
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: poez45YiAdS4dp4yCA57STpG2F52i31nwkqcpE1U2nU=
Subject key identifier: 9F:F1:38:33:63:DB:23:36:0E:7E:5B:40:67:BD:F0:37:98:28:2C:50
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 34F8293CCFC44C7E8ABF4707C53C5E9C18AB983D
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:43 +0000
ROA not before: Fri 04 Jul 2025 00:42:43 +0000
ROA not after: Fri 03 Jul 2026 00:47:43 +0000
asID: 396968
IP address blocks: 2a0f:6287:f9d3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f8:29:3c:cf:c4:4c:7e:8a:bf:47:07:c5:3c:5e:9c:18:ab:98:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:43 2025 GMT
Not After : Jul 3 00:47:43 2026 GMT
Subject: CN=9FF1383363DB23360E7E5B4067BDF03798282C50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:48:fa:d9:46:3d:0c:56:e4:45:dd:09:f4:
fb:10:10:19:e8:40:18:4c:a4:a3:31:26:66:88:67:
8e:3a:97:de:db:0b:66:11:99:50:0a:3b:5b:88:bc:
e7:98:06:8d:80:d6:dd:fe:b4:eb:5d:43:db:9d:40:
17:5e:73:b7:99:93:51:4e:ec:23:a2:68:d8:79:08:
13:c2:05:31:c7:a9:94:c8:47:28:54:32:ce:da:d9:
fe:b6:9d:fa:b7:cd:db:d8:49:71:5b:c6:7f:65:cc:
25:8c:da:fe:52:dc:ca:74:69:b7:fb:cb:ea:34:0b:
cc:cd:ce:b9:b1:1c:bb:06:19:8e:e8:19:3c:4b:34:
4e:1f:3f:b6:2c:7c:b2:e2:45:11:3e:f8:a0:33:ee:
2e:82:ac:47:34:2b:a3:7f:bf:cc:7a:9d:9c:dd:58:
90:dd:fa:1b:b6:f4:eb:5d:80:cb:dc:ce:2b:88:a9:
20:2b:c6:c2:50:80:3c:f4:ae:0e:e4:c4:9a:6a:98:
55:2b:18:dd:e0:5d:a2:48:2f:b1:38:16:0b:02:46:
a5:21:c9:84:a6:c7:99:ac:e8:e4:f0:46:a9:a3:c5:
5a:4b:12:a1:d5:08:ee:b8:be:65:ce:45:8e:f6:23:
4c:da:9a:fc:5f:27:38:14:b6:9a:f7:85:ae:76:4a:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:38:33:63:DB:23:36:0E:7E:5B:40:67:BD:F0:37:98:28:2C:50
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f9d3::/48
Signature Algorithm: sha256WithRSAEncryption
61:bd:a1:f0:2e:6b:20:ee:fe:83:b2:b6:cd:89:c3:17:23:8c:
77:96:00:b4:4e:fe:08:22:a0:6e:4a:18:d2:cd:64:55:c9:77:
1f:eb:be:cb:d1:3a:05:37:78:79:68:c5:63:bb:5a:4c:a7:9e:
05:0a:84:ca:df:0f:04:9a:54:f9:38:b8:20:1a:1d:41:39:ff:
bd:fc:30:a5:55:b0:0c:62:c9:eb:15:39:37:a7:d3:42:b2:97:
42:4e:30:0d:8d:18:6d:13:9a:d4:b4:aa:99:56:5b:aa:96:64:
8c:1c:5e:75:60:45:f9:cf:9f:83:c9:5f:00:21:e1:ce:51:84:
eb:fe:a7:fe:24:56:82:8d:5b:13:ed:ea:46:16:19:ee:ca:7b:
8b:a5:98:03:29:19:cf:28:1b:b8:9d:f4:b6:5f:e2:8c:6f:33:
8a:92:cd:d9:1e:ba:e5:41:93:6a:12:62:54:bb:5a:66:1c:49:
a5:d8:b6:8f:39:76:7e:d1:88:f9:03:11:f0:c8:44:23:4b:f6:
27:54:08:73:4a:e5:80:01:c9:12:a9:31:80:90:b2:c0:80:8a:
c7:25:33:44:1f:cc:30:93:f0:c9:51:1e:a4:b1:fb:9e:19:56:
f4:84:7d:ad:e3:20:ad:37:0f:05:cb:ed:fd:0c:6b:62:b6:3b:
9a:6b:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:59:57 2025 by rpki-client