$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: R/80X4JSF4mUlzhTf6PHoQCQ2knOAzPHWhvF4iVCqeU= Subject key identifier: 70:95:83:0D:18:93:FD:29:3F:4D:DC:2D:75:E9:0E:72:83:79:3E:61 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 2E5A580B27A8B863B370D7C415AF5C7F5CA0AC12 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:43 +0000 ROA not before: Fri 04 Jul 2025 00:42:43 +0000 ROA not after: Fri 03 Jul 2026 00:47:43 +0000 asID: 396968 IP address blocks: 2a0f:6287:f0be::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:5a:58:0b:27:a8:b8:63:b3:70:d7:c4:15:af:5c:7f:5c:a0:ac:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:43 2025 GMT Not After : Jul 3 00:47:43 2026 GMT Subject: CN=7095830D1893FD293F4DDC2D75E90E7283793E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:92:81:b8:d1:61:dd:1b:cc:82:67:56:7b:df: a2:e3:ca:d1:3d:7b:88:3f:2f:5c:bf:3e:d9:db:67: ad:d4:a3:13:6a:3c:c3:83:88:5e:a4:67:67:04:bf: 84:f2:c7:f5:36:6c:b5:5d:f5:f4:55:b2:d4:51:e9: 1c:46:98:fe:41:70:31:eb:ed:85:35:6b:e8:a6:ad: e1:e1:59:44:b2:0d:77:20:65:ec:24:18:60:64:a2: f8:f2:cd:27:03:25:26:4b:53:c5:40:08:8e:be:d3: e6:2b:78:c3:02:13:06:76:fe:76:38:d8:bf:58:b7: 0d:1f:b4:9b:76:99:91:a0:6a:a8:81:22:92:78:d3: 8a:de:74:82:98:2c:0b:37:ae:ac:e9:d8:c5:4b:2d: c2:cb:aa:46:39:dd:d1:10:ee:c8:f6:54:77:53:6e: 85:ec:62:44:fc:8b:fd:f1:06:82:ca:46:9a:1a:1b: 1e:0a:0c:18:4b:bb:78:d4:48:a9:0a:07:a1:8f:b6: 41:98:70:1f:be:a4:f4:26:75:f2:4c:be:cd:b6:4c: 9f:e9:9a:42:2a:04:f0:b4:c1:16:90:89:86:ec:b6: 34:05:61:fe:04:e0:98:26:b7:e0:d7:8e:69:60:07: b3:df:26:be:c1:b8:6d:3f:46:5c:91:b5:f1:b9:b6: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:95:83:0D:18:93:FD:29:3F:4D:DC:2D:75:E9:0E:72:83:79:3E:61 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:f0be::/48 Signature Algorithm: sha256WithRSAEncryption a8:b2:e6:d2:03:85:48:00:47:64:d4:a9:9a:41:41:11:78:d7: 2f:c9:89:d6:01:12:13:e7:91:90:b0:2b:ee:b5:5a:eb:69:ea: 86:e5:96:6f:8d:55:d0:b0:56:94:6e:30:38:86:59:a8:62:31: dc:ca:d8:4c:77:32:3d:fb:b3:60:f0:33:66:86:d5:71:9f:1a: 85:a3:c7:d6:6b:7d:be:6c:de:1c:d5:c7:43:55:0b:3b:88:29: 29:b8:9b:65:be:30:f8:da:62:06:dd:16:58:48:75:fa:74:0e: ba:72:45:07:4d:b5:dd:3f:92:0d:c7:d0:be:27:0c:e5:b2:30: 83:22:7e:27:5b:58:ba:3a:59:8e:70:43:a0:91:bf:3f:27:93: e8:f7:f0:f3:58:0d:f7:a2:f7:3b:63:dc:3f:ab:be:98:9b:cd: 84:ed:39:2a:92:2e:c1:7b:80:d4:94:80:57:99:f2:5a:74:42: d1:26:d6:85:56:4b:9e:6d:3a:07:38:76:08:11:b8:ae:4a:41: 9f:7c:5d:ec:a3:78:0f:b7:41:6c:d3:ad:e7:ec:8d:67:10:73: 65:5b:d6:f8:99:14:55:55:88:d1:40:72:c9:ef:4a:1c:77:69: 5f:26:0a:99:3f:71:9e:3c:1e:d0:60:f5:9d:f5:7c:d3:40:d7: 83:1e:39:0a -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIULlpYCyeouGOzcNfEFa9cf1ygrBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDNaFw0yNjA3MDMwMDQ3NDNaMDMxMTAvBgNV BAMTKDcwOTU4MzBEMTg5M0ZEMjkzRjREREMyRDc1RTkwRTcyODM3OTNFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYkoG40WHdG8yCZ1Z736LjytE9 e4g/L1y/PtnbZ63UoxNqPMODiF6kZ2cEv4Tyx/U2bLVd9fRVstRR6RxGmP5BcDHr 7YU1a+imreHhWUSyDXcgZewkGGBkovjyzScDJSZLU8VACI6+0+YreMMCEwZ2/nY4 2L9Ytw0ftJt2mZGgaqiBIpJ404redIKYLAs3rqzp2MVLLcLLqkY53dEQ7sj2VHdT boXsYkT8i/3xBoLKRpoaGx4KDBhLu3jUSKkKB6GPtkGYcB++pPQmdfJMvs22TJ/p mkIqBPC0wRaQiYbstjQFYf4E4Jgmt+DXjmlgB7PfJr7BuG0/RlyRtfG5tmsZAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUcJWDDRiT/Sk/TdwtdekOcoN5PmEwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzA2MjY1M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/C+ MA0GCSqGSIb3DQEBCwUAA4IBAQCosubSA4VIAEdk1KmaQUEReNcvyYnWARIT55GQ sCvutVrraeqG5ZZvjVXQsFaUbjA4hlmoYjHcythMdzI9+7Ng8DNmhtVxnxqFo8fW a32+bN4c1cdDVQs7iCkpuJtlvjD42mIG3RZYSHX6dA66ckUHTbXdP5INx9C+Jwzl sjCDIn4nW1i6OlmOcEOgkb8/J5Po9/DzWA33ovc7Y9w/q76Ym82E7Tkqki7Be4DU lIBXmfJadELRJtaFVkuebToHOHYIEbiuSkGffF3so3gPt0Fs063n7I1nEHNlW9b4 mRRVVYjRQHLJ70ocd2lfJgqZP3GePB7QYPWd9XzTQNeDHjkK -----END CERTIFICATE-----Generated at Wed Nov 5 11:00:06 2025 by rpki-client