
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: Udx2gjD3GgIiCTFITnSYsntkFD6THhhVXXnDZLlZwhE=
Subject key identifier: 91:8C:16:39:D5:14:D6:CC:4B:17:01:40:F6:98:D0:80:B1:22:22:39
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 07D4410B7BF4DEC78A95409E85A25D5A303283FA
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:43 +0000
ROA not before: Fri 04 Jul 2025 00:42:43 +0000
ROA not after: Fri 03 Jul 2026 00:47:43 +0000
asID: 396968
IP address blocks: 2a0f:6287:e27a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d4:41:0b:7b:f4:de:c7:8a:95:40:9e:85:a2:5d:5a:30:32:83:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:43 2025 GMT
Not After : Jul 3 00:47:43 2026 GMT
Subject: CN=918C1639D514D6CC4B170140F698D080B1222239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:b1:87:77:48:50:7e:0f:8b:00:e4:90:5f:
d6:be:56:17:6d:c8:5a:a3:b3:8b:ff:59:f9:80:60:
1b:d1:33:1b:ea:b8:d4:53:a5:1d:50:55:96:cc:e3:
ef:e5:1b:a8:16:4a:bb:8f:bc:c5:b4:21:aa:6a:2a:
d4:af:61:6f:fb:cb:6d:ac:93:99:f2:b1:25:d6:19:
8c:50:bf:ec:35:d7:93:94:ae:ca:8b:fb:c7:b0:e0:
ea:f5:09:e3:d7:4a:0d:de:b2:03:a4:29:16:17:24:
a8:f6:89:90:86:04:8e:61:9d:f4:88:1a:fb:00:b6:
bf:ee:bd:91:9c:b4:dc:7e:89:8f:6a:30:be:e6:b4:
d3:19:b7:01:5b:1b:4e:1b:7c:6b:ce:e2:8d:9f:00:
71:5c:5a:ff:c8:6a:81:b0:e8:8f:03:72:ff:3b:9f:
4f:3a:a7:5c:53:07:04:88:60:75:83:16:5f:37:7e:
33:20:00:2f:9c:9d:d1:0a:b4:ab:96:8d:a1:3a:d5:
48:56:41:a5:8e:82:d8:dd:70:14:42:35:b0:44:f2:
72:a6:f4:61:1b:76:59:2b:ec:bc:0a:21:bd:45:0a:
c2:47:b4:f7:b7:f3:9b:c9:13:53:14:45:8d:b1:8d:
c8:de:1d:53:dd:91:f7:20:ff:e9:54:7d:2a:c1:65:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8C:16:39:D5:14:D6:CC:4B:17:01:40:F6:98:D0:80:B1:22:22:39
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e27a::/48
Signature Algorithm: sha256WithRSAEncryption
82:1a:dd:d0:f0:1c:cf:0f:7f:9a:e8:43:ae:22:66:9b:25:0f:
8f:24:73:8e:18:41:10:c7:73:e5:dc:65:ec:b1:f4:3d:4e:be:
ed:6e:e1:30:d4:97:5b:7c:62:80:6d:f6:46:a9:75:39:90:79:
bb:63:c1:21:8a:43:3d:4d:2f:3b:7b:ac:1b:ab:e9:ae:09:74:
66:db:5b:63:c1:f0:e8:8d:c6:79:2c:58:47:d6:18:5f:a7:76:
c2:b1:00:dc:71:e7:d4:bf:a4:a7:36:a4:f4:5f:87:13:6d:4f:
74:f6:6a:d5:75:49:f7:a5:57:52:0d:5a:2f:e8:24:f5:5a:d0:
7a:cc:90:35:21:34:60:36:a9:c7:9f:63:d8:97:2f:c7:69:24:
4b:4a:bd:b6:53:e5:b0:08:a4:ee:1a:9f:fa:5b:96:a3:3b:8f:
bb:46:2a:d7:ff:eb:3d:3b:fd:24:5e:56:49:fb:22:98:1c:18:
4b:bb:9c:62:0a:64:83:af:b7:c6:97:19:b0:0b:48:ef:da:b1:
8d:83:22:a1:5d:38:8c:0b:e3:cc:eb:53:b2:94:45:fa:9c:92:
31:6d:43:a1:da:be:5a:6a:f7:51:c6:ba:cd:ff:26:b6:84:bf:
cd:3b:d6:09:a3:37:dc:6f:94:f2:dc:e3:76:e6:25:d2:75:03:
70:66:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:01:58 2025 by rpki-client