$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a3a2f33322d3438203d3e20323134343230.roa File: 326130363a613030303a3a2f33322d3438203d3e20323134343230.roa (raw, json) Hash identifier: 9JZzMCJAELBsiTvytsIe+HR/s0JxrrsJjiQWl8yw42A= Subject key identifier: BA:72:09:E1:23:65:AC:34:C1:99:2A:6D:DA:67:50:9F:22:3B:0A:A7 Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 7D9E4B4EF871FE2C8421D58CEF0D76989F1556CB Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a3a2f33322d3438203d3e20323134343230.roa Signing time: Fri 24 Jul 2026 13:19:09 +0000 ROA not before: Fri 24 Jul 2026 13:14:09 +0000 ROA not after: Fri 23 Jul 2027 13:19:09 +0000 asID: 214420 IP address blocks: 2a06:a000::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9e:4b:4e:f8:71:fe:2c:84:21:d5:8c:ef:0d:76:98:9f:15:56:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Jul 24 13:14:09 2026 GMT Not After : Jul 23 13:19:09 2027 GMT Subject: CN=BA7209E12365AC34C1992A6DDA67509F223B0AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:6c:e4:e5:d7:e5:70:76:cb:75:17:66:58: af:4e:49:c3:f3:73:65:33:e8:04:ba:9e:5e:3f:60: 27:1c:fd:06:6e:ba:c8:4e:4f:63:c0:91:2a:69:11: f9:41:e3:3e:4b:64:65:98:10:d0:0b:35:29:c0:7e: 70:73:f7:a9:25:36:e0:f3:f6:c5:50:79:e7:08:cb: 32:55:f5:64:b2:7d:bd:7b:a1:93:3a:cc:ea:b9:70: dc:26:fe:2a:62:66:de:2a:34:2d:d2:84:4a:c7:87: f2:27:96:a1:4c:8a:e8:84:50:9c:2a:95:ef:77:f4: ae:1f:c7:03:90:5c:a9:b8:37:0e:ba:31:f1:21:7d: a2:19:9d:ef:48:10:0a:a7:b9:0b:d7:a0:1f:69:42: 5c:bb:cb:d6:53:34:e0:ef:28:17:09:4d:f6:ef:ab: 3a:79:1a:e6:fd:17:84:8a:08:ac:38:3e:25:4c:d5: af:fa:86:6e:cc:7f:f9:f5:d8:d1:bd:b2:e6:90:23: 1c:03:a4:12:f7:e1:01:25:b1:2a:d0:a7:2e:b2:31: 59:05:63:c2:47:49:bb:5f:3e:97:ee:49:e8:a9:19: 76:7a:6c:6a:a5:e6:b5:36:7a:02:f9:e9:b1:3a:2e: 37:2a:ab:17:33:69:29:b3:89:e1:6f:ae:ee:e6:74: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:09:E1:23:65:AC:34:C1:99:2A:6D:DA:67:50:9F:22:3B:0A:A7 X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a3a2f33322d3438203d3e20323134343230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a000::/32 Signature Algorithm: sha256WithRSAEncryption a9:68:01:c0:08:65:c2:90:79:45:b0:9b:28:da:2d:8f:44:04: e7:39:8a:9d:46:7e:f4:03:9b:33:7d:ab:ef:01:6e:f6:c9:e8: 73:ee:e3:7b:28:f7:b6:b0:36:37:f1:74:f6:09:93:f0:3d:b4: cc:7c:a3:74:48:50:0f:ea:ae:d0:f8:32:e8:37:50:e3:ec:b0: 85:d5:2c:7c:3e:0e:2b:fe:3a:4e:36:57:cf:0f:81:f5:95:94: d9:75:6f:a7:f1:87:23:55:38:63:18:ef:1b:11:c4:13:fe:0a: 3d:f2:fc:18:3f:6a:53:59:d9:14:2d:41:7a:0d:bf:6c:45:fa: 95:c9:61:da:61:0b:43:07:4b:2b:64:0d:22:b5:a6:7c:a1:24: e6:90:75:d8:c6:aa:e4:91:59:e6:56:27:9e:13:46:97:66:1f: be:c1:d9:4a:c1:fe:e4:17:6f:67:56:dc:44:79:06:a6:d5:dc: 9a:34:ee:f4:ab:30:5f:d9:6a:ba:b2:61:10:52:01:a6:ca:d2: 2f:c4:18:71:de:a7:b0:27:00:ac:f2:e3:1e:8e:8b:c1:96:03: 4b:d4:14:da:d1:e0:cf:03:41:26:91:3a:dc:13:f9:ab:ef:42: e9:22:92:35:30:20:33:13:d5:51:96:f4:ce:b9:8a:1c:d2:c8: 5e:2e:85:48 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUfZ5LTvhx/iyEIdWM7w12mJ8VVsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA3MjQxMzE0MDlaFw0yNzA3MjMxMzE5MDlaMDMxMTAvBgNV BAMTKEJBNzIwOUUxMjM2NUFDMzRDMTk5MkE2RERBNjc1MDlGMjIzQjBBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHGzk5dflcHbLdRdmWK9OScPz c2Uz6AS6nl4/YCcc/QZuushOT2PAkSppEflB4z5LZGWYENALNSnAfnBz96klNuDz 9sVQeecIyzJV9WSyfb17oZM6zOq5cNwm/ipiZt4qNC3ShErHh/InlqFMiuiEUJwq le939K4fxwOQXKm4Nw66MfEhfaIZne9IEAqnuQvXoB9pQly7y9ZTNODvKBcJTfbv qzp5Gub9F4SKCKw4PiVM1a/6hm7Mf/n12NG9suaQIxwDpBL34QElsSrQpy6yMVkF Y8JHSbtfPpfuSeipGXZ6bGql5rU2egL56bE6LjcqqxczaSmzieFvru7mdDJlAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUunIJ4SNlrDTBmSpt2mdQnyI7CqcwHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4ZpcnN5 bmM6Ly9yc3luYy5rcmlsbC5jbG5leHVzLmRldi9yZXBvL0NMTmV4dXMvMi8zMjYx MzAzNjNhNjEzMDMwMzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjMxMzQzNDMy MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAqBqAAMA0GCSqGSIb3DQEBCwUAA4IBAQCpaAHACGXCkHlF sJso2i2PRATnOYqdRn70A5szfavvAW72yehz7uN7KPe2sDY38XT2CZPwPbTMfKN0 SFAP6q7Q+DLoN1Dj7LCF1Sx8Pg4r/jpONlfPD4H1lZTZdW+n8YcjVThjGO8bEcQT /go98vwYP2pTWdkULUF6Db9sRfqVyWHaYQtDB0srZA0itaZ8oSTmkHXYxqrkkVnm VieeE0aXZh++wdlKwf7kF29nVtxEeQam1dyaNO70qzBf2Wq6smEQUgGmytIvxBhx 3qewJwCs8uMejovBlgNL1BTa0eDPA0EmkTrcE/mr70LpIpI1MCAzE9VRlvTOuYoc 0sheLoVI -----END CERTIFICATE-----Generated at Tue Jul 28 14:41:13 2026 by rpki-client