
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa
File: 326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: TzyVB9cdnPPnatBobDPUCscNnXodYO0zE34vqwn1g0U=
Subject key identifier: FB:37:B4:CF:1D:34:6C:46:23:2B:A7:B1:10:7F:75:D1:D6:BA:33:26
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 2A10B8198D5E7ECAB4A704D225D79207D5F75946
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 04 Jul 2025 00:47:45 +0000
ROA not before: Fri 04 Jul 2025 00:42:45 +0000
ROA not after: Fri 03 Jul 2026 00:47:45 +0000
asID: 16909
IP address blocks: 2a0f:6287:f3a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:10:b8:19:8d:5e:7e:ca:b4:a7:04:d2:25:d7:92:07:d5:f7:59:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:45 2025 GMT
Not After : Jul 3 00:47:45 2026 GMT
Subject: CN=FB37B4CF1D346C46232BA7B1107F75D1D6BA3326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:21:39:9f:47:9f:38:a9:af:e0:82:bf:e8:
2f:70:8a:2a:40:1f:6c:b3:99:47:17:ee:17:16:61:
4d:22:6c:2b:8c:a6:fa:5d:10:b4:f6:9b:75:68:70:
e4:2b:7d:9c:15:e0:68:d0:39:d7:04:cb:71:e3:aa:
00:c2:ba:74:04:91:01:65:16:46:9d:5d:09:ee:9b:
9e:33:38:c0:f9:5c:93:68:85:4c:aa:e1:77:5e:79:
fa:a3:76:a6:66:c8:ff:30:94:ba:b6:78:1e:9d:02:
56:61:54:aa:fa:11:55:8b:5e:ff:c1:3c:84:b4:44:
0d:d0:77:54:01:33:29:69:9c:57:35:d1:1b:54:80:
8e:7a:9e:df:6c:84:12:12:db:5f:32:e2:1f:97:6a:
31:ec:10:56:7f:9b:b4:0a:06:5e:87:95:92:52:5d:
8c:d0:6a:a1:b8:6f:4b:ac:6c:63:35:d2:0a:f8:a5:
7b:7a:b7:ea:94:9c:17:db:86:a5:5c:c8:ef:08:f6:
f1:14:6e:c8:f6:84:b3:75:2c:73:24:c9:65:62:69:
86:c2:54:f6:b7:d8:e0:3d:05:25:08:b1:c2:c4:1d:
32:cb:cb:a1:41:6c:67:d3:12:ff:7d:06:f6:d5:42:
75:8b:2a:11:9d:3b:65:49:45:03:16:e2:7e:3e:f9:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:B4:CF:1D:34:6C:46:23:2B:A7:B1:10:7F:75:D1:D6:BA:33:26
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f3a1::/48
Signature Algorithm: sha256WithRSAEncryption
31:19:9c:0b:f4:92:88:1d:5e:14:b5:bf:d1:99:7d:51:a0:a5:
01:b7:fc:bf:05:9c:e1:92:b3:89:ad:f1:8a:28:65:11:0c:f3:
ce:9c:86:0e:90:19:90:25:7f:16:00:18:80:05:7d:0d:c5:86:
d6:17:37:dd:73:fb:7a:3b:15:d9:cf:a6:a5:ce:0e:2c:43:91:
8e:b5:15:2e:78:55:a7:51:63:90:64:5e:65:65:e4:64:15:82:
21:65:9a:64:65:63:27:85:02:31:4a:1a:6c:45:6f:3f:be:03:
92:92:f7:cd:2e:49:a7:44:ef:6c:71:52:86:58:3b:5c:f5:d3:
0e:df:10:70:fd:69:42:78:01:46:bc:39:39:c9:6f:28:e9:e0:
0c:2c:21:49:b2:29:26:bb:f2:02:10:b7:36:66:c1:48:67:ba:
78:46:ce:78:a5:1e:11:ba:c7:34:3b:8e:15:c8:4c:c8:8a:ea:
0a:90:cf:20:44:2e:98:f4:92:dd:13:6f:7f:17:87:8d:86:25:
9d:6c:49:a9:d8:33:48:20:9e:48:d5:5c:af:c4:3f:36:a3:8d:
b0:7f:9c:db:a1:10:03:40:9c:47:58:51:09:c1:11:ae:f5:e6:
b1:2f:86:bd:ab:a3:4c:5c:25:e2:9d:86:ce:8a:95:aa:e9:d7:
8a:e9:30:fe
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUKhC4GY1efsq0pwTSJdeSB9X3WUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV
BAMTKEZCMzdCNENGMUQzNDZDNDYyMzJCQTdCMTEwN0Y3NUQxRDZCQTMzMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGnCE5n0efOKmv4IK/6C9wiipA
H2yzmUcX7hcWYU0ibCuMpvpdELT2m3VocOQrfZwV4GjQOdcEy3HjqgDCunQEkQFl
FkadXQnum54zOMD5XJNohUyq4XdeefqjdqZmyP8wlLq2eB6dAlZhVKr6EVWLXv/B
PIS0RA3Qd1QBMylpnFc10RtUgI56nt9shBIS218y4h+XajHsEFZ/m7QKBl6HlZJS
XYzQaqG4b0usbGM10gr4pXt6t+qUnBfbhqVcyO8I9vEUbsj2hLN1LHMkyWViaYbC
VPa32OA9BSUIscLEHTLLy6FBbGfTEv99BvbVQnWLKhGdO2VJRQMW4n4++Z7ZAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQU+ze0zx00bEYjK6exEH910da6MyYwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzM2MTMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPYofzoTAN
BgkqhkiG9w0BAQsFAAOCAQEAMRmcC/SSiB1eFLW/0Zl9UaClAbf8vwWc4ZKzia3x
iihlEQzzzpyGDpAZkCV/FgAYgAV9DcWG1hc33XP7ejsV2c+mpc4OLEORjrUVLnhV
p1FjkGReZWXkZBWCIWWaZGVjJ4UCMUoabEVvP74DkpL3zS5Jp0TvbHFShlg7XPXT
Dt8QcP1pQngBRrw5OclvKOngDCwhSbIpJrvyAhC3NmbBSGe6eEbOeKUeEbrHNDuO
FchMyIrqCpDPIEQumPSS3RNvfxeHjYYlnWxJqdgzSCCeSNVcr8Q/NqONsH+c26EQ
A0CcR1hRCcERrvXmsS+GvaujTFwl4p2GzoqVqunXiukw/g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:30:44 2025 by rpki-client