
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: FKQcKDiYbW2WuMxBJKLx71NpBNi8YozH3X7BDEwJOY8=
Subject key identifier: 4A:8A:62:31:8B:ED:B6:34:1A:1B:DA:11:EE:2E:F6:44:0A:D5:2C:E6
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 3F8F41E28802337F3754D16D42756A3F301CBBB2
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:24 +0000
ROA not before: Fri 05 Jun 2026 01:01:24 +0000
ROA not after: Fri 04 Jun 2027 01:06:24 +0000
asID: 396968
IP address blocks: 2a0f:6287:ef5c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8f:41:e2:88:02:33:7f:37:54:d1:6d:42:75:6a:3f:30:1c:bb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:24 2026 GMT
Not After : Jun 4 01:06:24 2027 GMT
Subject: CN=4A8A62318BEDB6341A1BDA11EE2EF6440AD52CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:08:4a:e4:2a:9a:a5:d7:0b:1b:c1:0b:5f:
ce:d3:23:bb:42:2a:d8:5f:ab:04:7a:5d:3f:d2:93:
dd:ee:4b:6f:a7:3c:77:7c:91:b7:5a:61:93:19:4c:
f4:bc:6b:40:c3:b0:68:d4:fe:d2:39:c3:06:c0:1c:
47:5d:ba:ab:03:31:a0:84:cd:0e:8f:f3:68:cc:c4:
9b:3f:5f:79:c2:8e:f1:44:0f:53:36:4b:6a:9d:74:
fc:59:3e:23:9d:f3:79:10:db:dc:37:5c:9f:e7:4e:
58:cd:c5:49:ec:71:5e:b9:9b:38:77:4a:ff:48:d4:
b6:52:ac:57:81:b1:05:d5:9f:45:b0:ee:39:a3:bf:
4e:65:a7:e5:2e:c5:13:3f:8d:86:b0:80:01:27:f4:
48:6d:55:34:c5:8b:d9:fe:62:08:e5:39:4e:5b:f1:
02:a9:12:6d:ce:fb:49:ad:20:d1:00:af:c9:c2:de:
64:78:38:62:80:f8:79:73:9e:fb:fc:99:ed:3d:2b:
ef:5c:b6:4e:bc:1d:cd:7a:48:cb:59:fc:01:91:b5:
92:87:f8:fb:5a:7f:49:53:67:1e:96:bc:b6:cc:2d:
fa:8b:27:9a:89:3a:38:90:86:2f:15:7f:bd:8e:cc:
59:1e:ef:fb:9e:cf:26:6e:c6:e7:fd:1c:d9:dc:34:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8A:62:31:8B:ED:B6:34:1A:1B:DA:11:EE:2E:F6:44:0A:D5:2C:E6
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ef5c::/48
Signature Algorithm: sha256WithRSAEncryption
1e:b1:68:51:da:06:c7:3e:af:46:be:1b:eb:a4:7c:5f:d8:a0:
b0:71:20:a1:ea:dd:b2:cb:8f:d3:64:cf:81:67:06:90:00:47:
0b:08:b9:fc:a5:31:c7:9b:18:b8:c8:5b:22:26:ad:75:3f:a5:
1a:6e:2f:f7:12:c2:e2:dc:03:c9:f2:29:75:04:d2:3e:8a:6c:
ed:c8:b7:e2:59:75:21:32:94:a5:61:72:c3:2f:21:02:17:bb:
fd:35:d2:f0:1c:2e:db:04:49:a6:77:45:07:5e:12:be:84:2c:
3c:20:50:1f:00:48:c2:90:cb:8a:eb:16:19:45:8b:f9:7c:18:
9e:62:c9:f2:29:c0:b0:ad:5b:4d:d5:2b:af:ec:fb:7f:3b:ab:
0b:5d:40:a9:81:c2:4f:34:8d:5c:73:4d:6d:7c:a6:5a:4d:c8:
9d:4c:95:37:2c:22:78:9c:73:b8:bf:fa:5b:03:69:f6:01:e9:
30:ec:5f:7a:de:5f:5f:00:bd:fc:cf:54:b3:8d:bd:89:dd:e4:
9f:73:a8:75:4e:94:01:7c:aa:d6:53:ca:69:0b:9a:d1:00:cf:
ec:ab:93:93:e3:03:2b:cd:6d:72:40:57:b1:2f:54:23:07:19:
c2:df:8c:77:37:77:2a:01:3c:ea:e4:fd:54:ad:6e:3e:21:63:
ec:65:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:25 2026 by rpki-client