This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf2dfd2f-553f-477b-938a-9b04120877bc.cer File: bf2dfd2f-553f-477b-938a-9b04120877bc.cer (raw, json) Hash identifier: HA07BTQliFszzix3+tgAYcwlUpR6J3GXIlzcpIoEXts= Subject key identifier: 7F:FB:EF:31:88:2D:6D:65:6C:FD:00:F8:1C:A8:23:A3:6D:F4:E2:1C Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BAF7EDFF669EDA5B76907CEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf2dfd2f-553f-477b-938a-9b04120877bc/bf2dfd2f-553f-477b-938a-9b04120877bc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf2dfd2f-553f-477b-938a-9b04120877bc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Oct 2025 19:09:48 +0000 Certificate not after: Tue 01 Feb 2028 20:09:48 +0000 Subordinate resources: AS: 32899 IP: 23.163.240.0/24 IP: 64.186.4.0/22 IP: 69.58.112.0/20 IP: 2604:cd40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:7e:df:f6:69:ed:a5:b7:69:07:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 29 19:09:48 2025 GMT Not After : Feb 1 20:09:48 2028 GMT Subject: CN=bf2dfd2f-553f-477b-938a-9b04120877bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:45:a6:38:a2:e8:55:52:40:bd:22:17:49: fa:5b:22:1f:3a:7f:a5:13:3b:ea:17:d8:10:8a:ef: fc:5a:f1:33:d4:bb:aa:cb:3c:3a:be:47:d5:34:b3: 75:17:55:a6:56:f4:4c:97:62:c2:e8:a6:4c:d4:c0: 46:f0:ad:de:ad:80:a9:2a:2f:85:5c:d1:6a:b2:30: 36:f1:09:f8:cb:83:3e:0d:bd:65:20:3b:47:38:b5: 3c:84:04:49:cc:6e:51:36:3e:bc:b3:d7:03:75:a8: d7:52:2c:fb:c7:2b:f2:51:c8:75:3a:93:38:b9:99: 89:41:e1:14:f0:5b:95:6f:d5:5c:a9:d2:73:39:7e: 88:31:c8:d3:8c:ce:be:6c:84:d7:c1:12:04:15:64: 80:cc:9c:d1:71:ec:6a:86:e9:98:f3:6f:7b:29:eb: af:d1:00:01:39:38:b2:eb:31:46:06:f8:71:17:f0: ed:7f:ed:e8:3f:9b:48:5a:4c:dd:de:b3:36:17:d8: 65:67:3a:cf:a8:37:52:fe:51:a0:d7:b5:97:0f:ed: b3:31:15:cd:be:bc:6d:9e:3b:92:6f:93:a6:5e:83: 5c:e0:7a:10:f7:0d:0e:0f:b4:95:b9:56:6e:01:92: 51:71:0b:0f:66:d7:0b:85:04:d6:16:e6:73:23:06: c2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FB:EF:31:88:2D:6D:65:6C:FD:00:F8:1C:A8:23:A3:6D:F4:E2:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf2dfd2f-553f-477b-938a-9b04120877bc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf2dfd2f-553f-477b-938a-9b04120877bc/bf2dfd2f-553f-477b-938a-9b04120877bc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.163.240.0/24 64.186.4.0/22 69.58.112.0/20 IPv6: 2604:cd40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32899 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d7:b7:b9:b1:dc:64:ad:97:59:37:c4:e2:ca:82:06:5a:4d: d6:25:e2:30:86:32:d6:75:66:91:45:9b:0f:fe:3e:f6:2b:8a: bb:fc:59:47:c4:3a:27:14:a3:ae:cc:a1:3f:77:93:88:cd:60: a0:54:aa:e4:f8:61:bc:dd:80:dd:11:66:01:6a:1d:d1:15:fa: 87:76:ed:fd:11:de:f3:66:ab:7d:e1:f7:4f:6d:da:ca:46:33: 8f:d8:5d:6f:29:1c:54:28:30:7b:3d:7d:6f:98:b3:f4:30:c0: c0:e7:7e:f9:02:b1:f3:b7:3f:ce:da:b5:24:e0:b3:43:f3:8e: bf:32:8a:a8:cd:4e:40:ff:59:f6:3c:c0:ae:cd:9e:76:9e:30: 68:1e:db:8f:89:65:11:10:65:56:2c:43:24:4f:2a:ee:f1:3e: f0:7f:86:74:13:8e:12:36:d3:3e:11:11:9a:53:5a:d7:de:45: 1c:70:34:41:ca:7a:7b:1b:98:a5:77:03:ff:e2:9e:e3:50:63: 35:fa:d7:01:48:b9:64:af:e6:7e:e2:51:ee:2c:8c:e8:24:9f: 8e:89:72:98:ac:82:37:47:3a:f0:03:49:18:6b:dc:34:b2:15: 94:4a:36:5d:a9:16:bb:5a:fb:da:81:5c:c4:48:e2:e6:53:b7: 38:c6:b6:7a -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEuvft/2ae2lt2kHzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyOTE5MDk0OFoXDTI4MDIwMTIwMDk0OFowLzEtMCsGA1UEAxMk YmYyZGZkMmYtNTUzZi00NzdiLTkzOGEtOWIwNDEyMDg3N2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJBFpjii6FVSQL0iF0n6WyIfOn+lEzvqF9gQ iu/8WvEz1Luqyzw6vkfVNLN1F1WmVvRMl2LC6KZM1MBG8K3erYCpKi+FXNFqsjA2 8Qn4y4M+Db1lIDtHOLU8hARJzG5RNj68s9cDdajXUiz7xyvyUch1OpM4uZmJQeEU 8FuVb9VcqdJzOX6IMcjTjM6+bITXwRIEFWSAzJzRcexqhumY8297Keuv0QABOTiy 6zFGBvhxF/Dtf+3oP5tIWkzd3rM2F9hlZzrPqDdS/lGg17WXD+2zMRXNvrxtnjuS b5OmXoNc4HoQ9w0OD7SVuVZuAZJRcQsPZtcLhQTWFuZzIwbCtQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFH/77zGILW1lbP0A+ByoI6Nt9OIcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i ZjJkZmQyZi01NTNmLTQ3N2ItOTM4YS05YjA0MTIwODc3YmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2JmMmRmZDJmLTU1M2YtNDc3Yi05 MzhhLTliMDQxMjA4NzdiYy9iZjJkZmQyZi01NTNmLTQ3N2ItOTM4YS05YjA0MTIw ODc3YmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXo/ADBAJAugQDBARFOnAwDQQCAAIwBwMFACYE zUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAICDMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHnXt7mx3GSt l1k3xOLKggZaTdYl4jCGMtZ1ZpFFmw/+PvYrirv8WUfEOicUo67MoT93k4jNYKBU quT4YbzdgN0RZgFqHdEV+od27f0R3vNmq33h909t2spGM4/YXW8pHFQoMHs9fW+Y s/QwwMDnfvkCsfO3P87atSTgs0Pzjr8yiqjNTkD/WfY8wK7NnnaeMGge24+JZREQ ZVYsQyRPKu7xPvB/hnQTjhI20z4REZpTWtfeRRxwNEHKensbmKV3A//inuNQYzX6 1wFIuWSv5n7iUe4sjOgkn46JcpisgjdHOvADSRhr3DSyFZRKNl2pFrta+9qBXMRI 4uZTtzjGtno= -----END CERTIFICATE-----Generated at Fri Nov 28 06:12:00 2025 by rpki-client