
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: F7Mq41lWHOQ4eVksAkKjRUo3X+Flb8RjK8TKiMmxZMY=
Subject key identifier: 0A:D4:90:58:9A:0C:1D:CA:54:62:81:7D:AE:ED:C2:68:96:E1:C6:FE
Certificate issuer: /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial: 2E9358AD899AE8A414584E2F082D4CC12D9BD2C5
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa
Signing time: Fri 05 Jun 2026 01:06:20 +0000
ROA not before: Fri 05 Jun 2026 01:01:20 +0000
ROA not after: Fri 04 Jun 2027 01:06:20 +0000
asID: 396968
IP address blocks: 2a0f:6287:fe80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:93:58:ad:89:9a:e8:a4:14:58:4e:2f:08:2d:4c:c1:2d:9b:d2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Validity
Not Before: Jun 5 01:01:20 2026 GMT
Not After : Jun 4 01:06:20 2027 GMT
Subject: CN=0AD490589A0C1DCA5462817DAEEDC26896E1C6FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:4d:26:d5:df:c1:96:8c:23:4e:73:5d:87:
5e:11:10:a9:b2:1d:ff:bc:2e:0d:f5:ed:ba:68:c5:
aa:be:bd:01:35:1d:77:a9:80:0c:7d:c3:d2:53:1c:
9f:a4:7e:84:12:e3:93:cb:79:e2:97:ba:96:f2:2b:
4f:bd:d5:de:1b:c5:10:5a:cf:f2:81:b4:dc:8b:7c:
a8:3d:36:a1:2a:71:c6:60:ee:27:01:54:a9:e7:82:
20:ba:4c:e0:a9:28:ad:ec:d4:ab:0a:d4:16:9b:c4:
e4:09:37:f0:99:b8:f1:b1:11:aa:60:40:75:c0:04:
51:1d:4e:8d:e1:a2:f7:75:80:3a:31:00:62:d9:2e:
e1:a7:c1:a4:cb:62:51:8c:b5:66:4f:55:78:54:fc:
69:a2:aa:17:17:a1:a7:23:7e:b2:59:02:04:ac:5e:
30:75:ff:b2:ff:cd:c4:05:af:2a:1c:47:62:46:87:
0f:38:9d:60:6f:6a:d0:4a:33:b5:89:66:e0:cb:71:
31:96:9f:d7:90:c7:2b:a0:f0:73:1e:13:5e:40:c8:
62:77:f3:92:5c:c9:d8:c9:07:e4:12:92:1a:b5:fa:
0f:7d:6a:b4:6a:99:20:11:35:23:55:ed:68:85:5a:
f3:0e:87:f7:48:99:c8:d0:c7:a1:d0:ad:f8:17:c1:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D4:90:58:9A:0C:1D:CA:54:62:81:7D:AE:ED:C2:68:96:E1:C6:FE
X509v3 Authority Key Identifier:
keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fe80::/48
Signature Algorithm: sha256WithRSAEncryption
5b:13:31:42:46:2c:46:1f:a2:56:62:6f:92:9f:aa:e3:99:a0:
9a:b4:db:43:07:1c:ac:e7:4f:68:67:f8:9e:6e:c1:1c:26:cc:
85:30:a5:f2:64:7e:ff:73:36:7a:9a:64:e8:6d:82:d5:79:9c:
63:02:d8:24:5c:74:08:8e:a9:f5:74:11:0d:4a:6e:ef:8e:ed:
85:f8:80:c8:ab:65:28:ba:4b:8a:5b:8e:c4:8d:16:51:db:5d:
6f:86:5d:d6:f5:64:92:05:11:9b:a3:c0:7f:50:73:31:3c:ac:
81:78:b6:fd:e1:40:55:a4:74:cd:b7:0c:13:52:c9:c1:ca:ca:
62:19:ad:9c:64:13:f9:67:a3:d0:36:35:f0:43:a2:61:f8:cd:
11:8a:8b:59:08:95:50:19:99:f3:f2:8a:1e:70:d4:1f:02:1a:
db:63:59:08:e9:21:67:a2:7a:50:d3:a5:62:0b:fd:dd:7e:b0:
22:d9:10:2e:a4:99:8f:c0:07:9d:c2:39:b0:57:b0:e5:27:9d:
ab:e5:6e:23:6e:ba:7c:b8:38:65:b4:0f:42:52:4c:b4:27:72:
f9:45:ff:c6:9d:58:92:ac:7c:86:dc:df:07:f1:be:1d:26:30:
9b:34:0a:fb:03:ea:12:72:13:c6:f8:6f:ad:ad:30:40:7e:00:
fc:ba:f1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:42 2026 by rpki-client