$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666333383a3a2f34382d3438203d3e203136393039.roa File: 326130663a363238373a666333383a3a2f34382d3438203d3e203136393039.roa (raw, json) Hash identifier: pXXAMYFKgqfkHtoXIjyapSUn/v4TUdkxWI0h6FrilGE= Subject key identifier: 22:B5:BB:44:82:1D:6F:37:A3:45:89:6F:99:6B:F2:3D:C1:AA:1D:A6 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 67CCFD349BA4763EEE86377315B153A725871E83 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666333383a3a2f34382d3438203d3e203136393039.roa Signing time: Fri 04 Jul 2025 00:47:42 +0000 ROA not before: Fri 04 Jul 2025 00:42:42 +0000 ROA not after: Fri 03 Jul 2026 00:47:42 +0000 asID: 16909 IP address blocks: 2a0f:6287:fc38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cc:fd:34:9b:a4:76:3e:ee:86:37:73:15:b1:53:a7:25:87:1e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:42 2025 GMT Not After : Jul 3 00:47:42 2026 GMT Subject: CN=22B5BB44821D6F37A345896F996BF23DC1AA1DA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:4c:c1:25:46:ba:84:7f:1e:da:bc:15:87: 57:c6:6e:27:13:b7:65:d3:d2:12:56:ec:ee:f6:9a: 83:d5:59:78:d5:ba:c0:ef:2d:0e:3d:62:7f:6a:99: 1a:0b:b4:87:38:60:85:17:59:f3:58:36:0b:8f:b7: 0f:7c:7d:82:f3:a8:ba:9e:28:78:bf:f2:27:e7:47: bb:64:0a:74:b3:c5:fb:17:cc:5a:7a:c8:26:16:35: b8:74:99:e3:c2:4b:44:c0:40:27:26:8c:bf:df:3e: fe:8d:65:f4:57:2d:14:88:80:da:86:93:43:0e:93: b7:f4:67:1b:31:f8:b2:3a:62:22:6b:72:60:29:86: 18:aa:fc:53:ab:0a:c8:4a:59:f2:48:4c:21:08:d4: b8:c1:5a:ac:a4:d7:f7:29:1a:e9:d5:17:c7:8a:cf: 80:97:83:77:3b:44:43:de:15:d9:c3:5e:48:d6:04: 1c:7b:34:bc:7a:66:d4:40:34:58:ae:5a:a9:32:e5: 65:c0:e1:31:10:b0:78:0a:82:2e:49:c3:6f:eb:f4: b4:aa:f0:c1:33:77:0d:b4:50:96:99:2d:44:52:06: 41:be:a4:47:b7:ae:ac:67:bb:5c:1d:47:c3:83:ef: 83:0a:af:5f:61:76:36:d1:9c:c0:a6:21:88:01:86: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B5:BB:44:82:1D:6F:37:A3:45:89:6F:99:6B:F2:3D:C1:AA:1D:A6 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666333383a3a2f34382d3438203d3e203136393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:fc38::/48 Signature Algorithm: sha256WithRSAEncryption 47:61:00:96:eb:96:2b:37:80:33:cb:e7:d1:e2:8a:77:43:35: 53:b8:e5:dd:60:0c:84:cd:a2:dc:78:65:bd:5d:04:b6:f1:f7: 8e:95:b6:ec:14:16:36:f2:87:65:b0:ef:34:e0:64:61:e4:f5: 6c:e4:4a:8d:4c:c6:25:a5:1e:06:16:8b:4b:dd:4b:ce:4f:0e: 5c:e1:27:c1:de:f1:2f:89:84:82:24:3e:b4:cf:d2:28:29:46: 47:7a:b7:35:68:0c:bd:04:4a:e2:d9:e5:30:6c:4d:a1:9f:6b: 54:a6:69:74:22:78:71:1d:f5:a8:7e:72:70:67:ce:c6:ca:51: 07:f1:ee:9e:02:98:97:3f:16:24:9d:94:5e:e7:37:ea:bf:8a: b7:43:cb:d5:8c:31:87:1a:26:02:ae:ab:ab:1f:62:1e:04:43: cc:01:d4:d0:c8:65:3e:35:0d:f0:4c:74:16:42:32:af:85:63: 4a:fc:9b:53:c1:4f:c2:24:40:83:20:c9:c1:64:18:68:4c:f0: b8:36:c2:63:1b:cd:c3:9a:82:81:ee:ab:83:db:28:60:e6:4f: 8a:e8:74:ab:3c:50:c8:06:0a:7f:13:61:eb:3e:db:a6:48:05: d6:22:ba:99:d7:fe:e5:b6:9e:53:aa:a5:50:ca:a5:a8:e1:1c: 0b:3f:35:af -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUZ8z9NJukdj7uhjdzFbFTpyWHHoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDJaFw0yNjA3MDMwMDQ3NDJaMDMxMTAvBgNV BAMTKDIyQjVCQjQ0ODIxRDZGMzdBMzQ1ODk2Rjk5NkJGMjNEQzFBQTFEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcEzBJUa6hH8e2rwVh1fGbicT t2XT0hJW7O72moPVWXjVusDvLQ49Yn9qmRoLtIc4YIUXWfNYNguPtw98fYLzqLqe KHi/8ifnR7tkCnSzxfsXzFp6yCYWNbh0mePCS0TAQCcmjL/fPv6NZfRXLRSIgNqG k0MOk7f0Zxsx+LI6YiJrcmAphhiq/FOrCshKWfJITCEI1LjBWqyk1/cpGunVF8eK z4CXg3c7REPeFdnDXkjWBBx7NLx6ZtRANFiuWqky5WXA4TEQsHgKgi5Jw2/r9LSq 8MEzdw20UJaZLURSBkG+pEe3rqxnu1wdR8OD74MKr19hdjbRnMCmIYgBhvdzAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQUIrW7RIIdbzejRYlvmWvyPcGqHaYwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjMzMzM4M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPYof8ODAN BgkqhkiG9w0BAQsFAAOCAQEAR2EAluuWKzeAM8vn0eKKd0M1U7jl3WAMhM2i3Hhl vV0EtvH3jpW27BQWNvKHZbDvNOBkYeT1bORKjUzGJaUeBhaLS91Lzk8OXOEnwd7x L4mEgiQ+tM/SKClGR3q3NWgMvQRK4tnlMGxNoZ9rVKZpdCJ4cR31qH5ycGfOxspR B/HungKYlz8WJJ2UXuc36r+Kt0PL1YwxhxomAq6rqx9iHgRDzAHU0MhlPjUN8Ex0 FkIyr4VjSvybU8FPwiRAgyDJwWQYaEzwuDbCYxvNw5qCge6rg9soYOZPiuh0qzxQ yAYKfxNh6z7bpkgF1iK6mdf+5baeU6qlUMqlqOEcCz81rw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:12:59 2025 by rpki-client