
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653233373a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653233373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: NxaMMEbADOBXRP6ih5aVsZZKql1vjgtP+IIiImqysvU=
Subject key identifier: D4:8E:0E:E8:43:75:B4:E8:02:28:7A:9E:CC:9B:46:67:3F:FE:A5:10
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 326A7443EF3D1153637F7D4BC59CBE5C87D8CAF3
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653233373a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:20 +0000
ROA not before: Fri 05 Jun 2026 01:01:20 +0000
ROA not after: Fri 04 Jun 2027 01:06:20 +0000
asID: 396968
IP address blocks: 2a0f:6287:e237::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6a:74:43:ef:3d:11:53:63:7f:7d:4b:c5:9c:be:5c:87:d8:ca:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:20 2026 GMT
Not After : Jun 4 01:06:20 2027 GMT
Subject: CN=D48E0EE84375B4E802287A9ECC9B46673FFEA510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:c1:74:e9:ec:56:86:17:77:c3:79:53:32:
a5:41:21:6d:6e:58:62:89:01:4f:82:65:c3:ae:46:
a9:20:09:a0:58:23:c3:da:57:78:6d:03:a7:6e:af:
e5:c7:62:e0:42:6d:76:61:2d:c0:d6:7f:8f:e7:b9:
c9:75:33:ca:d9:da:26:b8:cb:84:8b:5e:4e:16:68:
a5:52:74:ca:8d:a6:6f:83:e4:84:f1:ed:4e:3b:42:
99:f9:90:dc:ca:b3:0b:d2:6d:42:8e:02:d7:d4:19:
c4:50:d1:8f:bd:5a:f2:f1:7f:0f:18:55:00:65:e1:
b4:e4:ab:bf:9c:b2:1e:c6:62:40:dc:ab:9f:c4:5a:
72:f9:94:83:f9:f1:46:39:3a:87:fc:6b:d0:5c:b8:
75:76:c9:70:0a:98:36:30:d7:98:74:16:f4:14:26:
f1:07:1b:27:26:c7:e1:14:3a:21:f3:08:65:a4:66:
56:20:f5:09:d6:82:d0:bf:22:c2:32:91:03:64:19:
bc:4e:2e:0e:b3:47:de:6e:bf:08:f0:8e:96:7f:f6:
82:81:9f:59:67:d8:88:6a:1a:c2:d3:af:c9:61:e7:
44:b0:14:a8:48:78:a1:a3:68:97:e9:cf:3b:34:ed:
b0:4d:50:07:bb:45:a6:dc:ff:b7:92:a4:97:48:3c:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:0E:E8:43:75:B4:E8:02:28:7A:9E:CC:9B:46:67:3F:FE:A5:10
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653233373a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e237::/48
Signature Algorithm: sha256WithRSAEncryption
9e:bf:e6:55:f0:ff:1b:0b:6b:1d:cf:ee:d5:04:fd:d9:95:f0:
0d:53:fc:b2:8b:d0:6e:cd:bf:54:82:a1:d4:01:5c:f9:c9:5e:
bd:99:aa:c8:36:16:2f:7d:eb:b3:07:47:ea:55:ab:59:7c:9c:
60:8e:56:d7:c9:5b:1b:f8:e8:9e:23:4e:68:b4:1f:79:51:33:
ec:f3:ba:8d:41:12:a0:07:7d:8e:65:1d:01:ee:ea:51:22:ab:
03:64:3c:41:1d:40:3c:f8:6f:70:01:24:27:64:80:9e:99:58:
9d:02:96:98:06:d1:6a:90:c5:e3:84:26:71:a6:91:1c:80:d2:
ef:2f:c1:7b:f0:83:c4:91:ac:bd:70:e2:f9:e1:0a:b5:22:7c:
ae:e7:d2:09:bb:e6:f0:dc:71:e1:f2:19:bf:30:da:20:8f:8f:
30:d8:1d:b5:ed:cb:17:e4:81:ba:2b:1f:e8:59:1f:c9:87:89:
ae:cc:b3:27:96:4b:d8:f2:f3:1c:fa:bf:85:cb:bf:a5:39:36:
f6:3f:06:c2:45:cb:e2:0f:31:81:f6:34:64:8f:06:e6:d9:dd:
cd:62:0c:81:c0:b0:f9:ee:dc:02:cc:52:c4:6b:d4:a0:ab:97:
3f:a5:21:f4:e7:0c:d6:2e:37:96:fd:aa:e5:a1:3b:aa:6d:2f:
23:d6:e5:dd
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUMmp0Q+89EVNjf31LxZy+XIfYyvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjBaFw0yNzA2MDQwMTA2MjBaMDMxMTAvBgNV
BAMTKEQ0OEUwRUU4NDM3NUI0RTgwMjI4N0E5RUNDOUI0NjY3M0ZGRUE1MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvesF06exWhhd3w3lTMqVBIW1u
WGKJAU+CZcOuRqkgCaBYI8PaV3htA6dur+XHYuBCbXZhLcDWf4/nucl1M8rZ2ia4
y4SLXk4WaKVSdMqNpm+D5ITx7U47Qpn5kNzKswvSbUKOAtfUGcRQ0Y+9WvLxfw8Y
VQBl4bTkq7+csh7GYkDcq5/EWnL5lIP58UY5Oof8a9BcuHV2yXAKmDYw15h0FvQU
JvEHGycmx+EUOiHzCGWkZlYg9QnWgtC/IsIykQNkGbxOLg6zR95uvwjwjpZ/9oKB
n1ln2IhqGsLTr8lh50SwFKhIeKGjaJfpzzs07bBNUAe7Rabc/7eSpJdIPAXtAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQU1I4O6EN1tOgCKHqezJtGZz/+pRAwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzIzMzM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+I3
MA0GCSqGSIb3DQEBCwUAA4IBAQCev+ZV8P8bC2sdz+7VBP3ZlfANU/yyi9Buzb9U
gqHUAVz5yV69marINhYvfeuzB0fqVatZfJxgjlbXyVsb+OieI05otB95UTPs87qN
QRKgB32OZR0B7upRIqsDZDxBHUA8+G9wASQnZICemVidApaYBtFqkMXjhCZxppEc
gNLvL8F78IPEkay9cOL54Qq1Inyu59IJu+bw3HHh8hm/MNogj48w2B217csX5IG6
Kx/oWR/Jh4muzLMnlkvY8vMc+r+Fy7+lOTb2PwbCRcviDzGB9jRkjwbm2d3NYgyB
wLD57twCzFLEa9Sgq5c/pSH05wzWLjeW/arloTuqbS8j1uXd
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:48 2026 by rpki-client