This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3/4d8288b2-3103-33dc-b104-02975bd0c5ef.roa File: 4d8288b2-3103-33dc-b104-02975bd0c5ef.roa (raw, json) Hash identifier: GBl7LSSFaruB3udVsIxaet512B5uJ4lYJpqMGH+mz+Q= Subject key identifier: 02:E0:52:BF:21:7B:51:31:16:CC:C1:37:C8:51:82:19:F1:8F:AB:B4 Certificate issuer: /CN=8da8a7a4-5357-42a9-b624-843fb64e55b3 Certificate serial: 010D0C9F4328584C3B38E7A0F198E191AE9144C0 Authority key identifier: FE:19:CF:83:4A:0F:4A:6C:5B:8B:A7:FE:B3:0C:77:F5:5B:83:2A:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3/4d8288b2-3103-33dc-b104-02975bd0c5ef.roa Signing time: Thu 18 Dec 2025 20:21:59 +0000 ROA not before: Thu 18 Dec 2025 20:21:59 +0000 ROA not after: Wed 18 Mar 2026 19:21:59 +0000 asID: 20473 IP address blocks: 2620:a4:b040::/48 maxlen: 56 Validation: Failed, certificate revoked on Fri 19 Dec 2025 20:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:38:e7:a0:f1:98:e1:91:ae:91:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da8a7a4-5357-42a9-b624-843fb64e55b3 Validity Not Before: Dec 18 20:21:59 2025 GMT Not After : Mar 18 19:21:59 2026 GMT Subject: CN=48a3cbbe-3ff2-43e3-9a87-599f94aa6973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:e0:c9:29:a8:d9:d9:b4:c6:f4:94:4a:1b: ac:19:db:8d:53:0a:13:dd:ab:57:12:89:e3:35:bc: 11:44:88:42:46:c0:e0:da:68:96:bd:a6:44:49:4d: fc:5b:aa:34:62:db:37:b3:fc:28:56:b6:0b:09:30: b2:5d:62:2d:4e:e1:54:68:a5:f7:4a:f1:db:93:32: 7f:84:ad:e7:1b:56:35:ad:b4:88:61:fc:c4:42:e7: b2:d8:f5:6c:da:e6:c0:81:1d:0d:6a:fe:9a:44:da: 55:e9:42:75:64:bb:7e:12:52:cd:94:fb:93:68:31: 71:89:0a:2e:88:a6:3b:69:00:71:29:42:92:24:7a: 38:fc:45:b5:94:50:75:7c:ed:cd:bf:82:f5:8f:b7: bc:57:a2:9e:c6:fe:3c:39:40:21:9c:c6:2e:04:69: ff:41:b5:55:d5:c7:7c:b0:5f:96:31:b7:b3:44:c8: fb:ed:ea:37:bf:54:19:67:0e:08:d3:94:52:55:64: 58:00:e0:53:af:2e:c2:f9:1a:21:17:4d:83:c1:11: cf:d2:bb:c5:1b:4f:3e:f9:b4:d5:1b:76:7d:f1:c2: 20:d6:2a:47:09:68:bb:ea:a3:ce:e9:49:97:b4:c3: 99:ca:9e:61:ba:e6:3e:22:6d:d7:da:03:b2:cd:cb: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E0:52:BF:21:7B:51:31:16:CC:C1:37:C8:51:82:19:F1:8F:AB:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3/4d8288b2-3103-33dc-b104-02975bd0c5ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3/8da8a7a4-5357-42a9-b624-843fb64e55b3.crl X509v3 Authority Key Identifier: keyid:FE:19:CF:83:4A:0F:4A:6C:5B:8B:A7:FE:B3:0C:77:F5:5B:83:2A:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3.cer sbgp-ipAddrBlock: critical IPv6: 