$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: szZSx7GHjez+TEGbqGgp65YyXGWc4Uhn5TPUL7JgVZ8= Subject key identifier: 40:85:EE:5A:90:3C:3B:E1:BA:E6:52:B8:8B:69:9B:4C:9D:00:D4:BC Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 37DA5744BDB4594588963F5E01F169F48ED68C49 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:45 +0000 ROA not before: Fri 04 Jul 2025 00:42:45 +0000 ROA not after: Fri 03 Jul 2026 00:47:45 +0000 asID: 396968 IP address blocks: 2a0f:6287:f278::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:da:57:44:bd:b4:59:45:88:96:3f:5e:01:f1:69:f4:8e:d6:8c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:45 2025 GMT Not After : Jul 3 00:47:45 2026 GMT Subject: CN=4085EE5A903C3BE1BAE652B88B699B4C9D00D4BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:a1:6b:65:d5:4e:51:fb:03:07:ee:1a:51: d2:88:52:df:d8:f1:10:d1:4a:4e:3f:2c:d8:fc:f4: c1:23:16:3e:35:14:1d:e3:01:a3:82:7e:8b:7a:47: b2:f3:1b:db:4c:9c:18:18:c4:48:b7:7e:fb:75:ba: bf:77:92:c1:20:17:e4:34:9b:a3:74:c6:c5:d3:ac: 7a:6e:97:27:f3:26:f3:0b:1d:26:5b:5b:8c:b2:f9: 4a:85:5c:23:d7:4b:7e:7a:bb:68:f1:ec:46:4d:a0: 1b:43:91:3b:ba:1a:c4:b7:27:b7:4d:1f:d1:a4:25: 3b:44:66:e3:bb:06:3c:38:80:94:7c:5d:33:ec:c7: 49:e8:0f:98:41:71:5f:14:bc:c2:2a:50:02:80:e5: 37:03:cb:e6:4d:fa:42:9f:8f:09:f0:6f:d6:29:90: ea:08:6e:eb:06:84:96:0b:b5:64:0a:ae:c1:bd:c7: d3:a5:61:33:48:0a:2b:b5:5a:9d:2c:aa:e4:4d:24: 46:c3:8a:03:0a:0c:62:7a:bf:68:41:5a:5a:5e:b8: 57:ec:db:d9:ac:02:20:4c:95:26:c2:9a:8b:00:3c: 48:fa:1e:58:47:a1:bd:12:bb:70:42:5b:07:a2:59: 38:23:61:b1:9e:49:7d:1f:e3:30:7f:af:1b:16:9c: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:85:EE:5A:90:3C:3B:E1:BA:E6:52:B8:8B:69:9B:4C:9D:00:D4:BC X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:f278::/48 Signature Algorithm: sha256WithRSAEncryption a5:31:5e:d6:4c:1a:8e:e6:b3:84:2d:94:ca:a8:6f:44:c0:20: 0a:e6:4d:eb:83:25:7d:8f:e5:15:31:a3:1f:88:69:18:79:02: ab:a2:60:df:aa:fb:79:b8:cd:d7:87:43:85:f3:c1:a5:d5:7b: 49:72:e4:98:f9:05:f3:ec:86:4b:2a:a2:9d:09:42:69:dd:c6: 7a:76:17:ea:4b:05:7b:9d:81:15:13:26:0c:57:83:68:94:3c: 50:65:d4:5e:47:f5:ff:25:39:42:f3:77:59:6b:1d:d3:b9:a8: b3:ca:d7:e4:2b:2d:96:3d:8a:73:04:51:4c:ac:00:68:4c:e4: 0b:4a:c3:95:c1:4c:c9:4b:96:e1:66:b4:22:e7:51:59:95:fd: 00:cb:f7:cd:c9:5d:bc:02:d4:58:30:5c:00:d2:b9:81:aa:e6: 5c:00:14:3c:c4:44:c5:5c:39:77:3d:20:f9:a0:f5:f9:82:35: 58:5a:2d:e6:0a:df:87:8e:d0:e1:5c:ee:2f:bf:c8:97:16:9e: 90:ec:c1:6f:c5:58:9e:4e:95:a0:c9:ef:30:66:5e:31:36:ec: 28:39:56:91:69:f1:9a:e0:1f:9f:9d:62:9b:d0:20:31:45:8d: b5:cf:74:ba:70:f8:04:30:48:23:c5:92:63:59:1e:84:7e:2b: 19:57:5b:47 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUN9pXRL20WUWIlj9eAfFp9I7WjEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV BAMTKDQwODVFRTVBOTAzQzNCRTFCQUU2NTJCODhCNjk5QjRDOUQwMEQ0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNDaFrZdVOUfsDB+4aUdKIUt/Y 8RDRSk4/LNj89MEjFj41FB3jAaOCfot6R7LzG9tMnBgYxEi3fvt1ur93ksEgF+Q0 m6N0xsXTrHpulyfzJvMLHSZbW4yy+UqFXCPXS356u2jx7EZNoBtDkTu6GsS3J7dN H9GkJTtEZuO7Bjw4gJR8XTPsx0noD5hBcV8UvMIqUAKA5TcDy+ZN+kKfjwnwb9Yp kOoIbusGhJYLtWQKrsG9x9OlYTNICiu1Wp0squRNJEbDigMKDGJ6v2hBWlpeuFfs 29msAiBMlSbCmosAPEj6HlhHob0Su3BCWweiWTgjYbGeSX0f4zB/rxsWnMhNAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUQIXuWpA8O+G65lK4i2mbTJ0A1LwwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzIzNzM4M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/J4 MA0GCSqGSIb3DQEBCwUAA4IBAQClMV7WTBqO5rOELZTKqG9EwCAK5k3rgyV9j+UV MaMfiGkYeQKromDfqvt5uM3Xh0OF88Gl1XtJcuSY+QXz7IZLKqKdCUJp3cZ6dhfq SwV7nYEVEyYMV4NolDxQZdReR/X/JTlC83dZax3TuaizytfkKy2WPYpzBFFMrABo TOQLSsOVwUzJS5bhZrQi51FZlf0Ay/fNyV28AtRYMFwA0rmBquZcABQ8xETFXDl3 PSD5oPX5gjVYWi3mCt+HjtDhXO4vv8iXFp6Q7MFvxVieTpWgye8wZl4xNuwoOVaR afGa4B+fnWKb0CAxRY21z3S6cPgEMEgjxZJjWR6EfisZV1tH -----END CERTIFICATE-----Generated at Fri Jul 4 14:48:18 2025 by rpki-client