This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/68af24ea-6995-3ed3-a4c8-41e846f96a7f.roa File: 68af24ea-6995-3ed3-a4c8-41e846f96a7f.roa (raw, json) Hash identifier: NeoYAIpnpQOYmRPJWqg0V92he6ApO1ONaHCyioHVmjE= Subject key identifier: EC:22:8B:86:D0:EF:8B:1A:20:2A:86:6F:02:68:DF:68:48:C1:C3:A8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848CDC7BA2C3E3DA3DAA4EE8F20 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/68af24ea-6995-3ed3-a4c8-41e846f96a7f.roa Signing time: Fri 07 Feb 2025 13:10:01 +0000 ROA not before: Fri 07 Feb 2025 13:10:01 +0000 ROA not after: Thu 08 May 2025 12:10:01 +0000 asID: 3356 IP address blocks: 20.133.8.0/21 maxlen: 21 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:c7:ba:2c:3e:3d:a3:da:a4:ee:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 7 13:10:01 2025 GMT Not After : May 8 12:10:01 2025 GMT Subject: CN=f41699b6-1d6b-4ad0-ae94-0fc61ec881bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:4b:4f:7a:1e:ab:0a:a2:0b:29:ba:5b:a9: 7e:56:85:43:1a:c4:f3:b9:4f:60:79:af:d9:72:0d: 45:f4:7a:33:8b:98:6e:67:6c:12:94:39:65:b7:be: c7:cf:21:0e:68:2d:b6:4a:ba:a0:2c:1a:85:27:a6: 0d:49:36:81:7c:e3:2d:1b:46:ae:e7:18:fd:69:8a: a7:80:b9:b4:ef:45:00:9c:7f:da:33:e4:ee:2b:82: 12:57:38:35:d8:de:d4:0a:5f:e8:0a:e5:a3:da:84: e2:bf:f6:2e:42:f6:a6:b2:8a:26:56:09:ee:31:cb: 8d:35:d8:b2:b5:41:62:9e:dc:5c:75:75:70:35:de: b1:1b:43:b9:d1:17:79:1a:d8:76:a2:0f:f5:d3:b2: ee:e9:81:c6:6e:2f:c6:7b:f3:1f:14:15:9b:e8:0f: c4:74:04:d7:41:70:f6:85:35:ba:16:a4:96:cc:f1: cc:98:5b:ec:2a:1b:94:c9:3f:04:11:19:3b:52:eb: 10:9c:32:55:07:5e:fb:8c:39:f0:d4:a6:a5:ab:fb: d7:73:40:53:18:47:f9:a2:e0:ff:64:72:f2:4e:86: 06:75:02:90:20:3f:24:1d:48:a6:89:d1:72:05:c1: bb:a7:23:3d:82:5c:c6:8e:03:c4:79:28:d7:25:2c: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:22:8B:86:D0:EF:8B:1A:20:2A:86:6F:02:68:DF:68:48:C1:C3:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/68af24ea-6995-3ed3-a4c8-41e846f96a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:22:0f:23:9e:f8:51:e1:3b:77:06:cb:9b:03:cf:2d:5e:02: 65:5d:8f:2d:14:46:c1:54:c0:7c:85:18:76:31:18:db:ed:ea: 4d:58:04:57:68:21:1a:14:80:15:bc:ef:29:31:99:62:36:d4: b9:8e:d2:ad:02:75:9a:b7:77:a3:17:d1:ac:1a:24:99:3f:9f: c1:a7:e4:16:ba:d9:8d:c0:0e:4a:30:51:33:ac:a3:60:82:2e: 86:56:2c:88:96:9d:33:cf:bc:9c:65:c3:3a:6b:1c:ba:38:58: d0:6b:66:ab:85:df:71:ef:5d:c1:91:9a:0d:fb:86:0a:13:b3: 85:64:cd:fb:fe:2d:34:5d:4c:13:14:e5:09:0d:51:f8:bc:5c: 8e:c1:3e:f2:21:5a:1a:fc:74:09:c7:26:67:23:b2:a0:16:6b: 53:ac:ae:f0:64:3c:5a:8d:95:68:8b:91:7b:7a:5a:1a:d6:17: 27:61:1a:4a:e7:ec:42:a2:e7:be:1e:8c:5a:10:c1:99:42:8b: dd:4d:cc:75:c1:d4:95:0c:de:61:c9:93:93:77:68:75:86:b1: 4e:6e:4b:62:b2:be:e2:53:23:b1:94:68:9f:e5:bf:4e:cd:a4: 48:86:eb:30:f2:ac:53:21:ea:20:3a:5c:05:61:4f:7f:88:30: 80:fb:1a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjNx7osPj2j2qTujyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIwNzEzMTAwMVoXDTI1MDUwODEyMTAwMVowLzEtMCsGA1UEAxMk ZjQxNjk5YjYtMWQ2Yi00YWQwLWFlOTQtMGZjNjFlYzg4MWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqRLT3oeqwqiCym6W6l+VoVDGsTzuU9gea/Z cg1F9Hozi5huZ2wSlDllt77HzyEOaC22SrqgLBqFJ6YNSTaBfOMtG0au5xj9aYqn gLm070UAnH/aM+TuK4ISVzg12N7UCl/oCuWj2oTiv/YuQvamsoomVgnuMcuNNdiy tUFintxcdXVwNd6xG0O50Rd5Gth2og/107Lu6YHGbi/Ge/MfFBWb6A/EdATXQXD2 hTW6FqSWzPHMmFvsKhuUyT8EERk7UusQnDJVB177jDnw1Kalq/vXc0BTGEf5ouD/ ZHLyToYGdQKQID8kHUimidFyBcG7pyM9glzGjgPEeSjXJSwYeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwii4bQ74saICqGbwJo32hIwcOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjhhZjI0ZWEtNjk5NS0z ZWQzLWE0YzgtNDFlODQ2Zjk2YTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0iDyOe+FHhO3cGy5sDzy1eAmVdjy0URsFUwHyFGHYxGNvt6k1YBFdo IRoUgBW87ykxmWI21LmO0q0CdZq3d6MX0awaJJk/n8Gn5Ba62Y3ADkowUTOso2CC LoZWLIiWnTPPvJxlwzprHLo4WNBrZquF33HvXcGRmg37hgoTs4Vkzfv+LTRdTBMU 5QkNUfi8XI7BPvIhWhr8dAnHJmcjsqAWa1OsrvBkPFqNlWiLkXt6WhrWFydhGkrn 7EKi574ejFoQwZlCi91NzHXB1JUM3mHJk5N3aHWGsU5uS2KyvuJTI7GUaJ/lv07N pEiG6zDyrFMh6iA6XAVhT3+IMID7GgI= -----END CERTIFICATE-----Generated at Thu Dec 25 05:17:24 2025 by rpki-client