
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: zse4tM6lGlMYTgRYHyc+6nN3vm1QaByCA+puXglqU14=
Subject key identifier: 16:B5:F7:A4:9C:57:86:C4:7C:AC:C1:AD:2C:BC:5E:AC:BD:B4:D4:5E
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 238A3A348DC165C8F692DEB8101D3ED92BB54F48
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:23 +0000
ROA not before: Fri 05 Jun 2026 01:01:23 +0000
ROA not after: Fri 04 Jun 2027 01:06:23 +0000
asID: 396968
IP address blocks: 2a0f:6287:e55b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8a:3a:34:8d:c1:65:c8:f6:92:de:b8:10:1d:3e:d9:2b:b5:4f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:23 2026 GMT
Not After : Jun 4 01:06:23 2027 GMT
Subject: CN=16B5F7A49C5786C47CACC1AD2CBC5EACBDB4D45E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6e:34:12:c5:b5:97:00:45:ad:a6:dc:6c:c2:
9b:bd:a5:bc:7b:6b:31:c6:c4:76:66:68:7a:8e:15:
4d:64:84:a5:09:55:4d:85:ac:cd:c1:f2:21:73:8e:
9d:10:49:37:de:a6:68:ec:03:6e:b6:37:81:f8:74:
96:3b:5f:0c:bd:c8:fb:fe:d9:8c:c2:dc:ce:ba:c1:
a5:4e:63:8e:5d:bd:96:22:54:83:ac:a7:b0:67:87:
e5:fd:fe:67:41:6a:20:6a:76:57:4d:39:85:64:a3:
92:4c:fd:2c:cc:92:71:06:c7:a9:10:d4:7d:cc:5a:
0f:8b:c3:21:9c:8c:fe:6d:c9:ba:0f:dd:0e:a6:f4:
15:66:43:cf:10:1d:61:6b:1a:92:a7:97:59:41:06:
98:c8:19:cb:0b:4b:32:b0:9a:1f:d9:9c:55:13:ea:
d6:39:6d:df:a3:c7:b6:9a:33:6b:7d:2c:cb:83:ea:
95:d3:85:ef:a1:b7:53:0f:7c:6d:ea:9f:4a:63:c2:
cc:ff:7f:1c:ac:ef:0e:58:29:ab:41:d6:1e:f2:5b:
d5:81:67:46:e0:f7:36:12:cf:7c:01:35:d1:5e:85:
06:46:3d:ee:c1:d6:a8:18:fc:39:21:fd:cb:c7:3a:
2c:45:a0:c4:02:32:56:0c:54:76:a6:f8:88:88:75:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B5:F7:A4:9C:57:86:C4:7C:AC:C1:AD:2C:BC:5E:AC:BD:B4:D4:5E
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e55b::/48
Signature Algorithm: sha256WithRSAEncryption
93:43:49:c3:4a:31:56:60:74:b8:d4:c8:c5:ac:0c:23:04:71:
17:7c:d1:99:85:cb:94:4a:db:ca:ac:ed:ab:f8:1f:28:6d:12:
62:fa:51:e8:35:cb:35:09:1f:ed:05:ad:e0:af:05:14:b0:4a:
d5:27:3e:b7:bc:72:36:e4:ef:d3:50:80:70:a3:e0:48:05:56:
43:45:a0:4a:0a:17:86:41:17:65:bd:37:26:c1:8a:90:ec:dd:
4a:7b:eb:f9:ad:de:28:b3:5c:25:66:01:75:c8:0f:c6:bc:ed:
24:36:13:4e:bc:ab:bb:dd:c1:02:6d:32:a3:5b:cf:3e:88:d4:
29:36:bb:eb:04:bf:9f:07:ee:b5:a9:ec:c7:53:e5:05:9d:87:
13:f3:a9:99:31:20:3d:78:cd:8c:7f:ad:76:c4:28:5d:4f:6d:
4a:e3:e1:d1:d1:93:21:1f:d5:28:8f:dc:16:40:1c:bb:5f:e5:
bd:11:cb:9b:ee:0b:83:28:d2:bd:f1:77:25:fa:9d:ae:cd:ad:
23:2e:02:50:85:99:ee:be:1c:19:c0:2f:2a:99:83:8e:d5:c4:
75:9b:6a:a6:f8:42:ab:6d:bd:68:b9:ac:64:77:06:8a:2c:8c:
61:53:ea:41:f2:88:43:e8:82:44:02:07:6c:e9:92:06:0f:e8:
3b:4a:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:10 2026 by rpki-client