$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/3/326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa File: 326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa (raw, json) Hash identifier: dtdakkdq+pOu3UAnNO1urbA4HOvX3tHqmdD0vQMjSZ8= Subject key identifier: 57:27:8C:3D:F0:1C:7F:3F:65:63:61:D7:24:C4:5C:A2:92:BD:41:72 Certificate issuer: /CN=A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A Certificate serial: 08BCBBF5178005EBDFED72DCBE3866108900983F Authority key identifier: A6:23:BB:FB:D1:2A:7C:18:57:10:E0:EB:73:C0:ED:A4:87:4C:2E:8A Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/3/326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa Signing time: Thu 03 Jul 2025 17:19:52 +0000 ROA not before: Thu 03 Jul 2025 17:14:52 +0000 ROA not after: Thu 02 Jul 2026 17:19:52 +0000 asID: 198016 IP address blocks: 2a06:1281:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/3/A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/3/A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.mft rsync://krill.47272.net/repo/HYEHOST/5/A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 21:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bc:bb:f5:17:80:05:eb:df:ed:72:dc:be:38:66:10:89:00:98:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A Validity Not Before: Jul 3 17:14:52 2025 GMT Not After : Jul 2 17:19:52 2026 GMT Subject: CN=57278C3DF01C7F3F656361D724C45CA292BD4172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:be:1e:5b:40:f9:a6:d7:3c:d0:df:2b:47: 07:50:d7:17:a8:e7:31:ef:c2:cb:58:0a:fd:2e:14: 77:67:f1:03:82:0b:0f:99:85:ad:f5:b6:4c:41:4c: f3:51:22:6b:5a:80:98:45:83:d1:af:a0:c0:1f:b8: 4d:0b:5f:6e:e7:ff:80:27:06:3d:ec:ac:cd:bc:e0: 62:19:01:95:fd:fe:9e:24:ae:fd:4a:20:69:d5:cd: aa:d2:49:71:28:2a:9f:2f:30:ea:b7:55:50:96:ab: 6a:65:ab:7d:36:74:16:de:e4:44:b8:3e:f8:79:05: 73:c7:0d:a5:39:95:ff:ad:f8:97:be:d8:8a:7a:63: 43:e8:d2:89:eb:10:bd:02:f6:f6:33:98:d2:43:00: 67:0d:10:29:d7:64:14:5a:15:c4:bd:41:48:95:87: 7b:a5:c8:d5:90:98:09:d0:a0:98:4a:fe:32:00:3a: 0e:83:3c:14:6c:44:79:51:78:a6:32:35:08:04:62: 33:90:aa:22:26:b6:1d:08:97:ef:37:f0:66:d6:15: 05:23:e9:2f:30:13:62:9c:df:85:bd:cc:6c:2b:c4: c1:f9:b4:fe:dc:f2:f0:62:da:b6:a7:0d:a9:03:70: 25:35:7c:17:35:8f:3d:ba:4d:ca:e0:16:11:ac:b8: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:27:8C:3D:F0:1C:7F:3F:65:63:61:D7:24:C4:5C:A2:92:BD:41:72 X509v3 Authority Key Identifier: keyid:A6:23:BB:FB:D1:2A:7C:18:57:10:E0:EB:73:C0:ED:A4:87:4C:2E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/3/A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/3/326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:9000::/36 