$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: AJOdI9j0HrDSqA3bPJQfvCyB4S9EdNyVWUU9ESGjg2M= Subject key identifier: 59:B5:02:6A:84:65:09:DD:C1:79:64:B3:B0:FE:E4:E6:1F:E6:96:32 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 206E831B8317B6B1ABEE6AFE59C71E72DAF16E86 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:47 +0000 ROA not before: Fri 04 Jul 2025 00:42:47 +0000 ROA not after: Fri 03 Jul 2026 00:47:47 +0000 asID: 396968 IP address blocks: 2a0f:6287:f681::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6e:83:1b:83:17:b6:b1:ab:ee:6a:fe:59:c7:1e:72:da:f1:6e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:47 2025 GMT Not After : Jul 3 00:47:47 2026 GMT Subject: CN=59B5026A846509DDC17964B3B0FEE4E61FE69632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:20:95:8a:0f:08:18:fd:16:3b:fb:52:63: a5:fd:3c:e8:fc:cf:b8:cb:f0:62:21:ca:7c:90:85: 92:81:1b:11:44:3a:f4:62:7a:3e:93:16:ca:05:7a: 47:5c:13:bc:3f:cc:90:b1:8e:28:9a:1d:9d:52:24: db:29:3b:84:51:ec:ce:e5:36:71:b0:e1:21:40:d8: 70:2f:64:60:ff:60:06:59:69:e3:b4:9b:55:07:67: c3:29:e4:a4:e5:4c:62:e9:08:38:86:69:dd:72:40: c0:cd:48:79:bc:ef:44:e9:60:37:9b:95:8d:d5:7b: a1:8d:a0:15:0a:fe:47:53:cd:78:4c:94:3e:22:27: 90:88:86:43:9d:d4:84:ed:c5:40:51:82:e8:d6:86: 17:0f:cf:dd:79:cd:ca:0d:8c:00:46:8d:87:66:27: 12:8c:43:94:45:60:bb:1c:52:e5:20:78:f3:78:03: 27:4e:3b:06:56:5b:bc:10:fd:9b:01:96:73:a8:eb: 50:7a:be:60:1d:9d:84:23:c2:c7:55:db:6d:f2:43: 7e:17:8d:bd:20:33:ab:4b:89:a9:c0:df:53:5b:eb: bb:b1:a3:4c:de:ec:e9:79:36:d3:e8:35:ee:e3:51: a2:6b:9f:c5:c3:d2:9b:cf:94:3b:57:d5:5b:c1:e8: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B5:02:6A:84:65:09:DD:C1:79:64:B3:B0:FE:E4:E6:1F:E6:96:32 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:f681::/48 Signature Algorithm: sha256WithRSAEncryption b1:c0:3d:55:17:6d:88:c9:9d:97:ee:89:31:16:33:5b:fd:9a: a9:46:6f:02:cf:87:22:1f:92:3b:bd:b5:2f:78:16:b4:00:b1: 61:d9:59:61:f3:a6:1b:3b:ab:5a:2c:9f:46:a9:83:dc:78:e6: 8b:55:93:47:33:1a:8a:be:01:da:29:24:5a:a0:1e:74:f7:d8: 81:8b:03:cf:28:61:3a:4e:85:84:78:f1:f8:0c:0c:5e:f3:ec: 85:89:ba:84:24:2c:dd:43:9d:16:fd:3c:dc:b2:c6:30:fc:13: 20:18:bd:de:bd:28:d7:c6:94:10:27:93:e4:c0:0b:58:c2:e8: 1e:8a:f4:75:dc:a5:ac:6d:42:8c:35:a8:39:0a:78:0d:27:4c: 36:10:f0:5a:23:89:d7:c0:e7:71:22:c8:27:eb:a1:82:b3:d5: 13:2f:91:e2:2d:6c:e1:83:5e:9f:27:6b:aa:8c:81:65:77:77: 30:30:b2:0d:af:1a:17:f0:08:4d:bf:24:b4:49:1a:c1:61:4b: 3a:d8:df:23:6f:62:28:68:fa:88:37:f1:93:2b:62:8a:1c:94: cd:b1:f5:6c:f0:2b:52:18:54:27:a2:fc:ff:ad:f4:03:6b:0a: 10:54:bb:1d:43:ff:6f:35:58:8c:56:b2:12:88:47:36:2e:af: 14:66:6e:6f -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUIG6DG4MXtrGr7mr+WccectrxboYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDdaFw0yNjA3MDMwMDQ3NDdaMDMxMTAvBgNV BAMTKDU5QjUwMjZBODQ2NTA5RERDMTc5NjRCM0IwRkVFNEU2MUZFNjk2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGyCVig8IGP0WO/tSY6X9POj8 z7jL8GIhynyQhZKBGxFEOvRiej6TFsoFekdcE7w/zJCxjiiaHZ1SJNspO4RR7M7l NnGw4SFA2HAvZGD/YAZZaeO0m1UHZ8Mp5KTlTGLpCDiGad1yQMDNSHm870TpYDeb lY3Ve6GNoBUK/kdTzXhMlD4iJ5CIhkOd1ITtxUBRgujWhhcPz915zcoNjABGjYdm JxKMQ5RFYLscUuUgePN4AydOOwZWW7wQ/ZsBlnOo61B6vmAdnYQjwsdV223yQ34X jb0gM6tLianA31Nb67uxo0ze7Ol5NtPoNe7jUaJrn8XD0pvPlDtX1VvB6P0hAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUWbUCaoRlCd3BeWSzsP7k5h/mljIwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzYzODMxM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/aB MA0GCSqGSIb3DQEBCwUAA4IBAQCxwD1VF22IyZ2X7okxFjNb/ZqpRm8Cz4ciH5I7 vbUveBa0ALFh2Vlh86YbO6taLJ9GqYPceOaLVZNHMxqKvgHaKSRaoB5099iBiwPP KGE6ToWEePH4DAxe8+yFibqEJCzdQ50W/TzcssYw/BMgGL3evSjXxpQQJ5PkwAtY wugeivR13KWsbUKMNag5CngNJ0w2EPBaI4nXwOdxIsgn66GCs9UTL5HiLWzhg16f J2uqjIFld3cwMLINrxoX8AhNvyS0SRrBYUs62N8jb2IoaPqIN/GTK2KKHJTNsfVs 8CtSGFQnovz/rfQDawoQVLsdQ/9vNViMVrISiEc2Lq8UZm5v -----END CERTIFICATE-----Generated at Wed Nov 5 11:00:29 2025 by rpki-client