$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666162623a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a666162623a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: rCAlk8QED/16CvCTuVKY0nvaZQ2IwXRomFG5ZFwtU44= Subject key identifier: 34:CA:8C:5A:10:B0:42:6B:5E:7F:48:02:57:08:ED:DF:1E:F6:5A:6B Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 0577D642BFADC378D6F19FC1623B302217A841E6 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666162623a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:43 +0000 ROA not before: Fri 04 Jul 2025 00:42:43 +0000 ROA not after: Fri 03 Jul 2026 00:47:43 +0000 asID: 396968 IP address blocks: 2a0f:6287:fabb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:77:d6:42:bf:ad:c3:78:d6:f1:9f:c1:62:3b:30:22:17:a8:41:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:43 2025 GMT Not After : Jul 3 00:47:43 2026 GMT Subject: CN=34CA8C5A10B0426B5E7F48025708EDDF1EF65A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:4f:2c:b2:08:a6:37:ac:9e:8e:80:8e:9a: bc:e2:fa:39:60:81:97:8e:09:b2:60:f9:37:05:f9: 42:0f:f7:a9:73:99:e6:98:6e:ce:3d:92:77:2b:ea: ca:23:28:fa:ad:e4:65:cb:41:5a:82:01:3f:66:9c: e6:53:d1:b1:26:1d:09:55:ec:84:22:23:65:b1:b0: 4c:ce:cd:8d:f2:19:c2:f3:32:16:1a:db:95:63:e2: a2:e8:27:68:6f:b1:7d:f8:0a:69:3b:8d:92:4a:dc: 0e:ba:c4:2a:0c:44:5a:7d:53:1b:98:a2:76:00:e6: 3b:ad:5a:40:82:f7:a3:9d:58:0c:46:ca:16:41:81: d1:f8:a9:5e:a6:30:8a:5e:26:a8:41:fe:7c:c0:96: 56:13:0d:1d:56:04:1d:af:de:b8:48:b7:6a:85:01: d2:aa:20:ac:92:b1:ea:53:4c:22:b6:8a:76:88:40: 31:fb:fe:00:9f:86:87:2b:f8:3b:4d:b1:13:e9:64: 74:59:59:6d:aa:54:34:c4:50:71:29:73:a8:af:64: b6:db:a4:5f:fa:f8:5a:7b:53:0b:cc:35:13:8a:ee: 6e:46:10:1a:65:85:c3:88:81:67:53:3e:31:2a:b8: aa:b2:73:29:66:da:a1:9c:ee:2a:06:02:c0:ab:34: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CA:8C:5A:10:B0:42:6B:5E:7F:48:02:57:08:ED:DF:1E:F6:5A:6B X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666162623a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:fabb::/48 Signature Algorithm: sha256WithRSAEncryption 60:9b:7d:21:8e:1b:4b:af:85:95:b4:e7:d2:a7:3c:82:28:f9: 7c:df:a9:b1:86:8c:f5:1f:b3:f6:b8:48:a8:09:86:1a:f1:c7: 85:8f:24:da:13:bf:71:c1:9f:ad:26:21:7c:f9:5d:58:e8:b0: 4b:c1:f8:25:70:04:b7:0d:72:9f:9e:71:11:90:64:12:00:67: f3:d8:90:ea:18:b6:02:23:5a:31:c5:8c:e2:fa:b5:bc:29:30: 4f:55:30:76:46:df:ba:ab:c3:c8:98:4e:9c:a4:d2:69:b1:c8: 54:9a:5a:e6:86:53:8b:2f:39:b5:29:cf:20:74:74:e9:f2:02: ad:0a:f6:7d:09:dd:1c:67:18:c5:16:8f:1f:42:89:08:15:ae: 48:76:61:76:22:0d:b9:ae:9f:56:b8:e5:27:1d:cf:9e:ac:67: 74:ca:e6:08:c9:52:d2:36:07:6f:0b:8f:78:b8:26:65:eb:00: 58:90:dd:4b:7b:af:21:27:06:e9:61:1c:99:e1:07:d8:24:9e: 7d:76:cf:36:e0:3c:86:50:25:6f:06:f3:40:8d:dd:bf:5a:b5: 72:38:33:1d:bf:6e:8f:8d:63:c2:9d:e9:b8:3e:da:02:f4:35: cd:52:47:cd:70:78:bf:26:74:de:24:ef:ec:b4:bc:ed:f0:31: 42:2f:bd:ec -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUBXfWQr+tw3jW8Z/BYjswIheoQeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDNaFw0yNjA3MDMwMDQ3NDNaMDMxMTAvBgNV BAMTKDM0Q0E4QzVBMTBCMDQyNkI1RTdGNDgwMjU3MDhFRERGMUVGNjVBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJHk8ssgimN6yejoCOmrzi+jlg gZeOCbJg+TcF+UIP96lzmeaYbs49kncr6sojKPqt5GXLQVqCAT9mnOZT0bEmHQlV 7IQiI2WxsEzOzY3yGcLzMhYa25Vj4qLoJ2hvsX34Cmk7jZJK3A66xCoMRFp9UxuY onYA5jutWkCC96OdWAxGyhZBgdH4qV6mMIpeJqhB/nzAllYTDR1WBB2v3rhIt2qF AdKqIKySsepTTCK2inaIQDH7/gCfhocr+DtNsRPpZHRZWW2qVDTEUHEpc6ivZLbb pF/6+Fp7UwvMNROK7m5GEBplhcOIgWdTPjEquKqycylm2qGc7ioGAsCrNAEJAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUNMqMWhCwQmtef0gCVwjt3x72WmswHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjE2MjYyM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/q7 MA0GCSqGSIb3DQEBCwUAA4IBAQBgm30hjhtLr4WVtOfSpzyCKPl836mxhoz1H7P2 uEioCYYa8ceFjyTaE79xwZ+tJiF8+V1Y6LBLwfglcAS3DXKfnnERkGQSAGfz2JDq GLYCI1oxxYzi+rW8KTBPVTB2Rt+6q8PImE6cpNJpschUmlrmhlOLLzm1Kc8gdHTp 8gKtCvZ9Cd0cZxjFFo8fQokIFa5IdmF2Ig25rp9WuOUnHc+erGd0yuYIyVLSNgdv C494uCZl6wBYkN1Le68hJwbpYRyZ4QfYJJ59ds824DyGUCVvBvNAjd2/WrVyODMd v26PjWPCnem4PtoC9DXNUkfNcHi/JnTeJO/stLzt8DFCL73s -----END CERTIFICATE-----Generated at Fri Jul 4 14:40:32 2025 by rpki-client