
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663038393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663038393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: Iwp6cwISRwMoRkS2JMmquPOlwomKica6SSe4N3/uZE0=
Subject key identifier: 00:EF:F8:D1:14:EA:60:65:2F:8B:7B:0F:C4:C1:F6:B9:33:24:73:83
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 4548BD80028F823461AC55CE92C65C6AD6E42566
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663038393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:23 +0000
ROA not before: Fri 05 Jun 2026 01:01:23 +0000
ROA not after: Fri 04 Jun 2027 01:06:23 +0000
asID: 396968
IP address blocks: 2a0f:6287:f089::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:48:bd:80:02:8f:82:34:61:ac:55:ce:92:c6:5c:6a:d6:e4:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:23 2026 GMT
Not After : Jun 4 01:06:23 2027 GMT
Subject: CN=00EFF8D114EA60652F8B7B0FC4C1F6B933247383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:9b:77:2c:d4:16:75:a5:7d:38:50:f7:18:
24:dc:11:11:17:ae:ce:dd:db:73:73:d6:a0:6b:2d:
29:b9:d9:ef:d1:97:1e:f2:e1:89:5f:1d:51:fb:4e:
e6:c1:43:0c:07:e3:bf:59:00:e1:15:65:bc:6e:ad:
33:47:38:fe:7b:08:5e:92:e0:7c:b1:6c:ae:c9:18:
e7:34:7d:91:48:67:d1:a0:c8:f8:7d:f1:6f:91:5d:
e8:6f:7b:37:39:f7:e0:c6:c2:74:fc:dd:a6:f6:94:
23:70:d7:1c:10:2e:27:90:98:f6:e2:ea:a0:c8:9c:
e5:a3:94:e5:1b:d8:02:8d:4e:eb:86:f5:7e:b7:0d:
b7:ca:90:ff:96:07:f4:4c:7a:5f:f6:69:45:5e:01:
be:25:90:1d:69:1c:7a:1c:8f:90:83:5b:02:9d:76:
7c:fc:03:75:0c:09:f6:01:26:db:e7:a7:39:94:ea:
54:b4:62:f2:27:0b:e5:fd:fe:83:45:e7:f6:65:2a:
71:fc:f9:e8:d8:e2:63:f6:8e:e4:dc:2d:0a:d8:92:
d8:53:26:3f:98:a3:69:be:1a:14:1a:05:14:62:f2:
7e:85:fc:15:c9:95:1a:76:50:44:8c:74:84:0e:8f:
a3:4d:3a:2f:0a:3c:a5:e6:80:75:1f:8c:b8:6f:c1:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EF:F8:D1:14:EA:60:65:2F:8B:7B:0F:C4:C1:F6:B9:33:24:73:83
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663038393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f089::/48
Signature Algorithm: sha256WithRSAEncryption
a5:f0:93:da:33:fb:31:4d:1d:2a:71:70:5d:b4:62:44:31:ff:
92:4b:7c:67:b3:0e:16:61:d6:b0:65:20:4a:b3:83:dd:a7:3b:
47:b5:4d:4f:c9:40:62:43:25:c8:ef:27:33:b0:7e:3b:ff:1a:
01:8d:d2:5c:c3:21:93:b3:d1:1a:00:a1:9a:d2:ee:7b:bb:2c:
bc:14:88:9b:0c:18:ab:83:18:05:07:54:c4:fd:fb:22:71:40:
1a:56:13:c8:64:4d:55:0f:7f:3a:85:a5:67:c0:28:df:eb:80:
a5:2f:35:4f:ed:03:1e:f5:6c:2f:b3:62:8c:64:7a:ee:7e:8b:
81:02:1e:86:7d:39:e3:49:64:3b:25:a5:48:27:4b:4a:73:fd:
26:af:c9:60:77:8b:de:d6:5a:f6:83:63:f9:78:a0:08:bd:bf:
42:98:7f:98:03:ae:09:32:28:84:af:13:5e:30:a2:e2:b0:ff:
06:d4:f3:4e:75:b4:d6:fe:ad:05:51:d3:72:2a:9f:e7:0e:b8:
26:1d:2f:c5:44:69:5a:54:63:a7:56:39:13:cb:51:37:a3:66:
a6:99:a8:fc:cb:65:3b:b8:68:30:ee:f1:9a:20:d0:eb:de:fe:
3a:f3:46:2d:8a:2f:34:29:a3:3e:cc:11:4b:e1:99:19:2d:b2:
2d:dd:fc:6b
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIURUi9gAKPgjRhrFXOksZcatbkJWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjNaFw0yNzA2MDQwMTA2MjNaMDMxMTAvBgNV
BAMTKDAwRUZGOEQxMTRFQTYwNjUyRjhCN0IwRkM0QzFGNkI5MzMyNDczODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpc5t3LNQWdaV9OFD3GCTcEREX
rs7d23Nz1qBrLSm52e/Rlx7y4YlfHVH7TubBQwwH479ZAOEVZbxurTNHOP57CF6S
4HyxbK7JGOc0fZFIZ9GgyPh98W+RXehvezc59+DGwnT83ab2lCNw1xwQLieQmPbi
6qDInOWjlOUb2AKNTuuG9X63DbfKkP+WB/RMel/2aUVeAb4lkB1pHHocj5CDWwKd
dnz8A3UMCfYBJtvnpzmU6lS0YvInC+X9/oNF5/ZlKnH8+ejY4mP2juTcLQrYkthT
Jj+Yo2m+GhQaBRRi8n6F/BXJlRp2UESMdIQOj6NNOi8KPKXmgHUfjLhvwTetAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUAO/40RTqYGUvi3sPxMH2uTMkc4MwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzAzODM5M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/CJ
MA0GCSqGSIb3DQEBCwUAA4IBAQCl8JPaM/sxTR0qcXBdtGJEMf+SS3xnsw4WYdaw
ZSBKs4PdpztHtU1PyUBiQyXI7yczsH47/xoBjdJcwyGTs9EaAKGa0u57uyy8FIib
DBirgxgFB1TE/fsicUAaVhPIZE1VD386haVnwCjf64ClLzVP7QMe9Wwvs2KMZHru
fouBAh6GfTnjSWQ7JaVIJ0tKc/0mr8lgd4ve1lr2g2P5eKAIvb9CmH+YA64JMiiE
rxNeMKLisP8G1PNOdbTW/q0FUdNyKp/nDrgmHS/FRGlaVGOnVjkTy1E3o2ammaj8
y2U7uGgw7vGaINDr3v4680Ytii80KaM+zBFL4ZkZLbIt3fxr
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:52 2026 by rpki-client