This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/ab1397b5-747c-31d8-926d-e9533d7dc81a.roa File: ab1397b5-747c-31d8-926d-e9533d7dc81a.roa (raw, json) Hash identifier: PW3OMxV+dv21b2eM//zfjktwoQyfweJTI819Btv8s7E= Subject key identifier: C9:96:90:CE:43:AE:93:52:99:11:71:83:1A:6A:F8:5F:72:3F:67:3D Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Certificate serial: 010D0C9F4328584B21CC3F35EA679B587F039140 Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/ab1397b5-747c-31d8-926d-e9533d7dc81a.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 8796 IP address blocks: 199.30.88.0/22 maxlen: 22 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3f:35:ea:67:9b:58:7f:03:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=ed3a702e-3d76-4ed5-96e7-bec2c0b20daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b1:66:8a:68:04:d7:09:18:98:70:bf:6c:f5: f8:f9:e0:91:fd:61:60:88:a5:25:d8:73:5d:be:38: 21:c3:31:7a:a3:bc:37:57:bf:c0:66:5b:c3:6c:39: 29:ae:a2:08:93:ba:f3:b4:44:9a:c5:08:25:8f:58: 3a:ae:bf:37:7e:4a:f3:12:8d:5c:d6:ca:60:8c:68: 31:01:30:99:3d:1f:27:66:cf:9c:94:4b:05:05:17: e3:83:96:3c:01:0d:30:6f:60:76:b5:db:4a:69:56: b5:14:52:1d:20:a4:e4:66:cd:2f:c1:1d:ef:10:b2: 96:5c:fd:c6:d0:4b:e4:62:a1:0a:12:c0:84:8b:14: bf:77:eb:86:d3:f0:f0:4e:75:ff:37:84:c3:d8:a6: 31:9c:10:06:79:7a:4e:18:ca:5e:d1:6e:b4:5c:b9: e7:8a:38:e6:1c:d1:d5:ab:9c:c7:24:38:12:a6:b5: 96:ca:71:71:a4:25:85:8d:6a:44:eb:4f:23:e6:ce: d1:2e:bc:8d:59:55:d1:33:c4:8b:aa:2b:7f:a5:3c: a7:fc:67:ae:c7:b7:6f:8c:bc:14:d3:97:cc:99:ec: b4:0f:c2:4c:72:fa:1c:54:97:31:07:cb:ad:d0:68: fd:30:0e:4c:9a:d0:6f:b6:8d:04:8c:36:36:4d:6e: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:96:90:CE:43:AE:93:52:99:11:71:83:1A:6A:F8:5F:72:3F:67:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/ab1397b5-747c-31d8-926d-e9533d7dc81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl X509v3 Authority Key Identifier: keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer sbgp-ipAddrBlock: critical IPv4: 199.30.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:93:15:56:6a:e8:a0:62:6c:72:bb:4d:28:5e:fe:2e:59:fa: bb:f4:f9:07:bb:6a:f1:69:a7:45:cb:3b:ce:bc:aa:fd:b8:07: f7:b4:72:15:17:28:8e:e8:ec:5c:f5:b0:a8:ca:e3:26:a6:84: 17:3f:fc:c9:81:02:60:4b:43:bc:0a:86:a2:c7:2a:a8:e4:47: 44:db:9e:6f:6d:0d:42:e0:e3:e4:74:d0:88:9e:5e:14:3d:f9: 54:73:ef:46:1e:7d:29:00:35:c5:6a:fb:81:f0:39:fb:b3:f3: 48:5d:91:2b:93:15:68:97:73:82:25:97:c0:7a:d7:fe:4f:49: 72:9b:a5:54:60:31:8b:e7:76:d1:9a:54:a5:53:22:33:f3:c7: 6c:b8:a5:f9:92:f8:ca:02:55:ab:29:14:08:35:2e:ca:36:84: 05:06:fc:4c:0a:4a:3b:36:a3:36:27:c9:71:c1:bd:96:d7:2a: 32:41:d1:e7:76:9b:77:c5:61:3a:04:9f:04:08:83:cc:43:9c: f3:a1:0b:e0:95:54:29:92:f3:4f:af:f6:15:f1:6b:bd:41:be: 37:89:fa:bf:57:5c:72:3e:2f:9b:c9:46:b0:af:80:08:b1:7d: d8:ca:f1:58:df:2f:b3:29:9a:5e:9f:64:e9:9f:1a:87:49:45: 4e:dc:3f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzD816mebWH8DkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA4MzBhNDEtNWI2ZS00Y2JkLWE1NGItYTMzNTBhYTAy ZTBhMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZWQzYTcwMmUtM2Q3Ni00ZWQ1LTk2ZTctYmVjMmMwYjIwZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrFmimgE1wkYmHC/bPX4+eCR/WFgiKUl2HNd vjghwzF6o7w3V7/AZlvDbDkprqIIk7rztESaxQglj1g6rr83fkrzEo1c1spgjGgx ATCZPR8nZs+clEsFBRfjg5Y8AQ0wb2B2tdtKaVa1FFIdIKTkZs0vwR3vELKWXP3G 0EvkYqEKEsCEixS/d+uG0/DwTnX/N4TD2KYxnBAGeXpOGMpe0W60XLnnijjmHNHV q5zHJDgSprWWynFxpCWFjWpE608j5s7RLryNWVXRM8SLqit/pTyn/Geux7dvjLwU 05fMmey0D8JMcvocVJcxB8ut0Gj9MA5MmtBvto0EjDY2TW45lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmWkM5DrpNSmRFxgxpq+F9yP2c9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDgz MGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1MGFhMDJlMGEvYWIxMzk3YjUtNzQ3Yy0z MWQ4LTkyNmQtZTk1MzNkN2RjODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4MzBhNDEtNWI2ZS00Y2JkLWE1 NGItYTMzNTBhYTAyZTBhL2YwODMwYTQxLTViNmUtNGNiZC1hNTRiLWEzMzUwYWEw MmUwYS5jcmwwHwYDVR0jBBgwFoAUvVKaIf1PkT7UKBeOvFvMzzV7WuEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDgzMGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1 MGFhMDJlMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeTFVZq6KBibHK7TShe/i5Z+rv0+Qe7avFpp0XLO868qv24B/e0chUX KI7o7Fz1sKjK4yamhBc//MmBAmBLQ7wKhqLHKqjkR0Tbnm9tDULg4+R00IieXhQ9 +VRz70YefSkANcVq+4HwOfuz80hdkSuTFWiXc4Ill8B61/5PSXKbpVRgMYvndtGa VKVTIjPzx2y4pfmS+MoCVaspFAg1Lso2hAUG/EwKSjs2ozYnyXHBvZbXKjJB0ed2 m3fFYToEnwQIg8xDnPOhC+CVVCmS80+v9hXxa71BvjeJ+r9XXHI+L5vJRrCvgAix fdjK8VjfL7Mpml6fZOmfGodJRU7cPzk= -----END CERTIFICATE-----Generated at Wed Dec 17 18:34:50 2025 by rpki-client