$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: +IV8BGBxUTOUE94nbxQrID4LRme4QyMd6/1Cr9B6CdA= Subject key identifier: CD:A6:28:4F:57:80:18:5F:17:E2:A8:13:50:AA:18:64:26:C5:A7:63 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 5E1A2461DA3C7D92E6595501F04B842D69853534 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:45 +0000 ROA not before: Fri 04 Jul 2025 00:42:45 +0000 ROA not after: Fri 03 Jul 2026 00:47:45 +0000 asID: 396968 IP address blocks: 2a0f:6287:eae4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1a:24:61:da:3c:7d:92:e6:59:55:01:f0:4b:84:2d:69:85:35:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:45 2025 GMT Not After : Jul 3 00:47:45 2026 GMT Subject: CN=CDA6284F5780185F17E2A81350AA186426C5A763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d1:c0:41:b6:d9:c0:d8:9b:b2:97:fe:2e:7e: b9:49:b1:eb:c4:f8:de:34:6d:c5:03:20:9b:6e:ff: 94:35:46:b2:fd:a0:31:e6:92:4a:bf:1f:da:f1:97: 08:56:d6:40:91:68:a5:53:b8:cb:c1:c4:13:db:d5: e9:cc:c0:3a:9e:fd:66:f4:84:33:fa:93:5f:af:45: 5c:e4:6c:32:c1:d9:01:7c:06:23:7e:21:ee:e5:d4: d4:4b:59:a4:1d:c3:e7:d7:58:f4:0a:97:49:11:b9: 2d:db:5d:61:02:e3:05:c1:e1:fb:a5:28:3c:75:96: 8b:90:13:ac:90:8f:48:af:cc:67:d9:9e:c1:20:a8: 82:ab:47:bf:50:bb:c9:23:68:84:ee:b3:2d:c3:e8: ab:c0:7a:e0:83:c8:b9:ea:b0:82:02:45:8f:ea:c9: ab:49:eb:1c:bb:e6:30:f2:77:c9:06:27:01:b6:d6: f2:c6:af:d6:db:a0:b0:a7:64:3c:ff:4f:64:28:6c: d1:ab:e8:2d:e5:06:f2:19:10:45:a4:43:00:ac:57: 0c:a1:a8:49:c3:aa:72:19:ff:92:49:d4:bf:ee:80: 5c:de:6d:9c:4a:63:a2:54:d4:0d:4f:f3:ff:d7:0c: 97:27:97:0a:e2:2b:93:83:07:c7:1d:25:c5:38:27: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A6:28:4F:57:80:18:5F:17:E2:A8:13:50:AA:18:64:26:C5:A7:63 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:eae4::/48 Signature Algorithm: sha256WithRSAEncryption 8b:7d:d6:ba:73:b9:66:33:7b:86:b2:eb:1b:7f:31:00:34:f5: 4a:df:d3:a4:d7:5d:7e:f8:14:66:88:cb:11:c2:30:05:b6:0a: 69:fb:65:d6:f2:5c:b2:c4:b5:05:3d:ab:48:d3:80:ca:8d:02: 0c:60:1d:62:50:4a:0c:4c:95:39:7d:c5:bb:88:2b:e0:59:b9: 78:18:1c:ed:39:31:01:31:f0:74:ac:89:df:bc:c5:9c:c6:a1: 1a:67:f7:4f:d8:ea:8a:d3:04:e8:8b:24:1e:f2:3e:1d:63:73: 60:1e:90:0d:9a:d5:b7:f0:bf:fd:fe:35:7b:49:b5:2e:63:66: 4c:df:86:43:66:76:3d:e0:1a:82:aa:73:fd:d5:17:f3:9a:39: 49:28:67:da:90:bc:7d:38:d6:6e:87:74:cd:0d:67:fe:c1:0a: 62:fa:08:8d:c3:c2:17:9c:09:9c:0a:c2:5f:62:d2:b8:7a:ca: 04:3b:b3:6e:03:5b:75:5c:23:8e:0f:55:2b:b8:ec:5c:ac:71: 1f:10:5e:fd:f3:61:9f:13:3a:06:d7:e2:eb:03:95:00:b9:11: 92:aa:07:17:75:b9:ec:f3:25:4c:1f:85:7f:aa:24:26:c3:50: a6:32:a4:4f:ef:5f:ce:2f:0f:9c:93:29:2c:0c:31:b3:2b:b5: c4:60:bd:c8 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUXhokYdo8fZLmWVUB8EuELWmFNTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV BAMTKENEQTYyODRGNTc4MDE4NUYxN0UyQTgxMzUwQUExODY0MjZDNUE3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO0cBBttnA2Juyl/4ufrlJsevE +N40bcUDIJtu/5Q1RrL9oDHmkkq/H9rxlwhW1kCRaKVTuMvBxBPb1enMwDqe/Wb0 hDP6k1+vRVzkbDLB2QF8BiN+Ie7l1NRLWaQdw+fXWPQKl0kRuS3bXWEC4wXB4ful KDx1louQE6yQj0ivzGfZnsEgqIKrR79Qu8kjaITusy3D6KvAeuCDyLnqsIICRY/q yatJ6xy75jDyd8kGJwG21vLGr9bboLCnZDz/T2QobNGr6C3lBvIZEEWkQwCsVwyh qEnDqnIZ/5JJ1L/ugFzebZxKY6JU1A1P8//XDJcnlwriK5ODB8cdJcU4Jy/XAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUzaYoT1eAGF8X4qgTUKoYZCbFp2MwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjE2NTM0M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+rk MA0GCSqGSIb3DQEBCwUAA4IBAQCLfda6c7lmM3uGsusbfzEANPVK39Ok111++BRm iMsRwjAFtgpp+2XW8lyyxLUFPatI04DKjQIMYB1iUEoMTJU5fcW7iCvgWbl4GBzt OTEBMfB0rInfvMWcxqEaZ/dP2OqK0wToiyQe8j4dY3NgHpANmtW38L/9/jV7SbUu Y2ZM34ZDZnY94BqCqnP91RfzmjlJKGfakLx9ONZuh3TNDWf+wQpi+giNw8IXnAmc CsJfYtK4esoEO7NuA1t1XCOOD1UruOxcrHEfEF7982GfEzoG1+LrA5UAuRGSqgcX dbns8yVMH4V/qiQmw1CmMqRP71/OLw+ckyksDDGzK7XEYL3I -----END CERTIFICATE-----Generated at Wed Nov 5 11:00:27 2025 by rpki-client