This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8f215309-e1de-3943-b907-99147e9af30d.roa File: 8f215309-e1de-3943-b907-99147e9af30d.roa (raw, json) Hash identifier: XHjfqWzFYZ4dkuFJ/zQQ047y5gSHc9/WrA05ibO2EgI= Subject key identifier: EE:4B:A0:27:90:0A:75:80:B3:58:1F:5C:5F:BE:3A:FD:37:E2:D6:6B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B5669245109E7B1A82E20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8f215309-e1de-3943-b907-99147e9af30d.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.23.48.0/21 maxlen: 21 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:56:69:24:51:09:e7:b1:a8:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=dae26c77-5e3b-43d9-85b9-9ad562ad8fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:98:02:d0:4b:68:52:11:22:1e:c4:5e:62:ff: cb:7a:b4:49:81:98:e8:ca:0a:8b:25:3a:11:64:d4: 3e:cd:ce:f0:a6:70:a8:f7:c9:b7:7f:fb:61:40:e6: c6:34:04:09:bf:3b:9f:b5:56:71:66:8a:30:ce:62: a2:70:33:a9:43:12:27:79:05:e5:41:91:5d:fd:41: 40:d9:42:de:b7:8f:51:48:6a:0e:39:d8:ad:2b:45: bf:46:ae:90:83:10:45:9d:aa:a6:92:23:27:fe:79: 3c:44:cd:53:78:ec:a4:0a:06:b1:17:01:93:9a:03: ca:f1:76:0f:59:89:66:d3:c1:cf:d9:09:69:ca:4c: 37:21:b8:36:1c:bc:1a:e5:de:40:52:1f:28:1a:90: d7:a6:43:c7:d8:67:07:62:8c:76:bb:d0:d5:ec:37: c8:eb:61:80:97:a7:d8:28:4e:e4:25:33:c3:65:c4: c6:43:4f:34:dc:de:16:9d:3a:1e:e9:db:60:c4:ac: 0c:f4:02:ba:74:ab:66:3d:a6:1b:6f:c7:6d:12:8c: 28:b2:d7:c1:51:75:d1:24:46:14:59:7d:4e:fb:2b: ce:83:0b:38:5f:19:b7:26:22:f1:24:a2:87:6d:d7: fb:2e:43:78:e8:cf:3c:d2:62:d8:66:07:96:40:35: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4B:A0:27:90:0A:75:80:B3:58:1F:5C:5F:BE:3A:FD:37:E2:D6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8f215309-e1de-3943-b907-99147e9af30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:89:90:21:0d:ff:62:4c:0b:6b:61:9c:2a:76:2e:ea:a9:18: 3b:c5:c5:5d:67:a6:97:f3:cf:bf:c0:e5:b6:f9:81:fb:46:7a: 6f:ad:04:a6:a3:93:70:ea:23:89:bb:30:11:71:e5:0f:8e:ea: b7:f3:e6:a9:66:23:27:30:f4:12:a7:6d:e8:bd:30:80:df:c9: 33:d8:49:6f:a9:af:34:25:48:7c:14:78:36:c5:e7:86:1e:7a: 1f:c9:f1:80:8b:00:ed:e8:dd:68:f1:8c:72:2a:9c:36:eb:e7: 61:8b:91:e1:7e:df:ee:01:43:6a:ca:71:58:f7:1b:a7:f0:9b: b9:9c:0d:75:50:10:88:86:1c:af:c2:14:13:27:bd:d3:f1:54: d9:2d:73:f1:39:57:ae:cd:f8:d9:57:9b:02:a6:68:a3:a5:65: b4:ff:21:6b:05:53:e3:05:ba:ef:17:3e:a7:44:88:46:f2:eb: 95:69:c0:d4:e1:5d:0c:79:d6:ea:06:38:97:b8:3f:56:1c:90: c3:08:61:38:15:c2:35:b2:9e:65:a9:08:12:40:80:f3:ee:e3: e5:2a:92:75:4a:25:bd:b1:8d:50:17:06:a0:31:de:cb:3a:cf: 07:83:ad:c5:55:9a:88:19:20:c4:2a:f6:b5:27:cf:dc:90:0a: fe:0e:23:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G1ZpJFEJ57GoLiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk ZGFlMjZjNzctNWUzYi00M2Q5LTg1YjktOWFkNTYyYWQ4ZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJgC0EtoUhEiHsReYv/LerRJgZjoygqLJToR ZNQ+zc7wpnCo98m3f/thQObGNAQJvzuftVZxZoowzmKicDOpQxIneQXlQZFd/UFA 2ULet49RSGoOOditK0W/Rq6QgxBFnaqmkiMn/nk8RM1TeOykCgaxFwGTmgPK8XYP WYlm08HP2Qlpykw3Ibg2HLwa5d5AUh8oGpDXpkPH2GcHYox2u9DV7DfI62GAl6fY KE7kJTPDZcTGQ0803N4WnToe6dtgxKwM9AK6dKtmPaYbb8dtEowostfBUXXRJEYU WX1O+yvOgws4Xxm3JiLxJKKHbdf7LkN46M880mLYZgeWQDVEuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5LoCeQCnWAs1gfXF++Ov034tZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGYyMTUzMDktZTFkZS0z OTQzLWI5MDctOTkxNDdlOWFmMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGJkCEN/2JMC2thnCp2LuqpGDvFxV1nppfzz7/A5bb5gftGem+tBKaj k3DqI4m7MBFx5Q+O6rfz5qlmIycw9BKnbei9MIDfyTPYSW+przQlSHwUeDbF54Ye eh/J8YCLAO3o3WjxjHIqnDbr52GLkeF+3+4BQ2rKcVj3G6fwm7mcDXVQEIiGHK/C FBMnvdPxVNktc/E5V67N+NlXmwKmaKOlZbT/IWsFU+MFuu8XPqdEiEby65VpwNTh XQx51uoGOJe4P1YckMMIYTgVwjWynmWpCBJAgPPu4+UqknVKJb2xjVAXBqAx3ss6 zweDrcVVmogZIMQq9rUnz9yQCv4OIwA= -----END CERTIFICATE-----Generated at Fri Dec 19 05:43:32 2025 by rpki-client