$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa File: 326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa (raw, json) Hash identifier: cKqMdpDpNZeTs1zZYtMh7ZzpU6gFPVvUC9QJ/l/EB4c= Subject key identifier: 3C:8E:49:16:42:64:A5:A1:BB:AB:D5:CE:14:58:55:59:D4:A5:8B:8B Certificate issuer: /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844 Certificate serial: 3D810D91FC1438649FA31C6B66683EE175D528E9 Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa Signing time: Thu 03 Jul 2025 21:58:45 +0000 ROA not before: Thu 03 Jul 2025 21:53:45 +0000 ROA not after: Thu 02 Jul 2026 21:58:45 +0000 asID: 53343 IP address blocks: 2a0a:6044:a800::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 19:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:81:0d:91:fc:14:38:64:9f:a3:1c:6b:66:68:3e:e1:75:d5:28:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844 Validity Not Before: Jul 3 21:53:45 2025 GMT Not After : Jul 2 21:58:45 2026 GMT Subject: CN=3C8E49164264A5A1BBABD5CE14585559D4A58B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:fa:ed:fd:2e:bf:35:25:3b:4c:c3:19:55: c2:f4:9a:89:a5:6a:c1:35:e7:05:be:c3:ea:4c:36: 96:a2:19:73:13:a3:84:0e:38:98:96:4c:c9:e4:ed: 1a:5d:2e:9f:0e:98:fe:55:12:bf:22:49:ad:64:93: f7:cf:3d:0e:13:43:3e:7e:7c:6d:55:1e:9d:1d:23: 75:b9:e7:a4:f8:fa:e8:72:42:a8:41:ce:4d:c8:41: 1e:11:de:ea:65:fa:b4:64:45:90:ff:ff:0a:61:d4: b0:c6:8f:b6:92:d9:22:9f:33:da:df:e5:aa:6d:e2: 95:08:29:bb:35:06:6f:80:da:b1:ce:8d:37:6d:30: af:82:67:e2:2e:b5:2e:d3:a1:f1:a1:47:80:e7:56: bd:28:71:f4:cd:50:d7:cc:8b:43:0e:e8:9b:0b:f3: 29:8f:e7:74:27:2b:dd:d0:a7:86:57:41:c6:11:e9: d3:7a:b6:a3:5b:31:cb:d4:ad:65:5a:0e:15:1d:b1: 11:35:b3:e3:03:ae:79:58:a1:fe:f9:b9:24:0f:79: 0b:ba:b0:c3:d7:e3:aa:75:ed:1d:47:c1:42:1d:9f: 98:f8:81:6e:60:5e:32:3d:8e:ab:8a:3b:2f:43:a9: f0:ce:88:3c:c6:59:8a:30:b3:ee:91:23:85:1c:69: 7c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8E:49:16:42:64:A5:A1:BB:AB:D5:CE:14:58:55:59:D4:A5:8B:8B X509v3 Authority Key Identifier: keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a800::/46 Signature Algorithm: sha256WithRSAEncryption 46:b5:0d:ec:4e:74:7a:85:93:92:e2:75:e9:4b:d3:cb:a2:fa: 1f:6d:74:63:f5:57:a8:12:a0:9b:0a:4b:74:56:e5:56:49:3e: b8:66:ea:99:5e:74:51:5d:96:58:8d:e1:3b:45:e4:8b:15:66: cb:29:13:0b:47:b5:87:71:07:b0:73:1e:d1:4b:6d:98:7b:48: 