This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer File: 4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer (raw, json) Hash identifier: QKeuypq3na2ti5V3sVpzTU1LI3hGxce/8TgA/VDcrwA= Subject key identifier: 71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC7FA88484F51C66E3F981540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Nov 2025 13:38:21 +0000 Certificate not after: Thu 10 Feb 2028 13:38:21 +0000 Subordinate resources: AS: 1696 AS: 2908 -- 2913 AS: 3073 -- 3081 AS: 4996 AS: 13642 AS: 19954 AS: 22081 AS: 22650 AS: 25883 AS: 30284 -- 30285 AS: 32111 AS: 32287 AS: 33463 -- 33464 AS: 35967 IP: 129.14.0.0/16 IP: 135.53.0.0/16 IP: 135.155.0.0/16 IP: 144.215.0.0/16 IP: 146.128.0.0/16 IP: 150.110.0.0/16 IP: 159.17.0.0/16 IP: 161.127.0.0/16 IP: 161.161.0.0/16 IP: 162.124.0.0/16 IP: 165.203.0.0/16 IP: 168.72.0.0/16 IP: 168.109.0.0/16 IP: 169.160.0.0 -- 169.183.255.255 IP: 169.185.0.0 -- 169.195.255.255 IP: 192.48.247.0/24 IP: 192.104.163.0 -- 192.104.164.255 IP: 192.129.81.0/24 IP: 192.135.38.0/24 IP: 192.195.119.0 -- 192.195.133.255 IP: 199.67.128.0 -- 199.67.247.255 IP: 199.85.246.0/24 IP: 199.85.250.0/24 IP: 204.13.184.0/21 IP: 204.107.124.0/24 IP: 204.130.247.0/24 IP: 204.152.4.0/23 IP: 204.153.72.0/23 IP: 204.235.128.0 -- 204.235.141.255 IP: 205.167.114.0/23 IP: 209.99.240.0/20 IP: 2620:0:d80::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c7:fa:88:48:4f:51:c6:6e:3f:98:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 7 13:38:21 2025 GMT Not After : Feb 10 13:38:21 2028 GMT Subject: CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:28:59:ee:8a:0a:1e:af:86:fa:bc:3e:1d: 9d:bf:53:57:2a:e2:cd:9b:37:a6:1e:a4:32:bf:c1: 41:99:75:38:62:bd:22:b4:2a:06:21:c2:51:4a:6c: 2c:7c:f7:ef:7d:76:f1:d3:fa:2f:96:73:04:f6:4f: 41:2e:6e:da:c1:74:c2:6f:a2:27:35:e9:b7:00:87: 62:f1:00:fb:6a:83:3a:30:ea:0d:b7:a7:73:b2:51: 10:0e:30:49:2e:3a:b5:3d:eb:f4:3f:d4:da:fa:70: 4b:d5:b5:33:2f:d0:2f:fd:39:df:35:9d:86:f6:9a: b5:89:e8:68:8c:7a:bc:b9:e4:d9:28:51:d2:63:7d: e8:0b:f9:70:e5:2f:d7:c7:12:ed:7b:6d:d0:5b:de: 65:5e:94:77:d0:ac:ad:21:8b:73:9e:4b:2a:a7:93: 4e:aa:a4:df:e5:57:5d:a4:a1:59:46:9a:58:a2:8f: 26:a6:6b:8d:b5:09:b8:f4:1f:d5:60:62:57:25:9e: b8:41:38:44:fd:29:52:dd:1f:bd:f0:a2:14:ba:83: a1:2c:c7:d4:dc:24:79:76:a2:90:e7:53:dc:34:22: f1:43:3d:d0:f1:f9:18:33:c7:c1:3b:41:29:f2:82: 35:81:f7:29:7d:41:41:e7:1e:bf:20:d5:7e:89:e7: f5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 129.14.0.0/16 135.53.0.0/16 135.155.0.0/16 144.215.0.0/16 146.128.0.0/16 150.110.0.0/16 159.17.0.0/16 161.127.0.0/16 161.161.0.0/16 162.124.0.0/16 165.203.0.0/16 168.72.0.0/16 168.109.0.0/16 169.160.0.0-169.183.255.255 169.185.0.0-169.195.255.255 192.48.247.0/24 192.104.163.0-192.104.164.255 192.129.81.0/24 192.135.38.0/24 192.195.119.0-192.195.133.255 199.67.128.0-199.67.247.255 199.85.246.0/24 199.85.250.0/24 204.13.184.0/21 204.107.124.0/24 204.130.247.0/24 204.152.4.0/23 204.153.72.0/23 204.235.128.0-204.235.141.255 205.167.114.0/23 209.99.240.0/20 IPv6: 