This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a23f8658-c1a5-3d91-b793-a08aa6dc77c2.roa File: a23f8658-c1a5-3d91-b793-a08aa6dc77c2.roa (raw, json) Hash identifier: 6+tjEDOVy/kwzKOYMLG5RpDm6MCF2EQTwY4xYNz/HOI= Subject key identifier: E7:FC:3A:79:CA:07:80:BC:39:2C:E4:DB:A7:5F:86:46:F7:97:A3:B1 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A167D4FCD07B4B0F2E4900 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a23f8658-c1a5-3d91-b793-a08aa6dc77c2.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 152.45.11.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:67:d4:fc:d0:7b:4b:0f:2e:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=3dd3d749-5441-422e-b6ce-e8155df617a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:d7:16:bc:34:51:ef:a4:7b:86:a0:dc:36: 4c:c8:a5:ef:78:76:3a:84:e9:02:ed:f8:1f:94:0a: b0:76:c4:05:a4:ab:98:7a:75:59:1c:59:4f:dd:8b: 85:ba:0a:a3:18:72:cd:7e:7b:65:b0:ec:3d:fb:cf: 41:62:a9:5f:12:4f:9e:dd:66:34:54:d6:73:25:81: 17:4b:19:57:c7:57:22:00:f9:f9:ab:10:d1:57:81: 47:bb:02:bc:61:82:af:97:9f:5a:5c:81:45:9b:ad: e4:41:1a:ad:fc:21:74:aa:3d:6e:73:9e:44:ec:28: a3:37:b3:c4:51:2a:ef:38:4c:20:93:77:ab:62:c9: ef:21:4c:10:8c:48:4f:f8:79:b5:af:91:ca:7c:52: 66:e6:98:71:c7:14:ae:5c:d0:d0:6c:58:62:1f:af: 11:0b:9d:94:43:51:4f:0b:df:54:54:22:8e:10:d3: 98:ce:91:a7:df:1e:61:20:aa:f2:84:3a:68:c3:a7: e3:a8:72:f4:ed:d6:3d:db:59:f4:98:24:ec:0a:6f: 9b:a6:8f:ba:54:2c:df:b9:38:1d:2d:71:fa:64:69: 76:4b:ba:86:0b:9d:39:df:5f:df:fe:af:27:38:ef: 8e:b6:79:6d:6a:a0:18:cc:17:d8:09:79:8f:6d:dc: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FC:3A:79:CA:07:80:BC:39:2C:E4:DB:A7:5F:86:46:F7:97:A3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a23f8658-c1a5-3d91-b793-a08aa6dc77c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:13:5a:3d:8d:64:da:f8:8a:75:02:dd:89:38:7e:c4:48:b7: 12:39:be:6b:93:cb:99:72:55:79:43:81:da:87:6c:ba:c7:12: d5:85:36:84:67:75:d0:cd:4a:8b:95:d5:82:45:9b:22:48:b0: 40:c6:3c:be:b7:79:3f:8c:fe:0c:00:e6:af:dc:79:7a:be:c7: 25:15:fe:e6:d2:90:6c:57:b0:ce:7c:2f:c8:73:7d:68:e9:4e: d9:a6:f1:74:15:7b:c9:88:01:7a:5a:14:63:7f:8b:84:08:fb: b4:d2:83:01:9f:72:08:c5:8b:b8:a0:14:d5:d0:a3:55:71:d3: cf:17:91:13:c7:00:16:26:4b:89:05:51:98:0f:a7:50:e7:3d: d4:66:35:68:bc:52:fb:b8:c8:29:07:e4:72:36:d6:b9:96:92: d7:a9:b3:8e:2f:2a:b3:4e:df:e2:cb:e5:1e:05:c1:0d:0a:86: ad:e2:ba:06:bc:95:e7:74:99:44:81:e3:dc:b6:f6:51:0d:43: 7c:ee:37:3e:8f:81:d2:f1:71:8a:5f:24:f4:de:39:79:5f:bb: c3:84:0e:dd:25:f8:cf:58:c0:98:bc:b8:96:c3:d1:01:1b:59: 57:42:bb:02:c5:7a:d2:24:45:0c:17:87:76:ea:94:63:dc:94: 22:a7:53:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWfU/NB7Sw8uSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk M2RkM2Q3NDktNTQ0MS00MjJlLWI2Y2UtZTgxNTVkZjYxN2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxLXFrw0Ue+ke4ag3DZMyKXveHY6hOkC7fgf lAqwdsQFpKuYenVZHFlP3YuFugqjGHLNfntlsOw9+89BYqlfEk+e3WY0VNZzJYEX SxlXx1ciAPn5qxDRV4FHuwK8YYKvl59aXIFFm63kQRqt/CF0qj1uc55E7CijN7PE USrvOEwgk3erYsnvIUwQjEhP+Hm1r5HKfFJm5phxxxSuXNDQbFhiH68RC52UQ1FP C99UVCKOENOYzpGn3x5hIKryhDpow6fjqHL07dY921n0mCTsCm+bpo+6VCzfuTgd LXH6ZGl2S7qGC50531/f/q8nOO+OtnltaqAYzBfYCXmPbdzKEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf8OnnKB4C8OSzk26dfhkb3l6OxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTIzZjg2NTgtYzFhNS0z ZDkxLWI3OTMtYTA4YWE2ZGM3N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHITWj2NZNr4inUC3Yk4fsRItxI5vmuTy5lyVXlDgdqHbLrHEtWFNoRn ddDNSouV1YJFmyJIsEDGPL63eT+M/gwA5q/ceXq+xyUV/ubSkGxXsM58L8hzfWjp Ttmm8XQVe8mIAXpaFGN/i4QI+7TSgwGfcgjFi7igFNXQo1Vx088XkRPHABYmS4kF UZgPp1DnPdRmNWi8Uvu4yCkH5HI21rmWkteps44vKrNO3+LL5R4FwQ0Khq3iuga8 led0mUSB49y29lENQ3zuNz6PgdLxcYpfJPTeOXlfu8OEDt0l+M9YwJi8uJbD0QEb WVdCuwLFetIkRQwXh3bqlGPclCKnU48= -----END CERTIFICATE-----Generated at Sun Dec 21 00:11:42 2025 by rpki-client