
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: BB6YrW36F79Lk75UD7KmalwdPwEorh5MdWYL5Sr3Vvs=
Subject key identifier: DD:48:36:FB:39:24:4E:A8:9D:42:60:54:BF:FB:54:7A:64:84:78:82
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 2F6F561A42C7DCABEF18375E75C5BBED565C781E
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:24 +0000
ROA not before: Fri 05 Jun 2026 01:01:24 +0000
ROA not after: Fri 04 Jun 2027 01:06:24 +0000
asID: 396968
IP address blocks: 2a0f:6287:ee58::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6f:56:1a:42:c7:dc:ab:ef:18:37:5e:75:c5:bb:ed:56:5c:78:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:24 2026 GMT
Not After : Jun 4 01:06:24 2027 GMT
Subject: CN=DD4836FB39244EA89D426054BFFB547A64847882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:c9:a7:7a:fb:26:60:19:d7:da:9e:aa:b3:
22:fc:f0:ae:80:84:5c:6f:ba:a6:51:49:60:67:f8:
d2:43:ad:60:06:6a:49:06:f8:e7:79:5c:51:d2:ab:
9d:92:99:8c:51:77:88:bb:b2:d1:f7:bc:6a:49:77:
a0:75:50:7e:d3:56:87:de:c4:d9:8b:84:b7:af:42:
b2:3a:2a:01:09:d0:ef:51:40:cb:bd:2d:05:df:d8:
4c:b5:9a:bd:01:8e:30:d4:7f:2c:a1:e9:e1:ba:5a:
9d:0c:49:33:fb:b9:dc:2a:8f:d9:ad:f5:eb:de:d5:
d9:a3:ac:6f:43:93:de:6f:7f:22:cb:57:a9:1f:30:
71:83:a8:64:c3:24:cd:ff:e4:87:ff:bc:ee:bc:c8:
7c:d2:bb:84:49:51:0c:6a:d7:6b:b1:49:d4:95:ca:
54:d3:c2:cf:3b:9b:6a:82:0a:ee:99:61:41:dd:f9:
ae:d0:74:f0:7c:22:20:9a:84:a6:a5:fd:43:4d:83:
83:73:d0:93:a4:ca:c6:16:93:d5:38:d7:e9:83:34:
a0:50:e5:f1:63:03:61:34:34:21:8e:27:61:6c:ac:
70:7e:9c:3e:6d:4e:d3:e6:99:6b:84:6c:48:c3:c5:
4e:fb:11:6c:08:df:ff:36:a8:1c:1d:cb:94:9e:db:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:48:36:FB:39:24:4E:A8:9D:42:60:54:BF:FB:54:7A:64:84:78:82
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ee58::/48
Signature Algorithm: sha256WithRSAEncryption
a0:73:14:43:88:36:5e:88:2b:b9:3f:4a:f4:2e:f3:1b:f2:10:
99:da:0c:9d:df:40:cf:47:2d:44:26:90:82:e2:9e:5d:65:64:
80:92:17:e2:cd:48:85:20:11:63:f9:84:49:4e:12:eb:bb:78:
09:5e:15:ea:c8:b0:be:c0:c3:13:8b:86:7d:ab:86:7f:ea:c6:
69:a4:6d:95:cc:da:a9:f4:6b:1d:c7:fa:d7:2c:73:a3:fa:d9:
fe:23:52:85:91:4c:e5:e8:32:2b:41:c1:64:80:4c:74:44:fb:
ef:e5:45:5d:09:0f:ae:87:4b:3a:af:ea:c4:4f:52:57:81:ee:
ae:e6:a8:f9:99:45:2e:78:8d:5a:a1:e9:4d:dd:ac:24:50:98:
84:92:cd:67:a2:f9:ba:04:75:c0:4d:f1:4e:66:c7:3e:42:5f:
25:86:2d:44:ee:d3:06:25:87:a8:15:bd:6e:1c:d5:ef:af:e5:
a2:2d:03:84:6d:4f:9e:d0:26:70:ad:80:fa:1d:bd:0b:78:e0:
26:3d:7b:54:66:ac:e2:fe:8c:06:eb:a8:39:35:4c:44:78:9e:
5b:5d:eb:73:2d:f2:af:82:e9:19:dd:c8:48:8c:dd:bd:eb:82:
f9:e3:02:97:b5:58:69:03:da:8d:18:2f:3b:81:b0:35:4f:99:
67:ae:73:50
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUL29WGkLH3KvvGDdedcW77VZceB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjRaFw0yNzA2MDQwMTA2MjRaMDMxMTAvBgNV
BAMTKERENDgzNkZCMzkyNDRFQTg5RDQyNjA1NEJGRkI1NDdBNjQ4NDc4ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQ8mnevsmYBnX2p6qsyL88K6A
hFxvuqZRSWBn+NJDrWAGakkG+Od5XFHSq52SmYxRd4i7stH3vGpJd6B1UH7TVofe
xNmLhLevQrI6KgEJ0O9RQMu9LQXf2Ey1mr0BjjDUfyyh6eG6Wp0MSTP7udwqj9mt
9eve1dmjrG9Dk95vfyLLV6kfMHGDqGTDJM3/5If/vO68yHzSu4RJUQxq12uxSdSV
ylTTws87m2qCCu6ZYUHd+a7QdPB8IiCahKal/UNNg4Nz0JOkysYWk9U41+mDNKBQ
5fFjA2E0NCGOJ2FsrHB+nD5tTtPmmWuEbEjDxU77EWwI3/82qBwdy5Se26fjAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQU3Ug2+zkkTqidQmBUv/tUemSEeIIwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjUzNTM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+5Y
MA0GCSqGSIb3DQEBCwUAA4IBAQCgcxRDiDZeiCu5P0r0LvMb8hCZ2gyd30DPRy1E
JpCC4p5dZWSAkhfizUiFIBFj+YRJThLru3gJXhXqyLC+wMMTi4Z9q4Z/6sZppG2V
zNqp9Gsdx/rXLHOj+tn+I1KFkUzl6DIrQcFkgEx0RPvv5UVdCQ+uh0s6r+rET1JX
ge6u5qj5mUUueI1aoelN3awkUJiEks1novm6BHXATfFOZsc+Ql8lhi1E7tMGJYeo
Fb1uHNXvr+WiLQOEbU+e0CZwrYD6Hb0LeOAmPXtUZqzi/owG66g5NUxEeJ5bXetz
LfKvgukZ3chIjN2964L54wKXtVhpA9qNGC87gbA1T5lnrnNQ
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:19 2026 by rpki-client