
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653036353a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653036353a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: k/NxDucY3oBoXIlDfMmLqbGf4KxbQ2cbcxuL7na/vnw=
Subject key identifier: 4D:15:15:ED:D7:75:E3:E6:D0:83:64:C8:2F:95:43:36:A3:75:47:21
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 1620E816796F8762FE39059B06CDCB499CAF2F80
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653036353a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:42 +0000
ROA not before: Fri 04 Jul 2025 00:42:42 +0000
ROA not after: Fri 03 Jul 2026 00:47:42 +0000
asID: 396968
IP address blocks: 2a0f:6287:e065::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:20:e8:16:79:6f:87:62:fe:39:05:9b:06:cd:cb:49:9c:af:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:42 2025 GMT
Not After : Jul 3 00:47:42 2026 GMT
Subject: CN=4D1515EDD775E3E6D08364C82F954336A3754721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:9d:33:cc:d5:5d:e7:cf:9d:cc:ce:e3:bf:
28:0e:d9:9c:0e:33:b0:01:25:c1:b4:01:66:2e:7e:
4e:df:39:2d:9b:5a:d4:a4:92:b2:56:c6:3f:68:bf:
58:47:ff:bf:e4:9b:7f:0b:d0:cf:65:b3:aa:e5:fe:
97:47:7c:b7:af:c7:66:ee:77:71:b2:13:f8:1f:f1:
88:73:a5:6f:51:61:42:4a:7f:b8:5d:be:45:f4:69:
16:7e:18:8f:b9:79:5d:6c:54:a9:01:1f:5c:f3:c6:
8e:5d:a7:8c:52:b8:a6:35:cd:a1:68:89:30:99:5a:
a6:68:b8:ec:6f:99:2f:b0:c8:20:e8:04:c7:a2:b4:
6c:99:92:95:a9:88:73:51:8e:ab:7d:1a:62:5e:26:
f5:2c:6f:31:07:b7:56:d5:82:05:05:38:e9:62:82:
60:b3:e5:6f:df:c2:75:fd:03:cd:07:a2:33:7f:50:
f2:b3:81:96:cf:3f:be:88:ee:bb:fe:ed:41:a2:31:
cb:8c:76:bc:71:b3:40:89:b2:eb:19:20:34:d5:51:
93:6b:1b:f9:a0:da:92:99:49:0e:b3:ea:f7:7e:69:
1d:d6:c0:7b:d7:47:cf:37:43:b4:b2:70:2e:da:4d:
9a:11:5d:b5:55:5c:2c:47:1c:e8:57:2a:1a:d5:e0:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:15:ED:D7:75:E3:E6:D0:83:64:C8:2F:95:43:36:A3:75:47:21
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653036353a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e065::/48
Signature Algorithm: sha256WithRSAEncryption
09:ac:d4:d9:31:b9:e4:95:86:a2:d7:d2:aa:55:c1:7a:c5:34:
31:d2:76:66:86:3b:37:ff:48:ed:49:b0:ab:8b:c8:4b:cb:78:
5d:5c:1e:c8:ee:01:45:a3:d1:f1:de:e9:8d:c8:1e:6d:dd:48:
70:8d:d2:89:b4:09:8c:af:2c:0c:78:ec:9b:bc:67:b7:d1:e0:
74:c0:60:24:8d:fa:43:ad:5c:9d:d4:4c:75:7f:22:69:fa:17:
f9:31:99:70:1d:54:e0:c3:65:af:37:df:a8:76:99:e5:84:02:
60:54:b9:bf:20:9b:78:b8:12:58:b8:ee:c7:89:36:b2:c7:e0:
bd:be:8f:4e:fc:81:7d:6b:81:5b:85:c9:ad:36:60:5c:f8:b1:
9d:39:30:0b:d0:04:ca:af:66:cf:9f:c4:bf:4c:76:8d:a3:3f:
9c:2d:80:42:b5:23:70:c5:ad:3c:6e:b3:27:c7:80:c8:f3:d8:
e7:17:d5:80:70:42:e7:d1:00:9d:88:7d:81:7d:b3:4e:ea:8f:
a8:9f:d9:c8:a8:97:74:5c:7c:10:b5:22:bc:39:f9:e8:cb:b6:
65:b9:81:b3:02:72:d3:b5:b0:cd:52:5f:d4:4c:a5:6d:77:33:
d6:e1:61:83:9c:a2:90:1b:60:78:d8:62:12:d0:32:9c:27:05:
a0:56:b8:81
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUFiDoFnlvh2L+OQWbBs3LSZyvL4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDJaFw0yNjA3MDMwMDQ3NDJaMDMxMTAvBgNV
BAMTKDREMTUxNUVERDc3NUUzRTZEMDgzNjRDODJGOTU0MzM2QTM3NTQ3MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4J0zzNVd58+dzM7jvygO2ZwO
M7ABJcG0AWYufk7fOS2bWtSkkrJWxj9ov1hH/7/km38L0M9ls6rl/pdHfLevx2bu
d3GyE/gf8YhzpW9RYUJKf7hdvkX0aRZ+GI+5eV1sVKkBH1zzxo5dp4xSuKY1zaFo
iTCZWqZouOxvmS+wyCDoBMeitGyZkpWpiHNRjqt9GmJeJvUsbzEHt1bVggUFOOli
gmCz5W/fwnX9A80HojN/UPKzgZbPP76I7rv+7UGiMcuMdrxxs0CJsusZIDTVUZNr
G/mg2pKZSQ6z6vd+aR3WwHvXR883Q7SycC7aTZoRXbVVXCxHHOhXKhrV4NnbAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUTRUV7dd14+bQg2TIL5VDNqN1RyEwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzAzNjM1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+Bl
MA0GCSqGSIb3DQEBCwUAA4IBAQAJrNTZMbnklYai19KqVcF6xTQx0nZmhjs3/0jt
SbCri8hLy3hdXB7I7gFFo9Hx3umNyB5t3UhwjdKJtAmMrywMeOybvGe30eB0wGAk
jfpDrVyd1Ex1fyJp+hf5MZlwHVTgw2WvN9+odpnlhAJgVLm/IJt4uBJYuO7HiTay
x+C9vo9O/IF9a4FbhcmtNmBc+LGdOTAL0ATKr2bPn8S/THaNoz+cLYBCtSNwxa08
brMnx4DI89jnF9WAcELn0QCdiH2BfbNO6o+on9nIqJd0XHwQtSK8Ofnoy7ZluYGz
AnLTtbDNUl/UTKVtdzPW4WGDnKKQG2B42GIS0DKcJwWgVriB
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:30 2025 by rpki-client