
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656636393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656636393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: FZTt9NyGPqiJq/bh5mN+HKEm4lkk+1/09p0Yb7R13io=
Subject key identifier: D8:9A:24:77:14:54:87:C7:BD:5F:1E:CB:E0:E2:F8:27:0B:60:DE:81
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 3DA7D5E81EDFF9329FCB6990285AE3E0F43E935A
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656636393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:25 +0000
ROA not before: Fri 05 Jun 2026 01:01:25 +0000
ROA not after: Fri 04 Jun 2027 01:06:25 +0000
asID: 396968
IP address blocks: 2a0f:6287:ef69::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a7:d5:e8:1e:df:f9:32:9f:cb:69:90:28:5a:e3:e0:f4:3e:93:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:25 2026 GMT
Not After : Jun 4 01:06:25 2027 GMT
Subject: CN=D89A2477145487C7BD5F1ECBE0E2F8270B60DE81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:a8:61:3f:88:06:37:30:49:17:5f:ec:1f:
22:70:fc:fa:90:71:83:87:7c:2d:24:bc:3e:ea:4c:
13:b1:a7:72:47:a7:3a:a4:10:4d:45:c8:59:a4:7b:
e9:4d:b7:30:4e:eb:9a:60:42:3d:91:2c:66:c8:a9:
42:ca:33:63:6c:99:9f:e5:a2:62:db:50:32:3f:4c:
a1:8b:4b:a4:6e:c2:e8:2c:d0:9b:fc:ee:7b:23:0b:
21:44:1f:67:5b:1e:25:ad:1d:cd:5e:b4:d9:ff:ab:
0a:b7:fc:04:07:55:a4:04:16:b1:da:d0:f4:77:23:
5f:6b:6f:24:02:6d:87:8b:01:98:56:ed:0d:e0:e6:
f6:e7:21:00:92:18:fb:6b:03:c8:dd:d3:f6:ee:4f:
7b:21:39:4c:07:fb:17:2c:d1:70:59:d0:6f:1e:39:
e8:10:7b:45:57:93:f7:cd:9b:cc:1b:09:d4:ad:56:
14:35:3f:ab:e2:d8:61:8c:5c:9b:25:ff:5a:76:1c:
15:50:8c:89:a1:bc:79:ea:a4:88:ef:d2:d3:2b:75:
89:b8:e9:cb:39:ee:64:80:48:ea:24:2d:5d:2e:40:
79:ea:5a:a7:3b:b9:96:aa:e2:7b:e3:f6:45:d5:c5:
81:ef:75:63:ca:1c:d2:cf:d2:ca:eb:9a:13:95:cd:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:24:77:14:54:87:C7:BD:5F:1E:CB:E0:E2:F8:27:0B:60:DE:81
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656636393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ef69::/48
Signature Algorithm: sha256WithRSAEncryption
2f:7e:fd:fa:15:a9:75:9f:6c:d6:51:17:30:a8:a5:fb:ec:e3:
f0:d8:48:db:12:fb:25:63:52:4d:f5:69:91:74:62:87:2c:3b:
d5:91:ea:b7:84:f0:6a:05:2f:70:25:7a:cc:03:b8:d0:67:3d:
4c:2a:de:41:9e:f4:e1:80:2d:f6:17:24:7a:84:0d:98:4e:65:
47:07:fe:5f:4e:fb:03:d4:57:b6:27:83:3e:52:33:b5:e1:50:
83:da:b6:50:8d:cc:a5:0f:3b:67:bf:32:22:7b:a5:15:9c:b8:
f9:36:03:a7:7b:59:15:61:e3:a8:92:be:79:96:3c:b9:6a:86:
12:49:ce:98:47:6e:f3:78:f8:9c:2f:4e:7b:bd:16:a5:ea:79:
0c:e8:89:00:6a:70:d8:f7:8b:48:54:68:6b:6e:16:61:fd:a7:
a9:d9:48:ed:ba:e5:98:dc:09:30:62:ad:97:56:f7:ae:1d:d0:
cb:1b:06:69:4a:4e:64:c9:52:bc:43:ae:d8:d4:00:9a:9e:60:
25:c0:27:8b:35:9e:94:6b:b5:19:79:26:2a:92:6b:fe:f8:5a:
c9:79:4a:59:cd:58:6c:96:11:10:af:f2:f0:7d:61:07:38:60:
58:50:92:f1:e1:01:30:6f:36:02:70:f4:40:af:39:e4:2f:25:
78:72:57:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:06 2026 by rpki-client