
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: TvwVGfIzIeC3OBt+mEg546J2hQC4ACiWNVl0d4b3up8=
Subject key identifier: 51:D5:1A:B5:B4:71:E8:5A:18:39:CE:4E:5C:4B:84:00:2D:DB:19:58
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 11E6CE7DF432E86CD5B20D04CC2DC6C405DFCE3C
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:42 +0000
ROA not before: Fri 04 Jul 2025 00:42:42 +0000
ROA not after: Fri 03 Jul 2026 00:47:42 +0000
asID: 396968
IP address blocks: 2a0f:6287:e153::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e6:ce:7d:f4:32:e8:6c:d5:b2:0d:04:cc:2d:c6:c4:05:df:ce:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:42 2025 GMT
Not After : Jul 3 00:47:42 2026 GMT
Subject: CN=51D51AB5B471E85A1839CE4E5C4B84002DDB1958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:cd:b8:4f:37:e5:16:7d:d0:31:50:51:d3:
01:f5:27:80:83:13:49:b4:30:d8:b4:65:30:bf:90:
0c:fa:cd:03:d8:e1:05:8d:bf:e1:e0:08:71:90:c0:
e4:26:e2:01:e3:88:1c:e6:0f:87:b2:ca:bd:5f:8c:
85:c4:23:dc:2a:ff:51:70:15:f3:a1:d7:6b:8b:1b:
ba:73:fc:f0:27:97:65:ce:ae:bd:6d:32:4d:00:f3:
9d:d1:47:d5:3c:c1:32:49:e5:73:4b:f5:cb:db:53:
c7:0d:24:91:ab:5a:33:c1:41:1d:66:fc:08:59:29:
52:8c:bb:b0:64:4b:45:b0:07:c2:b8:da:1d:a6:d2:
90:51:34:ba:c3:7d:64:92:eb:93:36:48:fc:71:29:
dd:61:2b:01:4f:0a:48:85:c2:99:5b:22:8a:c6:2e:
fa:06:bb:3b:ea:a1:84:7b:a4:cd:7f:fd:68:b9:c3:
a2:0c:b8:9b:98:fb:4e:a8:66:51:e7:57:22:e6:6d:
30:bd:dd:7a:da:da:25:96:26:fe:ae:9d:b1:6b:7d:
0e:be:c2:40:7a:02:5d:ee:49:37:bd:66:04:db:f5:
84:53:2c:29:e8:e8:bc:dd:06:72:56:f1:26:c6:5d:
09:2e:cc:88:32:bb:df:dd:94:44:68:76:67:69:f5:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:1A:B5:B4:71:E8:5A:18:39:CE:4E:5C:4B:84:00:2D:DB:19:58
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e153::/48
Signature Algorithm: sha256WithRSAEncryption
95:35:f1:85:73:64:7a:df:5a:34:53:d4:40:3c:ae:ec:a1:0c:
f5:0f:21:60:bd:56:6f:45:5c:0f:4d:ae:78:13:bc:64:1a:0f:
64:7c:20:09:a5:29:b2:ad:2d:81:67:f0:5b:dc:6e:32:75:47:
5f:5e:19:a1:5f:03:fe:ef:dc:32:19:a9:48:ca:76:e2:8e:ee:
e3:9f:ab:a8:90:d2:96:f5:11:42:53:7e:27:49:bd:9d:8d:d0:
02:b2:e8:6d:f3:22:6a:8e:ad:42:e3:b9:0e:c0:29:00:ca:cb:
4e:f4:83:df:dd:bc:fb:11:3e:dd:00:53:ac:1a:76:73:69:7a:
73:13:38:b4:28:85:65:67:31:56:94:1b:a5:f0:85:60:56:ac:
8b:fe:3b:53:20:d2:ba:ee:53:fe:c1:cf:4d:0f:29:e8:36:d5:
e8:95:1e:5a:0f:eb:f6:25:72:e5:0c:fc:d9:8c:22:79:02:02:
77:b1:e7:74:4b:bf:01:ce:b4:95:66:94:76:71:59:1a:38:b6:
a7:a2:46:ee:bb:68:0c:52:b2:45:76:25:47:c7:19:94:d7:d8:
bd:9c:d1:6a:9d:5e:e7:f6:e2:95:26:eb:0b:9f:ca:21:46:41:
85:cf:71:8a:fa:a8:f5:e5:d4:c8:8e:f6:bc:2a:19:c6:78:83:
0c:b9:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:59:46 2025 by rpki-client