7f:11:5c:
a0:df:74:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:07:44 2025 by rpki-client