
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: AFubxWmFZQvJom/kmLQg7xb9jFpfxuzlWTGkJK3NCgA=
Subject key identifier: C3:65:72:0E:47:24:3B:91:56:9C:35:8E:D9:F0:84:1D:CC:17:BE:4B
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 24D1687CA7DD1A2D068634754213A746FB890D5B
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:26 +0000
ROA not before: Fri 05 Jun 2026 01:01:26 +0000
ROA not after: Fri 04 Jun 2027 01:06:26 +0000
asID: 396968
IP address blocks: 2a0f:6287:f681::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d1:68:7c:a7:dd:1a:2d:06:86:34:75:42:13:a7:46:fb:89:0d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:26 2026 GMT
Not After : Jun 4 01:06:26 2027 GMT
Subject: CN=C365720E47243B91569C358ED9F0841DCC17BE4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:62:cb:cb:b6:fc:d9:a0:8f:a1:48:62:70:
2e:37:9a:20:d4:01:d0:19:3a:85:7b:1d:3c:e4:68:
c4:f7:95:98:6d:ad:ed:77:cc:44:c9:99:46:05:79:
80:d1:61:cc:75:9a:2c:6a:ff:60:bc:1f:72:f0:6b:
07:a8:bc:a8:b7:3b:c4:cd:66:47:aa:bf:2d:df:d5:
a4:82:44:d7:81:d1:f3:53:cf:62:35:eb:33:0b:c8:
6e:13:d2:a6:71:8a:5d:a0:4d:28:fc:d5:9e:18:32:
44:c1:9e:54:19:82:54:05:de:98:b4:7b:55:3f:82:
1e:9b:36:6a:d2:a9:e7:c0:55:52:3b:80:9a:66:0c:
bc:b8:11:41:83:e3:c3:4e:89:bd:6d:8f:bf:1b:5c:
44:f1:53:a8:5e:a5:1b:0f:85:9c:51:d1:8f:35:d9:
b5:74:0b:9b:04:3b:39:1b:25:59:81:6f:57:c0:24:
83:55:a2:e2:f6:1a:40:c6:02:e4:7c:cd:39:1f:fd:
c7:1c:f0:7d:7c:f5:c1:5e:cb:84:65:bc:8f:1c:45:
fc:ce:be:46:81:0c:64:f8:7e:2c:6b:e1:b8:94:c4:
62:d4:8b:4c:a3:dc:4f:99:4b:ae:36:f9:4c:cd:d4:
45:fe:49:5f:b8:4f:be:0b:73:35:3d:f3:9e:cd:7c:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:65:72:0E:47:24:3B:91:56:9C:35:8E:D9:F0:84:1D:CC:17:BE:4B
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f681::/48
Signature Algorithm: sha256WithRSAEncryption
38:29:9c:6e:12:fc:e1:cd:63:da:a0:f2:17:1e:fc:c1:b0:73:
39:41:89:f2:d2:d9:c8:b5:5c:21:a2:8b:5f:96:39:6e:62:50:
e6:6b:14:1f:33:79:a5:a3:a2:26:84:ba:93:e4:72:63:6b:13:
42:f9:55:73:5c:a7:03:b8:0d:58:7f:fe:b3:8c:18:73:e6:36:
10:ff:28:f4:31:7e:86:35:01:2b:83:70:fb:5b:9e:f5:24:a0:
53:e1:17:01:0b:74:1b:79:18:1e:2b:b5:00:9e:77:98:89:ba:
a4:bf:ff:9f:ba:41:30:6b:79:43:26:92:0e:d5:07:12:73:b8:
27:cc:3c:b8:bd:e7:c1:79:61:33:f9:d6:98:3b:12:2b:82:4c:
4b:ef:7b:b0:4c:9d:80:25:c5:23:8f:3e:a3:a0:6f:ab:61:9c:
13:26:64:76:04:a3:3b:9a:77:e9:44:ca:2e:1c:96:07:1e:81:
33:af:af:5b:7c:2b:61:4c:4b:49:ba:98:f7:37:90:b6:f4:23:
80:a7:49:6a:98:70:c8:8e:a5:d5:ac:3a:da:59:04:67:1e:f4:
b1:b4:81:94:16:ac:ca:cf:91:d1:e0:2e:8f:ab:e3:85:de:91:
5c:7f:47:d0:b7:a5:e4:90:54:f8:7b:ca:70:b6:bf:81:b2:79:
17:a9:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:11 2026 by rpki-client