
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: ZowCM8N0qLHfWVmgraWZ9GTBNzsEqQiwxpRhW23+J9g=
Subject key identifier: B3:44:02:2F:E6:F6:84:C4:F1:E1:8F:6F:61:13:2E:71:BD:77:2A:2C
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 48005E5534C708E19E5D1CFE80B7FDD0E53DE6BB
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:23 +0000
ROA not before: Fri 05 Jun 2026 01:01:23 +0000
ROA not after: Fri 04 Jun 2027 01:06:23 +0000
asID: 396968
IP address blocks: 2a0f:6287:e411::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:00:5e:55:34:c7:08:e1:9e:5d:1c:fe:80:b7:fd:d0:e5:3d:e6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:23 2026 GMT
Not After : Jun 4 01:06:23 2027 GMT
Subject: CN=B344022FE6F684C4F1E18F6F61132E71BD772A2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:a6:b8:8b:1f:fe:04:8c:cb:a5:d6:1e:cf:
83:87:77:6a:1f:23:1d:41:64:f2:bb:08:3e:40:80:
8e:df:4b:f7:29:6c:99:fe:9c:9b:39:23:c1:31:d9:
ff:0d:af:83:0c:a7:8b:12:e7:0c:2d:0c:6e:37:a1:
a8:b1:25:87:05:78:ed:e2:60:c7:6c:dc:f6:61:a0:
69:c2:06:c2:bb:18:12:50:62:8d:6c:ae:3a:35:b6:
81:1b:ee:83:1a:73:71:98:35:34:c5:ab:f3:27:e0:
4a:c0:10:a4:f1:77:10:2f:58:85:3f:f1:43:67:53:
c0:a6:5b:79:18:b3:7a:78:4a:16:b9:8e:77:57:ca:
ce:b9:d0:a6:6a:69:44:f6:aa:54:6b:af:cd:75:0b:
55:14:b7:08:5a:99:fe:9e:fb:d2:23:1e:69:17:28:
2b:2e:4b:7d:40:03:74:d5:84:a0:c3:b0:69:04:e1:
ec:52:0f:99:aa:16:c1:64:29:be:ab:50:18:73:22:
e2:1d:27:d5:67:69:40:16:a3:30:81:5e:63:0d:4d:
a1:fd:55:11:51:a7:94:ad:07:10:e5:32:9b:94:23:
05:c3:91:62:06:90:8d:58:5f:5f:b6:5e:45:ef:02:
72:49:ed:27:7b:28:27:cc:34:fd:a5:d0:3f:35:93:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:44:02:2F:E6:F6:84:C4:F1:E1:8F:6F:61:13:2E:71:BD:77:2A:2C
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e411::/48
Signature Algorithm: sha256WithRSAEncryption
10:8a:26:46:58:0a:12:fa:1e:ae:e3:b8:2d:b4:c9:c2:6d:3f:
64:2d:5d:94:37:a7:e2:42:3e:8f:a4:3c:c1:ef:67:84:79:1f:
10:98:db:0f:7e:5a:d3:4e:67:ff:40:95:09:2b:29:e4:4d:7f:
c8:2c:bc:0b:da:ba:ac:53:af:f8:96:23:f8:f2:dc:15:13:48:
fe:2f:4b:44:39:8b:ec:ce:82:2c:e4:23:36:69:64:28:7c:cc:
53:32:4e:35:d8:76:49:54:5e:63:6c:b7:10:a2:34:21:54:cd:
90:60:e9:7b:ae:2e:f5:f7:38:54:bf:7f:9d:6e:14:20:35:63:
98:7f:85:1a:b8:68:4d:96:01:87:ea:b7:a1:76:6f:d2:25:28:
e6:d4:59:d9:79:d5:83:bc:87:7c:cd:7b:4c:f6:23:c2:74:97:
1c:f5:39:5f:9b:10:40:25:c1:13:54:bf:3e:8c:8e:c3:dc:07:
f7:e5:6b:89:ab:fd:08:fe:03:5d:20:99:98:7b:6a:40:e0:8a:
32:5d:8f:64:f3:38:24:81:c9:88:73:95:99:2d:04:57:70:60:
80:82:98:30:8f:50:d6:9b:45:51:80:e9:ad:fe:29:98:36:92:
9e:3c:ab:74:68:2a:c5:71:4f:96:ea:bc:79:7f:fb:49:62:ac:
c6:f3:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:11 2026 by rpki-client