This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa File: 33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa (raw, json) Hash identifier: X093Vu9fQC32zmXy7gpjskckGR6K4ieyUOLUT2hxfHk= Subject key identifier: 95:48:6E:ED:8C:39:6C:E8:76:0B:D3:53:AD:76:A0:19:29:9C:21:29 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584BDA2B0B6D618ECAEEADADEB60 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 49981 IP address blocks: 96.43.105.0/24 maxlen: 24 Validation: Failed, certificate revoked on Thu 27 Nov 2025 03:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2b:0b:6d:61:8e:ca:ee:ad:ad:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=c861a0bd-2798-437d-b587-d47db2304446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:11:60:41:3e:4c:9d:b4:d1:ed:87:91:28:2d: e4:36:af:49:71:ae:36:bf:31:ac:5b:95:b5:b6:ad: de:a5:c7:e2:34:fc:e1:5c:aa:b3:01:c2:a6:15:6f: bf:eb:e1:9a:b1:50:2f:1f:a3:ad:55:8c:ef:29:f5: 44:34:c7:c3:6e:11:01:f3:64:19:31:ae:60:6d:69: d9:7e:b3:d8:00:51:30:81:58:a4:18:76:a7:20:2c: aa:79:6e:fa:32:ed:5d:d4:6a:7c:75:a7:c7:d9:18: e1:a5:31:e0:05:84:80:0c:a7:56:b9:6f:e3:eb:a2: f5:5d:3a:61:11:be:ec:c2:53:6c:0b:7b:9c:d2:7b: 48:58:79:fe:d6:78:0d:46:81:f9:c1:25:fc:9a:f6: 12:b7:22:b4:07:c1:fe:39:e0:16:55:28:40:a9:a0: c8:59:22:75:4a:d0:66:b3:ed:61:b2:63:f0:46:c9: 04:fe:bc:14:f4:aa:66:26:56:51:7c:f4:2c:5f:60: 44:f5:cb:2c:e1:3f:91:97:80:09:02:c5:4f:59:65: 25:46:22:b2:4b:ee:2c:fd:b5:d1:d0:71:7e:88:b9: e3:6a:37:75:24:14:29:10:89:0d:d3:51:18:4f:3a: d4:4f:bc:c8:fd:cc:c3:55:ac:c5:3b:ec:98:32:3d: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:48:6E:ED:8C:39:6C:E8:76:0B:D3:53:AD:76:A0:19:29:9C:21:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c6:9e:c4:57:80:9d:0b:13:85:53:19:06:72:35:2b:51:5e: c7:72:a4:fa:40:9c:d3:d0:e5:02:00:1d:31:b2:c9:56:11:19: df:68:76:15:1a:99:41:e1:a3:80:cb:47:a3:12:0f:2e:ff:1b: 2e:2d:f9:2a:c4:bf:75:1d:04:0a:cb:fb:3e:1e:aa:2e:8e:e2: ef:ab:8e:44:1f:7f:61:cb:a4:f5:ff:17:07:72:44:21:bb:17: b6:61:a6:b3:5a:72:6f:89:13:89:42:21:a7:1e:49:73:45:a9: ad:bc:0e:15:81:68:7f:e7:1b:1a:1b:9d:c2:f3:17:38:00:82: e0:eb:7f:51:41:1f:b6:cc:85:a3:ab:89:c9:d2:ed:b4:35:f5: 42:51:37:71:f7:b1:d1:14:32:50:f5:57:ef:b9:29:1c:c6:15: 0c:00:fd:d4:3a:f3:3b:d8:af:45:32:b4:e5:cd:76:26:b7:a4: 3f:89:cc:d0:8a:ab:9d:21:2d:ce:c6:8c:e9:50:18:9c:52:47: 77:a2:9f:c5:26:a6:4c:5b:e6:e6:06:63:a3:0f:d5:5b:04:43: c3:20:fc:67:2f:5b:ef:3d:2f:5d:29:e1:3a:24:82:7b:d2:0f: 78:dd:bc:da:23:6d:af:7a:bb:6e:46:c0:47:68:eb:97:ac:54: 05:25:61:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvaKwttYY7K7q2t62AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk Yzg2MWEwYmQtMjc5OC00MzdkLWI1ODctZDQ3ZGIyMzA0NDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhFgQT5MnbTR7YeRKC3kNq9Jca42vzGsW5W1 tq3epcfiNPzhXKqzAcKmFW+/6+GasVAvH6OtVYzvKfVENMfDbhEB82QZMa5gbWnZ frPYAFEwgVikGHanICyqeW76Mu1d1Gp8dafH2RjhpTHgBYSADKdWuW/j66L1XTph Eb7swlNsC3uc0ntIWHn+1ngNRoH5wSX8mvYStyK0B8H+OeAWVShAqaDIWSJ1StBm s+1hsmPwRskE/rwU9KpmJlZRfPQsX2BE9css4T+Rl4AJAsVPWWUlRiKyS+4s/bXR 0HF+iLnjajd1JBQpEIkN01EYTzrUT7zI/czDVazFO+yYMj0dOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVIbu2MOWzodgvTU612oBkpnCEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMzNkYjJkOTUtMTA1NS0z NGJjLWJmNzQtNmI4MGVhOWI2YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnGnsRXgJ0LE4VTGQZyNStRXsdypPpAnNPQ5QIAHTGyyVYRGd9odhUa mUHho4DLR6MSDy7/Gy4t+SrEv3UdBArL+z4eqi6O4u+rjkQff2HLpPX/FwdyRCG7 F7ZhprNacm+JE4lCIaceSXNFqa28DhWBaH/nGxobncLzFzgAguDrf1FBH7bMhaOr icnS7bQ19UJRN3H3sdEUMlD1V++5KRzGFQwA/dQ68zvYr0UytOXNdia3pD+JzNCK q50hLc7GjOlQGJxSR3ein8Umpkxb5uYGY6MP1VsEQ8Mg/GcvW+89L10p4TokgnvS D3jdvNojba96u25GwEdo65esVAUlYbk= -----END CERTIFICATE-----Generated at Mon Dec 8 00:09:13 2025 by rpki-client