This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer
File: f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer (raw, json)
Hash identifier: GF2deMV5vXUxoWmN10T8FlJhHmPOCBMy3spVzEJqLjo=
Subject key identifier: AC:B8:8F:B9:35:55:7B:9D:8B:C9:5E:6F:E8:3F:01:AA:77:1C:F2:75
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584C0E3DF47156CEC8BA73AB7B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 02 Dec 2025 17:40:47 +0000
Certificate not after: Mon 06 Mar 2028 17:40:47 +0000
Subordinate resources: AS: 401413
IP: 209.23.64.0/20
IP: 2604:d20::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0e:3d:f4:71:56:ce:c8:ba:73:ab:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Dec 2 17:40:47 2025 GMT
Not After : Mar 6 17:40:47 2028 GMT
Subject: CN=f71ab410-ccbd-4ac3-8b4e-4b3c9a119054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:43:a7:72:cc:5b:6b:fb:e9:8d:51:ae:a9:
1f:79:a6:bc:8b:11:b5:d2:c0:df:1d:c8:90:bc:0c:
ca:8f:5d:39:ee:03:a2:0a:80:6d:35:63:79:19:a3:
31:94:e5:00:c7:fb:04:57:e8:b6:99:93:d8:d7:60:
16:44:f5:21:d1:fc:49:7f:9d:99:ff:04:80:a3:8a:
4e:16:5d:2a:c1:25:00:b4:46:4c:97:79:66:95:1f:
e3:57:81:96:b7:43:ad:84:33:0c:5f:df:89:6e:c1:
6d:bb:4b:99:17:08:69:6d:0d:ea:62:ba:d7:a3:cf:
ea:5b:a9:0a:8b:db:18:5c:d4:2b:c8:b5:75:6a:f0:
6a:bc:62:45:aa:27:8b:8d:71:e1:45:ed:80:0d:43:
92:8a:21:7a:12:89:41:56:ed:fb:b9:ad:31:4f:05:
5a:c5:b5:96:18:49:0b:95:ec:14:a1:21:e3:a3:27:
32:27:32:f7:ef:44:cb:28:6b:5f:22:75:e7:0d:e6:
b5:c3:a2:66:40:ab:76:17:77:a1:7e:ba:7a:ab:18:
55:1e:9c:08:48:c7:37:fe:38:81:44:12:7c:02:d1:
16:6b:23:c2:1d:9d:cf:11:15:e8:c6:0b:bb:7e:fb:
8d:01:f6:6d:30:6c:e6:34:61:f4:8e:82:b2:03:21:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B8:8F:B9:35:55:7B:9D:8B:C9:5E:6F:E8:3F:01:AA:77:1C:F2:75
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.23.64.0/20
IPv6:
2604:d20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401413
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:d9:67:1d:ab:4d:51:8f:9c:5d:44:17:be:0e:fd:02:2d:20:
75:d3:2d:67:8f:45:14:26:9a:5c:aa:40:19:55:2c:59:3d:e5:
68:29:cb:93:61:ae:e6:08:54:87:26:2c:7d:fb:f2:7b:bc:1b:
6e:bd:ad:9e:ea:0e:d6:14:f9:51:46:f9:ae:0a:ce:62:75:99:
25:37:12:12:e1:0e:a6:ce:90:c5:b2:6e:12:c5:a9:8c:84:d1:
a9:23:22:f8:6a:1d:26:c5:03:2b:78:66:bc:50:4b:9d:06:d8:
d1:76:46:d5:27:b9:f1:7f:bc:1e:fe:8e:5d:66:73:7f:ee:9b:
8d:a1:df:29:bd:3f:83:e4:48:63:23:df:0f:e3:15:97:e4:ba:
1e:40:a3:90:62:e4:95:88:db:73:36:72:d5:9e:e5:0b:f3:5a:
95:a7:28:fe:99:18:9c:5a:c1:31:63:ff:ea:12:3a:7e:2a:88:
86:c5:78:30:34:1d:0d:2a:ab:31:24:40:e8:a7:a4:c6:97:5e:
55:1a:dd:3e:59:c7:42:04:a8:7d:66:d7:d8:e3:b7:fe:1b:81:
82:5f:a3:06:be:b4:9f:65:56:b2:75:0b:7e:e7:57:e1:10:47:
16:60:bc:f4:34:ed:b1:c8:3a:4b:21:45:4a:d2:85:2d:0b:62:
4b:61:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:08:42 2025 by rpki-client