$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653961633a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a653961633a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: Vl01qfwrtvNOl/mcjmkVdg8te7aSrUWUiKXhxoTXnyU= Subject key identifier: 50:D4:A9:1A:FE:A9:CB:10:CE:53:8E:79:DA:CD:32:9D:22:67:07:45 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 10074B9CDEF7243EAA052166D75617A8C01CD2A1 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653961633a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:45 +0000 ROA not before: Fri 04 Jul 2025 00:42:45 +0000 ROA not after: Fri 03 Jul 2026 00:47:45 +0000 asID: 396968 IP address blocks: 2a0f:6287:e9ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:07:4b:9c:de:f7:24:3e:aa:05:21:66:d7:56:17:a8:c0:1c:d2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:45 2025 GMT Not After : Jul 3 00:47:45 2026 GMT Subject: CN=50D4A91AFEA9CB10CE538E79DACD329D22670745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:25:7c:c8:a1:04:53:6c:7d:24:77:0b:d0: 37:cb:eb:14:4d:bd:f8:f0:c9:ee:52:44:d6:29:6c: 32:71:d7:aa:0a:49:08:5b:18:25:bb:37:6d:86:d3: ab:4c:0a:a0:26:8c:2c:4a:a6:1f:e7:b4:c3:9e:dc: 72:a8:65:66:5b:a2:15:54:8c:07:75:27:24:a7:78: 28:5b:fb:0f:57:8e:d4:55:79:40:6c:71:3d:df:2d: 57:a6:5f:25:69:aa:88:06:36:8e:4c:97:77:00:ea: 0f:82:f9:f6:ec:67:48:6e:1b:bc:d1:4d:7a:60:4b: b9:80:c3:90:9b:5f:1f:b0:53:b7:5f:85:d7:5f:ca: 1f:dd:fe:ed:6e:83:83:a3:30:4e:f1:e2:e3:c7:45: 9c:a4:68:e5:5e:a1:04:60:3a:8c:78:84:1b:bf:76: a8:97:47:18:01:50:58:1e:a1:80:51:2f:c5:ce:9c: da:ee:cc:88:ae:b6:e1:89:32:ec:02:43:94:8d:d3: 4b:97:63:ae:d7:92:5f:f3:ef:dc:3f:96:7d:03:2f: 3e:48:c9:1c:5f:61:2a:ca:28:77:19:a7:cd:cb:65: bb:92:a2:a1:5b:d0:90:46:05:9c:97:06:d4:61:16: c5:f1:6f:3b:4b:5d:21:b3:58:20:37:37:2d:96:92: a6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D4:A9:1A:FE:A9:CB:10:CE:53:8E:79:DA:CD:32:9D:22:67:07:45 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653961633a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:e9ac::/48 Signature Algorithm: sha256WithRSAEncryption 1b:0a:5c:11:b9:df:d2:87:ff:ad:e4:99:72:4d:e3:49:f3:df: eb:79:de:ff:eb:d7:a2:6f:e9:04:6a:76:4e:5c:ce:e3:7f:66: 1c:17:a9:09:a2:72:21:98:24:e1:c8:39:2c:a9:22:52:01:21: bb:f7:ed:2b:a4:36:61:b7:83:4e:b7:b5:ff:39:76:6b:e6:26: 5c:bc:25:c4:b1:eb:04:f5:b5:3c:dc:21:46:0b:3a:de:3b:05: dc:fe:32:da:95:48:f5:cd:cc:99:e0:d1:9d:1d:be:4b:cd:c9: 7a:78:ba:d2:1e:f4:d6:b3:7b:68:f5:e9:db:d8:27:59:e4:08: 46:9b:12:7e:14:28:e2:5d:95:11:36:9b:49:dc:11:95:47:3a: aa:93:4c:86:cc:9b:2f:60:3c:fa:ed:e8:3a:41:98:a6:0b:7b: 3c:0d:cf:4b:88:e7:21:e3:2c:47:5d:7f:78:60:01:d9:19:5d: 4b:e3:aa:b0:89:7d:84:75:a1:75:a0:fc:82:e1:b8:74:d3:d2: fd:10:fa:50:7d:d6:ff:ce:d8:22:e1:a4:ee:44:a5:49:5c:62: da:6e:17:c7:62:f5:71:bf:2c:9f:fc:1b:27:ee:6e:da:1a:9c: 6d:e7:25:07:ea:0f:fa:39:6b:18:17:81:8a:69:e5:2a:9d:09: b6:88:0e:dd -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUEAdLnN73JD6qBSFm11YXqMAc0qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV BAMTKDUwRDRBOTFBRkVBOUNCMTBDRTUzOEU3OURBQ0QzMjlEMjI2NzA3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpyV8yKEEU2x9JHcL0DfL6xRN vfjwye5SRNYpbDJx16oKSQhbGCW7N22G06tMCqAmjCxKph/ntMOe3HKoZWZbohVU jAd1JySneChb+w9XjtRVeUBscT3fLVemXyVpqogGNo5Ml3cA6g+C+fbsZ0huG7zR TXpgS7mAw5CbXx+wU7dfhddfyh/d/u1ug4OjME7x4uPHRZykaOVeoQRgOox4hBu/ dqiXRxgBUFgeoYBRL8XOnNruzIiutuGJMuwCQ5SN00uXY67Xkl/z79w/ln0DLz5I yRxfYSrKKHcZp83LZbuSoqFb0JBGBZyXBtRhFsXxbztLXSGzWCA3Ny2WkqY1AgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUUNSpGv6pyxDOU4552s0ynSJnB0UwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1Mzk2MTYzM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+ms MA0GCSqGSIb3DQEBCwUAA4IBAQAbClwRud/Sh/+t5JlyTeNJ89/red7/69eib+kE anZOXM7jf2YcF6kJonIhmCThyDksqSJSASG79+0rpDZht4NOt7X/OXZr5iZcvCXE sesE9bU83CFGCzreOwXc/jLalUj1zcyZ4NGdHb5Lzcl6eLrSHvTWs3to9enb2CdZ 5AhGmxJ+FCjiXZURNptJ3BGVRzqqk0yGzJsvYDz67eg6QZimC3s8Dc9LiOch4yxH XX94YAHZGV1L46qwiX2EdaF1oPyC4bh009L9EPpQfdb/ztgi4aTuRKVJXGLabhfH YvVxvyyf/Bsn7m7aGpxt5yUH6g/6OWsYF4GKaeUqnQm2iA7d -----END CERTIFICATE-----Generated at Wed Nov 5 11:00:36 2025 by rpki-client