
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: OQ7IISawk42SeGt/WXYtJQQs6akB+vPvo95NeGR2DDk=
Subject key identifier: 80:8F:1C:02:20:DF:B1:D5:84:F7:10:CB:2D:47:6F:52:12:0A:D4:64
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 5F7BED855D4F6BEBB207ADA5306E0155FAEC5329
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:42 +0000
ROA not before: Fri 04 Jul 2025 00:42:42 +0000
ROA not after: Fri 03 Jul 2026 00:47:42 +0000
asID: 396968
IP address blocks: 2a0f:6287:ef5c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:7b:ed:85:5d:4f:6b:eb:b2:07:ad:a5:30:6e:01:55:fa:ec:53:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:42 2025 GMT
Not After : Jul 3 00:47:42 2026 GMT
Subject: CN=808F1C0220DFB1D584F710CB2D476F52120AD464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:f3:54:ca:55:c4:ab:2d:b1:68:3f:1b:d7:
a2:c8:ed:fa:b6:9c:11:9f:7c:e0:7a:38:12:50:0d:
0d:37:05:1e:08:bf:55:31:76:36:ea:f5:9d:d4:ae:
04:d1:69:b0:90:60:57:d1:46:4f:e7:e9:f7:76:31:
6e:47:81:7b:94:70:cc:e4:f4:4f:2a:0d:ef:30:ea:
be:ba:4f:cd:59:aa:fc:6a:3a:9d:a7:7c:18:a5:4b:
03:59:a2:d3:f6:36:11:60:14:a6:27:0a:b2:0c:bd:
b5:96:6f:9e:81:6c:30:7a:00:23:30:bc:74:b1:0a:
99:59:44:79:c6:a5:6d:f2:ac:a1:68:e4:ef:dd:ac:
29:e1:1e:b5:f8:84:8e:da:7f:1a:13:94:68:70:53:
62:7c:5c:3c:5d:fe:14:61:b7:79:54:73:c2:65:64:
92:88:f2:08:97:c2:ec:04:70:90:cd:d3:ae:41:92:
4b:2b:ae:6a:f5:45:95:55:95:84:23:db:24:0d:fc:
38:3d:61:8d:7d:69:2b:39:62:87:40:0d:d4:4c:6f:
a9:df:e6:35:3f:a2:62:43:45:e0:4a:8e:7d:1b:99:
96:26:de:3d:e6:5a:ae:b4:bf:7c:e7:ef:64:4d:39:
15:18:cc:d3:64:02:29:bd:80:88:52:27:93:68:99:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:1C:02:20:DF:B1:D5:84:F7:10:CB:2D:47:6F:52:12:0A:D4:64
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ef5c::/48
Signature Algorithm: sha256WithRSAEncryption
03:2e:d6:03:a7:1d:57:91:fb:6d:7b:34:27:bd:db:2f:a1:52:
f0:91:2c:cf:c0:68:74:e5:c0:3a:ff:0a:fb:11:da:26:37:17:
b3:fe:53:f4:7b:cf:06:a5:6c:99:dd:a6:de:7f:6e:21:af:4c:
5c:4c:7b:f2:3b:01:78:ba:1e:06:ba:65:21:b9:4e:ef:62:af:
73:9e:27:b4:a4:06:b6:21:5c:43:8d:98:c0:94:3b:d4:3c:d7:
61:2d:23:1e:bd:2a:b0:2c:37:ea:61:22:44:2f:e2:17:36:2f:
c6:57:46:31:21:3f:de:8d:fa:0a:9e:1a:8a:0a:4b:77:9e:1a:
f7:ae:6e:00:54:ee:06:11:f3:b4:df:83:dd:9a:1e:a8:e7:90:
76:d2:79:93:b5:d3:f2:2a:e8:3d:98:64:43:21:5d:92:c2:ed:
7a:2b:e1:d0:e4:ca:27:30:d8:84:fc:12:ce:5c:7a:98:6e:3e:
57:1f:1a:0c:4a:25:d0:c6:eb:5e:0b:e2:19:18:08:45:3f:51:
16:7f:8e:48:33:83:d8:75:ca:52:1c:f5:59:9a:fc:0c:d4:91:
56:62:e6:7e:10:f6:77:3a:6f:bd:85:60:94:0c:ea:79:d6:df:
37:f5:08:45:85:fa:3f:6e:71:0d:7d:4c:cf:d6:74:e6:7b:4f:
6a:3d:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:17 2025 by rpki-client