This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/a721cac8-deba-3761-be8a-ae47103ecdf1.roa File: a721cac8-deba-3761-be8a-ae47103ecdf1.roa (raw, json) Hash identifier: ZrL3DQjHtQmVYlXG5YeKyL7rQR13n8xIPQnE9i5uCeQ= Subject key identifier: 29:9D:A8:73:E5:22:DB:6E:7C:76:2E:83:12:AA:1B:6E:5B:27:BE:20 Certificate issuer: /CN=2b687897-0772-49b6-9e4b-0f6ffee30894 Certificate serial: 010D0C9F4328584C6E56476123A7C71F2B19A400 Authority key identifier: 82:30:1A:70:60:99:11:47:F7:EF:AA:08:20:03:78:79:AB:FA:E7:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/a721cac8-deba-3761-be8a-ae47103ecdf1.roa Signing time: Tue 06 Jan 2026 03:47:24 +0000 ROA not before: Tue 06 Jan 2026 03:47:24 +0000 ROA not after: Mon 06 Apr 2026 02:47:24 +0000 asID: 13335 IP address blocks: 64.25.240.0/21 maxlen: 21 64.25.248.0/22 maxlen: 22 Validation: Failed, certificate revoked on Wed 07 Jan 2026 04:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:56:47:61:23:a7:c7:1f:2b:19:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b687897-0772-49b6-9e4b-0f6ffee30894 Validity Not Before: Jan 6 03:47:24 2026 GMT Not After : Apr 6 02:47:24 2026 GMT Subject: CN=0752c9f3-512c-49f0-842b-7720e0ec58ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:a8:16:78:fc:09:84:2d:10:a7:f9:e9:78: 17:23:fb:99:9e:82:99:98:a1:23:51:91:97:68:f7: 20:98:46:47:00:3e:cc:5e:1f:e6:c0:6e:ee:dd:9f: cd:83:5c:6a:f5:2d:03:02:9c:d1:af:a9:c9:a4:80: 65:1b:9b:b9:5e:12:63:c3:a0:46:14:5b:58:27:f5: 51:66:96:36:21:cf:f1:45:95:7b:3f:c8:75:81:cd: 66:55:ce:09:22:12:fd:e0:c0:e5:0f:ed:ac:08:c2: bd:91:f7:c2:c6:6f:93:26:1f:4c:25:f8:0f:d1:82: 67:22:b5:57:2d:d2:79:45:45:fa:dd:95:0d:71:0a: 04:3f:1d:27:61:94:f5:b0:ea:63:a2:2b:60:6d:a8: aa:5b:f5:30:b0:56:b0:6a:83:30:1a:b9:37:06:d1: f9:03:51:fd:61:d1:63:8e:ee:b5:b3:e6:5b:2c:e4: 57:03:30:f7:2e:e0:ee:95:31:5c:d1:ae:58:ec:58: ca:4d:7d:72:58:44:41:9a:be:b8:31:61:b6:d5:ab: 51:4f:7a:eb:53:d2:14:c3:43:5f:b8:e6:be:f8:ba: e9:71:3b:d1:e7:48:16:3b:52:86:24:6c:ca:2b:d3: 38:ff:21:14:6f:21:db:cf:e4:4b:2b:b1:f1:3e:4e: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9D:A8:73:E5:22:DB:6E:7C:76:2E:83:12:AA:1B:6E:5B:27:BE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/a721cac8-deba-3761-be8a-ae47103ecdf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.crl X509v3 Authority Key Identifier: keyid:82:30:1A:70:60:99:11:47:F7:EF:AA:08:20:03:78:79:AB:FA:E7:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer sbgp-ipAddrBlock: critical IPv4: 64.25.240.0-64.25.251.