Signature Algorithm: sha256WithRSAEncryption 1a:8d:f5:98:1f:f0:ae:e0:5b:71:48:a3:4c:e2:69:19:69:e6: 77:53:85:ff:0a:8f:42:f9:e1:3c:4f:0c:62:3b:c2:f4:6c:e6: 3b:e5:c3:28:c6:f6:8e:9d:96:9c:0d:67:24:8f:91:ec:ad:73: 00:63:17:35:63:65:b6:23:72:a5:be:f5:d4:e5:8f:20:e8:1b: 64:57:fa:a9:d9:47:c8:b1:5c:0e:4e:03:80:d6:4a:fd:44:45: 8a:fd:d1:82:c7:2d:bd:17:c3:13:3e:86:d2:44:88:7f:5b:5f: a7:c0:74:06:7e:bd:f9:e2:d2:78:82:c3:d4:76:2a:38:6c:89: 58:43:2a:60:e7:de:ba:54:b8:53:16:f6:a5:da:9d:01:c6:76: 6c:36:4f:85:6b:aa:e0:e9:b7:52:ad:2e:8f:f6:cc:c1:29:27: 64:98:52:f8:ff:cc:d0:9a:cb:ce:15:ec:f4:5d:1f:60:ab:5c: 79:4f:f5:dd:f5:37:87:ab:d3:23:07:08:af:16:84:bd:1f:3e: 89:51:76:13:3e:5e:ba:e1:f4:9b:36:1c:53:04:f7:32:4f:41: ac:95:37:bb:d8:f9:6d:16:14:e5:7d:d2:ad:51:56:ee:12:2b: 68:d4:c3:84:86:09:44:9e:24:82:59:22:19:ab:a5:59:a9:a0: fe:49:c2:ad -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUCLy79ReABevf7XLcvjhmEIkAmD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYyM0JCRkJEMTJBN0MxODU3MTBFMEVCNzNDMEVEQTQ4 NzRDMkU4QTAeFw0yNTA3MDMxNzE0NTJaFw0yNjA3MDIxNzE5NTJaMDMxMTAvBgNV BAMTKDU3Mjc4QzNERjAxQzdGM0Y2NTYzNjFENzI0QzQ1Q0EyOTJCRDQxNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00L4eW0D5ptc80N8rRwdQ1xeo 5zHvwstYCv0uFHdn8QOCCw+Zha31tkxBTPNRImtagJhFg9GvoMAfuE0LX27n/4An Bj3srM284GIZAZX9/p4krv1KIGnVzarSSXEoKp8vMOq3VVCWq2plq302dBbe5ES4 Pvh5BXPHDaU5lf+t+Je+2Ip6Y0Po0onrEL0C9vYzmNJDAGcNECnXZBRaFcS9QUiV h3ulyNWQmAnQoJhK/jIAOg6DPBRsRHlReKYyNQgEYjOQqiImth0Il+838GbWFQUj 6S8wE2Kc34W9zGwrxMH5tP7c8vBi2ranDakDcCU1fBc1jz26TcrgFhGsuIKpAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUVyeMPfAcfz9lY2HXJMRcopK9QXIwHwYDVR0j BBgwFoAUpiO7+9EqfBhXEODrc8DtpIdMLoowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMy9BNjIzQkJGQkQx MkE3QzE4NTcxMEUwRUI3M0MwRURBNDg3NEMyRThBLmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81L0E2MjNCQkZCRDEyQTdDMTg1NzEwRTBFQjczQzBFREE0ODc0QzJFOEEu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMy8zMjYxMzAzNjNhMzEzMjM4MzEzYTM5MzAzMDMwM2EzYTJm MzMzNjJkMzMzNjIwM2QzZTIwMzEzOTM4MzAzMTM2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgYSgZAw DQYJKoZIhvcNAQELBQADggEBABqN9Zgf8K7gW3FIo0ziaRlp5ndThf8Kj0L54TxP DGI7wvRs5jvlwyjG9o6dlpwNZySPkeytcwBjFzVjZbYjcqW+9dTljyDoG2RX+qnZ R8ixXA5OA4DWSv1ERYr90YLHLb0XwxM+htJEiH9bX6fAdAZ+vfni0niCw9R2Kjhs iVhDKmDn3rpUuFMW9qXanQHGdmw2T4VrquDpt1KtLo/2zMEpJ2SYUvj/zNCay84V 7PRdH2CrXHlP9d31N4er0yMHCK8WhL0fPolRdhM+Xrrh9Js2HFME9zJPQayVN7vY +W0WFOV90q1RVu4SK2jUw4SGCUSeJIJZIhmrpVmpoP5Jwq0= -----END CERTIFICATE-----Generated at Sat Jul 5 11:20:48 2025 by rpki-client