This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer File: bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer (raw, json) Hash identifier: urQ9yRFNktwTGItVqeg2Nf6LOeKatSHjuBMXcXaavtY= Subject key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BC31CCB9BF068ECCBA20C2780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Nov 2025 19:48:21 +0000 Certificate not after: Sat 10 Jul 2027 00:45:33 +0000 Subordinate resources: AS: 46450 AS: 62580 IP: 64.112.228.0/22 IP: 69.12.26.0/23 IP: 74.80.230.0 -- 74.80.233.255 IP: 104.129.136.0/21 IP: 104.192.216.0/22 IP: 104.225.240.0/21 IP: 142.154.192.0/19 IP: 158.106.192.0/19 IP: 170.101.0.0/19 IP: 172.93.8.0/21 IP: 173.205.208.0/21 IP: 192.81.136.0/22 IP: 199.34.244.0/22 IP: 208.64.24.0/21 IP: 208.80.32.0/21 IP: 209.178.208.0/21 IP: 216.158.128.0/19 IP: 2606:3580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:1c:cb:9b:f0:68:ec:cb:a2:0c:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 5 19:48:21 2025 GMT Not After : Jul 10 00:45:33 2027 GMT Subject: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:75:0a:0e:ef:63:f1:9f:d6:c3:4e:ad:3c: 90:95:0e:e6:81:33:7d:68:1a:b7:f6:52:98:af:5a: aa:a9:d3:91:4b:7c:62:54:05:0c:83:fe:08:b5:ae: 58:39:25:b7:36:7d:c4:06:59:47:e1:a3:b4:ed:4f: 0c:62:26:c4:2f:fe:99:73:ba:5f:bd:18:27:30:68: d0:46:f1:46:34:6a:cd:f2:d3:16:06:d0:78:e0:97: 0c:da:a5:e2:91:fc:c8:e1:3b:60:f6:50:be:40:35: aa:7d:a8:a1:fa:c4:18:1f:82:c5:de:44:54:03:f9: c4:40:af:7c:06:13:29:bc:70:35:81:38:93:cc:fb: 35:cb:22:6a:0e:54:a1:98:4f:95:8e:6a:10:16:d6: 52:8b:72:7b:a5:93:9b:9d:8f:1f:46:59:84:3b:bc: db:a1:29:2a:b3:f1:65:93:5c:65:8f:66:60:34:1a: 12:b5:53:f8:21:61:f3:bc:f5:6f:9c:d8:f5:a8:d5: 63:f1:12:94:c6:f0:b5:7b:9c:e1:6e:98:fc:88:28: 51:c3:8d:c4:4c:5a:74:23:03:73:5a:a6:d8:9d:30: 8d:4d:1f:01:60:13:8c:af:96:b8:40:37:bf:97:5b: c0:5d:83:84:d3:48:ec:68:38:24:0e:e9:fa:fe:75: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.112.228.0/22 69.12.26.0/23 74.80.230.0-74.80.233.255 104.129.136.0/21 104.192.216.0/22 104.225.240.0/21 142.154.192.0/19 158.106.192.0/19 170.101.0.0/19 172.93.8.0/21 173.205.208.0/21 192.81.136.0/22 199.34.244.0/22 208.64.24.0/21 208.80.32.0/21 209.178.208.0/21 216.158.128.0/19 IPv6: 2606:3580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46450 62580 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f5:b4:f1:d3:9f:cf:81:ab:67:02:2e:4b:60:3c:52:b2:69: 