
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663536663a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663536663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: /lYfDHxeUKsqdIygzsKFvFmN3ik3crz/Xb04oGWSQGY=
Subject key identifier: B6:54:BF:28:3C:8B:4B:C0:31:CB:0D:A2:52:C7:61:0B:BC:3A:12:FB
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 3EBB1BED40B19431F19031455F85A5D255B61D27
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663536663a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:47 +0000
ROA not before: Fri 04 Jul 2025 00:42:47 +0000
ROA not after: Fri 03 Jul 2026 00:47:47 +0000
asID: 396968
IP address blocks: 2a0f:6287:f56f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:bb:1b:ed:40:b1:94:31:f1:90:31:45:5f:85:a5:d2:55:b6:1d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:47 2025 GMT
Not After : Jul 3 00:47:47 2026 GMT
Subject: CN=B654BF283C8B4BC031CB0DA252C7610BBC3A12FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:76:95:dc:2f:be:86:0a:cf:a5:ca:3d:4c:
6f:be:93:ba:1b:ec:22:f7:5f:02:39:c6:5a:3f:8a:
4c:24:61:5b:59:9d:56:8b:3f:72:6a:bc:0b:31:0d:
31:f1:0d:ac:8e:78:22:6e:f7:bb:4c:5c:dc:93:a0:
30:0d:47:60:b5:e9:80:5a:8a:f8:7e:e0:10:cd:a1:
dc:4a:12:65:c6:d6:b0:b9:81:67:bc:d7:4c:fc:f9:
48:a3:6c:6e:11:b0:2d:7c:3f:e8:4f:d3:fa:d5:ee:
af:b3:9b:5a:f8:07:a0:f2:3d:c0:a6:63:68:f3:ba:
c1:69:ff:36:02:28:22:4d:86:42:48:5e:e8:02:df:
e1:68:67:a6:10:07:c9:75:10:cc:77:92:4b:d5:bf:
37:1b:21:8e:70:fc:09:ae:7e:b1:23:c9:c0:50:87:
e7:c6:8b:c1:7e:d5:63:91:5a:8f:d2:86:48:fd:28:
bc:5b:00:72:0e:5b:5f:7c:d3:14:af:f4:a5:98:94:
f0:98:9f:56:ee:f0:2c:5b:8e:e4:72:a3:64:4e:06:
af:89:27:3d:da:25:9a:88:b6:11:28:a8:a4:db:e2:
d5:57:72:5c:fd:c3:f2:e2:60:87:05:76:ce:ee:ff:
f0:4e:42:84:7c:50:6a:c5:38:a8:3d:5d:99:55:0a:
87:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:54:BF:28:3C:8B:4B:C0:31:CB:0D:A2:52:C7:61:0B:BC:3A:12:FB
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663536663a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f56f::/48
Signature Algorithm: sha256WithRSAEncryption
9a:8f:d2:ce:be:7a:27:68:fc:66:e9:ba:59:6d:e8:53:cf:1e:
10:9e:bc:63:f9:21:0b:47:21:5f:80:24:90:7f:bf:99:2a:65:
09:24:94:af:ca:ef:0a:4f:a8:19:06:c2:c5:71:fe:96:a7:a9:
1d:8f:f1:65:c7:51:2f:d5:8d:dd:a4:33:f4:e8:09:6a:7a:1b:
a4:1b:2f:7b:e6:ef:a4:c5:ba:c0:8b:21:46:d9:51:60:77:83:
55:50:53:ce:df:41:40:58:0f:22:f4:65:0f:56:6e:f6:a7:a1:
79:51:23:08:68:5e:fe:97:1a:c4:b7:c0:22:7c:8d:92:c8:e0:
f1:7f:3d:c9:9c:3b:09:ea:5c:76:ad:ad:bb:6e:0c:bf:99:73:
45:82:8d:ca:e1:5f:cb:15:ac:ef:ae:67:de:74:ed:3d:20:7f:
36:f4:70:c4:08:f9:d5:59:a1:2b:58:6a:49:be:ab:3c:24:cb:
a2:ff:62:13:06:b2:2d:ca:3b:d4:d2:e1:ce:3b:da:41:77:ba:
9b:fb:ab:30:58:eb:86:28:5a:b7:26:4c:0e:46:03:cf:af:40:
2f:c8:94:58:e1:81:bb:6e:e3:91:b2:97:bd:55:6c:b6:54:26:
71:38:7a:20:84:cc:7e:89:09:d4:96:99:66:a6:fe:05:30:8d:
c4:ce:fe:c1
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUPrsb7UCxlDHxkDFFX4Wl0lW2HScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDdaFw0yNjA3MDMwMDQ3NDdaMDMxMTAvBgNV
BAMTKEI2NTRCRjI4M0M4QjRCQzAzMUNCMERBMjUyQzc2MTBCQkMzQTEyRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSnaV3C++hgrPpco9TG++k7ob
7CL3XwI5xlo/ikwkYVtZnVaLP3JqvAsxDTHxDayOeCJu97tMXNyToDANR2C16YBa
ivh+4BDNodxKEmXG1rC5gWe810z8+UijbG4RsC18P+hP0/rV7q+zm1r4B6DyPcCm
Y2jzusFp/zYCKCJNhkJIXugC3+FoZ6YQB8l1EMx3kkvVvzcbIY5w/AmufrEjycBQ
h+fGi8F+1WORWo/Shkj9KLxbAHIOW1980xSv9KWYlPCYn1bu8CxbjuRyo2ROBq+J
Jz3aJZqIthEoqKTb4tVXclz9w/LiYIcFds7u//BOQoR8UGrFOKg9XZlVCoctAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUtlS/KDyLS8Axyw2iUsdhC7w6EvswHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzUzNjY2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/Vv
MA0GCSqGSIb3DQEBCwUAA4IBAQCaj9LOvnonaPxm6bpZbehTzx4Qnrxj+SELRyFf
gCSQf7+ZKmUJJJSvyu8KT6gZBsLFcf6Wp6kdj/Flx1Ev1Y3dpDP06AlqehukGy97
5u+kxbrAiyFG2VFgd4NVUFPO30FAWA8i9GUPVm72p6F5USMIaF7+lxrEt8AifI2S
yODxfz3JnDsJ6lx2ra27bgy/mXNFgo3K4V/LFazvrmfedO09IH829HDECPnVWaEr
WGpJvqs8JMui/2ITBrItyjvU0uHOO9pBd7qb+6swWOuGKFq3JkwORgPPr0AvyJRY
4YG7buORspe9VWy2VCZxOHoghMx+iQnUlplmpv4FMI3Ezv7B
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:01:01 2025 by rpki-client