$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: dfyWV3/c+3mvPNJIJeOwTG5F+XokcqVvHt5ST7xSTjk= Subject key identifier: C8:F1:FC:CB:57:3C:E4:64:11:22:CE:E5:1E:79:5A:93:6C:05:04:E9 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 70413E48E5E24A25A6C990BAC1C1BA944BD6097A Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 05 Jun 2026 01:06:23 +0000 ROA not before: Fri 05 Jun 2026 01:01:23 +0000 ROA not after: Fri 04 Jun 2027 01:06:23 +0000 asID: 396968 IP address blocks: 2a0f:6287:edd4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 20:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:41:3e:48:e5:e2:4a:25:a6:c9:90:ba:c1:c1:ba:94:4b:d6:09:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jun 5 01:01:23 2026 GMT Not After : Jun 4 01:06:23 2027 GMT Subject: CN=C8F1FCCB573CE4641122CEE51E795A936C0504E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:08:bd:5b:5d:a3:9c:fe:1c:2a:48:3e:0b: f4:a5:e1:6b:0b:31:bb:f1:04:cf:23:71:13:fe:89: 40:48:52:02:78:44:95:b6:42:7f:5b:ac:a8:b1:ea: 52:fb:1e:c4:42:88:66:01:90:03:00:ce:b1:7d:3a: 28:2c:13:78:a1:9a:c8:6c:95:f5:fb:b3:18:e3:83: f0:b5:f6:a9:46:af:17:4a:24:27:f0:ae:28:ff:a9: 42:5b:48:7c:46:62:7f:d2:3f:b6:cd:1b:7a:09:1f: 91:e0:43:6a:68:e0:bc:88:c2:bc:ba:e3:db:a7:f6: c4:60:c1:a1:2c:8f:21:24:19:a6:4b:89:0a:73:8f: ff:c3:82:07:69:a9:ae:b2:f6:6d:37:f5:73:f1:0c: 41:23:8e:23:82:19:fd:83:f3:01:74:6d:54:8f:21: 3f:0e:36:7e:9f:f1:ad:36:84:fc:27:82:86:2f:6a: b8:d7:29:9f:c3:f6:1c:8e:57:65:ce:99:86:f1:eb: 48:45:94:4b:be:60:c8:54:d8:b8:58:a0:60:9f:a0: 60:4f:9f:a1:32:5d:5b:05:1a:d6:ff:b3:39:f5:4c: 6b:50:d9:e4:10:bd:19:b0:ec:3b:6a:ba:da:d5:0f: 10:c7:4c:93:f9:c4:5a:11:f0:53:13:33:86:d3:54: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F1:FC:CB:57:3C:E4:64:11:22:CE:E5:1E:79:5A:93:6C:05:04:E9 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:edd4::/48 Signature Algorithm: sha256WithRSAEncryption 20:10:a7:a5:eb:a4:32:0e:d3:c2:fa:bf:41:5d:1a:6a:55:db: 22:8d:f0:eb:c1:ed:c2:4d:10:c4:63:86:9c:67:39:e2:99:66: 13:5d:40:9d:13:fb:f5:31:71:3d:4e:f4:ed:55:e1:6a:54:e0: 90:fd:52:4e:04:d5:1b:f3:23:36:c9:ac:ff:8a:68:41:e4:25: 3f:aa:95:f3:57:29:ba:99:4a:9d:1a:9a:d8:26:ce:6c:43:3d: c8:80:c8:b4:d6:f9:58:de:f4:a1:8d:97:d1:26:c9:0d:e1:59: d9:80:2d:c6:94:2b:cf:1f:8c:4c:5f:5b:36:b9:96:8b:b4:02: 70:8c:56:3f:fc:55:2e:b1:86:9f:ca:fd:d1:e5:4b:bb:28:d1: 77:62:45:03:5d:9e:f8:0a:85:3d:49:83:3f:4c:13:6c:63:3b: 53:52:a1:60:15:35:94:f9:1a:9d:b8:42:55:68:85:56:f6:fa: b2:13:38:cf:0e:75:0d:c8:78:72:23:53:f2:30:f9:7a:b1:dd: a4:7b:5b:ac:66:c4:91:16:28:a6:56:1c:81:28:6e:b4:4b:97: ac:67:8b:35:50:c1:69:58:57:7f:cc:51:65:1b:a5:f8:bd:21: 16:9e:1d:a3:9e:d5:bc:45:0b:6b:93:0f:38:8b:3d:c3:8a:58: 40:f2:b7:5e -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUcEE+SOXiSiWmyZC6wcG6lEvWCXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjNaFw0yNzA2MDQwMTA2MjNaMDMxMTAvBgNV BAMTKEM4RjFGQ0NCNTczQ0U0NjQxMTIyQ0VFNTFFNzk1QTkzNkMwNTA0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeAi9W12jnP4cKkg+C/Sl4WsL MbvxBM8jcRP+iUBIUgJ4RJW2Qn9brKix6lL7HsRCiGYBkAMAzrF9OigsE3ihmshs lfX7sxjjg/C19qlGrxdKJCfwrij/qUJbSHxGYn/SP7bNG3oJH5HgQ2po4LyIwry6 49un9sRgwaEsjyEkGaZLiQpzj//Dggdpqa6y9m039XPxDEEjjiOCGf2D8wF0bVSP IT8ONn6f8a02hPwngoYvarjXKZ/D9hyOV2XOmYbx60hFlEu+YMhU2LhYoGCfoGBP n6EyXVsFGtb/szn1TGtQ2eQQvRmw7DtqutrVDxDHTJP5xFoR8FMTM4bTVDBRAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUyPH8y1c85GQRIs7lHnlak2wFBOkwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjQ2NDM0M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+3U MA0GCSqGSIb3DQEBCwUAA4IBAQAgEKel66QyDtPC+r9BXRpqVdsijfDrwe3CTRDE Y4acZznimWYTXUCdE/v1MXE9TvTtVeFqVOCQ/VJOBNUb8yM2yaz/imhB5CU/qpXz Vym6mUqdGprYJs5sQz3IgMi01vlY3vShjZfRJskN4VnZgC3GlCvPH4xMX1s2uZaL tAJwjFY//FUusYafyv3R5Uu7KNF3YkUDXZ74CoU9SYM/TBNsYztTUqFgFTWU+Rqd uEJVaIVW9vqyEzjPDnUNyHhyI1PyMPl6sd2ke1usZsSRFiimVhyBKG60S5esZ4s1 UMFpWFd/zFFlG6X4vSEWnh2jntW8RQtrkw84iz3DilhA8rde -----END CERTIFICATE-----Generated at Sat Jun 6 08:23:15 2026 by rpki-client