15:d2:f5:95:a9:d0:18:be:8b:ac:bd:67:4f:13:07:a6:2d:61: 05:3b:11:39:2b:ec:85:3b:c5:30:92:18:d5:cb:77:9e:a0:49: e5:37:ca:62:85:40:6f:05:72:f2:6e:4a:73:e2:c8:01:c0:4b: 62:5d:d7:f1:f6:3f:4e:5c:29:65:ab:5a:ef:2e:18:f6:af:f1: 4e:7a:30:a5:c3:e2:6c:8f:8a:76:58:c0:21:a6:0d:3d:fb:72: ab:e7:11:c1:d5:06:51:77:6b:5b:cf:05:ab:01:03:5d:2b:f5: c0:f4:ff:1c:ae:4b:e8:75:f3:ba:07:ca:a8:4c:fa:0a:aa:f7: b6:a3:76:78:91:de:d3:4e:28:1c:89:8c:8a:08:55:8d:db:de: d6:d4:bf:fd:03:18:1a:fc:20:9d:54:7a:54:39:8b:69:0e:19: 36:8b:5a:68:21:81:c6:34:fd:18:5e:28:ed:c4:61:fe:ef:27: 26:da:90:ef:1c:4e:1b:3d:66:28:3b:89:1f:8a:28:8b:8c:f0: c6:eb:9e:d6:61:06:b8:02:63:66:fb:27:c0:09:91:d0:dd:ec: e3:69:92:6b:b0:80:8d:68:a8:80:67:22:5c:54:14:86:b7:39: 24:f7:cc:d1 -----BEGIN CERTIFICATE----- MIIHiDCCBnCgAwIBAgIUAQ0Mn0MoWEvDHMub8Gjsy6IMJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTEwNTE5NDgyMVoXDTI3MDcxMDAwNDUzM1owLzEtMCsGA1UEAxMk YmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ax1Cg7vY/Gf1sNOrTyQlQ7mgTN9aBq39lKY r1qqqdORS3xiVAUMg/4Ita5YOSW3Nn3EBllH4aO07U8MYibEL/6Zc7pfvRgnMGjQ RvFGNGrN8tMWBtB44JcM2qXikfzI4Ttg9lC+QDWqfaih+sQYH4LF3kRUA/nEQK98 BhMpvHA1gTiTzPs1yyJqDlShmE+VjmoQFtZSi3J7pZObnY8fRlmEO7zboSkqs/Fl k1xlj2ZgNBoStVP4IWHzvPVvnNj1qNVj8RKUxvC1e5zhbpj8iChRw43ETFp0IwNz WqbYnTCNTR8BYBOMr5a4QDe/l1vAXYOE00jsaDgkDun6/nXOiwIDAQABo4IEmjCC BJYwHQYDVR0OBBYEFF9k1UqQRhnL0QnZDtNp8XxGZTgyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i ZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2JkZDAxZmM0LWM2MDktNGM5NS05 N2M0LWJkNmFlZjU0OWRjMi9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1 NDlkYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgZgGCCsGAQUF BwEHAQH/BIGIMIGFMHQEAgABMG4DBAJAcOQDBAFFDBowDAMEAUpQ5gMEAUpQ6AME A2iBiAMEAmjA2AMEA2jh8AMEBY6awAMEBZ5qwAMEBaplAAMEA6xdCAMEA63N0AME AsBRiAMEAsci9AMEA9BAGAMEA9BQIAMEA9Gy0AMEBdiegDANBAIAAjAHAwUAJgY1 gDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAtXICAwD0dDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk9bTx 05/PgatnAi5LYDxSsmkV0vWVqdAYvousvWdPEwemLWEFOxE5K+yFO8UwkhjVy3ee oEnlN8pihUBvBXLybkpz4sgBwEtiXdfx9j9OXCllq1rvLhj2r/FOejClw+Jsj4p2 WMAhpg09+3Kr5xHB1QZRd2tbzwWrAQNdK/XA9P8crkvodfO6B8qoTPoKqve2o3Z4 kd7TTigciYyKCFWN297W1L/9Axga/CCdVHpUOYtpDhk2i1poIYHGNP0YXijtxGH+ 7ycm2pDvHE4bPWYoO4kfiiiLjPDG657WYQa4AmNm+yfACZHQ3ezjaZJrsICNaKiA ZyJcVBSGtzkk98zR -----END CERTIFICATE-----Generated at Sat Dec 6 08:39:17 2025 by rpki-client