2620:0:d80::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1696 2908-2913 3073-3081 4996 13642 19954 22081 22650 25883 30284-30285 32111 32287 33463-33464 35967 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f7:97:a6:94:0a:49:03:93:74:f2:33:e5:4b:a5:f6:b2:e1: d1:1d:fb:a2:e4:26:a2:ff:51:67:a2:be:90:42:90:30:87:86: 63:ff:27:3b:d8:1b:07:43:47:f3:7f:0a:94:5f:40:18:e9:63: 48:da:d5:9b:1f:32:44:9e:13:bc:b2:19:92:eb:4d:e6:c0:bd: 66:93:3e:29:18:0e:e7:fb:6a:fe:86:99:20:ac:19:37:d0:e2: ed:6e:b8:71:09:56:41:aa:c9:22:a1:ce:44:13:19:b1:cb:32: a7:f4:35:62:51:d2:31:dc:b8:27:aa:dc:5a:7b:21:97:e8:c6: 61:8d:1b:3d:b4:5b:03:0f:a5:e9:cb:58:8e:92:83:e0:65:9c: 07:0e:c8:50:c1:59:c0:5c:a7:1d:b6:91:19:58:f5:89:ab:2b: e3:77:0a:5d:39:b0:9d:69:d2:c2:63:0d:91:91:c0:28:43:06: 3c:fc:db:26:52:97:02:41:dd:db:32:0d:88:cc:6c:1b:d0:ca: a9:73:8a:70:4f:49:51:a5:73:45:3b:a4:3d:f0:ee:e6:34:45: 39:2e:7a:1c:b9:ad:78:60:10:1f:33:61:c9:33:a9:61:1e:23: ce:ae:b8:af:67:db:89:ea:a9:33:b4:7b:94:4d:41:fa:96:b8: 2d:f1:73:27 -----BEGIN CERTIFICATE----- MIIIQTCCBymgAwIBAgIUAQ0Mn0MoWEvH+ohIT1HGbj+YFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNzEzMzgyMVoXDTI4MDIxMDEzMzgyMVowLzEtMCsGA1UEAxMk NGJmNmI0YWEtOGZlZC00MjFiLWJkNWMtODM4NWMwNTA0YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8woWe6KCh6vhvq8Ph2dv1NXKuLNmzemHqQy v8FBmXU4Yr0itCoGIcJRSmwsfPfvfXbx0/ovlnME9k9BLm7awXTCb6InNem3AIdi 8QD7aoM6MOoNt6dzslEQDjBJLjq1Pev0P9Ta+nBL1bUzL9Av/TnfNZ2G9pq1ieho jHq8ueTZKFHSY33oC/lw5S/XxxLte23QW95lXpR30KytIYtznksqp5NOqqTf5Vdd pKFZRppYoo8mpmuNtQm49B/VYGJXJZ64QThE/SlS3R+98KIUuoOhLMfU3CR5dqKQ 51PcNCLxQz3Q8fkYM8fBO0Ep8oI1gfcpfUFB5x6/INV+ief1qQIDAQABo4IFUzCC BU8wHQYDVR0OBBYEFHHJD+MIHVX4NojnLbSQeCfA9GYfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 YmY2YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1YzA1MDRjMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRiZjZiNGFhLThmZWQtNDIxYi1i ZDVjLTgzODVjMDUwNGMxZC80YmY2YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1YzA1 MDRjMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwggEHBggrBgEF BQcBBwEB/wSB9zCB9DCB4AQCAAEwgdkDAwCBDgMDAIc1AwMAh5sDAwCQ1wMDAJKA AwMAlm4DAwCfEQMDAKF/AwMAoaEDAwCifAMDAKXLAwMAqEgDAwCobTAKAwMFqaAD AwOpsDAKAwMAqbkDAwKpwAMEAMAw9zAMAwQAwGijAwQAwGikAwQAwIFRAwQAwIcm MAwDBADAw3cDBAHAw4QwDAMEB8dDgAMEA8dD8AMEAMdV9gMEAMdV+gMEA8wNuAME AMxrfAMEAMyC9wMEAcyYBAMEAcyZSDAMAwQHzOuAAwQBzOuMAwQBzadyAwQE0WPw MA8EAgACMAkDBwAmIAAADYAwaAYIKwYBBQUHAQgBAf8EWTBXoFUwUwICBqAwCAIC C1wCAgthMAgCAgwBAgIMCQICE4QCAjVKAgJN8gICVkECAlh6AgJlGzAIAgJ2TAIC dk0CAn1vAgJ+HzAKAgMAgrcCAwCCuAIDAIx/MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFL3l6aUCkkDk3Ty M+VLpfay4dEd+6LkJqL/UWeivpBCkDCHhmP/JzvYGwdDR/N/CpRfQBjpY0ja1Zsf MkSeE7yyGZLrTebAvWaTPikYDuf7av6GmSCsGTfQ4u1uuHEJVkGqySKhzkQTGbHL Mqf0NWJR0jHcuCeq3Fp7IZfoxmGNGz20WwMPpenLWI6Sg+BlnAcOyFDBWcBcpx22 kRlY9YmrK+N3Cl05sJ1p0sJjDZGRwChDBjz82yZSlwJB3dsyDYjMbBvQyqlzinBP SVGlc0U7pD3w7uY0RTkuehy5rXhgEB8zYckzqWEeI86uuK9n24nqqTO0e5RNQfqW uC3xcyc= -----END CERTIFICATE-----Generated at Tue Nov 25 12:55:18 2025 by rpki-client