$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: 4s2Utb+2CfAINlPQIxntyzVQIEE92sJ1KT5YpWI488c= Subject key identifier: EB:D2:0B:AB:C5:98:ED:A4:C5:80:98:ED:5C:B8:24:B8:B3:1D:FD:FB Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 6F371AF5F4421480E0079813941571B0C2EC1559 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:45 +0000 ROA not before: Fri 04 Jul 2025 00:42:45 +0000 ROA not after: Fri 03 Jul 2026 00:47:45 +0000 asID: 396968 IP address blocks: 2a0f:6287:fde7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:37:1a:f5:f4:42:14:80:e0:07:98:13:94:15:71:b0:c2:ec:15:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:45 2025 GMT Not After : Jul 3 00:47:45 2026 GMT Subject: CN=EBD20BABC598EDA4C58098ED5CB824B8B31DFDFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:78:11:36:30:b7:d4:19:3a:1e:2e:bb:01: 7e:f8:9c:12:fd:a0:bf:55:56:c8:01:14:02:f2:66: 9c:07:e2:62:5b:f3:22:37:a7:f3:aa:26:9d:f2:f1: 43:67:83:57:37:c3:df:22:0d:9c:f9:72:96:11:34: d5:a3:23:f9:6e:91:1d:97:18:92:25:7b:43:f2:84: e7:e8:8a:63:0b:5c:a8:45:8c:97:83:fb:9f:8d:7d: 03:b6:6b:d5:36:2e:2e:69:f0:d9:a3:db:d1:36:0c: 9f:37:ed:9d:69:07:69:80:4d:14:85:d4:17:50:d1: a6:e8:0f:64:7b:3b:a5:04:bf:31:f9:5d:47:65:cf: c6:5f:39:8a:9b:5e:a6:4d:03:c0:fb:9c:d7:32:cc: a2:38:48:a0:7d:57:12:98:3a:09:8b:d6:13:d3:8e: f4:d4:b5:cb:14:bf:a6:8d:e6:b7:2d:45:1d:38:f4: c3:a6:42:c4:d6:df:94:1e:18:4a:d9:b0:4d:30:11: 45:fb:19:af:fc:9f:4a:92:fe:74:42:17:8a:28:c4: 50:44:b2:77:9d:40:23:11:9d:ea:5e:ed:56:6f:85: 6a:6e:91:de:3a:8d:cc:1d:fe:87:b5:09:34:6f:36: 5e:8f:09:27:01:0b:ca:ae:37:e3:1b:82:ec:2c:e0: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D2:0B:AB:C5:98:ED:A4:C5:80:98:ED:5C:B8:24:B8:B3:1D:FD:FB X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:fde7::/48 Signature Algorithm: sha256WithRSAEncryption 86:7b:e6:c0:41:de:84:33:02:00:36:20:f8:c5:80:82:72:7a: ff:94:d8:3f:56:b2:61:87:69:19:42:60:a9:6c:ba:5e:67:e4: 9c:b4:68:57:b0:45:24:8a:1f:dc:d8:c9:a5:46:73:14:17:c9: ed:c1:99:b7:4e:46:17:65:40:45:ff:d1:5a:7c:b9:3b:44:58: e3:45:12:53:9c:fd:9d:ea:1b:04:0d:6e:da:4c:04:dc:5c:06: 95:7b:35:0b:55:95:27:ae:3a:79:aa:78:fa:64:0a:34:ec:c5: 02:e0:4e:8f:92:2b:30:f0:c5:a8:91:6f:c0:b6:fb:66:d1:f0: 4e:6f:9c:6f:e3:69:77:c6:ef:ad:0d:70:da:1b:76:f2:3f:c1: 79:e5:67:71:7e:16:96:63:12:1f:77:1f:79:aa:da:db:7d:16: b2:7c:dd:06:5b:0a:fe:62:91:51:13:ca:3c:ef:20:5d:12:31: dc:76:0e:ca:95:37:93:30:3c:e8:c5:13:a2:c2:ac:e8:44:01: 43:9d:27:e8:3b:e5:5a:16:14:03:1f:3f:9e:0c:0f:80:28:74: dd:a6:54:86:b2:73:07:b6:87:dd:71:22:52:27:a9:fc:bb:bb: 44:f1:11:38:68:b6:80:25:b0:1a:9e:5e:40:3d:36:9b:32:e3: 91:6b:5c:15 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUbzca9fRCFIDgB5gTlBVxsMLsFVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV BAMTKEVCRDIwQkFCQzU5OEVEQTRDNTgwOThFRDVDQjgyNEI4QjMxREZERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUL3gRNjC31Bk6Hi67AX74nBL9 oL9VVsgBFALyZpwH4mJb8yI3p/OqJp3y8UNng1c3w98iDZz5cpYRNNWjI/lukR2X GJIle0PyhOfoimMLXKhFjJeD+5+NfQO2a9U2Li5p8Nmj29E2DJ837Z1pB2mATRSF 1BdQ0aboD2R7O6UEvzH5XUdlz8ZfOYqbXqZNA8D7nNcyzKI4SKB9VxKYOgmL1hPT jvTUtcsUv6aN5rctRR049MOmQsTW35QeGErZsE0wEUX7Ga/8n0qS/nRCF4ooxFBE snedQCMRnepe7VZvhWpukd46jcwd/oe1CTRvNl6PCScBC8quN+Mbguws4J/PAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQU69ILq8WY7aTFgJjtXLgkuLMd/fswHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjQ2NTM3M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/3n MA0GCSqGSIb3DQEBCwUAA4IBAQCGe+bAQd6EMwIANiD4xYCCcnr/lNg/VrJhh2kZ QmCpbLpeZ+SctGhXsEUkih/c2MmlRnMUF8ntwZm3TkYXZUBF/9FafLk7RFjjRRJT nP2d6hsEDW7aTATcXAaVezULVZUnrjp5qnj6ZAo07MUC4E6Pkisw8MWokW/Atvtm 0fBOb5xv42l3xu+tDXDaG3byP8F55WdxfhaWYxIfdx95qtrbfRayfN0GWwr+YpFR E8o87yBdEjHcdg7KlTeTMDzoxROiwqzoRAFDnSfoO+VaFhQDHz+eDA+AKHTdplSG snMHtofdcSJSJ6n8u7tE8RE4aLaAJbAanl5APTabMuORa1wV -----END CERTIFICATE-----Generated at Wed Nov 5 11:01:10 2025 by rpki-client