
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: FtyxLabI9slGRfAl99Bc/SY47U8OBcS+x3zH6oIg1vw=
Subject key identifier: 90:4F:CA:E3:E8:78:36:8E:B4:15:83:85:01:02:0F:4A:21:B2:02:DE
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 61B5FBADF495FB47EC3C58C9ABC799AF6AFA3558
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:41 +0000
ROA not before: Fri 04 Jul 2025 00:42:41 +0000
ROA not after: Fri 03 Jul 2026 00:47:41 +0000
asID: 396968
IP address blocks: 2a0f:6287:e4a6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b5:fb:ad:f4:95:fb:47:ec:3c:58:c9:ab:c7:99:af:6a:fa:35:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:41 2025 GMT
Not After : Jul 3 00:47:41 2026 GMT
Subject: CN=904FCAE3E878368EB415838501020F4A21B202DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:01:5a:85:bc:b1:26:b3:82:aa:b8:1d:f8:
d2:db:40:ce:94:6e:e8:af:76:06:c2:0d:43:84:cb:
e1:94:62:3d:b5:0a:70:3a:73:68:12:f4:cb:88:10:
c5:41:ef:0e:3a:0c:ed:7d:59:02:fe:78:f7:87:a9:
3b:44:fe:78:02:83:6b:0a:e3:2f:02:a4:13:9d:8a:
d9:d4:7d:2b:c0:97:3c:26:3e:fa:0a:dc:d4:7d:34:
81:b0:ac:27:92:de:32:3d:d0:57:ed:c7:b9:ea:c7:
a2:89:84:8d:35:42:a7:d6:fb:79:eb:71:ec:68:c1:
ea:ee:16:5b:47:94:7c:50:bc:8e:33:d7:a8:80:94:
60:1d:67:c6:ff:2a:2a:93:15:b1:12:f2:1b:57:bb:
f4:5e:2b:2f:2c:07:76:0a:a0:67:10:b3:a3:b2:ab:
90:0a:af:f8:9a:19:0b:c4:d8:a0:c7:83:f0:e2:a6:
bb:2f:6f:38:f1:74:1f:87:29:e8:9c:cf:d3:04:ca:
e8:94:ee:63:0f:4c:51:43:03:be:d8:5b:42:6e:b3:
d2:39:53:67:9c:90:ed:4c:0a:83:35:90:11:88:f2:
fe:0b:9d:ad:2f:c2:db:f5:c9:53:4f:a5:dd:a6:57:
b6:04:3d:cc:8b:a4:a4:9f:50:c6:b1:56:23:ab:47:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4F:CA:E3:E8:78:36:8E:B4:15:83:85:01:02:0F:4A:21:B2:02:DE
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e4a6::/48
Signature Algorithm: sha256WithRSAEncryption
12:37:ba:be:be:b7:fb:96:6e:7f:1c:19:1e:5e:dd:46:d1:42:
fd:57:0c:e7:ac:d5:5c:79:79:7d:49:8f:ef:b5:27:d6:92:fd:
5f:be:ef:95:9e:51:4b:d6:3b:e7:ba:cd:1c:9b:b2:dd:4f:d1:
e9:e5:3c:7f:66:94:82:78:e1:60:4e:c0:8d:89:e3:42:33:8f:
63:c4:a9:d6:1a:6e:76:5f:5f:67:57:26:d6:b0:87:89:a9:5f:
99:6b:67:3a:89:a8:4a:3b:6a:6a:94:45:f4:a1:17:00:7d:b7:
8c:72:f2:2c:65:c1:a2:e8:b4:56:e1:a7:f0:69:6f:ea:95:2d:
3a:bc:25:80:46:81:fa:e8:98:d7:7e:ed:83:e0:a2:a2:0f:38:
80:68:bc:20:b0:5d:99:0a:ed:fb:aa:1b:5f:ee:e4:4f:62:f4:
94:28:50:f8:45:8d:05:1a:53:4d:7b:43:0b:97:e6:cd:e2:ab:
99:4e:f3:2e:c5:00:fa:bb:2c:99:45:a2:a8:04:ef:74:a0:cb:
06:97:a3:5b:2f:d3:89:06:0d:00:63:69:65:05:9b:7f:49:f2:
ae:ab:65:67:fb:57:3c:1f:42:42:1f:dd:2d:60:8f:f0:fd:02:
15:0a:ad:e6:a9:90:c1:79:44:c6:75:2f:0d:e7:ae:98:89:da:
7d:36:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:45 2025 by rpki-client