$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237323a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a666237323a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: hHwKrXNLKTcl+xJoO4veANdqnTppLeoH2vxU4bZLxRY= Subject key identifier: D7:BF:D4:2D:3A:04:56:3F:FD:E7:99:4D:E5:5B:31:62:1C:33:39:F8 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 46831FAFA903189A68113C92AF17831B0C0F24EC Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237323a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:41 +0000 ROA not before: Fri 04 Jul 2025 00:42:41 +0000 ROA not after: Fri 03 Jul 2026 00:47:41 +0000 asID: 396968 IP address blocks: 2a0f:6287:fb72::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:83:1f:af:a9:03:18:9a:68:11:3c:92:af:17:83:1b:0c:0f:24:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:41 2025 GMT Not After : Jul 3 00:47:41 2026 GMT Subject: CN=D7BFD42D3A04563FFDE7994DE55B31621C3339F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:72:a7:39:87:01:3c:b6:83:59:be:74:68: 4e:ab:15:b1:09:80:de:60:0d:4f:01:1f:c1:49:2f: e7:69:33:6e:8c:05:62:f0:47:55:69:8c:8b:04:fa: b4:96:f9:b6:5d:f9:32:a4:6d:6f:ea:b9:9b:2b:57: 23:54:db:fd:96:0f:b2:9b:9f:1e:3b:2b:ac:50:61: 31:63:16:d0:3f:af:02:3f:c6:35:ff:83:bd:69:23: e4:9c:e5:b6:fe:da:fd:e4:36:f4:b7:a1:91:e8:ef: 37:80:90:7b:2c:61:4b:c6:b2:e5:ff:82:e1:6e:f5: db:4f:75:20:53:3c:b6:89:65:38:c5:69:cf:cc:d7: 2f:d5:bb:67:01:a0:24:24:cf:20:60:28:e1:91:b7: 20:74:b8:97:84:20:30:b4:bd:e9:45:40:cb:85:48: be:5f:53:27:fb:09:84:1d:50:5a:ee:c9:c3:8f:57: 1a:6f:40:e4:0f:e1:5d:07:f8:b8:96:12:cc:de:b1: ea:df:69:ec:a4:e7:12:83:bb:d7:17:5b:84:19:d3: e4:39:76:63:1f:18:25:de:bd:d3:d8:44:83:e2:9c: 30:4c:74:d2:70:e0:63:dd:98:30:f7:5a:c1:40:e2: de:9f:46:cf:48:8e:09:09:d3:2b:ed:6e:14:ba:c2: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BF:D4:2D:3A:04:56:3F:FD:E7:99:4D:E5:5B:31:62:1C:33:39:F8 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237323a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:fb72::/48 Signature Algorithm: sha256WithRSAEncryption 14:fc:7e:2a:89:cc:30:c3:20:6b:a8:85:7c:eb:11:14:19:6b: 2e:c7:ba:4b:6d:24:3a:9e:85:4f:2a:84:1f:73:79:cf:09:c7: c0:01:5b:95:3f:11:22:3a:e5:0a:7b:95:3e:68:87:6e:48:09: c9:dd:d0:99:77:0e:6c:a6:6a:1b:3d:c8:4c:07:fa:71:c0:2a: 55:0e:8b:ab:04:87:a4:e1:c4:13:5d:7c:22:b9:53:04:49:09: bc:14:b4:1e:29:b9:12:b4:67:11:3e:ca:5c:29:be:7b:41:14: 3c:e0:db:ef:ac:6e:e3:30:26:a4:52:1f:ca:fe:47:be:78:7c: c8:82:0e:32:19:d5:c2:7c:00:b6:dd:53:24:1b:75:9d:ed:5d: 67:91:26:92:13:df:51:73:6f:62:50:c7:0c:d9:68:2d:ca:2d: 9e:a9:6a:c9:6e:03:d1:0b:8a:55:d7:d1:c6:33:a9:b5:28:94: bc:8c:c8:ed:46:5a:26:a6:c0:f2:88:9e:43:55:2d:9d:f9:05: a9:1f:82:ec:8f:c3:e3:d9:3a:58:0e:02:4c:4b:8c:23:02:61: 39:d5:29:bd:7b:9b:06:da:71:5e:9d:d5:83:67:00:99:43:c6: d4:53:ba:83:0a:9b:3d:eb:c8:e0:27:42:72:b3:6d:8f:69:4e: e3:a4:a9:b4 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIURoMfr6kDGJpoETySrxeDGwwPJOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDFaFw0yNjA3MDMwMDQ3NDFaMDMxMTAvBgNV BAMTKEQ3QkZENDJEM0EwNDU2M0ZGREU3OTk0REU1NUIzMTYyMUMzMzM5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLknKnOYcBPLaDWb50aE6rFbEJ gN5gDU8BH8FJL+dpM26MBWLwR1VpjIsE+rSW+bZd+TKkbW/quZsrVyNU2/2WD7Kb nx47K6xQYTFjFtA/rwI/xjX/g71pI+Sc5bb+2v3kNvS3oZHo7zeAkHssYUvGsuX/ guFu9dtPdSBTPLaJZTjFac/M1y/Vu2cBoCQkzyBgKOGRtyB0uJeEIDC0velFQMuF SL5fUyf7CYQdUFruycOPVxpvQOQP4V0H+LiWEszeserfaeyk5xKDu9cXW4QZ0+Q5 dmMfGCXevdPYRIPinDBMdNJw4GPdmDD3WsFA4t6fRs9IjgkJ0yvtbhS6wtzzAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQU17/ULToEVj/955lN5VsxYhwzOfgwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjIzNzMyM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/ty MA0GCSqGSIb3DQEBCwUAA4IBAQAU/H4qicwwwyBrqIV86xEUGWsux7pLbSQ6noVP KoQfc3nPCcfAAVuVPxEiOuUKe5U+aIduSAnJ3dCZdw5spmobPchMB/pxwCpVDour BIek4cQTXXwiuVMESQm8FLQeKbkStGcRPspcKb57QRQ84NvvrG7jMCakUh/K/ke+ eHzIgg4yGdXCfAC23VMkG3Wd7V1nkSaSE99Rc29iUMcM2Wgtyi2eqWrJbgPRC4pV 19HGM6m1KJS8jMjtRlompsDyiJ5DVS2d+QWpH4Lsj8Pj2TpYDgJMS4wjAmE51Sm9 e5sG2nFendWDZwCZQ8bUU7qDCps968jgJ0Jys22PaU7jpKm0 -----END CERTIFICATE-----Generated at Fri Jul 4 14:29:39 2025 by rpki-client