$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666462353a3a2f34382d3438203d3e20333936393638.roa File: 326130663a363238373a666462353a3a2f34382d3438203d3e20333936393638.roa (raw, json) Hash identifier: 5vczkLewxov+At7f2ELyD9H4Nyf8b0vkio5Hf0LhlCo= Subject key identifier: 67:4B:2A:7A:0F:DA:A1:89:26:4C:6B:64:8B:EA:B8:D2:8D:EB:19:94 Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Certificate serial: 7CF4CB7AF724D2767339C1C6B51A858E29AC5C77 Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666462353a3a2f34382d3438203d3e20333936393638.roa Signing time: Fri 04 Jul 2025 00:47:45 +0000 ROA not before: Fri 04 Jul 2025 00:42:45 +0000 ROA not after: Fri 03 Jul 2026 00:47:45 +0000 asID: 396968 IP address blocks: 2a0f:6287:fdb5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 01:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f4:cb:7a:f7:24:d2:76:73:39:c1:c6:b5:1a:85:8e:29:ac:5c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Validity Not Before: Jul 4 00:42:45 2025 GMT Not After : Jul 3 00:47:45 2026 GMT Subject: CN=674B2A7A0FDAA189264C6B648BEAB8D28DEB1994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:28:4c:f4:db:6c:45:ce:83:f9:44:a3:e2: 30:c8:2c:35:a3:6a:a4:b8:1a:ac:bd:41:5c:05:48: 13:d9:eb:31:61:ce:6f:1a:f5:6e:54:cc:a7:04:0f: 52:e2:3f:87:f7:69:d9:8b:3c:1b:54:55:a0:78:da: dd:1c:d9:04:e7:c7:d5:11:8f:4b:5e:30:e6:2b:da: 11:d1:40:54:4c:e2:24:99:f1:d8:4a:f4:8e:85:d2: 89:07:b9:10:f7:ab:2a:26:c7:2a:9e:a9:95:71:8e: c9:e9:ec:23:75:46:e0:7a:b4:cb:bb:c4:03:66:dd: 4d:5a:c8:bd:0e:48:74:71:ce:af:7a:30:8e:53:86: 6e:8e:c3:09:f5:89:90:2c:23:be:7f:b5:76:f0:dd: f9:90:39:1e:2b:29:a3:47:f8:bc:8e:84:e6:b1:33: 33:eb:94:c6:7b:46:82:fa:c5:0e:53:08:69:59:f4: aa:a1:c6:9e:4a:5a:e9:16:62:46:63:a0:7e:82:2c: 45:b8:9b:0d:0a:28:49:a8:bb:4d:0c:a9:69:a9:35: 0d:61:ea:17:15:4c:25:c4:53:65:a4:bc:13:e7:54: a5:ef:0a:54:bc:2e:5a:24:11:24:2a:a5:18:0c:43: 0b:92:e1:61:24:00:7f:75:69:3a:ff:21:fc:b9:90: d0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4B:2A:7A:0F:DA:A1:89:26:4C:6B:64:8B:EA:B8:D2:8D:EB:19:94 X509v3 Authority Key Identifier: keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666462353a3a2f34382d3438203d3e20333936393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:fdb5::/48 Signature Algorithm: sha256WithRSAEncryption a5:66:96:15:ef:4d:46:77:3d:61:18:9e:bb:ec:70:4a:eb:40: aa:05:07:18:2c:3c:54:ce:fd:b9:eb:14:ee:71:2e:29:e4:29: e9:b7:9f:66:79:61:d7:ec:31:1a:d8:65:eb:0b:d8:c7:c5:5b: 59:27:80:72:8e:ba:9f:2d:3b:25:28:ad:f1:93:97:79:f2:c9: a0:17:38:c5:a4:e7:41:e4:48:ca:56:4f:a9:bf:99:49:c2:bd: 29:ef:1c:98:a0:ad:a0:25:cb:80:41:31:ec:6f:3f:85:c3:5a: 08:79:b3:fa:bc:32:a6:fa:39:c0:f3:2a:54:f6:1c:a5:9c:20: ca:f3:3d:72:ff:3f:1f:3f:b4:64:d2:ff:48:84:99:a0:1a:67: 5e:c5:da:71:c0:1f:b3:46:3e:19:25:02:66:f1:2c:78:99:4b: 8d:63:d2:b4:ba:a9:6d:8d:b1:8c:06:ac:54:a2:12:9d:d6:89: 1c:6c:32:02:ee:ac:95:e2:fc:20:5e:0e:2f:2b:6a:c4:ee:2c: 5b:92:a2:48:c1:17:c4:cd:8b:04:2f:66:34:4e:8e:37:7e:45: 87:0a:55:e6:95:64:4b:fb:6b:ff:34:78:a1:07:0c:d2:5c:a6: f4:f6:02:0d:8c:22:24:62:f9:d9:e0:92:f5:9f:a8:d1:10:98: 5d:ca:6b:c0 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUfPTLevck0nZzOcHGtRqFjimsXHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3 Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV BAMTKDY3NEIyQTdBMEZEQUExODkyNjRDNkI2NDhCRUFCOEQyOERFQjE5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41ShM9NtsRc6D+USj4jDILDWj aqS4Gqy9QVwFSBPZ6zFhzm8a9W5UzKcED1LiP4f3admLPBtUVaB42t0c2QTnx9UR j0teMOYr2hHRQFRM4iSZ8dhK9I6F0okHuRD3qyomxyqeqZVxjsnp7CN1RuB6tMu7 xANm3U1ayL0OSHRxzq96MI5Thm6Owwn1iZAsI75/tXbw3fmQOR4rKaNH+LyOhOax MzPrlMZ7RoL6xQ5TCGlZ9Kqhxp5KWukWYkZjoH6CLEW4mw0KKEmou00MqWmpNQ1h 6hcVTCXEU2WkvBPnVKXvClS8LlokESQqpRgMQwuS4WEkAH91aTr/Ify5kNDFAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUZ0sqeg/aoYkmTGtki+q40o3rGZQwHwYDVR0j BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjQ2MjM1M2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/21 MA0GCSqGSIb3DQEBCwUAA4IBAQClZpYV701Gdz1hGJ677HBK60CqBQcYLDxUzv25 6xTucS4p5Cnpt59meWHX7DEa2GXrC9jHxVtZJ4ByjrqfLTslKK3xk5d58smgFzjF pOdB5EjKVk+pv5lJwr0p7xyYoK2gJcuAQTHsbz+Fw1oIebP6vDKm+jnA8ypU9hyl nCDK8z1y/z8fP7Rk0v9IhJmgGmdexdpxwB+zRj4ZJQJm8Sx4mUuNY9K0uqltjbGM BqxUohKd1okcbDIC7qyV4vwgXg4vK2rE7ixbkqJIwRfEzYsEL2Y0To43fkWHClXm lWRL+2v/NHihBwzSXKb09gINjCIkYvnZ4JL1n6jREJhdymvA -----END CERTIFICATE-----Generated at Fri Jul 4 14:54:19 2025 by rpki-client