
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: jWjtHz4qrmJiuFqxbZb70ISPWQWmndOflQhx7bolXF4=
Subject key identifier: B3:0F:60:FA:51:C1:81:D5:0A:DD:68:26:35:5A:CB:29:0F:75:88:30
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 632DD1F5207B583BFA0534B54C911E678DAE9CE6
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 04 Jul 2025 00:47:43 +0000
ROA not before: Fri 04 Jul 2025 00:42:43 +0000
ROA not after: Fri 03 Jul 2026 00:47:43 +0000
asID: 396968
IP address blocks: 2a0f:6287:ffdf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2d:d1:f5:20:7b:58:3b:fa:05:34:b5:4c:91:1e:67:8d:ae:9c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jul 4 00:42:43 2025 GMT
Not After : Jul 3 00:47:43 2026 GMT
Subject: CN=B30F60FA51C181D50ADD6826355ACB290F758830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:1c:cb:7c:0a:78:90:df:9e:24:a2:97:2b:
34:6c:ed:b1:c4:4b:09:f0:c8:75:e2:cd:b6:17:6a:
37:7c:ec:fb:0e:c8:e3:6e:22:2a:b1:cd:15:98:50:
7f:47:62:49:f5:ef:c4:82:4e:f7:1f:5f:28:5c:9f:
30:b7:38:62:39:9f:ea:8f:12:14:62:91:56:d2:e6:
5a:a0:73:bd:28:49:08:6d:3a:7e:ea:19:5f:3d:ea:
7d:7d:26:c0:57:23:7b:f2:95:12:57:e0:76:1b:12:
b5:17:1a:e3:74:eb:09:5f:3d:c8:4a:da:ff:42:35:
d1:5c:77:60:c8:bf:19:23:49:be:d3:1d:1f:2e:c1:
6a:8c:3c:54:b5:43:e2:b9:41:df:5d:de:f6:6d:52:
37:25:86:b8:ac:de:b5:29:ff:77:c3:bf:9d:02:34:
ce:e2:ce:c5:ef:7c:38:92:4c:af:3e:8e:b3:fc:f9:
0f:38:b3:7d:08:21:d8:1c:6f:43:e3:ca:f8:75:0e:
41:10:76:eb:76:1c:9a:b8:b1:a6:cf:4d:47:e6:81:
c5:4b:47:5e:45:91:8f:80:fd:0a:9c:27:de:4d:a1:
9c:46:16:1a:68:53:4b:60:3c:4e:90:77:33:ae:fc:
ef:36:7c:21:c1:1a:18:38:cd:0a:37:7a:ce:49:8a:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0F:60:FA:51:C1:81:D5:0A:DD:68:26:35:5A:CB:29:0F:75:88:30
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ffdf::/48
Signature Algorithm: sha256WithRSAEncryption
46:14:80:c3:42:20:4c:07:51:5a:72:00:f3:55:c7:fb:98:10:
7e:68:bf:3c:8f:e9:8a:de:41:ac:35:47:df:d9:f2:05:12:64:
aa:82:3b:91:21:89:f0:32:f0:77:25:02:03:c5:10:b4:99:e8:
c0:41:f5:a8:2f:3f:12:7e:ff:86:0f:a8:26:12:55:bb:af:cb:
33:99:71:4a:f2:29:1f:d5:70:74:3a:d1:46:13:e5:ae:77:34:
fb:b6:da:4f:5d:c6:35:62:fa:61:d7:1d:9d:24:fa:83:72:24:
59:cc:00:c7:36:b8:35:2d:ec:8e:c1:97:da:61:cb:37:f1:80:
86:82:ba:c2:0f:30:10:77:8d:8d:ac:a0:27:f9:69:d5:84:e8:
49:e4:19:96:52:80:cc:b9:f2:36:02:67:c3:c0:0f:e0:ca:40:
ea:fa:97:1e:86:7a:f2:1c:22:a8:19:7c:9c:61:37:57:24:df:
69:5d:29:1b:c3:fc:23:d8:c7:c2:89:b5:6d:2e:52:14:a0:6a:
88:51:d4:be:62:f0:86:e9:d3:51:01:3b:35:35:2e:f0:6e:b1:
42:23:b3:a2:6e:c6:85:d7:19:4e:74:38:e8:88:e9:d8:fb:f9:
62:13:1e:fa:98:5c:49:21:61:10:49:72:a0:4b:dd:e9:9a:9d:
b9:f8:fc:9a
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUYy3R9SB7WDv6BTS1TJEeZ42unOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDNaFw0yNjA3MDMwMDQ3NDNaMDMxMTAvBgNV
BAMTKEIzMEY2MEZBNTFDMTgxRDUwQURENjgyNjM1NUFDQjI5MEY3NTg4MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tRzLfAp4kN+eJKKXKzRs7bHE
SwnwyHXizbYXajd87PsOyONuIiqxzRWYUH9HYkn178SCTvcfXyhcnzC3OGI5n+qP
EhRikVbS5lqgc70oSQhtOn7qGV896n19JsBXI3vylRJX4HYbErUXGuN06wlfPchK
2v9CNdFcd2DIvxkjSb7THR8uwWqMPFS1Q+K5Qd9d3vZtUjclhris3rUp/3fDv50C
NM7izsXvfDiSTK8+jrP8+Q84s30IIdgcb0Pjyvh1DkEQdut2HJq4sabPTUfmgcVL
R15FkY+A/QqcJ95NoZxGFhpoU0tgPE6QdzOu/O82fCHBGhg4zQo3es5JijdLAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUsw9g+lHBgdUK3WgmNVrLKQ91iDAwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjY2NDY2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih//f
MA0GCSqGSIb3DQEBCwUAA4IBAQBGFIDDQiBMB1FacgDzVcf7mBB+aL88j+mK3kGs
NUff2fIFEmSqgjuRIYnwMvB3JQIDxRC0mejAQfWoLz8Sfv+GD6gmElW7r8szmXFK
8ikf1XB0OtFGE+WudzT7ttpPXcY1Yvph1x2dJPqDciRZzADHNrg1LeyOwZfaYcs3
8YCGgrrCDzAQd42NrKAn+WnVhOhJ5BmWUoDMufI2AmfDwA/gykDq+pcehnryHCKo
GXycYTdXJN9pXSkbw/wj2MfCibVtLlIUoGqIUdS+YvCG6dNRATs1NS7wbrFCI7Oi
bsaF1xlOdDjoiOnY+/liEx76mFxJIWEQSXKgS93pmp25+Pya
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:03:06 2025 by rpki-client