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:82:3a:2e:d1:f1:c2:2f:90:e9:bd:9c:87:94:f3:b5:76:cb: 8d:57:91:d4:50:49:3e:7c:36:ac:80:58:46:30:e4:0a:a8:78: 66:8f:5a:c7:a5:10:8f:38:cb:32:1a:af:43:be:c1:b1:8c:a2: 32:5a:e6:75:ee:e4:4d:db:a3:2c:f5:5c:31:01:df:12:cc:cb: b3:46:6f:db:70:14:9b:63:a2:37:14:15:48:d2:5b:cf:ba:79: 26:f5:87:a2:7f:a5:60:21:51:f7:c6:31:ec:23:80:c3:48:16: 77:9f:84:48:b9:9d:8b:86:93:cc:57:44:3d:bd:cd:23:a4:97: 7c:64:ff:18:4b:f7:be:59:b5:0e:f6:ba:1b:65:bf:f0:dc:d2: 0f:71:fd:9c:7f:8e:b5:c6:26:6c:68:ea:34:65:67:06:ad:6e: a0:41:9f:9a:d9:52:dd:63:ba:b3:76:46:42:28:31:db:27:0a: 83:07:6a:33:85:e7:36:e1:b2:f3:ec:74:92:18:3d:b3:a2:66: a1:c3:0a:ac:66:54:50:32:c8:d3:0b:a8:7b:86:8d:6f:39:7f: 95:78:5c:0e:6a:91:8e:ef:8f:9e:45:b7:28:60:d9:35:60:1b: 31:78:79:98:1c:9f:39:7c:f6:aa:7b:eb:54:db:76:93:f4:4f: f5:08:d8:58 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWExuVkdhI6fHHysZpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI2ODc4OTctMDc3Mi00OWI2LTllNGItMGY2ZmZlZTMw ODk0MB4XDTI2MDEwNjAzNDcyNFoXDTI2MDQwNjAyNDcyNFowLzEtMCsGA1UEAxMk MDc1MmM5ZjMtNTEyYy00OWYwLTg0MmItNzcyMGUwZWM1OGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNqoFnj8CYQtEKf56XgXI/uZnoKZmKEjUZGX aPcgmEZHAD7MXh/mwG7u3Z/Ng1xq9S0DApzRr6nJpIBlG5u5XhJjw6BGFFtYJ/VR ZpY2Ic/xRZV7P8h1gc1mVc4JIhL94MDlD+2sCMK9kffCxm+TJh9MJfgP0YJnIrVX LdJ5RUX63ZUNcQoEPx0nYZT1sOpjoitgbaiqW/UwsFawaoMwGrk3BtH5A1H9YdFj ju61s+ZbLORXAzD3LuDulTFc0a5Y7FjKTX1yWERBmr64MWG21atRT3rrU9IUw0Nf uOa++LrpcTvR50gWO1KGJGzKK9M4/yEUbyHbz+RLK7HxPk66mwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCmdqHPlIttufHYugxKqG25bJ74gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjY4 Nzg5Ny0wNzcyLTQ5YjYtOWU0Yi0wZjZmZmVlMzA4OTQvYTcyMWNhYzgtZGViYS0z NzYxLWJlOGEtYWU0NzEwM2VjZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmI2ODc4OTctMDc3Mi00OWI2LTll NGItMGY2ZmZlZTMwODk0LzJiNjg3ODk3LTA3NzItNDliNi05ZTRiLTBmNmZmZWUz MDg5NC5jcmwwHwYDVR0jBBgwFoAUgjAacGCZEUf376oIIAN4eav65/IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjY4Nzg5Ny0wNzcyLTQ5YjYtOWU0Yi0wZjZm ZmVlMzA4OTQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARAGfAD BAJAGfgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEASYI6LtHxwi+Q6b2ch5TztXbLjVeR1FBJPnw2rIBYRjDk Cqh4Zo9ax6UQjzjLMhqvQ77BsYyiMlrmde7kTdujLPVcMQHfEszLs0Zv23AUm2Oi NxQVSNJbz7p5JvWHon+lYCFR98Yx7COAw0gWd5+ESLmdi4aTzFdEPb3NI6SXfGT/ GEv3vlm1Dva6G2W/8NzSD3H9nH+OtcYmbGjqNGVnBq1uoEGfmtlS3WO6s3ZGQigx 2ycKgwdqM4XnNuGy8+x0khg9s6JmocMKrGZUUDLI0wuoe4aNbzl/lXhcDmqRju+P nkW3KGDZNWAbMXh5mByfOXz2qnvrVNt2k/RP9QjYWA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:30:18 2026 by rpki-client