$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: poez45YiAdS4dp4yCA57STpG2F52i31nwkqcpE1U2nU= Subject key identifier: 9F:F1:38:33:63:DB:23:36:0E:7E:5B:40:67:BD:F0:37:98:28:2C:50 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 34F8293CCFC44C7E8ABF4707C53C5E9C18AB983D Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:43 +0000 ROA not before: Fri 04 Jul 2025 00:42:43 +0000 ROA not after: Fri 03 Jul 2026 00:47:43 +0000 asID: 396968 IP address blocks: 2a0f:6287:f9d3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f8:29:3c:cf:c4:4c:7e:8a:bf:47:07:c5:3c:5e:9c:18:ab:98:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:43 2025 GMT Not After : Jul 3 00:47:43 2026 GMT Subject: CN=9FF1383363DB23360E7E5B4067BDF03798282C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:48:fa:d9:46:3d:0c:56:e4:45:dd:09:f4: fb:10:10:19:e8:40:18:4c:a4:a3:31:26:66:88:67: 8e:3a:97:de:db:0b:66:11:99:50:0a:3b:5b:88:bc: e7:98:06:8d:80:d6:dd:fe:b4:eb:5d:43:db:9d:40: 17:5e:73:b7:99:93:51:4e:ec:23:a2:68:d8:79:08: 13:c2:05:31:c7:a9:94:c8:47:28:54:32:ce:da:d9: fe:b6:9d:fa:b7:cd:db:d8:49:71:5b:c6:7f:65:cc: 25:8c:da:fe:52:dc:ca:74:69:b7:fb:cb:ea:34:0b: cc:cd:ce:b9:b1:1c:bb:06:19:8e:e8:19:3c:4b:34: 4e:1f:3f:b6:2c:7c:b2:e2:45:11:3e:f8:a0:33:ee: 2e:82:ac:47:34:2b:a3:7f:bf:cc:7a:9d:9c:dd:58: 90:dd:fa:1b:b6:f4:eb:5d:80:cb:dc:ce:2b:88:a9: 20:2b:c6:c2:50:80:3c:f4:ae:0e:e4:c4:9a:6a:98: 55:2b:18:dd:e0:5d:a2:48:2f:b1:38:16:0b:02:46: a5:21:c9:84:a6:c7:99:ac:e8:e4:f0:46:a9:a3:c5: 5a:4b:12:a1:d5:08:ee:b8:be:65:ce:45:8e:f6:23: 4c:da:9a:fc:5f:27:38:14:b6:9a:f7:85:ae:76:4a: 8d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F1:38:33:63:DB:23:36:0E:7E:5B:40:67:BD:F0:37:98:28:2C:50 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:f9d3::/48 Signature Algorithm: sha256WithRSAEncryption 61:bd:a1:f0:2e:6b:20:ee:fe:83:b2:b6:cd:89:c3:17:23:8c: 77:96:00:b4:4e:fe:08:22:a0:6e:4a:18:d2:cd:64:55:c9:77: 1f:eb:be:cb:d1:3a:05:37:78:79:68:c5:63:bb:5a:4c:a7:9e: 05:0a:84:ca:df:0f:04:9a:54:f9:38:b8:20:1a:1d:41:39:ff: bd:fc:30:a5:55:b0:0c:62:c9:eb:15:39:37:a7:d3:42:b2:97: 42:4e:30:0d:8d:18:6d:13:9a:d4:b4:aa:99:56:5b:aa:96:64: 8c:1c:5e:75:60:45:f9:cf:9f:83:c9:5f:00:21:e1:ce:51:84: eb:fe:a7:fe:24:56:82:8d:5b:13:ed:ea:46:16:19:ee:ca:7b: 8b:a5:98:03:29:19:cf:28:1b:b8:9d:f4:b6:5f:e2:8c:6f:33: 8a:92:cd:d9:1e:ba:e5:41:93:6a:12:62:54:bb:5a:66:1c:49: a5:d8:b6:8f:39:76:7e:d1:88:f9:03:11:f0:c8:44:23:4b:f6: 27:54:08:73:4a:e5:80:01:c9:12:a9:31:80:90:b2:c0:80:8a: c7:25:33:44:1f:cc:30:93:f0:c9:51:1e:a4:b1:fb:9e:19:56: f4:84:7d:ad:e3:20:ad:37:0f:05:cb:ed:fd:0c:6b:62:b6:3b: 9a:6b:a9:11 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUNPgpPM/ETH6Kv0cHxTxenBirmD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDNaFw0yNjA3MDMwMDQ3NDNaMDMxMTAvBgNV BAMTKDlGRjEzODMzNjNEQjIzMzYwRTdFNUI0MDY3QkRGMDM3OTgyODJDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HUj62UY9DFbkRd0J9PsQEBno QBhMpKMxJmaIZ446l97bC2YRmVAKO1uIvOeYBo2A1t3+tOtdQ9udQBdec7eZk1FO 7COiaNh5CBPCBTHHqZTIRyhUMs7a2f62nfq3zdvYSXFbxn9lzCWM2v5S3Mp0abf7 y+o0C8zNzrmxHLsGGY7oGTxLNE4fP7YsfLLiRRE++KAz7i6CrEc0K6N/v8x6nZzd WJDd+hu29OtdgMvcziuIqSArxsJQgDz0rg7kxJpqmFUrGN3gXaJIL7E4FgsCRqUh yYSmx5ms6OTwRqmjxVpLEqHVCO64vmXORY72I0zamvxfJzgUtpr3ha52So2hAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUn/E4M2PbIzYOfltAZ73wN5goLFAwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2Mzk2NDMzM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/nT MA0GCSqGSIb3DQEBCwUAA4IBAQBhvaHwLmsg7v6DsrbNicMXI4x3lgC0Tv4IIqBu ShjSzWRVyXcf677L0ToFN3h5aMVju1pMp54FCoTK3w8EmlT5OLggGh1BOf+9/DCl VbAMYsnrFTk3p9NCspdCTjANjRhtE5rUtKqZVluqlmSMHF51YEX5z5+DyV8AIeHO UYTr/qf+JFaCjVsT7epGFhnuynuLpZgDKRnPKBu4nfS2X+KMbzOKks3ZHrrlQZNq EmJUu1pmHEml2LaPOXZ+0Yj5AxHwyEQjS/YnVAhzSuWAAckSqTGAkLLAgIrHJTNE H8wwk/DJUR6ksfueGVb0hH2t4yCtNw8Fy+39DGtitjuaa6kR -----END CERTIFICATE-----Generated at Fri Jul 4 14:53:49 2025 by rpki-client