This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer File: bfb32325-5962-452d-81bb-2eb68992a5df.cer (raw, json) Hash identifier: NpofjefcKYsfcpxQciq+UDojzmY7egnNEILdRU2ngPw= Subject key identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C1F0ABEFDA35E7072000C9140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Dec 2025 18:06:21 +0000 Certificate not after: Wed 08 Mar 2028 13:29:19 +0000 Subordinate resources: AS: 398076 IP: 23.150.244.0/24 IP: 2602:f4a8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:0a:be:fd:a3:5e:70:72:00:0c:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 8 18:06:21 2025 GMT Not After : Mar 8 13:29:19 2028 GMT Subject: CN=bfb32325-5962-452d-81bb-2eb68992a5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:9b:d5:a6:52:a1:11:a1:b8:11:87:c2:78: d8:2d:64:98:6a:1f:7f:2e:68:71:6e:f0:aa:7b:51: ef:90:20:5e:37:79:d9:3b:33:8a:aa:85:b8:21:e4: d8:32:45:09:90:21:38:4f:5c:af:04:49:38:6a:94: 84:58:46:83:33:2d:60:d7:85:8c:4d:5b:e6:ce:8d: 3b:59:5e:2f:e0:d0:03:10:bf:e1:11:be:1d:5f:8b: b9:30:cf:c3:44:c8:cf:1c:02:0e:fe:44:09:5f:5c: 29:c6:93:65:6e:f3:ba:d6:fa:07:2c:ba:6b:83:aa: 22:0a:d6:b8:6b:7b:8e:be:ca:3d:a3:68:79:72:2a: 9b:9c:d4:cf:eb:28:24:5b:a7:05:d0:78:5a:f6:24: 89:de:d0:fb:fd:f2:90:55:e4:22:e6:39:13:59:b4: f0:1c:61:bd:47:44:6c:dc:75:a3:3e:58:a7:4f:12: 6f:c4:f7:0a:e6:f8:3f:62:89:f4:db:e4:d5:cd:1c: c5:ab:6d:a0:2c:6c:3d:20:fe:f0:6c:46:33:a3:94: 5a:61:b3:06:e7:5b:cb:cf:8c:81:71:9d:ab:ab:44: 35:f1:fa:78:7f:fe:6a:9a:18:0a:76:14:4f:00:ea: 99:41:14:da:57:0c:85:7c:e2:46:a2:88:0e:9a:a4: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.244.0/24 IPv6: 2602:f4a8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398076 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:01:2e:f5:1c:84:52:ee:63:d8:cb:a9:10:49:7c:f2:9b:79: 65:e0:e6:0f:d2:7b:ab:68:32:9e:fa:b4:77:80:6d:0f:fa:d9: ca:79:be:a5:75:cb:c8:36:d9:61:f9:69:17:e3:08:a7:4f:05: 4d:68:95:a8:63:2c:30:ec:81:41:b6:6f:de:1d:f2:9b:8f:4d: d2:93:9a:c5:9a:36:02:f0:c6:1e:f8:b5:f4:bc:a5:62:e1:b0: 9e:b0:34:41:b8:44:b8:1b:19:5c:52:c2:cf:ff:34:32:98:c7: cf:07:07:86:18:16:05:4a:37:f0:cb:c9:28:1f:85:c7:f5:e8: 96:70:ce:46:aa:c7:f2:56:a0:60:9f:0e:b3:5a:99:ef:a4:aa: 85:a5:f5:13:32:b1:85:5a:fd:8a:c7:51:4e:90:e4:a7:88:7a: 42:c3:52:b1:b8:15:49:c4:3a:3c:71:f5:b6:d7:dc:43:3d:13: 69:11:f8:c6:52:af:9f:b4:77:d9:0f:d0:bd:2b:44:66:88:dc: e9:6c:8d:b5:86:02:de:2a:dd:57:8c:1f:87:82:26:ae:21:aa: 21:12:8e:37:b2:b3:11:18:82:e0:ab:43:e3:10:05:7a:3a:ed: 9b:69:0a:75:ae:fd:b5:a5:ed:ce:bd:92:40:bc:89:7d:e3:82: 63:c8:a3:6c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEwfCr79o15wcgAMkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwODE4MDYyMVoXDTI4MDMwODEzMjkxOVowLzEtMCsGA1UEAxMk YmZiMzIzMjUtNTk2Mi00NTJkLTgxYmItMmViNjg5OTJhNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggab1aZSoRGhuBGHwnjYLWSYah9/LmhxbvCq e1HvkCBeN3nZOzOKqoW4IeTYMkUJkCE4T1yvBEk4apSEWEaDMy1g14WMTVvmzo07 WV4v4NADEL/hEb4dX4u5MM/DRMjPHAIO/kQJX1wpxpNlbvO61voHLLprg6oiCta4 a3uOvso9o2h5ciqbnNTP6ygkW6cF0Hha9iSJ3tD7/fKQVeQi5jkTWbTwHGG9R0Rs 3HWjPlinTxJvxPcK5vg/Yon02+TVzRzFq22gLGw9IP7wbEYzo5RaYbMG51vLz4yB cZ2rq0Q18fp4f/5qmhgKdhRPAOqZQRTaVwyFfOJGoogOmqS/TQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIwdwWP6hZ4BYFDwwIb/8vQ+OySyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i ZmIzMjMyNS01OTYyLTQ1MmQtODFiYi0yZWI2ODk5MmE1ZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2JmYjMyMzI1LTU5NjItNDUyZC04 MWJiLTJlYjY4OTkyYTVkZi9iZmIzMjMyNS01OTYyLTQ1MmQtODFiYi0yZWI2ODk5 MmE1ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlvQwDgQCAAIwCAMGBCYC9KgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYS/DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUAS71HIRS7mPYy6kQSXzym3ll 4OYP0nuraDKe+rR3gG0P+tnKeb6ldcvINtlh+WkX4winTwVNaJWoYyww7IFBtm/e HfKbj03Sk5rFmjYC8MYe+LX0vKVi4bCesDRBuES4GxlcUsLP/zQymMfPBweGGBYF Sjfwy8koH4XH9eiWcM5GqsfyVqBgnw6zWpnvpKqFpfUTMrGFWv2Kx1FOkOSniHpC w1KxuBVJxDo8cfW219xDPRNpEfjGUq+ftHfZD9C9K0RmiNzpbI21hgLeKt1XjB+H giauIaohEo43srMRGILgq0PjEAV6Ou2baQp1rv21pe3OvZJAvIl944JjyKNs -----END CERTIFICATE-----Generated at Fri Dec 19 19:08:58 2025 by rpki-client