
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: z9vO/FtvscSwEN64n7n/J8RrcKqR/BJ5Iumq0vY3hO0=
Subject key identifier: A0:9A:B0:A5:BA:B1:22:EB:AB:54:73:84:2C:B4:57:17:D5:F6:D0:E8
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 4D3ECD847A06D3B753B572B39B5CECB5713F9F76
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:45 +0000
ROA not before: Fri 04 Jul 2025 00:42:45 +0000
ROA not after: Fri 03 Jul 2026 00:47:45 +0000
asID: 396968
IP address blocks: 2a0f:6287:fb74::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:3e:cd:84:7a:06:d3:b7:53:b5:72:b3:9b:5c:ec:b5:71:3f:9f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:45 2025 GMT
Not After : Jul 3 00:47:45 2026 GMT
Subject: CN=A09AB0A5BAB122EBAB5473842CB45717D5F6D0E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:66:ef:6b:16:c6:49:8e:5a:53:28:75:eb:
92:50:70:1d:90:3d:5a:dc:ea:76:0a:89:9c:d9:4e:
2f:79:6d:bf:ee:8c:43:1b:f9:ce:4f:12:49:82:66:
ac:b8:01:b7:f5:45:c9:cc:2f:90:7c:dc:81:ee:bb:
13:94:51:36:f6:ba:0f:8d:03:93:fa:49:c4:1c:bd:
e2:fb:c2:24:46:3b:75:86:48:8a:80:cc:42:2e:0f:
f3:51:91:69:23:a4:4d:1b:16:27:bf:8e:7e:ba:bf:
1e:c3:45:df:e3:92:37:01:28:d6:ba:ea:f9:07:3f:
dd:21:07:b6:e5:b7:04:ed:52:95:c2:37:06:fa:da:
1c:47:4b:8a:89:41:ce:6a:33:53:9f:c2:3f:4e:77:
7f:f1:a7:6e:e9:d6:17:64:a9:9a:bc:bc:86:80:db:
0e:94:02:2e:39:59:16:c8:4b:94:dc:d0:b8:12:7d:
2d:fd:ce:f1:22:5e:bc:ab:2b:d7:18:4b:db:00:a9:
16:21:36:d1:1b:3e:4c:b0:39:e8:b4:21:9c:69:e0:
10:f0:f8:9b:ad:c7:e4:ff:53:c4:a5:f5:cd:9b:07:
b8:e6:27:88:54:f2:21:b9:75:d2:3e:38:66:22:09:
8a:80:27:60:f9:80:78:50:39:8d:70:04:40:30:ca:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:B0:A5:BA:B1:22:EB:AB:54:73:84:2C:B4:57:17:D5:F6:D0:E8
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fb74::/48
Signature Algorithm: sha256WithRSAEncryption
22:03:5c:a2:39:97:10:16:94:34:39:1b:29:95:19:91:4c:ca:
23:8b:2b:8c:a4:e9:31:f5:1b:c4:44:c5:2d:af:cf:56:63:42:
ce:4c:c6:a1:43:f9:7e:64:8c:c5:14:53:41:dc:56:a0:49:ca:
1d:e4:5a:01:54:82:de:97:f3:07:7b:df:25:e3:4a:6b:48:14:
9a:c3:b1:de:47:d8:b3:c6:55:22:b9:7a:06:c4:95:71:02:f4:
11:15:4b:5c:95:84:b6:60:f2:85:b2:77:fa:8d:92:5a:ba:26:
21:d4:e0:c7:ce:3d:da:45:20:7e:01:0c:e6:44:ba:f5:6f:fd:
bb:60:7f:81:69:d8:ff:8b:cc:15:d5:e6:6b:70:12:d9:aa:a3:
a1:9b:bd:81:d4:76:4b:32:a7:5d:3e:79:96:20:8c:8f:bc:75:
ca:7a:dd:08:85:4d:63:5a:12:61:4c:78:63:bb:19:51:b2:a4:
07:45:db:ef:ae:0b:81:04:8e:13:be:56:55:f6:19:dd:41:ff:
bc:2a:4c:79:12:09:11:13:7d:3b:cb:9c:5d:de:62:f7:a3:47:
15:cc:4f:22:49:79:0f:1e:00:e6:94:fa:90:78:30:8f:c9:88:
25:8b:e4:9a:15:9a:c9:2e:e1:97:21:98:3b:f5:f3:4c:f7:d7:
26:d9:e4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:25 2025 by rpki-client