This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbdd8c76-2aa8-3692-9527-a0383effbae9.roa File: cbdd8c76-2aa8-3692-9527-a0383effbae9.roa (raw, json) Hash identifier: Fe7al5SWu6bun5AQys25BI3ihnSnZfrcNc6uDfX81RM= Subject key identifier: 88:17:15:C7:15:26:A1:60:C7:5D:46:6D:B2:0D:E7:34:FA:93:27:C7 Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc Certificate serial: 010D0C9F432858401DD2DBE3874BF1C63A326B80 Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbdd8c76-2aa8-3692-9527-a0383effbae9.roa Signing time: Fri 02 Dec 2022 12:00:00 +0000 ROA not before: Fri 02 Dec 2022 12:00:00 +0000 ROA not after: Sat 07 Jan 2023 05:00:00 +0000 asID: 16509 IP address blocks: 170.58.0.0/16 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:40:1d:d2:db:e3:87:4b:f1:c6:3a:32:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc Validity Not Before: Dec 2 12:00:00 2022 GMT Not After : Jan 7 05:00:00 2023 GMT Subject: CN=9b25fc10-72b9-458a-9ada-1039a4a67455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:9d:d2:89:b3:b3:08:d5:10:9c:9e:67:3d: 18:65:29:6b:63:57:e1:e6:ae:02:66:06:bc:0f:43: 93:4f:d6:c5:a7:b4:8e:66:7f:7b:ae:0c:37:d4:ac: 07:c9:6b:a7:82:c2:fb:cf:fc:58:df:1f:81:93:44: 18:7f:9e:50:45:80:0b:61:73:ba:3f:b8:7e:ff:10: 2a:4d:dc:76:30:de:be:a4:e2:6a:f3:93:e2:7e:ff: bd:fb:ea:4e:70:ea:4c:ca:29:33:6c:f5:44:f4:72: 39:05:6f:49:fa:4d:c1:de:d8:4d:26:6a:0b:16:61: e6:66:29:70:f0:48:ce:e8:83:b5:cd:dd:9a:99:8e: 8c:65:7e:05:1f:1f:d7:49:54:74:e2:b1:92:8a:d5: 9b:c4:40:7c:42:3f:e7:44:76:86:72:bd:71:63:1c: a2:07:de:eb:39:28:f8:96:db:1b:87:75:df:98:72: 58:d0:e5:66:a8:a4:d2:78:24:1e:a8:a5:27:5c:d4: d0:6d:e4:b3:48:1d:f7:da:ee:17:e1:ce:4d:9f:d2: ac:14:0c:2b:5d:60:bd:25:32:3d:af:a2:10:4e:31: 77:a2:2e:41:77:ba:0c:1c:12:74:4b:9b:25:b8:6d: 88:e2:25:4d:c3:3b:6d:bc:8c:c3:ce:b4:a7:5b:e5: 37:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:17:15:C7:15:26:A1:60:C7:5D:46:6D:B2:0D:E7:34:FA:93:27:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbdd8c76-2aa8-3692-9527-a0383effbae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl X509v3 Authority Key Identifier: keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer sbgp-ipAddrBlock: critical IPv4: 170.58.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:0d:0e:4a:ef:b4:ae:de:44:f2:d7:ff:83:83:30:f0:e8:81: f6:54:5a:12:5b:9b:91:bd:ce:f3:57:e8:f9:bf:2f:ff:d3:07: 98:bb:22:d7:e1:6d:fe:42:06:f9:3a:5b:34:40:f9:f2:eb:34: d7:12:e4:bc:d5:13:d7:16:d4:0f:da:c3:dd:23:fb:3f:0f:72: ea:fe:25:dd:a2:64:72:7a:21:3e:1d:e4:57:fb:80:fc:a2:90: b4:b4:f0:45:08:09:f1:88:31:3e:aa:d3:66:40:03:d4:be:14: 97:ee:1f:10:81:3d:93:d6:48:13:11:3a:73:73:25:05:94:38: ac:3c:08:b4:79:85:aa:a2:b5:d7:a4:91:f7:b2:fa:1c:7a:2b: 7e:8f:1d:07:78:73:63:8e:30:21:fe:3d:19:17:5c:5f:79:1f: 96:d4:57:b7:2e:e1:ea:91:7e:09:89:88:c7:08:2a:c8:23:4a: aa:f0:d1:7e:9a:7a:44:5b:d1:c3:c1:47:e0:d9:fd:ed:4f:31: 7d:e9:77:a8:9e:b0:15:19:cd:f4:c8:42:bd:b2:0c:d9:aa:af: 56:32:f8:ad:4d:e2:d4:75:db:58:62:b7:94:49:a0:c7:65:b3: 8f:0d:26:d8:17:99:b3:4e:9c:34:cd:a5:f7:76:a3:c4:4c:d7: 1a:4f:1a:4c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAd0tvjh0vxxjoya4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0 NWZjMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk OWIyNWZjMTAtNzJiOS00NThhLTlhZGEtMTAzOWE0YTY3NDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4yd0omzswjVEJyeZz0YZSlrY1fh5q4CZga8 D0OTT9bFp7SOZn97rgw31KwHyWungsL7z/xY3x+Bk0QYf55QRYALYXO6P7h+/xAq Tdx2MN6+pOJq85Pifv+9++pOcOpMyikzbPVE9HI5BW9J+k3B3thNJmoLFmHmZilw 8EjO6IO1zd2amY6MZX4FHx/XSVR04rGSitWbxEB8Qj/nRHaGcr1xYxyiB97rOSj4 ltsbh3XfmHJY0OVmqKTSeCQeqKUnXNTQbeSzSB332u4X4c5Nn9KsFAwrXWC9JTI9 r6IQTjF3oi5Bd7oMHBJ0S5sluG2I4iVNwzttvIzDzrSnW+U3tQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIgXFccVJqFgx11GbbIN5zT6kyfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2JkZDhjNzYtMmFhOC0z NjkyLTk1MjctYTAzODNlZmZiYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqjowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmw0OSu+0rt5E8tf/g4Mw8OiB9lRaElubkb3O81fo+b8v/9MHmLsi1+Ft /kIG+TpbNED58us01xLkvNUT1xbUD9rD3SP7Pw9y6v4l3aJkcnohPh3kV/uA/KKQ tLTwRQgJ8YgxPqrTZkAD1L4Ul+4fEIE9k9ZIExE6c3MlBZQ4rDwItHmFqqK116SR 97L6HHorfo8dB3hzY44wIf49GRdcX3kfltRXty7h6pF+CYmIxwgqyCNKqvDRfpp6 RFvRw8FH4Nn97U8xfel3qJ6wFRnN9MhCvbIM2aqvVjL4rU3i1HXbWGK3lEmgx2Wz jw0m2BeZs06cNM2l93ajxEzXGk8aTA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:05:36 2025 by rpki-client