This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer File: bf895287-fee6-4682-8ac4-732f64947fe4.cer (raw, json) Hash identifier: py12QpNL1Y3IH+ZshzfmZvvJGiHlDZZQgFKP1/89ZUQ= Subject key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC364E0D2C33C445ED838D380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Nov 2025 22:13:35 +0000 Certificate not after: Tue 08 Feb 2028 22:13:35 +0000 Subordinate resources: AS: 15305 IP: 64.136.100.0/22 IP: 66.232.64.0/19 IP: 67.215.32.0/20 IP: 104.245.20.0/22 IP: 158.120.248.0/22 IP: 161.115.208.0/20 IP: 173.224.176.0/20 IP: 204.8.52.0/22 IP: 208.98.128.0/18 IP: 209.25.172.0/22 IP: 209.141.112.0/20 IP: 216.182.96.0/20 IP: 2605:5800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:64:e0:d2:c3:3c:44:5e:d8:38:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 5 22:13:35 2025 GMT Not After : Feb 8 22:13:35 2028 GMT Subject: CN=bf895287-fee6-4682-8ac4-732f64947fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e1:ad:0c:05:15:05:d4:6a:1f:7d:85:c0:c2: d1:bb:f1:97:bb:ea:b1:ce:9f:47:1e:f0:d1:e0:95: a7:ea:de:2d:cb:88:f7:18:15:7c:74:f6:c3:a8:6e: 7a:cb:40:92:d6:4e:a6:93:69:bf:3c:9c:f9:03:d2: 41:e5:5d:05:42:54:96:d2:35:70:d0:71:5f:85:56: 7b:9b:e7:ad:d0:86:8b:34:92:ee:cf:53:ef:7d:7b: 9e:24:47:d1:df:bf:af:33:e6:66:6d:e1:66:17:31: f4:9f:60:9c:46:e1:4b:3f:48:4b:92:06:72:63:3a: 41:cd:1d:52:10:f4:6e:84:f1:6e:57:35:33:10:15: a0:4f:3e:0e:86:99:0c:3b:98:11:2c:3e:7a:1a:37: 12:26:a2:f9:e9:c6:28:2e:63:31:ed:c2:59:30:64: 3b:00:b2:31:47:dc:33:ce:91:df:b7:9b:17:53:bc: c2:36:ad:88:f5:c8:ae:ec:2a:cb:ac:42:13:95:79: 53:3e:d7:02:01:48:8f:81:22:09:84:7a:31:c9:e3: 14:dc:f7:9f:1d:10:04:85:4e:82:a8:33:f3:71:3a: 05:48:de:be:61:ce:9d:e6:7b:b2:d5:64:e5:e2:a5: 1a:c7:fb:67:01:51:cb:22:20:53:f9:5e:13:da:47: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 64.136.100.0/22 66.232.64.0/19 67.215.32.0/20 104.245.20.0/22 158.120.248.0/22 161.115.208.0/20 173.224.176.0/20 204.8.52.0/22 208.98.128.0/18 209.25.172.0/22 209.141.112.0/20 216.182.96.0/20 IPv6: 2605:5800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15305 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:21:05:f2:40:11:92:c4:50:93:63:e3:cb:57:0b:a0:71:ed: 3b:55:b3:96:30:08:5c:a1:e5:e4:1a:82:ba:6e:88:36:b8:63: 4c:b5:d4:31:48:f6:fc:37:ea:ea:79:41:78:35:8b:b0:bf:3a: 35:78:d8:97:36:3f:05:10:c4:bc:0f:52:1c:04:c3:2c:78:5b: a0:8b:5d:b3:04:7d:c3:a1:a8:d4:f8:84:12:4b:71:e0:af:9f: 3e:2f:2c:49:97:5b:6c:70:43:b2:41:a7:c1:80:12:01:a4:d9: 3e:b7:df:7d:8a:db:f4:6e:16:e3:11:d1:51:f2:08:64:c9:7a: 13:d8:9d:39:90:e6:23:d8:29:25:8a:5d:33:59:2b:21:16:c6: cf:20:34:c9:8e:df:bf:60:c0:15:aa:ff:f3:3c:da:f8:9b:32: cd:0d:f5:a6:c0:3e:7f:1b:96:7b:68:4e:a5:8a:22:6d:f7:be: bd:69:41:84:27:7a:a7:54:95:c1:91:94:9c:45:fa:3e:9d:e1: 02:84:68:10:6f:18:85:c8:01:06:03:73:8a:eb:7a:60:bc:27: 04:1e:50:d5:c5:cf:24:5d:40:71:9f:ef:da:8f:24:7e:96:35: 94:49:c7:ec:24:fb:cf:4a:33:d1:35:aa:20:53:c3:46:0c:5b: 6b:72:35:b6 -----BEGIN CERTIFICATE----- MIIHWTCCBkGgAwIBAgIUAQ0Mn0MoWEvDZODSwzxEXtg404AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNTIyMTMzNVoXDTI4MDIwODIyMTMzNVowLzEtMCsGA1UEAxMk YmY4OTUyODctZmVlNi00NjgyLThhYzQtNzMyZjY0OTQ3ZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOGtDAUVBdRqH32FwMLRu/GXu+qxzp9HHvDR 4JWn6t4ty4j3GBV8dPbDqG56y0CS1k6mk2m/PJz5A9JB5V0FQlSW0jVw0HFfhVZ7 m+et0IaLNJLuz1PvfXueJEfR37+vM+ZmbeFmFzH0n2CcRuFLP0hLkgZyYzpBzR1S EPRuhPFuVzUzEBWgTz4OhpkMO5gRLD56GjcSJqL56cYoLmMx7cJZMGQ7ALIxR9wz zpHft5sXU7zCNq2I9ciu7CrLrEITlXlTPtcCAUiPgSIJhHoxyeMU3PefHRAEhU6C qDPzcToFSN6+Yc6d5nuy1WTl4qUax/tnAVHLIiBT+V4T2kflcQIDAQABo4IEazCC BGcwHQYDVR0OBBYEFHX0DjcHdpSDoQk9PJp3wd6X92bDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i Zjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5NDdmZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2JmODk1Mjg3LWZlZTYtNDY4Mi04 YWM0LTczMmY2NDk0N2ZlNC9iZjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5 NDdmZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBAJAiGQDBAVC6EADBARD1yADBAJo9RQDBAKeePgD BAShc9ADBASt4LADBALMCDQDBAbQYoADBALRGawDBATRjXADBATYtmAwDQQCAAIw BwMFACYFWAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICO8kwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGyEF 8kARksRQk2Pjy1cLoHHtO1WzljAIXKHl5BqCum6INrhjTLXUMUj2/Dfq6nlBeDWL sL86NXjYlzY/BRDEvA9SHATDLHhboItdswR9w6Go1PiEEktx4K+fPi8sSZdbbHBD skGnwYASAaTZPrfffYrb9G4W4xHRUfIIZMl6E9idOZDmI9gpJYpdM1krIRbGzyA0 yY7fv2DAFar/8zza+JsyzQ31psA+fxuWe2hOpYoibfe+vWlBhCd6p1SVwZGUnEX6 Pp3hAoRoEG8YhcgBBgNziut6YLwnBB5Q1cXPJF1AcZ/v2o8kfpY1lEnH7CT7z0oz 0TWqIFPDRgxba3I1tg== -----END CERTIFICATE-----Generated at Fri Nov 28 06:12:09 2025 by rpki-client