
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 6s2DkoojltKqiQeg2mkVwLGRiXWrLKAZaEd99OmS1w8=
Subject key identifier: 60:CF:6C:D2:77:19:13:F3:59:A8:C7:B9:FD:5F:80:83:3F:89:CC:A0
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 28A61477F08C8752959C4BCEE07A0E17BB8B91F8
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:44 +0000
ROA not before: Fri 04 Jul 2025 00:42:44 +0000
ROA not after: Fri 03 Jul 2026 00:47:44 +0000
asID: 396968
IP address blocks: 2a0f:6287:feff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a6:14:77:f0:8c:87:52:95:9c:4b:ce:e0:7a:0e:17:bb:8b:91:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:44 2025 GMT
Not After : Jul 3 00:47:44 2026 GMT
Subject: CN=60CF6CD2771913F359A8C7B9FD5F80833F89CCA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:5b:64:61:af:1f:b9:42:1a:77:fd:2e:00:
3e:b9:1c:1e:81:55:45:84:a7:4a:a8:ea:1c:bd:bf:
c7:b4:34:95:6d:8a:31:d7:6d:85:ac:a2:a9:93:c8:
6b:11:61:f3:4e:27:e1:56:60:e2:2a:cf:01:10:c1:
8e:a1:ed:26:6b:bc:2a:6b:f5:b2:82:1e:d2:f3:40:
6e:e6:50:74:b7:14:5b:3f:db:80:d1:19:81:5a:2e:
8a:cb:5f:95:74:53:54:f2:1d:c4:b2:f4:df:09:12:
4a:1c:08:3c:e0:b0:f5:61:cd:81:27:a2:15:41:95:
33:94:88:6c:41:27:71:d1:86:ec:9e:98:90:93:7a:
ce:9b:b8:38:58:73:04:08:eb:13:b7:3e:b9:57:d3:
4e:56:65:4f:93:7f:4c:6f:16:01:a3:44:16:55:73:
4e:af:8e:6c:96:ae:a4:f8:ad:21:8f:41:40:7d:3c:
af:a3:c0:f5:b0:a5:08:9b:96:d9:7d:64:13:dc:0e:
c7:76:af:d9:d5:21:29:3c:1e:8d:4e:52:82:3c:c3:
bc:55:d6:77:44:46:69:72:6f:d3:04:c4:70:04:ea:
9a:a8:e6:d3:bf:0e:b3:fa:ff:22:02:6d:20:f0:98:
f9:96:b2:6a:ff:cb:df:5e:35:b5:8e:6d:8d:d7:23:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:6C:D2:77:19:13:F3:59:A8:C7:B9:FD:5F:80:83:3F:89:CC:A0
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:feff::/48
Signature Algorithm: sha256WithRSAEncryption
0c:8f:44:24:68:82:83:e9:51:54:51:66:fd:6e:c0:f0:f8:6a:
87:37:e9:1b:89:60:5c:e5:3e:b7:3e:0d:4d:50:c9:32:da:e1:
55:a6:c6:20:e4:51:25:d0:b4:a6:fc:2c:b8:8b:50:98:01:ba:
d9:dd:40:cb:11:67:e4:64:6f:dc:47:56:d8:d9:70:80:7f:aa:
0d:2e:57:23:09:1f:d8:08:78:96:e5:a2:65:02:e4:e5:e7:28:
f5:23:fc:73:ef:7b:c0:a9:9b:c3:83:53:7c:50:3c:33:4f:db:
f0:43:34:8d:5d:e1:cd:31:b8:c4:07:38:9d:47:42:f8:d8:da:
4c:32:45:95:87:9e:a6:18:f6:14:09:02:66:8b:08:ee:a4:ca:
8a:96:3a:e2:62:ef:bc:44:cd:1b:7d:f5:f5:19:77:e6:19:bd:
84:e2:1c:2f:7d:f0:43:f5:17:6e:f9:93:b3:18:1c:9d:e5:18:
fc:d4:5e:ef:12:4d:2a:3f:e8:b4:1a:09:ee:71:aa:64:f1:f3:
7c:86:27:78:8e:a6:eb:2f:16:93:63:2a:ae:0b:20:d7:a2:89:
56:e0:8a:d0:42:b7:41:e1:e4:b3:c8:80:c5:6d:5e:dd:6f:8a:
6d:99:0e:1e:ac:17:71:a4:57:c5:51:58:fa:d3:85:f9:38:fa:
e9:09:a6:2e
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUKKYUd/CMh1KVnEvO4HoOF7uLkfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDRaFw0yNjA3MDMwMDQ3NDRaMDMxMTAvBgNV
BAMTKDYwQ0Y2Q0QyNzcxOTEzRjM1OUE4QzdCOUZENUY4MDgzM0Y4OUNDQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgltkYa8fuUIad/0uAD65HB6B
VUWEp0qo6hy9v8e0NJVtijHXbYWsoqmTyGsRYfNOJ+FWYOIqzwEQwY6h7SZrvCpr
9bKCHtLzQG7mUHS3FFs/24DRGYFaLorLX5V0U1TyHcSy9N8JEkocCDzgsPVhzYEn
ohVBlTOUiGxBJ3HRhuyemJCTes6buDhYcwQI6xO3PrlX005WZU+Tf0xvFgGjRBZV
c06vjmyWrqT4rSGPQUB9PK+jwPWwpQibltl9ZBPcDsd2r9nVISk8Ho1OUoI8w7xV
1ndERmlyb9MExHAE6pqo5tO/DrP6/yICbSDwmPmWsmr/y99eNbWObY3XI9rbAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUYM9s0ncZE/NZqMe5/V+Agz+JzKAwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjU2NjY2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/7/
MA0GCSqGSIb3DQEBCwUAA4IBAQAMj0QkaIKD6VFUUWb9bsDw+GqHN+kbiWBc5T63
Pg1NUMky2uFVpsYg5FEl0LSm/Cy4i1CYAbrZ3UDLEWfkZG/cR1bY2XCAf6oNLlcj
CR/YCHiW5aJlAuTl5yj1I/xz73vAqZvDg1N8UDwzT9vwQzSNXeHNMbjEBzidR0L4
2NpMMkWVh56mGPYUCQJmiwjupMqKljriYu+8RM0bffX1GXfmGb2E4hwvffBD9Rdu
+ZOzGByd5Rj81F7vEk0qP+i0Ggnucapk8fN8hid4jqbrLxaTYyquCyDXoolW4IrQ
QrdB4eSzyIDFbV7db4ptmQ4erBdxpFfFUVj604X5OPrpCaYu
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:33 2025 by rpki-client