
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: URMZ9UPmoJb8xUWkSwd3lejgcMKwNXk4hnqMn7bgKuA=
Subject key identifier: 1F:69:B5:2A:E7:52:C5:CA:FE:1E:25:34:33:E7:A8:D8:07:C4:E2:E4
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 4081E2AE8EF54BC245B313C24F250BA1257384DB
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:46 +0000
ROA not before: Fri 04 Jul 2025 00:42:46 +0000
ROA not after: Fri 03 Jul 2026 00:47:46 +0000
asID: 396968
IP address blocks: 2a0f:6287:edd4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:81:e2:ae:8e:f5:4b:c2:45:b3:13:c2:4f:25:0b:a1:25:73:84:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:46 2025 GMT
Not After : Jul 3 00:47:46 2026 GMT
Subject: CN=1F69B52AE752C5CAFE1E253433E7A8D807C4E2E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:a3:57:3c:f0:31:25:1f:c1:c3:d1:6b:49:
30:f9:74:11:36:5c:24:1c:a0:27:37:88:f3:79:c4:
fa:93:6d:6f:e3:cc:b6:da:59:96:a7:36:ca:cb:f5:
96:f7:de:e3:9f:f2:ab:2c:5c:03:c5:4d:70:7f:55:
b5:66:0f:e2:96:16:d3:65:d3:b2:57:12:ba:a7:53:
48:4a:95:ae:49:ee:f4:70:41:84:50:7a:a0:e1:48:
86:57:a5:77:9d:fd:3c:54:df:e1:24:99:cb:19:69:
fc:38:ae:9e:9a:63:83:8d:f3:98:8d:93:35:03:af:
42:e8:9f:c7:cd:7a:ca:d1:b2:fd:35:28:f0:74:21:
03:ec:2c:72:b0:2d:6b:9e:c3:e5:8a:83:06:27:84:
7a:e7:ea:7c:a0:7c:8e:fb:5d:46:58:99:a1:43:47:
36:d1:cd:f1:cc:f0:8f:db:a5:74:31:e6:4a:ae:3e:
67:a1:e0:c5:70:61:3d:a8:3c:65:69:64:3d:f1:94:
62:61:8a:48:bf:84:5d:d1:c0:fd:1d:63:a4:12:d9:
a5:d9:53:ef:6a:a0:e9:f1:06:80:34:ef:49:4e:f3:
a0:ae:5b:73:45:fd:33:0b:ae:86:9d:c1:31:fe:98:
d6:db:e8:89:0c:fb:fa:2a:10:ce:e5:53:41:ef:44:
c8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:69:B5:2A:E7:52:C5:CA:FE:1E:25:34:33:E7:A8:D8:07:C4:E2:E4
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:edd4::/48
Signature Algorithm: sha256WithRSAEncryption
2c:62:55:95:24:de:b4:4c:17:d1:42:36:5c:37:e8:fe:14:46:
e2:ab:5d:0f:e9:5b:25:09:bf:be:7c:40:87:84:dc:e3:b3:a1:
64:d4:8e:63:04:ae:29:f9:98:67:a6:8d:91:42:56:73:96:b5:
b8:4f:b7:5a:94:3a:5d:44:8e:59:d0:29:ab:27:55:3d:a5:2c:
bf:c9:b6:e7:84:1c:b4:87:f0:a4:88:20:fa:26:c4:8d:b1:f3:
55:47:59:5c:5b:07:f8:b7:39:6a:d6:98:7c:b5:f3:72:0f:ee:
0b:53:1c:e1:42:f6:32:ae:ce:35:81:bf:f5:c4:4f:46:fa:0e:
ff:de:b1:30:8c:f0:b3:cb:63:ea:2d:a7:80:5e:fc:39:87:8d:
28:7a:4b:01:e3:85:4b:bd:cf:07:58:58:0d:98:74:1e:54:8f:
12:a4:60:67:a3:6e:bb:33:1e:e4:a8:ea:3b:15:a7:68:7f:79:
a4:96:5d:fa:e6:b5:4a:60:c1:dd:2d:82:b1:85:48:f9:d2:31:
f2:40:fc:35:5c:c1:73:35:9e:25:33:d5:e5:b8:8e:98:a4:39:
19:21:32:3b:05:6e:ea:ff:1d:6b:37:ec:ab:1e:40:2d:dd:96:
3c:3b:e4:b1:e8:96:24:5a:21:b6:ed:f5:6e:55:aa:d6:d3:0f:
b1:49:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:34 2025 by rpki-client