This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba4b0936-e523-3dd0-918c-499a41dc1c6e.roa File: ba4b0936-e523-3dd0-918c-499a41dc1c6e.roa (raw, json) Hash identifier: FB7MfL+43HCSM3fW6yNZfqGRKD8Ihk4a9BmEFxMZVAk= Subject key identifier: 98:D1:F2:68:6D:7D:F8:3A:BE:21:79:00:A8:81:C7:0F:B7:B0:2E:D8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A35E588921490FD190D17EB80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba4b0936-e523-3dd0-918c-499a41dc1c6e.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 7155 IP address blocks: 70.41.68.0/22 maxlen: 22 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:88:92:14:90:fd:19:0d:17:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=4399cb3a-78f7-4618-a8bd-455745715f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f8:c8:14:93:c8:7e:74:11:17:1a:4e:02:8d: ad:12:32:62:2b:84:0b:9d:c8:e2:60:68:36:20:1b: 96:4c:b2:57:09:63:8b:7f:36:fa:25:b1:47:9d:7d: 13:ec:dc:8d:84:ea:dc:c7:d5:a6:e6:c7:ab:7e:88: 5f:7d:26:a3:83:f0:59:55:26:49:e3:e0:e1:78:48: ba:1c:18:57:c2:f6:be:56:bf:da:da:58:cd:13:cf: 33:40:45:73:60:60:f4:37:f2:39:e7:20:a3:82:57: d6:98:db:9a:8b:d7:4e:19:6c:15:20:78:4f:82:29: 67:eb:3d:e1:5f:96:44:7f:09:4a:5f:12:3a:fc:8a: e9:c9:de:09:f0:9a:3a:3c:de:25:c2:7e:6b:bd:58: d9:04:86:ad:07:94:b8:cc:87:75:c9:fc:88:e6:7f: 80:db:1d:cf:e4:de:23:f9:cc:2b:85:50:02:77:ef: e4:26:61:8e:a0:4a:86:27:2d:21:26:15:51:d4:05: 2a:89:d0:6e:c1:da:e6:a4:72:e9:5d:8d:a1:39:ad: 25:29:9c:23:40:8a:c8:6d:c8:2a:19:3a:2d:3c:06: 67:b9:93:be:1b:ea:aa:b6:97:a8:28:01:cb:a1:dd: 07:29:1b:c6:1f:ca:5a:55:cf:c1:c0:0e:05:5c:0f: c7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D1:F2:68:6D:7D:F8:3A:BE:21:79:00:A8:81:C7:0F:B7:B0:2E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba4b0936-e523-3dd0-918c-499a41dc1c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3e:ef:82:3b:37:00:88:8c:3e:f9:f0:3b:7e:d2:34:70:99: 0e:49:09:9c:82:68:70:fa:60:82:ad:34:3b:20:3f:4a:58:ac: 67:ed:c8:29:ef:1b:a1:59:55:db:62:ea:47:ee:0e:17:4a:8a: d0:78:98:ee:b2:00:59:15:57:11:70:bf:30:b5:2c:5f:51:2d: 11:12:c6:e6:61:5c:a7:14:a3:8e:12:e1:93:80:e6:5d:ae:28: a1:9a:97:35:a4:b1:65:59:79:79:13:22:44:7d:4a:60:6f:0b: e9:0c:00:65:10:e1:65:21:a8:21:47:ca:0d:43:d6:c9:33:9d: 2b:c9:45:df:45:60:68:2f:9a:1d:9c:2b:2d:f9:b2:e5:d5:12: 70:85:94:2d:89:43:ad:a1:10:7f:de:05:92:e8:a2:43:33:a9: 20:bf:d0:68:43:77:3e:eb:9d:d5:12:d4:19:ac:79:bc:5d:ce: fd:c3:3a:6c:f9:f1:2d:05:0c:41:8d:f7:a7:5c:5c:46:68:5f: 79:30:55:62:3f:0b:b6:11:b1:73:9d:1e:e2:3d:a5:b0:86:2c: b8:30:e3:bc:d7:9d:be:ed:80:60:ab:a0:8b:7b:c9:86:de:34: 29:22:c7:a6:ab:0d:d8:9d:43:6c:25:bd:8c:12:c7:f3:6e:07: 2c:18:33:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15YiSFJD9GQ0X64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk NDM5OWNiM2EtNzhmNy00NjE4LWE4YmQtNDU1NzQ1NzE1ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvjIFJPIfnQRFxpOAo2tEjJiK4QLncjiYGg2 IBuWTLJXCWOLfzb6JbFHnX0T7NyNhOrcx9Wm5serfohffSajg/BZVSZJ4+DheEi6 HBhXwva+Vr/a2ljNE88zQEVzYGD0N/I55yCjglfWmNuai9dOGWwVIHhPgiln6z3h X5ZEfwlKXxI6/Irpyd4J8Jo6PN4lwn5rvVjZBIatB5S4zId1yfyI5n+A2x3P5N4j +cwrhVACd+/kJmGOoEqGJy0hJhVR1AUqidBuwdrmpHLpXY2hOa0lKZwjQIrIbcgq GTotPAZnuZO+G+qqtpeoKAHLod0HKRvGH8paVc/BwA4FXA/HvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjR8mhtffg6viF5AKiBxw+3sC7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmE0YjA5MzYtZTUyMy0z ZGQwLTkxOGMtNDk5YTQxZGMxYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRilEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM+74I7NwCIjD758Dt+0jRwmQ5JCZyCaHD6YIKtNDsgP0pYrGftyCnv G6FZVdti6kfuDhdKitB4mO6yAFkVVxFwvzC1LF9RLRESxuZhXKcUo44S4ZOA5l2u KKGalzWksWVZeXkTIkR9SmBvC+kMAGUQ4WUhqCFHyg1D1skznSvJRd9FYGgvmh2c Ky35suXVEnCFlC2JQ62hEH/eBZLookMzqSC/0GhDdz7rndUS1Bmsebxdzv3DOmz5 8S0FDEGN96dcXEZoX3kwVWI/C7YRsXOdHuI9pbCGLLgw47zXnb7tgGCroIt7yYbe NCkix6arDdidQ2wlvYwSx/NuBywYM4Y= -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:26 2025 by rpki-client