This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac30b313-cfe9-33e4-9f76-6627db129217.roa File: ac30b313-cfe9-33e4-9f76-6627db129217.roa (raw, json) Hash identifier: QHHmO1jXXM/C1+lX4Ux7t+IOq3jfmHVr3AkgkvDW2E0= Subject key identifier: 89:DC:34:19:09:85:69:1A:BF:5B:51:F3:6C:1D:4D:D9:F7:CC:B2:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7397004F9B3B96D86DC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac30b313-cfe9-33e4-9f76-6627db129217.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.217.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:39:70:04:f9:b3:b9:6d:86:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1fb1aaec-6435-4a12-b0f6-6d72582fada1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:c5:9a:8d:91:90:fd:8c:db:c9:80:2d:c6: 30:93:2a:53:8c:27:b3:d0:60:f4:b7:a4:17:26:28: fc:84:96:a1:e4:d6:93:e8:ff:fd:15:d3:28:2b:86: aa:4c:c4:00:2e:1a:4f:a7:f4:58:32:f6:7e:43:f1: 34:98:75:43:72:79:67:33:37:68:5c:86:f5:54:c3: 6e:08:9c:65:0f:e2:e9:ce:5e:46:d9:a6:7a:0f:5c: 35:f7:87:00:0f:a9:f5:d5:a9:c3:0e:26:99:b7:b5: 94:3c:03:4a:1e:e5:41:f0:71:b4:23:9f:05:a7:91: 88:45:1d:6b:5e:82:aa:94:91:9a:d7:ca:d5:c4:28: 6a:fc:07:6d:d4:6c:72:a2:e1:b4:bf:69:6c:c5:bd: 50:ff:69:4b:80:09:e6:9b:bd:65:c9:84:25:30:d3: e9:de:0c:b9:1d:ce:bf:4a:3c:e2:e3:44:8f:d6:42: b6:99:1b:4d:6b:78:9a:87:7a:54:c1:b7:c9:08:b4: d9:12:c8:fb:3d:4f:71:43:75:18:9e:78:5c:66:c2: 77:c1:7d:78:b1:90:b4:44:76:35:1c:66:64:6d:d7: 4b:17:47:b8:83:5c:1a:83:6f:c4:68:44:63:cc:2c: ff:2a:fc:b1:95:78:4e:d9:36:53:8c:b5:04:c8:aa: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DC:34:19:09:85:69:1A:BF:5B:51:F3:6C:1D:4D:D9:F7:CC:B2:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac30b313-cfe9-33e4-9f76-6627db129217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:89:df:50:32:62:46:9c:88:e2:a6:f0:84:b1:bb:dd:75:a5: f9:f5:e2:9f:b3:13:e0:f1:cc:f3:e5:e3:4b:8e:32:88:e3:f0: 7e:ba:23:68:f9:46:1f:c0:ec:c8:b1:2b:a7:ca:73:b7:90:89: cf:c5:aa:dd:f8:6e:7a:d7:2c:4f:fd:e4:23:82:5c:84:92:2f: de:d6:d8:99:23:0b:ae:2f:0a:84:5b:b6:05:d1:df:29:43:28: ef:fe:27:a8:29:a3:1e:d8:f0:e6:fd:0a:c3:b7:29:84:1b:8f: c8:15:ee:9b:62:26:8c:e5:db:f9:cc:87:6e:d8:28:84:31:bb: d6:b6:f3:5f:03:9e:04:6b:96:24:d4:5a:ab:f4:4f:1b:69:e2: db:a4:3a:6f:16:82:0b:15:bd:40:c4:dd:76:b3:27:a5:67:ba: 05:0a:44:b1:9d:40:e4:8a:53:7b:26:8c:14:a2:97:28:07:1d: fd:f1:50:c4:d9:fc:ac:fb:0d:bf:69:91:28:00:03:8a:83:8e: 39:d7:f6:b5:eb:e0:33:fc:9f:81:01:d1:ae:98:0b:ae:cc:e9: bc:ee:0e:77:67:21:13:16:04:a9:19:17:3c:90:c2:15:6a:69: 78:fb:a9:5b:a5:43:28:31:4c:72:bc:19:87:82:36:eb:9e:f7: 81:5d:c3:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpzlwBPmzuW2G3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MWZiMWFhZWMtNjQzNS00YTEyLWIwZjYtNmQ3MjU4MmZhZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZLFmo2RkP2M28mALcYwkypTjCez0GD0t6QX Jij8hJah5NaT6P/9FdMoK4aqTMQALhpPp/RYMvZ+Q/E0mHVDcnlnMzdoXIb1VMNu CJxlD+Lpzl5G2aZ6D1w194cAD6n11anDDiaZt7WUPANKHuVB8HG0I58Fp5GIRR1r XoKqlJGa18rVxChq/Adt1GxyouG0v2lsxb1Q/2lLgAnmm71lyYQlMNPp3gy5Hc6/ Sjzi40SP1kK2mRtNa3iah3pUwbfJCLTZEsj7PU9xQ3UYnnhcZsJ3wX14sZC0RHY1 HGZkbddLF0e4g1wag2/EaERjzCz/KvyxlXhO2TZTjLUEyKrUjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIncNBkJhWkav1tR82wdTdn3zLJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWMzMGIzMTMtY2ZlOS0z M2U0LTlmNzYtNjYyN2RiMTI5MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmJ31AyYkaciOKm8ISxu911pfn14p+zE+DxzPPl40uOMojj8H66I2j5 Rh/A7MixK6fKc7eQic/Fqt34bnrXLE/95COCXISSL97W2JkjC64vCoRbtgXR3ylD KO/+J6gpox7Y8Ob9CsO3KYQbj8gV7ptiJozl2/nMh27YKIQxu9a2818DngRrliTU Wqv0Txtp4tukOm8WggsVvUDE3XazJ6VnugUKRLGdQOSKU3smjBSilygHHf3xUMTZ /Kz7Db9pkSgAA4qDjjnX9rXr4DP8n4EB0a6YC67M6bzuDndnIRMWBKkZFzyQwhVq aXj7qVulQygxTHK8GYeCNuue94Fdw0U= -----END CERTIFICATE-----Generated at Sun Jan 25 17:02:28 2026 by rpki-client