This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38.cer File: ba89a4c5-d662-4e9c-8467-d7f93161ba38.cer (raw, json) Hash identifier: yBstgcraAbkpFC1gdHkgyCA3/hbewXZgZzGnA/lj43s= Subject key identifier: 2A:8E:5E:86:39:C9:1A:14:55:FB:FA:63:74:3E:D3:96:D9:91:59:6F Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BB49B6DB34929825EBBDD8FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Oct 2025 15:06:22 +0000 Certificate not after: Thu 03 Feb 2028 16:06:22 +0000 Subordinate resources: AS: 30179 IP: 2602:f4e8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:9b:6d:b3:49:29:82:5e:bb:dd:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 31 15:06:22 2025 GMT Not After : Feb 3 16:06:22 2028 GMT Subject: CN=ba89a4c5-d662-4e9c-8467-d7f93161ba38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:82:b4:90:f8:c5:d7:2a:89:97:77:cb:4f:a2: c3:b0:52:7a:65:f1:f1:1e:5c:8e:55:28:23:55:30: 0e:16:90:70:eb:fd:89:f6:22:d9:9a:28:12:cd:99: b0:1b:53:19:b7:cb:79:32:aa:f1:e8:88:30:8e:2f: c5:2b:e9:3d:fb:b8:c2:ef:45:b9:58:45:44:c7:33: 09:cb:ef:0b:0e:ba:0a:20:4d:ce:d3:57:19:d3:a7: 61:86:9c:ab:45:79:e0:16:5c:46:64:88:d9:df:ed: ff:b9:e6:fa:b7:5c:89:e0:07:f5:3c:80:59:38:2c: fe:17:ac:9f:bc:9f:cb:47:87:cd:47:9f:6a:d1:59: f8:ce:7c:39:4a:90:d2:e9:65:f3:ef:ee:4d:3a:1b: 97:bb:c4:c0:a1:43:2b:56:23:b3:a4:24:41:2d:82: be:c4:1d:80:a2:f5:47:ef:62:03:63:f5:c4:d1:8e: be:f1:af:7c:aa:89:1c:bf:f1:e4:76:39:a0:ce:0c: 26:ed:f2:1b:39:9e:d1:10:75:2d:80:2a:1b:ef:96: 88:5f:da:d5:99:a5:47:2a:ad:59:11:10:de:ac:50: ee:6c:37:f6:71:e2:91:3a:86:e5:c8:89:fa:bc:58: 07:42:b0:8b:f8:2a:91:03:47:06:a6:a0:49:0e:e2: cf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8E:5E:86:39:C9:1A:14:55:FB:FA:63:74:3E:D3:96:D9:91:59:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4e8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30179 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b0:8d:a4:77:94:8c:c0:b8:4a:43:1d:22:7a:55:46:93:e6: 0d:cc:0e:3a:7c:e5:0d:31:2b:0d:3d:ce:92:40:f1:3f:ee:01: dc:99:2e:e4:2e:e9:e2:0b:34:98:69:aa:7c:e9:3b:42:1e:a9: 40:67:3b:42:47:95:68:05:26:fa:b3:0f:a0:61:e9:db:02:42: 3a:98:51:18:4e:93:40:26:30:2c:30:c8:95:71:2e:c4:34:6f: 2a:83:c0:3e:19:48:cb:79:0d:92:80:62:78:a5:96:df:d5:44: 20:bc:51:54:18:cc:88:d5:43:59:92:01:28:92:51:09:ff:37: 78:6d:b2:27:9f:00:4c:96:3c:da:e6:51:6b:f3:3d:ca:93:d9: e9:60:f2:2e:ba:36:58:46:70:37:83:d0:aa:43:5b:2d:dc:29: e1:43:1f:86:e7:3c:4f:97:9d:93:93:a3:2a:88:25:0b:de:a4: d7:cf:86:ab:b2:f5:c0:3c:80:92:62:ca:74:16:66:8f:bf:3a: 7e:54:a2:02:56:f0:74:20:60:c5:8f:14:37:26:cd:24:f1:6e: 06:f7:0f:a8:6f:c8:ae:d6:d9:1c:5b:7e:36:4f:7c:d0:2c:2c: 83:8f:89:0d:74:b7:5e:c4:63:a1:72:f4:80:ab:4f:07:94:c3: eb:85:05:3f -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEu0m22zSSmCXrvdj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAzMTE1MDYyMloXDTI4MDIwMzE2MDYyMlowLzEtMCsGA1UEAxMk YmE4OWE0YzUtZDY2Mi00ZTljLTg0NjctZDdmOTMxNjFiYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4K0kPjF1yqJl3fLT6LDsFJ6ZfHxHlyOVSgj VTAOFpBw6/2J9iLZmigSzZmwG1MZt8t5Mqrx6Igwji/FK+k9+7jC70W5WEVExzMJ y+8LDroKIE3O01cZ06dhhpyrRXngFlxGZIjZ3+3/ueb6t1yJ4Af1PIBZOCz+F6yf vJ/LR4fNR59q0Vn4znw5SpDS6WXz7+5NOhuXu8TAoUMrViOzpCRBLYK+xB2AovVH 72IDY/XE0Y6+8a98qokcv/Hkdjmgzgwm7fIbOZ7REHUtgCob75aIX9rVmaVHKq1Z ERDerFDubDf2ceKROoblyIn6vFgHQrCL+CqRA0cGpqBJDuLPUwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFCqOXoY5yRoUVfv6Y3Q+05bZkVlvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i YTg5YTRjNS1kNjYyLTRlOWMtODQ2Ny1kN2Y5MzE2MWJhMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2JhODlhNGM1LWQ2NjItNGU5Yy04 NDY3LWQ3ZjkzMTYxYmEzOC9iYTg5YTRjNS1kNjYyLTRlOWMtODQ2Ny1kN2Y5MzE2 MWJhMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvToADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJ14zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBisI2kd5SMwLhKQx0ielVGk+YNzA46fOUNMSsNPc6SQPE/ 7gHcmS7kLuniCzSYaap86TtCHqlAZztCR5VoBSb6sw+gYenbAkI6mFEYTpNAJjAs MMiVcS7ENG8qg8A+GUjLeQ2SgGJ4pZbf1UQgvFFUGMyI1UNZkgEoklEJ/zd4bbIn nwBMljza5lFr8z3Kk9npYPIuujZYRnA3g9CqQ1st3CnhQx+G5zxPl52Tk6MqiCUL 3qTXz4arsvXAPICSYsp0FmaPvzp+VKICVvB0IGDFjxQ3Js0k8W4G9w+ob8iu1tkc W342T3zQLCyDj4kNdLdexGOhcvSAq08HlMPrhQU/ -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:52 2025 by rpki-client