6d:ef:18:48:bd:5f:4f:52:87:99:3e:dc:41:eb:33:78:37:77: 0c:12:1c:0c:13:0e:01:a1:11:69:09:f2:b9:9f:59:3d:c1:ff: 3c:81:9b:64:c2:0b:79:10:cd:81:f2:d7:df:b1:93:f5:ad:25: f5:df:96:87:5c:c0:45:96:be:3f:f0:ec:22:e5:b9:cd:66:e1: 7b:06:31:2a:4f:49:a8:55:7d:c8:e2:bb:20:da:54:14:06:b4: 24:b1:65:37:79:fa:28:b7:b4:af:0c:3c:4c:13:82:69:7e:36: f7:e9:aa:3a:17:7e:86:4e:6f:8d:44:b4:f5:6f:89:e1:56:79: d3:e4:86:a0:7c:f5:2a:7a:a8:52:fd:64:e6:a5:c8:ad:0b:eb: 10:9d:a2:a7:6c:31:6f:46:c3:42:cd:de:ec:f9:d3:c4:75:ae: 88:77:4c:66:2b:1b:d5:e8:f6:bd:2a:bc:7b:45:b9:fc:42:a5: 95:fc:17:ac -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUPYENkfwUOGSfoxxrZmg+4XXVKOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFQjUwRTM2NDI3N0NFQjA2M0RDQThDMzcxMzY0RkUx Q0M5ODg0NDAeFw0yNTA3MDMyMTUzNDVaFw0yNjA3MDIyMTU4NDVaMDMxMTAvBgNV BAMTKDNDOEU0OTE2NDI2NEE1QTFCQkFCRDVDRTE0NTg1NTU5RDRBNThCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtv/rt/S6/NSU7TMMZVcL0moml asE15wW+w+pMNpaiGXMTo4QOOJiWTMnk7RpdLp8OmP5VEr8iSa1kk/fPPQ4TQz5+ fG1VHp0dI3W556T4+uhyQqhBzk3IQR4R3upl+rRkRZD//wph1LDGj7aS2SKfM9rf 5apt4pUIKbs1Bm+A2rHOjTdtMK+CZ+IutS7TofGhR4DnVr0ocfTNUNfMi0MO6JsL 8ymP53QnK93Qp4ZXQcYR6dN6tqNbMcvUrWVaDhUdsRE1s+MDrnlYof75uSQPeQu6 sMPX46p17R1HwUIdn5j4gW5gXjI9jquKOy9DqfDOiDzGWYows+6RI4UcaXzzAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQUPI5JFkJkpaG7q9XOFFhVWdSli4swHwYDVR0j BBgwFoAU6etQ42QnfOsGPcqMNxNk/hzJiEQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvNC9FOUVCNTBFMzY0 Mjc3Q0VCMDYzRENBOEMzNzEzNjRGRTFDQzk4ODQ0LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81L0U5RUI1MEUzNjQyNzdDRUIwNjNEQ0E4QzM3MTM2NEZFMUNDOTg4NDQu Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQz ZDU4MzZmZjFiMjkvNC8zMjYxMzA2MTNhMzYzMDM0MzQzYTYxMzgzMDMwM2EzYTJm MzQzNjJkMzQzNjIwM2QzZTIwMzUzMzMzMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioKYESoADAN BgkqhkiG9w0BAQsFAAOCAQEARrUN7E50eoWTkuJ16UvTy6L6H210Y/VXqBKgmwpL dFblVkk+uGbqmV50UV2WWI3hO0XkixVmyykTC0e1h3EHsHMe0UttmHtIbe8YSL1f T1KHmT7cQeszeDd3DBIcDBMOAaERaQnyuZ9ZPcH/PIGbZMILeRDNgfLX37GT9a0l 9d+Wh1zARZa+P/DsIuW5zWbhewYxKk9JqFV9yOK7INpUFAa0JLFlN3n6KLe0rww8 TBOCaX429+mqOhd+hk5vjUS09W+J4VZ50+SGoHz1KnqoUv1k5qXIrQvrEJ2ip2wx b0bDQs3e7PnTxHWuiHdMZisb1ej2vSq8e0W5/EKllfwXrA== -----END CERTIFICATE-----Generated at Sat Jul 5 08:47:35 2025 by rpki-client