This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbaf6fa3-714c-3aae-bb9f-b49920e3e25f.roa File: cbaf6fa3-714c-3aae-bb9f-b49920e3e25f.roa (raw, json) Hash identifier: 20VtQ8lR0KN8JZbXgA8+Hz+7wMSqQWUSDalJ2Sek3+Y= Subject key identifier: D2:3B:5C:1F:FE:81:8D:7D:CE:F9:CB:AC:FA:68:C8:87:5B:06:D7:4F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584309FD631A3FB0674387BD9D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbaf6fa3-714c-3aae-bb9f-b49920e3e25f.roa Signing time: Sun 27 Aug 2023 12:00:00 +0000 ROA not before: Sun 27 Aug 2023 12:00:00 +0000 ROA not after: Thu 31 Oct 2024 04:00:00 +0000 asID: 396982 IP address blocks: 35.222.144.0/21 maxlen: 21 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:09:fd:63:1a:3f:b0:67:43:87:bd:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 27 12:00:00 2023 GMT Not After : Oct 31 04:00:00 2024 GMT Subject: CN=8cf407e6-8021-4e90-87d8-bd35b29e43e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:d1:94:61:94:fc:a6:e3:c5:52:8c:48:1e: ab:e8:2b:7a:64:82:77:0f:bc:dc:cf:ad:a6:51:8e: 88:01:70:9d:00:4e:29:6e:f2:b3:32:b3:7c:f0:1f: 4c:36:f3:80:de:7b:93:83:a1:56:5f:ad:6e:9d:36: b8:ba:45:d0:cc:b1:cb:84:94:e6:0b:6c:56:01:3d: d2:bb:60:8b:11:a0:29:d9:9b:e5:19:0a:59:64:d9: 4c:93:a5:39:9d:03:a7:f0:4f:30:57:a8:e6:5e:a7: 01:ba:aa:75:b5:d0:7c:16:67:d6:43:98:1d:08:be: 70:37:8c:25:ef:e8:a1:dd:8c:a6:eb:45:a8:28:78: 6c:7b:2e:85:71:cd:71:0f:f0:3c:8f:30:7b:18:0e: 0e:c8:64:5a:57:2c:3c:90:96:7b:44:6f:8e:bd:e6: f0:a5:c3:35:f7:76:5b:23:10:b9:64:5e:ee:8b:78: 51:04:8c:4b:61:f6:ac:45:b2:43:ca:67:a2:05:8c: f0:f0:9b:8d:d9:07:b2:0c:b0:4b:9a:f0:37:54:b1: 0e:82:fc:91:5a:83:1f:27:7a:dd:e3:6a:0d:ee:9b: ef:31:47:1d:ae:0a:0d:4b:55:3f:e9:ba:1c:f1:33: ca:3a:1d:67:f0:b4:b5:02:eb:80:50:62:ac:46:a3: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3B:5C:1F:FE:81:8D:7D:CE:F9:CB:AC:FA:68:C8:87:5B:06:D7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbaf6fa3-714c-3aae-bb9f-b49920e3e25f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:01:d9:11:b0:8c:da:17:a3:1e:59:76:67:d4:d0:fd:58:75: d0:49:21:98:05:f6:76:6f:2b:ae:6d:6d:4c:2c:32:d5:94:a5: 67:0b:ab:02:21:90:e0:80:32:f2:01:8d:66:e7:02:5f:3f:81: 9d:fb:38:87:87:b2:53:7e:35:30:55:44:5f:7d:5c:3d:38:ae: 51:cc:26:44:4a:56:0b:32:da:fd:41:ab:f2:66:b1:de:1b:7c: a0:5f:42:b7:57:2d:e2:f8:6e:7f:be:ce:94:f7:fd:d8:58:25: db:0e:2a:a3:56:ee:40:45:66:90:02:ee:c7:1f:08:a1:6b:88: 78:6a:2e:b6:33:75:8c:a9:c3:16:8e:d6:22:17:ce:b0:e5:56: 83:5a:c7:64:cc:1f:cf:c6:a0:5f:46:6f:e9:22:a9:b3:7d:26: 32:a8:37:b8:f6:d1:dd:26:76:a0:7c:25:51:a6:56:74:4f:40: 0e:d2:e3:ac:fb:61:83:d3:ff:72:5e:55:b7:a0:ab:ff:be:94: 23:36:ae:cb:a4:47:67:f9:17:d1:48:dc:e2:8c:61:a3:71:83: 95:1c:e9:7c:33:87:2e:3d:f5:ab:5e:72:6f:36:2d:f1:3b:52: be:f2:04:cf:e8:67:da:55:56:89:78:f4:72:17:a3:c2:b8:91: 3e:25:f6:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/WMaP7BnQ4e9nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk OGNmNDA3ZTYtODAyMS00ZTkwLTg3ZDgtYmQzNWIyOWU0M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLfRlGGU/KbjxVKMSB6r6Ct6ZIJ3D7zcz62m UY6IAXCdAE4pbvKzMrN88B9MNvOA3nuTg6FWX61unTa4ukXQzLHLhJTmC2xWAT3S u2CLEaAp2ZvlGQpZZNlMk6U5nQOn8E8wV6jmXqcBuqp1tdB8FmfWQ5gdCL5wN4wl 7+ih3Yym60WoKHhsey6Fcc1xD/A8jzB7GA4OyGRaVyw8kJZ7RG+OvebwpcM193Zb IxC5ZF7ui3hRBIxLYfasRbJDymeiBYzw8JuN2QeyDLBLmvA3VLEOgvyRWoMfJ3rd 42oN7pvvMUcdrgoNS1U/6boc8TPKOh1n8LS1AuuAUGKsRqPp4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI7XB/+gY19zvnLrPpoyIdbBtdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2JhZjZmYTMtNzE0Yy0z YWFlLWJiOWYtYjQ5OTIwZTNlMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwB2RGwjNoXox5ZdmfU0P1YddBJIZgF9nZvK65tbUwsMtWUpWcLqwIh kOCAMvIBjWbnAl8/gZ37OIeHslN+NTBVRF99XD04rlHMJkRKVgsy2v1Bq/Jmsd4b fKBfQrdXLeL4bn++zpT3/dhYJdsOKqNW7kBFZpAC7scfCKFriHhqLrYzdYypwxaO 1iIXzrDlVoNax2TMH8/GoF9Gb+kiqbN9JjKoN7j20d0mdqB8JVGmVnRPQA7S46z7 YYPT/3JeVbegq/++lCM2rsukR2f5F9FI3OKMYaNxg5Uc6Xwzhy499atecm82LfE7 Ur7yBM/oZ9pVVol49HIXo8K4kT4l9sc= -----END CERTIFICATE-----Generated at Mon Dec 15 13:20:40 2025 by rpki-client