
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: E5ljWL1iGZ77TGBQ7UIwrUsqPbDMTfNwLyy34plWess=
Subject key identifier: 4A:DC:68:E1:3D:24:DC:50:7C:5A:8A:72:B6:0D:D8:16:27:49:6A:C6
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 25952362F69ADA266F4D1DF60558E0BB3AA7026D
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:22 +0000
ROA not before: Fri 05 Jun 2026 01:01:22 +0000
ROA not after: Fri 04 Jun 2027 01:06:22 +0000
asID: 396968
IP address blocks: 2a0f:6287:e27a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:95:23:62:f6:9a:da:26:6f:4d:1d:f6:05:58:e0:bb:3a:a7:02:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:22 2026 GMT
Not After : Jun 4 01:06:22 2027 GMT
Subject: CN=4ADC68E13D24DC507C5A8A72B60DD81627496AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:e9:c7:b3:40:97:05:b4:ba:bc:03:4e:93:
2d:1f:93:81:2e:92:e9:a1:7f:e2:7e:b1:59:34:cb:
d8:75:50:ee:d5:4c:41:bd:f8:58:0c:dd:10:35:0a:
0a:29:88:24:c5:bd:58:eb:29:27:0e:a4:3c:b0:58:
0b:a9:7a:84:7c:5b:b6:28:f7:49:98:9d:78:5a:a5:
68:b4:f7:a9:7d:49:e1:24:b0:a5:d4:a5:d4:ec:7a:
b8:11:d7:eb:67:9a:ac:74:f2:f4:aa:2c:f4:16:20:
eb:9d:57:f4:f3:ca:55:ba:f3:2b:6a:e1:7f:fe:da:
0a:dc:f0:5d:6b:94:37:8e:f5:ae:a3:4a:a7:f8:49:
a9:7e:6e:7a:81:cf:75:8b:73:0b:f4:93:a9:f5:61:
e2:8d:7b:2f:d7:d5:54:9c:fc:f2:86:35:8e:eb:73:
10:df:61:d7:9f:3f:a7:49:46:44:36:f2:1b:d5:c9:
55:9c:8b:8e:e9:73:d7:f0:aa:ec:bf:a2:0b:8e:c5:
28:55:17:51:30:4d:6b:45:fb:ba:da:e8:5e:27:8d:
a6:e8:92:d2:63:8f:61:3e:f5:ae:46:e9:3e:f5:ff:
6c:0f:7b:cc:07:0b:29:16:45:92:02:57:6e:92:1f:
d5:76:7e:7b:f9:95:8e:35:d5:21:e8:db:72:3e:f6:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DC:68:E1:3D:24:DC:50:7C:5A:8A:72:B6:0D:D8:16:27:49:6A:C6
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e27a::/48
Signature Algorithm: sha256WithRSAEncryption
8c:5f:3d:19:0a:ea:ea:1f:ee:d6:c7:53:42:8a:7e:e5:bb:7b:
45:d1:bb:fb:ff:42:49:8c:8c:5e:60:1b:23:bb:03:b5:bb:1c:
33:ba:36:56:ac:f3:85:33:6a:99:b5:90:c3:45:98:c8:40:ee:
b1:da:02:ba:dc:61:40:18:bb:97:13:d4:89:e4:49:5e:ee:07:
c1:1f:1e:f3:87:0d:57:59:c9:2d:9b:9d:e2:a1:29:8d:81:28:
31:3f:0e:c8:54:b8:e5:0c:f9:d8:9d:bc:7d:d3:65:36:37:d8:
17:0f:95:06:48:9d:52:eb:1a:46:f0:9b:80:25:c4:28:aa:92:
42:b5:18:4d:4a:f7:27:ce:7b:58:be:ad:6c:43:a6:24:d3:91:
a2:72:8a:23:67:2b:f3:ae:04:1f:aa:61:78:ed:50:ea:22:4f:
5c:0a:ac:68:11:d3:f1:ac:cf:c5:bb:92:a9:25:56:a9:eb:16:
75:f1:48:59:57:ad:da:4e:16:8d:29:95:f9:84:bb:d0:0e:ab:
4b:0c:bd:fd:6a:35:eb:5b:89:b5:95:d7:4f:6d:bc:2a:09:a2:
f2:3f:64:45:dd:ac:0e:14:69:50:8c:13:00:40:67:6d:2c:d6:
f5:d9:f7:ed:4c:f9:3d:80:1a:76:21:94:fa:30:17:4b:7b:63:
fa:1d:6b:25
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUJZUjYvaa2iZvTR32BVjguzqnAm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjJaFw0yNzA2MDQwMTA2MjJaMDMxMTAvBgNV
BAMTKDRBREM2OEUxM0QyNERDNTA3QzVBOEE3MkI2MEREODE2Mjc0OTZBQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKXenHs0CXBbS6vANOky0fk4Eu
kumhf+J+sVk0y9h1UO7VTEG9+FgM3RA1CgopiCTFvVjrKScOpDywWAupeoR8W7Yo
90mYnXhapWi096l9SeEksKXUpdTsergR1+tnmqx08vSqLPQWIOudV/TzylW68ytq
4X/+2grc8F1rlDeO9a6jSqf4Sal+bnqBz3WLcwv0k6n1YeKNey/X1VSc/PKGNY7r
cxDfYdefP6dJRkQ28hvVyVWci47pc9fwquy/oguOxShVF1EwTWtF+7ra6F4njabo
ktJjj2E+9a5G6T71/2wPe8wHCykWRZICV26SH9V2fnv5lY411SHo23I+9kENAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUStxo4T0k3FB8Wopytg3YFidJasYwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzIzNzYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+J6
MA0GCSqGSIb3DQEBCwUAA4IBAQCMXz0ZCurqH+7Wx1NCin7lu3tF0bv7/0JJjIxe
YBsjuwO1uxwzujZWrPOFM2qZtZDDRZjIQO6x2gK63GFAGLuXE9SJ5Ele7gfBHx7z
hw1XWcktm53ioSmNgSgxPw7IVLjlDPnYnbx902U2N9gXD5UGSJ1S6xpG8JuAJcQo
qpJCtRhNSvcnzntYvq1sQ6Yk05GicoojZyvzrgQfqmF47VDqIk9cCqxoEdPxrM/F
u5KpJVap6xZ18UhZV63aThaNKZX5hLvQDqtLDL39ajXrW4m1lddPbbwqCaLyP2RF
3awOFGlQjBMAQGdtLNb12fftTPk9gBp2IZT6MBdLe2P6HWsl
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:41 2026 by rpki-client