$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653833653a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a653833653a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: 7FVckuFWq64Bfvyg6e1kJ6UmPm0WNf4LKHjO21brSI0= Subject key identifier: 87:0E:31:BB:51:1F:B6:E0:65:91:4C:01:61:7A:0F:0B:84:7E:FC:79 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 7CDC46CDAB1D9F725D9B3787B546D3890FCC3A81 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653833653a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:45 +0000 ROA not before: Fri 04 Jul 2025 00:42:45 +0000 ROA not after: Fri 03 Jul 2026 00:47:45 +0000 asID: 396968 IP address blocks: 2a0f:6287:e83e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:dc:46:cd:ab:1d:9f:72:5d:9b:37:87:b5:46:d3:89:0f:cc:3a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:45 2025 GMT Not After : Jul 3 00:47:45 2026 GMT Subject: CN=870E31BB511FB6E065914C01617A0F0B847EFC79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ca:f3:34:fc:a2:43:0a:41:d5:c8:96:01:90: 2d:22:fa:76:ac:73:a8:ce:10:e7:a5:5b:cc:03:34: 19:bf:eb:76:29:5e:be:8e:ee:56:b0:74:d5:a0:8c: ee:1c:74:dc:8f:5d:a2:6d:c6:81:b0:ac:d1:c0:b8: 95:a0:86:3f:0a:13:3f:14:d0:07:e9:c2:68:bb:b6: cd:da:fa:20:05:e4:9e:4c:3c:59:62:7e:ad:7c:5c: e8:c6:ed:ca:df:93:02:1e:58:2d:3e:df:3d:22:21: b2:26:87:29:aa:10:97:ac:3f:36:7c:63:f0:2a:3d: 0a:cc:c2:42:e8:f7:b4:3e:f9:6d:0f:1c:6b:03:0b: b2:5e:76:2a:81:97:c0:4a:80:45:9e:b5:cc:63:2b: 01:67:7f:db:c0:34:9e:d5:e2:83:8f:01:65:88:fe: 95:c0:ee:73:30:aa:88:54:91:ae:8a:84:45:22:78: d2:62:e5:c9:42:4c:83:d3:a5:3f:8e:49:6b:7f:5b: f7:b1:45:13:22:28:74:1e:55:07:d9:36:c5:2f:c4: 50:09:a1:99:22:1f:c3:a6:67:72:4e:8d:b2:9d:df: 46:87:72:3b:06:d7:90:00:9b:4a:9e:b2:31:e8:28: 8d:9d:99:38:46:60:29:8a:bd:42:bb:06:f1:8d:fe: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0E:31:BB:51:1F:B6:E0:65:91:4C:01:61:7A:0F:0B:84:7E:FC:79 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653833653a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:e83e::/48 Signature Algorithm: sha256WithRSAEncryption 07:9d:54:66:d7:e7:e9:60:bf:ad:51:88:98:aa:4a:48:4c:3c: e0:5f:ef:1f:38:69:51:0d:52:b4:21:30:18:09:3a:cb:3b:4b: d0:2b:ea:79:22:2f:5c:b1:e6:93:bf:31:2a:e8:3f:50:92:9a: 5b:3a:44:ff:90:5a:5a:be:0b:d3:78:32:bc:ef:7d:95:44:ad: 91:07:52:1a:d6:f5:6c:3a:94:6a:73:38:ae:b4:b7:db:72:a1: 96:4e:2d:40:df:53:f0:ba:e5:9d:a1:54:4c:0a:4b:5a:1f:a4: 64:79:b0:9b:d8:4f:0c:6a:42:3b:da:5f:3e:a2:11:38:77:39: 49:5d:e9:4a:b9:e5:82:b9:b2:ef:bd:78:e7:e5:4c:f7:eb:e2: 91:c5:7c:81:2f:69:fc:d8:61:12:bc:3d:e0:1b:ec:4d:57:91: a3:0e:8c:2f:94:67:09:d5:84:98:8b:90:9a:81:14:7d:19:81: e4:4b:07:a4:3e:2f:4c:e1:28:b2:ea:ef:35:63:cd:8a:bd:5b: 4a:96:17:b4:19:a5:ad:0e:4a:b2:cc:f0:69:7c:d4:43:97:92: eb:7f:36:73:1b:6c:27:69:09:fd:b8:f4:78:04:1d:a7:ee:f6: 36:bf:11:f3:db:79:ab:b0:1d:71:3e:14:ea:47:d7:9f:b3:ce: 5c:9d:56:62 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUfNxGzasdn3JdmzeHtUbTiQ/MOoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV BAMTKDg3MEUzMUJCNTExRkI2RTA2NTkxNEMwMTYxN0EwRjBCODQ3RUZDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yvM0/KJDCkHVyJYBkC0i+nas c6jOEOelW8wDNBm/63YpXr6O7lawdNWgjO4cdNyPXaJtxoGwrNHAuJWghj8KEz8U 0Afpwmi7ts3a+iAF5J5MPFlifq18XOjG7crfkwIeWC0+3z0iIbImhymqEJesPzZ8 Y/AqPQrMwkLo97Q++W0PHGsDC7JediqBl8BKgEWetcxjKwFnf9vANJ7V4oOPAWWI /pXA7nMwqohUka6KhEUieNJi5clCTIPTpT+OSWt/W/exRRMiKHQeVQfZNsUvxFAJ oZkiH8OmZ3JOjbKd30aHcjsG15AAm0qesjHoKI2dmThGYCmKvUK7BvGN/pmLAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUhw4xu1EftuBlkUwBYXoPC4R+/HkwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzgzMzY1M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+g+ MA0GCSqGSIb3DQEBCwUAA4IBAQAHnVRm1+fpYL+tUYiYqkpITDzgX+8fOGlRDVK0 ITAYCTrLO0vQK+p5Ii9cseaTvzEq6D9QkppbOkT/kFpavgvTeDK8732VRK2RB1Ia 1vVsOpRqcziutLfbcqGWTi1A31PwuuWdoVRMCktaH6RkebCb2E8MakI72l8+ohE4 dzlJXelKueWCubLvvXjn5Uz36+KRxXyBL2n82GESvD3gG+xNV5GjDowvlGcJ1YSY i5CagRR9GYHkSwekPi9M4Siy6u81Y82KvVtKlhe0GaWtDkqyzPBpfNRDl5LrfzZz G2wnaQn9uPR4BB2n7vY2vxHz23mrsB1xPhTqR9efs85cnVZi -----END CERTIFICATE-----Generated at Fri Jul 4 14:53:44 2025 by rpki-client