This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer File: bfb32325-5962-452d-81bb-2eb68992a5df.cer (raw, json) Hash identifier: khNMjwFKI6lZSuOPPiL+P+79nWaAp5Tziad7has82dI= Subject key identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C1356850E926A8A83473A3460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Dec 2025 13:29:19 +0000 Certificate not after: Wed 08 Mar 2028 13:29:19 +0000 Subordinate resources: AS: 398076 IP: 2602:f4a8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:56:85:0e:92:6a:8a:83:47:3a:34:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 4 13:29:19 2025 GMT Not After : Mar 8 13:29:19 2028 GMT Subject: CN=bfb32325-5962-452d-81bb-2eb68992a5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:9b:d5:a6:52:a1:11:a1:b8:11:87:c2:78: d8:2d:64:98:6a:1f:7f:2e:68:71:6e:f0:aa:7b:51: ef:90:20:5e:37:79:d9:3b:33:8a:aa:85:b8:21:e4: d8:32:45:09:90:21:38:4f:5c:af:04:49:38:6a:94: 84:58:46:83:33:2d:60:d7:85:8c:4d:5b:e6:ce:8d: 3b:59:5e:2f:e0:d0:03:10:bf:e1:11:be:1d:5f:8b: b9:30:cf:c3:44:c8:cf:1c:02:0e:fe:44:09:5f:5c: 29:c6:93:65:6e:f3:ba:d6:fa:07:2c:ba:6b:83:aa: 22:0a:d6:b8:6b:7b:8e:be:ca:3d:a3:68:79:72:2a: 9b:9c:d4:cf:eb:28:24:5b:a7:05:d0:78:5a:f6:24: 89:de:d0:fb:fd:f2:90:55:e4:22:e6:39:13:59:b4: f0:1c:61:bd:47:44:6c:dc:75:a3:3e:58:a7:4f:12: 6f:c4:f7:0a:e6:f8:3f:62:89:f4:db:e4:d5:cd:1c: c5:ab:6d:a0:2c:6c:3d:20:fe:f0:6c:46:33:a3:94: 5a:61:b3:06:e7:5b:cb:cf:8c:81:71:9d:ab:ab:44: 35:f1:fa:78:7f:fe:6a:9a:18:0a:76:14:4f:00:ea: 99:41:14:da:57:0c:85:7c:e2:46:a2:88:0e:9a:a4: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4a8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398076 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:6b:cc:14:7b:98:09:b9:06:dc:66:ca:b1:0d:fe:7b:75:87: 4a:24:15:b7:cb:16:04:41:3d:85:64:e3:8d:3a:03:fa:20:a3: 5e:71:d4:89:52:14:fa:d1:c8:bc:c5:16:bd:d1:25:68:d8:2c: 63:6c:df:e3:49:4e:bd:f0:36:fd:d2:71:01:3e:b5:6e:5c:e1: a0:9c:8d:7a:3c:0e:7b:29:95:47:2a:2a:99:14:85:b0:29:65: 67:96:55:93:b5:ff:f0:37:a1:80:f1:7a:18:73:d3:ac:60:90: 55:b0:e2:d0:19:8a:3f:c5:16:c4:92:84:c8:09:ec:66:5b:55: c8:11:f5:c6:c1:b6:66:a8:11:96:d5:c3:2f:c4:87:74:18:ac: 66:01:25:c0:d7:3f:19:15:09:23:a9:87:9e:e3:e8:f2:a1:f9: ca:49:e7:61:fc:ef:4b:cf:34:9f:8a:37:f4:9b:c4:ef:f8:27: 51:60:86:6f:68:ab:c5:bd:81:1e:b8:61:80:62:4a:e7:d5:43: 3e:5e:c1:dc:21:7f:c5:4a:98:93:db:88:8b:69:36:d3:2f:9b: 49:b5:c9:23:bc:23:43:29:5c:a0:a5:1d:f9:3e:e6:6c:d9:e0: f7:34:16:21:29:3a:83:5e:93:c7:60:9c:4b:3e:de:f9:21:cd: 1a:c2:76:f4 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEwTVoUOkmqKg0c6NGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwNDEzMjkxOVoXDTI4MDMwODEzMjkxOVowLzEtMCsGA1UEAxMk YmZiMzIzMjUtNTk2Mi00NTJkLTgxYmItMmViNjg5OTJhNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggab1aZSoRGhuBGHwnjYLWSYah9/LmhxbvCq e1HvkCBeN3nZOzOKqoW4IeTYMkUJkCE4T1yvBEk4apSEWEaDMy1g14WMTVvmzo07 WV4v4NADEL/hEb4dX4u5MM/DRMjPHAIO/kQJX1wpxpNlbvO61voHLLprg6oiCta4 a3uOvso9o2h5ciqbnNTP6ygkW6cF0Hha9iSJ3tD7/fKQVeQi5jkTWbTwHGG9R0Rs 3HWjPlinTxJvxPcK5vg/Yon02+TVzRzFq22gLGw9IP7wbEYzo5RaYbMG51vLz4yB cZ2rq0Q18fp4f/5qmhgKdhRPAOqZQRTaVwyFfOJGoogOmqS/TQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFIwdwWP6hZ4BYFDwwIb/8vQ+OySyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i ZmIzMjMyNS01OTYyLTQ1MmQtODFiYi0yZWI2ODk5MmE1ZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2JmYjMyMzI1LTU5NjItNDUyZC04 MWJiLTJlYjY4OTkyYTVkZi9iZmIzMjMyNS01OTYyLTQ1MmQtODFiYi0yZWI2ODk5 MmE1ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvSoADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGEvwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAgGvMFHuYCbkG3GbKsQ3+e3WHSiQVt8sWBEE9hWTjjToD +iCjXnHUiVIU+tHIvMUWvdElaNgsY2zf40lOvfA2/dJxAT61blzhoJyNejwOeymV RyoqmRSFsCllZ5ZVk7X/8DehgPF6GHPTrGCQVbDi0BmKP8UWxJKEyAnsZltVyBH1 xsG2ZqgRltXDL8SHdBisZgElwNc/GRUJI6mHnuPo8qH5yknnYfzvS880n4o39JvE 7/gnUWCGb2irxb2BHrhhgGJK59VDPl7B3CF/xUqYk9uIi2k20y+bSbXJI7wjQylc oKUd+T7mbNng9zQWISk6g16Tx2CcSz7e+SHNGsJ29A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:09:06 2025 by rpki-client