
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 6MxH36Fj3Ra8ZRx3rbP1ccQPkWgaFXq9yYDBQNRgXg4=
Subject key identifier: 53:C9:4C:7C:66:C3:6F:0E:21:54:C5:CD:C5:4C:CD:C5:7D:D3:BC:B7
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 0EA04E158FD095E5AC88F50F4539EB5DDEE7DD7B
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:27 +0000
ROA not before: Fri 05 Jun 2026 01:01:27 +0000
ROA not after: Fri 04 Jun 2027 01:06:27 +0000
asID: 396968
IP address blocks: 2a0f:6287:fde7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a0:4e:15:8f:d0:95:e5:ac:88:f5:0f:45:39:eb:5d:de:e7:dd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:27 2026 GMT
Not After : Jun 4 01:06:27 2027 GMT
Subject: CN=53C94C7C66C36F0E2154C5CDC54CCDC57DD3BCB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:10:52:1e:45:f6:2a:5c:28:ce:e0:32:9b:
d1:7c:98:43:78:6b:f0:3f:01:bb:fe:0c:3f:de:26:
b4:9c:27:74:5f:6b:cd:84:47:e4:6d:c9:14:29:f0:
f7:e3:c0:23:23:2a:25:86:10:94:2f:f3:ab:36:1e:
a0:59:fa:46:0a:a9:98:c7:6d:8f:53:15:ed:68:f8:
83:99:ed:9f:83:ed:61:30:87:75:03:28:6c:7a:4a:
01:df:62:d1:7e:49:6c:b9:d4:c0:9c:90:1a:5d:2d:
19:70:44:3e:08:47:88:fe:ed:70:01:ce:7f:03:69:
96:57:1b:57:2a:cc:5e:42:fc:11:d1:a0:d6:53:e1:
2e:38:fb:23:09:b3:bb:27:d7:f4:05:f6:dd:85:5c:
62:6e:0b:d1:bb:34:a1:2f:cb:d4:a2:9c:d1:c3:ce:
ad:81:c9:46:ca:1b:61:b2:c0:ba:49:fc:91:23:b2:
10:2f:2a:2f:6f:72:a5:53:c5:f4:83:e0:c1:7d:8e:
49:c1:81:c8:86:dd:20:9d:1a:6b:f2:d7:64:de:af:
96:de:1e:ba:9f:1f:9f:33:a5:6d:20:1d:17:b3:56:
41:9c:4f:fb:4b:74:5b:35:08:b1:46:2c:50:9d:5c:
77:85:b2:36:0b:97:c5:87:64:c0:28:20:af:99:8a:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C9:4C:7C:66:C3:6F:0E:21:54:C5:CD:C5:4C:CD:C5:7D:D3:BC:B7
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fde7::/48
Signature Algorithm: sha256WithRSAEncryption
0d:7b:e2:cb:fb:56:16:ce:3e:85:ef:7c:02:24:34:b4:69:6d:
d4:a3:a7:5c:ae:84:2b:84:77:f0:90:73:4f:03:50:ec:91:09:
8f:44:c9:22:0f:b7:28:8e:76:84:f9:ff:49:9b:c1:2b:bf:09:
2b:f5:b8:fe:c5:9d:4c:b1:a7:86:a5:95:1e:b9:af:2d:a8:a2:
32:fb:86:83:b9:59:26:ef:7e:04:c5:d0:94:6d:97:49:55:8f:
13:33:c1:3d:32:75:80:50:4f:1f:8a:6e:5b:ec:93:7a:fa:d7:
c8:0a:91:64:32:b3:1d:90:3d:1b:b4:e4:7c:e1:20:2f:b8:00:
d9:17:39:1f:9d:d1:69:26:c0:93:0e:3c:36:fd:4a:74:5f:10:
61:f3:56:09:40:95:35:0e:27:c3:7f:3e:2b:16:44:0c:f5:53:
55:4f:d2:7a:5f:4f:61:56:7d:bd:02:24:11:5c:ab:89:7e:ac:
2e:75:a2:58:8c:16:3a:38:f3:77:d2:75:ba:18:31:db:1c:c5:
e8:06:91:84:bc:7f:4d:ce:bc:ba:a4:b3:45:e7:cf:83:96:9d:
b1:af:02:39:3e:b8:d6:03:d5:36:a6:68:39:4a:9e:af:fd:9c:
31:64:61:d4:74:f9:ab:79:1f:0e:87:b6:41:7f:e4:c7:c1:c4:
5f:a3:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:25 2026 by rpki-client