
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: RUOa/C6ZeQkyvcJ46eYRBQL+k+MZHgtM3zlLYWDrqdM=
Subject key identifier: 61:0E:EB:9B:7C:F0:D2:40:DC:2E:6C:7E:96:42:27:8A:D7:C2:14:C4
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 5275E69B1E3D43A45DB13201821EEFB193E98A96
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:43 +0000
ROA not before: Fri 04 Jul 2025 00:42:43 +0000
ROA not after: Fri 03 Jul 2026 00:47:43 +0000
asID: 396968
IP address blocks: 2a0f:6287:e584::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:75:e6:9b:1e:3d:43:a4:5d:b1:32:01:82:1e:ef:b1:93:e9:8a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:43 2025 GMT
Not After : Jul 3 00:47:43 2026 GMT
Subject: CN=610EEB9B7CF0D240DC2E6C7E9642278AD7C214C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:59:c5:07:70:99:fd:18:80:74:7a:2f:18:
c7:bd:cb:0d:9a:1c:3b:32:3f:2e:40:4f:c5:41:5f:
ab:d2:e3:ec:e3:cf:00:67:bf:76:c0:6b:0a:76:81:
16:df:8d:3f:87:3a:8f:92:72:b6:5c:7b:09:56:84:
46:7b:98:c4:74:9f:04:7c:1b:72:c6:4b:dd:4a:66:
07:a9:5c:d9:84:9f:f5:a9:ab:49:cc:47:36:fb:4a:
f0:4e:ae:23:31:9f:de:9e:af:c1:8f:57:ca:0c:dd:
cf:f9:69:ac:56:ae:93:38:91:ef:93:81:1e:88:de:
f9:a1:ea:5d:bd:9c:84:b5:13:2e:4e:28:b2:3d:50:
a7:b3:24:94:3a:ad:99:23:f2:af:e3:66:4b:63:c1:
6a:ee:e4:dd:cf:09:75:f7:16:1f:74:42:d2:1f:34:
b7:b8:fd:e3:c1:14:41:5b:ed:ca:42:02:31:ea:a7:
02:5e:8b:b5:b5:5b:38:ae:e7:d1:23:49:70:d3:ae:
79:6c:e2:d2:c9:33:69:33:1f:b8:47:c9:93:62:d3:
f1:ac:01:70:e5:3c:dd:99:7a:b1:3b:44:0c:5c:97:
03:97:45:6e:a4:0c:4e:fb:25:51:3a:46:ea:d0:03:
e6:3f:d1:85:fd:55:0f:03:c8:c5:e1:85:91:cd:bf:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0E:EB:9B:7C:F0:D2:40:DC:2E:6C:7E:96:42:27:8A:D7:C2:14:C4
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e584::/48
Signature Algorithm: sha256WithRSAEncryption
64:57:c1:64:82:dc:a6:a4:70:d8:5d:fc:68:dd:1b:f5:fa:ee:
1e:0e:dd:a1:8d:db:f4:e0:7e:27:1d:5b:cd:24:a2:58:82:a1:
67:9a:cc:8c:7d:ae:68:a7:0d:42:31:97:42:54:96:30:b3:d6:
be:8f:e5:d9:a2:33:3d:27:68:00:5f:a0:56:16:8f:db:78:db:
6c:f9:8f:49:af:ec:a3:8d:7d:cc:16:4e:a7:23:3e:5f:82:25:
12:82:b2:ab:5f:52:da:04:00:65:90:d5:02:da:07:4f:3d:9b:
0a:83:8d:29:df:23:63:d1:40:48:f6:ad:49:d3:17:56:4f:10:
da:51:d1:d2:31:ef:0d:7b:2e:c5:e9:ef:fe:da:20:30:d2:d3:
a1:11:ce:89:d1:09:c7:d9:db:01:d0:4f:bc:95:ec:e2:f2:78:
f8:2b:c1:20:38:de:bb:d9:3b:59:4f:77:35:41:66:af:07:b8:
b1:57:53:21:48:7a:b2:3f:7c:bf:c8:80:dc:70:0b:57:cd:fb:
de:3c:d0:ea:fd:43:ba:0e:c8:11:73:8f:d0:c6:0f:c8:63:4f:
55:7d:62:94:82:20:64:07:42:f6:28:70:63:86:92:06:c3:7a:
86:d9:eb:f9:a4:a4:7f:9d:42:cc:fd:d2:bc:59:ad:24:3d:bb:
ed:78:32:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:59:55 2025 by rpki-client