$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656231643a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a656231643a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: Amqwd0RelKr2i9y4EYmiFZnVWmkxjCaTYvs+1R8eXDQ= Subject key identifier: 8A:28:A1:0A:1D:E9:03:F3:E9:D0:5C:04:3A:A5:B3:C0:8C:0A:12:07 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 544FE49314750FDDDABEDB58B5627EB44C7064FC Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656231643a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:43 +0000 ROA not before: Fri 04 Jul 2025 00:42:43 +0000 ROA not after: Fri 03 Jul 2026 00:47:43 +0000 asID: 396968 IP address blocks: 2a0f:6287:eb1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4f:e4:93:14:75:0f:dd:da:be:db:58:b5:62:7e:b4:4c:70:64:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:43 2025 GMT Not After : Jul 3 00:47:43 2026 GMT Subject: CN=8A28A10A1DE903F3E9D05C043AA5B3C08C0A1207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:aa:a5:83:a1:96:99:91:44:94:e5:f0:97:d5: 0f:a8:49:6e:47:09:91:c0:0c:aa:bd:8f:22:7f:74: 40:24:da:56:8c:a6:ac:5a:fa:62:6c:a8:86:78:e6: d8:0e:a8:11:3e:c1:47:68:09:18:b3:80:1a:3b:dd: 72:eb:55:24:db:e7:df:32:f3:80:3d:7f:22:8c:8f: d5:dd:e9:9b:a7:17:ee:d9:54:6f:73:7c:e1:bc:1c: f7:b0:cc:cd:41:68:f4:40:f3:7a:55:f4:da:50:29: cf:fe:74:8f:9c:f1:5d:42:01:c7:47:dc:9f:31:b6: ac:fa:b9:8c:aa:0b:78:dc:87:2b:bb:e7:e7:10:66: 57:08:2f:14:91:03:ca:6d:54:58:94:0a:33:2a:4f: c9:1e:94:4d:09:7e:86:9b:e9:e3:31:88:74:79:80: 8a:fa:ca:2c:b0:d8:b3:ee:69:03:a4:47:5c:71:47: 97:43:eb:19:bb:ed:69:d4:9a:30:db:28:e7:3e:6d: 75:4a:35:e8:35:ca:62:13:f0:de:69:73:f2:9c:90: f6:37:88:45:45:43:73:cd:b7:ab:ee:0e:7e:ac:d3: 09:ea:d4:fe:b0:d7:fb:77:20:dd:1a:79:c0:28:58: 17:55:68:ba:28:31:02:57:18:0c:cc:4e:9d:41:a9: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:A1:0A:1D:E9:03:F3:E9:D0:5C:04:3A:A5:B3:C0:8C:0A:12:07 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656231643a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:eb1d::/48 Signature Algorithm: sha256WithRSAEncryption 48:11:b5:5b:a3:16:49:86:40:f9:f7:8f:cd:8e:e4:92:5e:74: c5:b5:bc:c7:f8:99:5e:bb:05:9d:b5:89:6b:79:c0:b3:a2:91: db:2b:bd:96:47:88:f1:bc:c2:17:a5:ab:6c:87:a5:2e:dc:7b: f0:64:52:ea:52:34:61:b6:88:7f:f8:cf:76:ca:02:ee:f6:dd: 49:ea:c4:6c:4f:dc:74:4a:c2:07:28:a1:51:b6:b6:81:f0:a2: 40:f4:7d:b7:04:2b:7c:24:e8:47:8c:f3:41:5b:f2:95:5f:01: 9b:98:b6:c2:ef:f3:e2:e2:27:36:ac:cb:91:12:a8:34:79:ab: 9a:88:ab:12:75:83:30:b7:81:e3:ac:fd:b1:16:6b:3d:ac:6e: 7d:13:d0:88:66:8e:dc:c7:e0:6e:75:a7:b2:48:a8:d6:df:21: 41:5c:a7:85:ca:97:ca:44:38:db:07:e7:ae:11:7b:b6:4d:98: 5f:f9:b0:f8:cf:41:6b:aa:af:e5:c9:2f:73:fb:30:be:81:e9: 23:84:3f:5c:fc:48:43:38:2d:17:c6:52:47:7e:f2:b8:8d:8e: 1a:50:13:f5:14:fe:c8:24:89:5c:e7:46:8b:9a:db:b0:01:8e: ea:c1:3f:22:f6:59:cd:7a:88:2f:f1:9a:ac:92:c2:c2:ac:a1: 22:d7:58:14 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUVE/kkxR1D93avttYtWJ+tExwZPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDNaFw0yNjA3MDMwMDQ3NDNaMDMxMTAvBgNV BAMTKDhBMjhBMTBBMURFOTAzRjNFOUQwNUMwNDNBQTVCM0MwOEMwQTEyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqqWDoZaZkUSU5fCX1Q+oSW5H CZHADKq9jyJ/dEAk2laMpqxa+mJsqIZ45tgOqBE+wUdoCRizgBo73XLrVSTb598y 84A9fyKMj9Xd6ZunF+7ZVG9zfOG8HPewzM1BaPRA83pV9NpQKc/+dI+c8V1CAcdH 3J8xtqz6uYyqC3jchyu75+cQZlcILxSRA8ptVFiUCjMqT8kelE0Jfoab6eMxiHR5 gIr6yiyw2LPuaQOkR1xxR5dD6xm77WnUmjDbKOc+bXVKNeg1ymIT8N5pc/KckPY3 iEVFQ3PNt6vuDn6s0wnq1P6w1/t3IN0aecAoWBdVaLooMQJXGAzMTp1Bqa7dAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUiiihCh3pA/Pp0FwEOqWzwIwKEgcwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjIzMTY0M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+sd MA0GCSqGSIb3DQEBCwUAA4IBAQBIEbVboxZJhkD594/NjuSSXnTFtbzH+JleuwWd tYlrecCzopHbK72WR4jxvMIXpatsh6Uu3HvwZFLqUjRhtoh/+M92ygLu9t1J6sRs T9x0SsIHKKFRtraB8KJA9H23BCt8JOhHjPNBW/KVXwGbmLbC7/Pi4ic2rMuREqg0 eauaiKsSdYMwt4HjrP2xFms9rG59E9CIZo7cx+BudaeySKjW3yFBXKeFypfKRDjb B+euEXu2TZhf+bD4z0Frqq/lyS9z+zC+gekjhD9c/EhDOC0XxlJHfvK4jY4aUBP1 FP7IJIlc50aLmtuwAY7qwT8i9lnNeogv8ZqsksLCrKEi11gU -----END CERTIFICATE-----Generated at Fri Jul 4 14:25:58 2025 by rpki-client