$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656461323a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a656461323a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: TOMf0drNKm7tHX7ZL/+F0gnazSmluTn+JJPdS4Nmm9g= Subject key identifier: 40:52:16:8C:09:7B:A5:12:B8:2D:88:45:CD:20:81:74:8B:00:FF:D8 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 476FCCF3F8E507E948DABA8BED7147BD7F399AFB Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656461323a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 05 Jun 2026 01:06:22 +0000 ROA not before: Fri 05 Jun 2026 01:01:22 +0000 ROA not after: Fri 04 Jun 2027 01:06:22 +0000 asID: 396968 IP address blocks: 2a0f:6287:eda2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 20:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6f:cc:f3:f8:e5:07:e9:48:da:ba:8b:ed:71:47:bd:7f:39:9a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jun 5 01:01:22 2026 GMT Not After : Jun 4 01:06:22 2027 GMT Subject: CN=4052168C097BA512B82D8845CD2081748B00FFD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:b8:ba:09:d1:25:92:d0:ff:19:dd:f3:c7: 5f:cf:14:ca:c5:06:97:49:13:8d:50:50:2f:d0:be: 4d:5f:94:77:2a:9c:f1:f9:74:12:e3:23:f4:c6:b9: b5:ed:1b:88:fa:8a:a7:1c:fd:9e:a3:d4:23:13:7b: 84:94:26:c7:bd:d8:db:3c:87:3d:be:9a:e4:13:0d: 76:df:8b:4e:7d:28:5a:65:55:e9:28:07:de:bc:93: 2c:78:59:49:6b:e7:d2:26:22:ea:be:be:6b:c5:ef: f0:8c:ef:1b:0d:8b:45:3f:d5:a6:33:e1:ca:17:0c: 78:89:c9:ff:ad:1b:0a:61:2c:f2:fc:8a:e2:d4:f4: 97:bc:7f:f4:1d:f4:c0:5b:5c:5c:2f:42:e4:f9:b4: 9b:38:58:c2:fb:0c:3b:1d:e0:1b:ea:27:3c:6e:fc: e7:29:be:a1:6a:bf:43:cc:ea:f5:e4:d1:16:da:bc: cf:40:38:48:62:9f:20:1f:2d:81:6b:37:81:52:c3: 87:cd:72:63:8b:d8:ba:90:af:6d:ab:2b:23:a1:7a: 90:6c:e6:9d:7d:15:ff:85:1f:75:92:dd:11:66:24: d5:97:f0:ea:41:ad:62:d7:58:07:c2:40:b6:04:d8: 71:67:6f:a1:7a:a9:58:7b:30:57:db:8d:e3:df:e6: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:52:16:8C:09:7B:A5:12:B8:2D:88:45:CD:20:81:74:8B:00:FF:D8 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656461323a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:eda2::/48 Signature Algorithm: sha256WithRSAEncryption 40:eb:f5:cf:d8:fd:d6:10:25:ca:17:cc:cc:ce:92:2d:ed:e2: df:60:f4:85:1c:01:f1:1c:5f:a0:a8:5d:2d:98:db:f5:13:d0: 98:aa:d4:d7:85:70:2e:1c:09:63:5e:93:66:53:15:76:2f:77: 64:86:5c:2f:8f:6d:44:d5:a8:7b:4d:d5:d9:2b:1b:7c:e0:d7: 11:58:ee:2a:1b:70:7a:db:5a:98:71:1b:b5:3e:a4:78:d2:35: f1:69:e1:a6:3f:00:a5:84:77:c1:23:73:8f:ae:cb:5e:57:25: e3:66:f4:b3:88:90:52:52:8a:9a:f7:cc:5f:85:5a:24:da:b5: 03:3e:a2:63:f1:da:ba:09:89:8c:48:80:a4:62:22:98:22:d7: 33:a7:e1:e1:7e:33:ab:1d:a9:31:f5:33:06:7c:a8:19:b0:b0: 31:ab:00:e4:e2:96:8f:0c:f7:46:51:91:8b:66:ea:20:5d:fc: bc:2c:01:4b:01:c0:71:e3:c0:2e:f1:b0:00:a9:1c:76:2c:3d: a2:f0:9a:dc:15:f6:f1:e0:34:4a:5f:74:ef:69:3b:ed:7a:30: da:58:d1:2a:f6:dc:48:08:72:74:9a:93:aa:19:38:24:0b:15: 58:7a:10:ee:5b:7d:98:a1:ee:bb:d2:c2:a6:c6:d5:68:3d:b4: a7:4a:c5:f2 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUR2/M8/jlB+lI2rqL7XFHvX85mvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjJaFw0yNzA2MDQwMTA2MjJaMDMxMTAvBgNV BAMTKDQwNTIxNjhDMDk3QkE1MTJCODJEODg0NUNEMjA4MTc0OEIwMEZGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mri6CdElktD/Gd3zx1/PFMrF BpdJE41QUC/Qvk1flHcqnPH5dBLjI/TGubXtG4j6iqcc/Z6j1CMTe4SUJse92Ns8 hz2+muQTDXbfi059KFplVekoB968kyx4WUlr59ImIuq+vmvF7/CM7xsNi0U/1aYz 4coXDHiJyf+tGwphLPL8iuLU9Je8f/Qd9MBbXFwvQuT5tJs4WML7DDsd4BvqJzxu /OcpvqFqv0PM6vXk0RbavM9AOEhinyAfLYFrN4FSw4fNcmOL2LqQr22rKyOhepBs 5p19Ff+FH3WS3RFmJNWX8OpBrWLXWAfCQLYE2HFnb6F6qVh7MFfbjePf5uZnAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUQFIWjAl7pRK4LYhFzSCBdIsA/9gwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjQ2MTMyM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+2i MA0GCSqGSIb3DQEBCwUAA4IBAQBA6/XP2P3WECXKF8zMzpIt7eLfYPSFHAHxHF+g qF0tmNv1E9CYqtTXhXAuHAljXpNmUxV2L3dkhlwvj21E1ah7TdXZKxt84NcRWO4q G3B621qYcRu1PqR40jXxaeGmPwClhHfBI3OPrsteVyXjZvSziJBSUoqa98xfhVok 2rUDPqJj8dq6CYmMSICkYiKYItczp+HhfjOrHakx9TMGfKgZsLAxqwDk4paPDPdG UZGLZuogXfy8LAFLAcBx48Au8bAAqRx2LD2i8JrcFfbx4DRKX3TvaTvtejDaWNEq 9txICHJ0mpOqGTgkCxVYehDuW32Yoe670sKmxtVoPbSnSsXy -----END CERTIFICATE-----Generated at Sat Jun 6 08:23:34 2026 by rpki-client