This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/71fff2dc-22cd-35d8-96a0-0277bf6df80f.roa File: 71fff2dc-22cd-35d8-96a0-0277bf6df80f.roa (raw, json) Hash identifier: qloW+j7QwAE+MGsrR57HNgHx1lhRaNi27Sn+DjtbwRc= Subject key identifier: AB:2E:26:CF:EE:1D:FF:FB:B3:AC:54:FC:6B:72:B8:F7:5A:40:DD:8E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848CDCAEF7888C98D1CFD0DA5C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/71fff2dc-22cd-35d8-96a0-0277bf6df80f.roa Signing time: Fri 07 Feb 2025 13:16:29 +0000 ROA not before: Fri 07 Feb 2025 13:16:29 +0000 ROA not after: Thu 08 May 2025 12:16:29 +0000 asID: 3356 IP address blocks: 20.133.0.0/21 maxlen: 21 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:ca:ef:78:88:c9:8d:1c:fd:0d:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 7 13:16:29 2025 GMT Not After : May 8 12:16:29 2025 GMT Subject: CN=0d8fe4c3-e85f-4895-82ba-d583e27fdf6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:f3:d5:44:93:c5:f9:dd:35:41:83:b7:e6: 04:b3:13:c5:5b:a8:e8:ec:bd:5a:2c:12:7f:c4:55: de:da:58:cd:e3:19:97:b6:de:3f:ae:56:cf:e1:75: 6a:19:56:e1:54:6f:d0:29:1f:f9:f9:b5:7d:16:d9: 25:7c:b2:f7:64:5a:5c:26:92:9d:7a:c4:02:e2:ee: 1b:13:87:c8:b0:3d:c0:48:81:c0:b5:16:4a:71:5b: fa:73:e9:c2:e1:1f:5c:60:b3:05:7b:9c:0b:65:fa: 33:a9:61:f5:84:a4:5b:94:4b:18:46:3c:96:04:d3: 1a:4d:13:97:0c:88:89:8a:4e:76:42:67:3f:0e:53: 6d:97:04:c4:37:26:e6:62:88:4f:f7:0b:fc:fd:88: 07:ef:da:29:4e:a1:f4:2c:17:ff:ca:5c:8e:33:5c: 3a:c1:76:9b:7d:68:36:29:1b:33:c1:5c:65:59:47: 54:a7:96:9e:00:a0:9d:5d:92:12:0a:af:ec:a9:95: 85:22:34:ae:ae:b4:4c:c1:dc:dd:ec:2b:24:7d:80: 17:59:3d:5e:2d:35:02:34:fd:9e:33:db:af:b3:80: 75:ec:ae:fc:b0:c4:2d:7e:8c:25:75:c6:0f:45:9f: da:dd:49:ba:7c:30:1d:3b:c8:db:de:17:56:ef:2d: 8f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2E:26:CF:EE:1D:FF:FB:B3:AC:54:FC:6B:72:B8:F7:5A:40:DD:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/71fff2dc-22cd-35d8-96a0-0277bf6df80f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:34:e2:c0:d3:03:6f:94:79:49:23:6f:48:a5:dd:62:59:ea: 14:82:9c:1c:5d:c3:e2:26:3e:ee:90:77:43:ef:24:95:ee:7b: 2c:da:93:82:79:8f:6e:7e:75:7d:c0:9d:c9:79:f9:b8:0f:88: 28:9c:17:50:73:de:14:70:98:9e:ff:d3:c3:51:ce:98:33:7d: ce:74:c5:d8:ae:eb:4b:76:61:79:ad:bf:2d:99:87:18:48:d0: bc:aa:c7:ff:65:5f:b3:38:57:f6:60:fc:f7:cf:68:ba:0f:02: 56:f2:80:a6:a7:bd:ab:a2:0e:f0:90:b6:0a:b7:71:e4:e5:24: 1b:7f:f2:d1:8b:b8:79:0f:c7:bb:50:3e:08:f5:53:34:8c:5b: 81:82:95:2c:c3:11:fc:f3:f0:00:d5:5a:99:30:be:0c:70:3b: 8b:ac:05:7c:60:19:8d:3d:b1:7b:df:b8:5d:5c:36:3f:1e:4b: 08:84:85:d4:c9:f4:53:86:93:47:c4:e7:1f:f6:86:5d:46:a5: fe:b7:92:f6:60:44:f0:a1:25:3e:66:2c:4c:b3:c9:c4:cc:a2: 85:8e:70:37:91:f3:86:c0:73:ea:b7:53:7e:61:fd:4c:b7:39: a2:68:bc:11:c1:2a:d3:23:71:6e:81:63:66:24:d4:a5:c1:bd: 8b:a1:a7:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjNyu94iMmNHP0NpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIwNzEzMTYyOVoXDTI1MDUwODEyMTYyOVowLzEtMCsGA1UEAxMk MGQ4ZmU0YzMtZTg1Zi00ODk1LTgyYmEtZDU4M2UyN2ZkZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuLz1USTxfndNUGDt+YEsxPFW6jo7L1aLBJ/ xFXe2ljN4xmXtt4/rlbP4XVqGVbhVG/QKR/5+bV9FtklfLL3ZFpcJpKdesQC4u4b E4fIsD3ASIHAtRZKcVv6c+nC4R9cYLMFe5wLZfozqWH1hKRblEsYRjyWBNMaTROX DIiJik52Qmc/DlNtlwTENybmYohP9wv8/YgH79opTqH0LBf/ylyOM1w6wXabfWg2 KRszwVxlWUdUp5aeAKCdXZISCq/sqZWFIjSurrRMwdzd7CskfYAXWT1eLTUCNP2e M9uvs4B17K78sMQtfowldcYPRZ/a3Um6fDAdO8jb3hdW7y2PxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsuJs/uHf/7s6xU/GtyuPdaQN2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzFmZmYyZGMtMjJjZC0z NWQ4LTk2YTAtMDI3N2JmNmRmODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI04sDTA2+UeUkjb0il3WJZ6hSCnBxdw+ImPu6Qd0PvJJXueyzak4J5 j25+dX3Ancl5+bgPiCicF1Bz3hRwmJ7/08NRzpgzfc50xdiu60t2YXmtvy2ZhxhI 0Lyqx/9lX7M4V/Zg/PfPaLoPAlbygKanvauiDvCQtgq3ceTlJBt/8tGLuHkPx7tQ Pgj1UzSMW4GClSzDEfzz8ADVWpkwvgxwO4usBXxgGY09sXvfuF1cNj8eSwiEhdTJ 9FOGk0fE5x/2hl1Gpf63kvZgRPChJT5mLEyzycTMooWOcDeR84bAc+q3U35h/Uy3 OaJovBHBKtMjcW6BY2Yk1KXBvYuhpyI= -----END CERTIFICATE-----Generated at Fri Dec 26 07:51:30 2025 by rpki-client