$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656233663a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a656233663a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: KnnfyL8HEBnLa67UYHLAwY7uW4hbPzZckMNUTJaqRYM= Subject key identifier: D8:20:E4:87:19:22:16:03:D7:71:E2:10:9C:14:28:65:D9:06:E1:7D Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 57F0AAE7A921D535219384C0D50DAF6A28949917 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656233663a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:42 +0000 ROA not before: Fri 04 Jul 2025 00:42:42 +0000 ROA not after: Fri 03 Jul 2026 00:47:42 +0000 asID: 396968 IP address blocks: 2a0f:6287:eb3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f0:aa:e7:a9:21:d5:35:21:93:84:c0:d5:0d:af:6a:28:94:99:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:42 2025 GMT Not After : Jul 3 00:47:42 2026 GMT Subject: CN=D820E48719221603D771E2109C142865D906E17D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:2a:11:52:3b:2f:a2:3c:bd:ae:2c:0a:f3: 3b:08:c2:d9:54:84:f0:8f:c6:61:6c:08:fc:92:94: ca:17:6b:9c:77:28:87:f0:d3:10:06:a0:26:83:29: 9e:5f:11:1c:3d:36:4c:8e:21:54:5b:22:3c:15:6c: 3d:37:b4:48:21:1e:85:67:83:68:ec:5f:c8:78:e5: 69:fa:e7:fd:03:ba:a6:65:03:2a:03:97:cf:82:c5: a6:5b:c3:f9:29:e4:45:ba:c1:1c:19:f5:e9:5e:59: ea:66:96:be:5c:f0:ba:0a:e2:dc:29:d9:86:af:a9: 48:8e:97:29:51:d2:b2:d2:e7:34:26:4b:58:ab:d1: f8:fd:52:63:fc:20:b7:a3:e0:dd:b3:0f:fd:85:64: 00:11:e7:82:80:2b:6d:a5:49:37:c0:33:f0:6a:d1: ad:fd:2c:b7:03:e4:17:08:2f:14:78:5c:92:bd:ae: ea:c9:b0:f0:f8:97:9d:67:56:68:f8:9a:1c:93:9a: 73:c0:76:b1:6e:e0:b0:7b:68:d2:1c:6c:35:1b:b7: ae:ba:ff:81:c1:e6:15:ca:ee:75:8d:5d:6f:c9:c4: f8:93:91:a3:4b:76:af:94:8a:20:1c:98:1f:4e:0d: 28:82:ae:44:68:60:e6:96:ba:6c:3a:58:2a:bd:52: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:20:E4:87:19:22:16:03:D7:71:E2:10:9C:14:28:65:D9:06:E1:7D X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656233663a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:eb3f::/48 Signature Algorithm: sha256WithRSAEncryption 0e:38:bf:83:73:a7:cd:06:7e:84:df:91:a6:54:50:29:fe:1e: 7f:f1:a2:a7:3e:64:f0:c9:12:1f:d8:cb:7d:bc:8b:a5:05:19: 41:eb:ab:45:b2:8e:95:9a:01:db:bb:29:71:36:70:69:6d:c1: 66:4f:89:ed:de:d0:6d:d5:d6:7d:79:82:8a:15:23:a3:c8:d7: 7f:ea:c4:96:2f:9e:95:ae:5e:97:23:dd:8f:8a:d3:6d:58:2c: 8e:f6:b0:61:dd:6c:13:ab:ac:bf:2e:26:31:4b:5d:34:29:1d: 24:af:23:dd:12:2b:05:51:0a:c6:88:5c:63:c7:5c:80:a8:fb: 19:d3:ee:93:0b:3f:71:55:83:c1:36:cf:8d:44:cf:40:b7:bf: 01:2e:6f:b6:98:65:11:44:07:ff:2b:f2:80:b2:27:df:36:8c: e6:16:4d:fb:69:9b:2e:01:e9:07:ee:cf:b1:4f:28:75:e2:a0: 23:18:d0:29:fd:e3:77:74:70:da:3c:4a:31:93:cf:9d:fd:04: 3c:f0:cc:57:25:66:8d:e0:cc:fb:06:5f:3b:89:d0:bd:71:c8: e9:d0:52:b2:74:9d:96:83:38:d7:b3:c3:3f:7d:29:4b:a5:b7: 3a:ee:94:7d:a5:d8:a5:9f:cb:ff:e1:6d:25:e5:e9:51:4e:f9: 92:f8:e5:a9 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUV/Cq56kh1TUhk4TA1Q2vaiiUmRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDJaFw0yNjA3MDMwMDQ3NDJaMDMxMTAvBgNV BAMTKEQ4MjBFNDg3MTkyMjE2MDNENzcxRTIxMDlDMTQyODY1RDkwNkUxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeSioRUjsvojy9riwK8zsIwtlU hPCPxmFsCPySlMoXa5x3KIfw0xAGoCaDKZ5fERw9NkyOIVRbIjwVbD03tEghHoVn g2jsX8h45Wn65/0DuqZlAyoDl8+CxaZbw/kp5EW6wRwZ9eleWepmlr5c8LoK4twp 2YavqUiOlylR0rLS5zQmS1ir0fj9UmP8ILej4N2zD/2FZAAR54KAK22lSTfAM/Bq 0a39LLcD5BcILxR4XJK9rurJsPD4l51nVmj4mhyTmnPAdrFu4LB7aNIcbDUbt666 /4HB5hXK7nWNXW/JxPiTkaNLdq+UiiAcmB9ODSiCrkRoYOaWumw6WCq9UoGJAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQU2CDkhxkiFgPXceIQnBQoZdkG4X0wHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjIzMzY2M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+s/ MA0GCSqGSIb3DQEBCwUAA4IBAQAOOL+Dc6fNBn6E35GmVFAp/h5/8aKnPmTwyRIf 2Mt9vIulBRlB66tFso6VmgHbuylxNnBpbcFmT4nt3tBt1dZ9eYKKFSOjyNd/6sSW L56Vrl6XI92PitNtWCyO9rBh3WwTq6y/LiYxS100KR0kryPdEisFUQrGiFxjx1yA qPsZ0+6TCz9xVYPBNs+NRM9At78BLm+2mGURRAf/K/KAsiffNozmFk37aZsuAekH 7s+xTyh14qAjGNAp/eN3dHDaPEoxk8+d/QQ88MxXJWaN4Mz7Bl87idC9ccjp0FKy dJ2WgzjXs8M/fSlLpbc67pR9pdiln8v/4W0l5elRTvmS+OWp -----END CERTIFICATE-----Generated at Fri Jul 4 14:22:21 2025 by rpki-client