2620:a4:b040::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c3:b7:b7:76:6b:10:66:53:23:11:64:3b:9f:03:8e:03:f0: 65:fd:33:76:17:b9:a4:06:73:7b:e7:a7:b5:67:b3:70:1e:59: 7d:a9:e7:14:57:b4:96:5b:ae:97:6e:86:84:59:b4:f9:2d:be: ad:14:69:cf:06:9d:a8:44:44:63:76:8a:37:8a:85:ad:87:34: b0:a2:30:6b:b7:ec:32:01:0a:5d:8c:6b:b7:d0:90:2b:30:3e: 05:70:24:94:d8:d2:8b:56:40:69:d4:e5:90:02:9e:66:0e:0c: 14:5e:20:62:71:a5:2b:40:f2:68:47:4e:3d:d0:61:97:2d:89: 69:df:fa:ad:df:18:c7:96:1b:94:0a:cc:65:17:f8:c2:e5:67: ad:fe:6e:f5:9f:7d:9f:a9:77:99:0f:8c:1f:44:3f:e3:78:73: 85:b9:cf:d6:98:72:3d:44:16:51:b8:04:4e:84:90:2d:9d:1e: 20:e0:32:f8:38:9a:b0:49:bb:f9:3b:6d:81:a9:c6:09:55:f8: 8f:de:07:7c:50:0b:04:df:1c:44:f6:57:d5:d3:a2:85:b4:46: 6a:4e:88:21:3e:10:df:22:67:1d:4c:88:8e:9c:98:bb:d8:a8: 96:e4:d8:8d:d9:d4:2e:76:e5:01:88:1b:d0:1f:a2:6d:f5:27: 13:99:ff:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEw7OOeg8Zjhka6RRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRhOGE3YTQtNTM1Ny00MmE5LWI2MjQtODQzZmI2NGU1 NWIzMB4XDTI1MTIxODIwMjE1OVoXDTI2MDMxODE5MjE1OVowLzEtMCsGA1UEAxMk NDhhM2NiYmUtM2ZmMi00M2UzLTlhODctNTk5Zjk0YWE2OTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTfgySmo2dm0xvSUShusGduNUwoT3atXEonj NbwRRIhCRsDg2miWvaZESU38W6o0Yts3s/woVrYLCTCyXWItTuFUaKX3SvHbkzJ/ hK3nG1Y1rbSIYfzEQuey2PVs2ubAgR0Nav6aRNpV6UJ1ZLt+ElLNlPuTaDFxiQou iKY7aQBxKUKSJHo4/EW1lFB1fO3Nv4L1j7e8V6Kexv48OUAhnMYuBGn/QbVV1cd8 sF+WMbezRMj77eo3v1QZZw4I05RSVWRYAOBTry7C+RohF02DwRHP0rvFG08++bTV G3Z98cIg1ipHCWi76qPO6UmXtMOZyp5huuY+Im3X2gOyzcso5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFALgUr8he1ExFszBN8hRghnxj6u0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84ZGE4 YTdhNC01MzU3LTQyYTktYjYyNC04NDNmYjY0ZTU1YjMvNGQ4Mjg4YjItMzEwMy0z M2RjLWIxMDQtMDI5NzViZDBjNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGRhOGE3YTQtNTM1Ny00MmE5LWI2 MjQtODQzZmI2NGU1NWIzLzhkYThhN2E0LTUzNTctNDJhOS1iNjI0LTg0M2ZiNjRl NTViMy5jcmwwHwYDVR0jBBgwFoAU/hnPg0oPSmxbi6f+swx39VuDKvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84ZGE4YTdhNC01MzU3LTQyYTktYjYyNC04NDNm YjY0ZTU1YjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAApLBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJDDt7d2axBmUyMRZDufA44D8GX9M3YXuaQGc3vnp7Vns3AeWX2p 5xRXtJZbrpduhoRZtPktvq0Uac8GnahERGN2ijeKha2HNLCiMGu37DIBCl2Ma7fQ kCswPgVwJJTY0otWQGnU5ZACnmYODBReIGJxpStA8mhHTj3QYZctiWnf+q3fGMeW G5QKzGUX+MLlZ63+bvWffZ+pd5kPjB9EP+N4c4W5z9aYcj1EFlG4BE6EkC2dHiDg Mvg4mrBJu/k7bYGpxglV+I/eB3xQCwTfHET2V9XTooW0RmpOiCE+EN8iZx1MiI6c mLvYqJbk2I3Z1C525QGIG9Afom31JxOZ/1U= -----END CERTIFICATE-----Generated at Sat Dec 20 02:37:38 2025 by rpki-client