This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/fbff6a61-554c-33f6-b7b9-ba39c39e0c6f.roa File: fbff6a61-554c-33f6-b7b9-ba39c39e0c6f.roa (raw, json) Hash identifier: c+ADznqoLQMzAAz/jrQDR9wGEvOb6upPbTQzZPM2VD0= Subject key identifier: 52:86:12:61:3A:99:37:02:BA:31:74:5E:FF:54:06:5E:46:13:E8:CC Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F43285849912F2EF3CAC97722A9E71C80 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/fbff6a61-554c-33f6-b7b9-ba39c39e0c6f.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 834 IP address blocks: 162.255.152.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2e:f3:ca:c9:77:22:a9:e7:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=b6e64dbc-5e16-49d0-af32-0384d0350eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b8:8f:e7:62:56:f0:b4:b1:47:0f:a8:be:df: 92:fe:ed:5a:8e:38:67:1b:ef:ea:cf:ed:ca:f5:eb: 6d:c5:10:2e:eb:22:68:8c:6e:ea:82:49:b2:7e:7b: 5f:bc:cc:5c:70:f6:36:e6:f3:1e:92:52:aa:95:b2: 2d:46:5c:fc:e7:f8:30:03:b5:06:3a:e8:50:e9:0c: e6:42:64:bf:99:b8:2a:22:3d:ed:4e:9d:8d:bf:bb: 3a:43:d9:c0:5e:f9:0f:1e:df:42:fb:02:d7:05:85: 1a:4e:cc:56:35:a8:e2:3f:18:45:02:3e:e9:91:93: f0:9f:60:74:12:73:80:38:49:4d:ca:8b:e9:85:06: 52:49:60:1d:8c:27:ee:44:4d:01:0f:47:c2:b0:67: 22:41:d2:4f:5b:b6:59:53:93:ad:ba:39:3d:fa:ac: 1c:3a:ac:0d:14:8c:c5:c7:83:66:bf:7a:a2:f1:4f: 6e:f9:2f:e3:ce:21:ca:35:e3:8a:2e:cd:08:e6:ef: 89:6a:b2:a3:e2:84:fa:cd:bf:7a:0c:1c:ab:49:f2: 67:8e:67:da:6d:dc:c0:92:06:26:16:20:5d:4a:f8: 60:0a:df:86:4d:95:bf:fb:37:7f:1e:ae:61:66:a0: c9:24:5a:ec:7e:ed:2e:c6:9e:3c:45:31:c4:7d:65: 80:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:86:12:61:3A:99:37:02:BA:31:74:5E:FF:54:06:5E:46:13:E8:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/fbff6a61-554c-33f6-b7b9-ba39c39e0c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.255.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:35:4b:95:dd:43:83:1f:d0:e2:9b:5b:c1:64:2d:b3:07:8a: 2a:b4:ce:08:38:2b:8c:4b:ee:94:d5:c7:64:29:78:00:cf:38: 68:d7:e7:46:11:90:37:36:bc:da:77:48:a3:95:41:e9:6c:f4: dc:3b:0e:a3:a2:9f:e2:99:c4:b2:b7:54:68:3a:93:1f:0b:96: 81:67:ea:68:b6:31:14:4f:ed:0f:d0:52:d9:09:dc:fd:ff:cc: 27:62:0e:f6:de:6d:fc:b4:82:72:84:b9:7a:9d:ed:be:ff:cb: 97:2c:e3:74:a6:e0:23:b0:0d:30:44:34:1c:59:ff:b7:36:4b: 35:75:a8:bd:f1:7f:f2:ac:50:46:53:db:e4:e0:0a:cb:7d:c9: 96:5a:29:f6:40:2d:e6:f2:5e:b6:cf:02:ba:87:04:74:ad:9a: bc:e7:3b:1b:6a:24:dd:a4:62:f2:a9:56:22:9f:37:66:0d:61: 45:77:a8:0e:0e:6f:4d:81:35:72:da:6d:f6:87:3a:33:a6:53: ef:64:4f:61:38:ab:53:ba:9f:50:72:b0:b8:a7:94:ef:07:12: 99:16:19:5f:16:89:01:5f:78:5b:03:c3:40:0b:c4:d7:0b:d3: b8:b9:ff:bc:62:92:5a:e8:a9:2a:58:17:26:5b:3a:5f:01:b3: 94:ca:f9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLy7zysl3IqnnHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk YjZlNjRkYmMtNWUxNi00OWQwLWFmMzItMDM4NGQwMzUwZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6riP52JW8LSxRw+ovt+S/u1ajjhnG+/qz+3K 9ettxRAu6yJojG7qgkmyfntfvMxccPY25vMeklKqlbItRlz85/gwA7UGOuhQ6Qzm QmS/mbgqIj3tTp2Nv7s6Q9nAXvkPHt9C+wLXBYUaTsxWNajiPxhFAj7pkZPwn2B0 EnOAOElNyovphQZSSWAdjCfuRE0BD0fCsGciQdJPW7ZZU5Otujk9+qwcOqwNFIzF x4Nmv3qi8U9u+S/jziHKNeOKLs0I5u+JarKj4oT6zb96DByrSfJnjmfabdzAkgYm FiBdSvhgCt+GTZW/+zd/Hq5hZqDJJFrsfu0uxp48RTHEfWWAVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKGEmE6mTcCujF0Xv9UBl5GE+jMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZmJmZjZhNjEtNTU0Yy0z M2Y2LWI3YjktYmEzOWMzOWUwYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB41S5XdQ4Mf0OKbW8FkLbMHiiq0zgg4K4xL7pTVx2QpeADPOGjX50YR kDc2vNp3SKOVQels9Nw7DqOin+KZxLK3VGg6kx8LloFn6mi2MRRP7Q/QUtkJ3P3/ zCdiDvbebfy0gnKEuXqd7b7/y5cs43Sm4COwDTBENBxZ/7c2SzV1qL3xf/KsUEZT 2+TgCst9yZZaKfZALebyXrbPArqHBHStmrznOxtqJN2kYvKpViKfN2YNYUV3qA4O b02BNXLabfaHOjOmU+9kT2E4q1O6n1BysLinlO8HEpkWGV8WiQFfeFsDw0ALxNcL 07i5/7xiklroqSpYFyZbOl8Bs5TK+WE= -----END CERTIFICATE-----Generated at Thu Dec 25 00:58:35 2025 by rpki-client