
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653961633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653961633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 3HP5CXBSNHyloCbWl9caOn03F7tsSX8Zx0SfLu9duGA=
Subject key identifier: 8F:8A:CC:E8:8F:85:99:54:03:4C:C6:8C:9F:70:34:C5:3B:32:5F:AF
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 6690CAB456B361558233961AFCAD2D841AFE3B2A
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653961633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:27 +0000
ROA not before: Fri 05 Jun 2026 01:01:27 +0000
ROA not after: Fri 04 Jun 2027 01:06:27 +0000
asID: 396968
IP address blocks: 2a0f:6287:e9ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:90:ca:b4:56:b3:61:55:82:33:96:1a:fc:ad:2d:84:1a:fe:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:27 2026 GMT
Not After : Jun 4 01:06:27 2027 GMT
Subject: CN=8F8ACCE88F859954034CC68C9F7034C53B325FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:24:96:34:37:d7:29:5c:e9:ce:88:98:b3:
e8:f8:b4:02:ad:fe:f0:fb:db:c5:f3:50:86:7c:f5:
3c:64:bd:98:1c:5c:3e:ed:91:98:46:c1:01:cf:7a:
00:46:bd:97:1a:0e:68:9a:10:fd:f7:fc:b3:ee:cf:
ae:e4:54:6a:11:63:99:f0:78:51:5d:7a:e1:13:6b:
e6:91:8a:21:67:3c:f4:9a:95:9e:7c:b9:92:fb:fa:
fb:d7:14:83:37:8e:14:49:a4:69:d8:15:fe:dc:ff:
30:ec:9d:e1:47:c0:df:98:f6:6a:90:fc:3b:4b:ae:
98:0b:a8:c5:0c:16:3f:81:5d:b5:58:a6:39:47:a6:
60:f0:98:97:69:d4:29:07:c7:e3:be:4a:75:b8:d9:
ec:30:5b:c0:48:b5:a5:71:3e:ad:3a:92:d7:8f:c7:
f9:c1:94:54:c9:bc:02:3c:bc:09:fd:97:37:60:22:
69:fd:9f:b6:40:a3:31:a7:10:57:cb:e8:8e:69:9d:
2d:d0:14:68:f2:a0:27:1c:c2:69:b4:ae:1d:e4:ec:
a1:db:65:75:1f:c6:5e:dd:1c:f8:c8:06:73:2d:7d:
f2:8d:28:e9:e9:a7:98:00:e6:7b:96:14:c3:1d:77:
a3:54:65:fa:13:29:8f:1d:1f:97:45:2a:a0:f7:da:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:CC:E8:8F:85:99:54:03:4C:C6:8C:9F:70:34:C5:3B:32:5F:AF
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653961633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e9ac::/48
Signature Algorithm: sha256WithRSAEncryption
2b:fb:cf:fe:52:61:aa:41:f5:65:bd:f7:d9:3e:98:c9:cf:92:
f4:ca:33:2d:4f:29:41:3b:c9:2e:55:9d:c5:a8:ab:57:00:05:
a5:65:a2:f8:49:6d:a6:b5:3f:59:c0:38:7b:31:c9:2d:17:cb:
3d:67:ea:19:2d:8f:62:fe:a8:27:8a:d7:2e:02:54:8e:17:61:
80:12:52:13:dc:78:53:8e:d3:2a:6f:2a:ba:5b:26:42:29:40:
f3:cd:b0:35:8d:b2:c0:ae:aa:9a:4d:c7:5c:8d:3e:ae:28:40:
6a:74:2d:bf:c6:1d:f6:90:b4:a4:7d:3c:37:32:fb:47:b5:12:
a0:67:15:83:91:a4:20:0d:0c:ab:ca:74:81:1e:7a:19:58:f5:
51:67:6e:ea:a4:c8:5a:ed:d7:25:8e:96:d3:8b:8b:58:fb:83:
9a:31:ad:4f:88:46:53:1d:5f:71:31:c9:81:ee:52:33:49:ba:
bf:16:c7:23:52:99:14:7b:eb:75:ff:c0:2e:35:c9:93:b8:5a:
5a:0f:7e:4e:9c:c8:7a:fb:22:e3:9b:80:88:53:5a:c3:71:59:
dc:41:90:cd:49:e5:27:a8:8c:f6:83:3c:9a:84:af:67:04:fa:
4f:54:c4:eb:4e:7f:fe:04:45:14:ed:50:35:8e:a3:66:6f:ac:
6b:61:8f:e0
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUZpDKtFazYVWCM5Ya/K0thBr+OyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjdaFw0yNzA2MDQwMTA2MjdaMDMxMTAvBgNV
BAMTKDhGOEFDQ0U4OEY4NTk5NTQwMzRDQzY4QzlGNzAzNEM1M0IzMjVGQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdsiSWNDfXKVzpzoiYs+j4tAKt
/vD728XzUIZ89TxkvZgcXD7tkZhGwQHPegBGvZcaDmiaEP33/LPuz67kVGoRY5nw
eFFdeuETa+aRiiFnPPSalZ58uZL7+vvXFIM3jhRJpGnYFf7c/zDsneFHwN+Y9mqQ
/DtLrpgLqMUMFj+BXbVYpjlHpmDwmJdp1CkHx+O+SnW42ewwW8BItaVxPq06kteP
x/nBlFTJvAI8vAn9lzdgImn9n7ZAozGnEFfL6I5pnS3QFGjyoCccwmm0rh3k7KHb
ZXUfxl7dHPjIBnMtffKNKOnpp5gA5nuWFMMdd6NUZfoTKY8dH5dFKqD32h2XAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUj4rM6I+FmVQDTMaMn3A0xTsyX68wHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1Mzk2MTYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+ms
MA0GCSqGSIb3DQEBCwUAA4IBAQAr+8/+UmGqQfVlvffZPpjJz5L0yjMtTylBO8ku
VZ3FqKtXAAWlZaL4SW2mtT9ZwDh7McktF8s9Z+oZLY9i/qgnitcuAlSOF2GAElIT
3HhTjtMqbyq6WyZCKUDzzbA1jbLArqqaTcdcjT6uKEBqdC2/xh32kLSkfTw3MvtH
tRKgZxWDkaQgDQyrynSBHnoZWPVRZ27qpMha7dcljpbTi4tY+4OaMa1PiEZTHV9x
McmB7lIzSbq/FscjUpkUe+t1/8AuNcmTuFpaD35OnMh6+yLjm4CIU1rDcVncQZDN
SeUnqIz2gzyahK9nBPpPVMTrTn/+BEUU7VA1jqNmb6xrYY/g
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:15 2026 by rpki-client