$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656166313a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a656166313a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: WrgvkukK/ofv9g9WpGgd3CfpTiGdbddANaamJIysH/o= Subject key identifier: CB:FE:67:71:F0:4E:45:8E:D4:3C:75:F8:B7:92:13:91:1E:63:B1:DA Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 1C3A6D367E264A7C70E78D9DE983DE7BE0CB6777 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656166313a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:44 +0000 ROA not before: Fri 04 Jul 2025 00:42:44 +0000 ROA not after: Fri 03 Jul 2026 00:47:44 +0000 asID: 396968 IP address blocks: 2a0f:6287:eaf1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3a:6d:36:7e:26:4a:7c:70:e7:8d:9d:e9:83:de:7b:e0:cb:67:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:44 2025 GMT Not After : Jul 3 00:47:44 2026 GMT Subject: CN=CBFE6771F04E458ED43C75F8B79213911E63B1DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:fd:9e:41:15:f3:3a:75:a4:c4:a0:6e:4d: 1d:ae:e5:59:95:b4:b1:ad:9c:81:0a:84:af:e9:c3: 9e:1e:80:61:c1:0f:09:c4:93:56:66:59:57:28:8e: f5:f2:bc:d1:13:f7:fd:ea:78:14:9d:bf:3c:7e:57: 8a:5a:4b:7a:1b:d3:5b:d5:ff:45:b7:09:1e:a7:68: 5a:ff:8a:77:b1:5d:0f:3a:0c:0f:37:d0:5a:17:80: 26:30:76:87:2e:70:05:db:73:bc:6d:0a:e9:f3:b8: 0f:90:ac:93:76:d9:98:b8:df:e1:95:80:f0:1a:dc: 9d:ca:b3:a1:12:b3:99:af:09:fd:75:ac:44:32:19: 5d:0e:59:5d:cf:ca:ec:2c:43:75:61:55:00:c9:94: f4:46:ff:6e:63:7e:28:60:db:aa:56:2b:6d:b2:1c: 2a:8e:08:c7:a8:a8:3f:8e:5e:2c:07:c8:96:8d:9b: 14:26:87:9a:15:fc:78:92:2e:dd:bb:6b:39:b9:96: 55:02:19:5e:b7:8d:83:7a:0f:db:e8:d6:24:47:25: dd:3a:09:e9:05:5c:b1:98:c0:cd:15:3a:b6:91:45: 65:17:c0:b9:77:1a:4e:ce:da:03:66:96:3f:6b:3f: 2e:ae:65:5e:00:c7:37:03:65:5a:8d:09:46:78:85: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FE:67:71:F0:4E:45:8E:D4:3C:75:F8:B7:92:13:91:1E:63:B1:DA X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656166313a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:eaf1::/48 Signature Algorithm: sha256WithRSAEncryption 37:df:40:9e:87:f7:2f:33:ee:82:04:94:9d:10:aa:ae:6e:b4: cb:80:22:4f:6c:7b:dd:e8:db:97:dc:67:45:32:e1:5b:1c:aa: 2d:c5:80:fb:0a:96:c5:a5:3b:fc:75:de:a1:b3:c1:e6:58:31: 4b:bd:9b:4a:e0:48:46:b9:f1:91:e3:9f:b0:ac:2f:5f:78:c0: 9c:52:1e:f6:d1:f9:a2:fb:e2:b5:51:8f:2d:e6:63:38:e4:d4: 8d:de:2a:06:3e:11:53:8d:c0:ed:b6:56:fa:fe:b2:95:28:02: be:6b:ae:3e:2d:28:e1:6f:73:ab:c8:e3:cd:42:91:61:1c:dd: 06:22:93:54:8e:3f:25:3f:bd:d8:36:de:8e:7a:f4:00:d1:6e: cd:cc:42:35:2f:1b:d3:2c:bd:67:eb:3e:e2:f7:69:6c:17:d7: 5d:7c:f7:a5:9a:34:05:1d:e7:5c:6b:e3:a6:3f:47:08:26:e5: 83:9e:c3:5c:76:e1:84:13:de:f9:6e:e5:e0:61:f7:c5:3a:e5: 54:96:2e:22:f1:4a:8c:87:62:26:a6:9d:c6:8f:95:84:94:15: 5b:0b:63:e1:52:6b:3a:24:0d:f3:46:a1:90:67:c0:ba:30:52: 79:a5:5a:28:69:c3:9b:cd:1c:98:24:d6:18:b0:4c:4b:74:56: 73:4d:08:7d -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUHDptNn4mSnxw542d6YPee+DLZ3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDRaFw0yNjA3MDMwMDQ3NDRaMDMxMTAvBgNV BAMTKENCRkU2NzcxRjA0RTQ1OEVENDNDNzVGOEI3OTIxMzkxMUU2M0IxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfh/2eQRXzOnWkxKBuTR2u5VmV tLGtnIEKhK/pw54egGHBDwnEk1ZmWVcojvXyvNET9/3qeBSdvzx+V4paS3ob01vV /0W3CR6naFr/inexXQ86DA830FoXgCYwdocucAXbc7xtCunzuA+QrJN22Zi43+GV gPAa3J3Ks6ESs5mvCf11rEQyGV0OWV3PyuwsQ3VhVQDJlPRG/25jfihg26pWK22y HCqOCMeoqD+OXiwHyJaNmxQmh5oV/HiSLt27azm5llUCGV63jYN6D9vo1iRHJd06 CekFXLGYwM0VOraRRWUXwLl3Gk7O2gNmlj9rPy6uZV4AxzcDZVqNCUZ4hY4PAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUy/5ncfBORY7UPHX4t5ITkR5jsdowHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjE2NjMxM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+rx MA0GCSqGSIb3DQEBCwUAA4IBAQA330Ceh/cvM+6CBJSdEKqubrTLgCJPbHvd6NuX 3GdFMuFbHKotxYD7CpbFpTv8dd6hs8HmWDFLvZtK4EhGufGR45+wrC9feMCcUh72 0fmi++K1UY8t5mM45NSN3ioGPhFTjcDttlb6/rKVKAK+a64+LSjhb3OryOPNQpFh HN0GIpNUjj8lP73YNt6OevQA0W7NzEI1LxvTLL1n6z7i92lsF9ddfPelmjQFHedc a+OmP0cIJuWDnsNcduGEE975buXgYffFOuVUli4i8UqMh2Impp3Gj5WElBVbC2Ph Ums6JA3zRqGQZ8C6MFJ5pVooacObzRyYJNYYsExLdFZzTQh9 -----END CERTIFICATE-----Generated at Fri Jul 4 14:19:24 2025 by rpki-client