$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613866623a3a2f34382d3438203d3e20323134343935.roa File: 326130613a363034343a613866623a3a2f34382d3438203d3e20323134343935.roa (raw, json) Hash identifier: oyMw4hW3XanZN6EH+iEjKcYFzziGHeE4743l9DBZIyM= Subject key identifier: 51:94:58:F6:9C:B5:4E:C9:02:FD:2B:94:56:7B:9B:45:F9:A2:E0:3C Certificate issuer: /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844 Certificate serial: 1792E0593C73CBEA2186A92D51028E1928247F7F Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613866623a3a2f34382d3438203d3e20323134343935.roa Signing time: Thu 03 Jul 2025 21:58:44 +0000 ROA not before: Thu 03 Jul 2025 21:53:44 +0000 ROA not after: Thu 02 Jul 2026 21:58:44 +0000 asID: 214495 IP address blocks: 2a0a:6044:a8fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 19:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:92:e0:59:3c:73:cb:ea:21:86:a9:2d:51:02:8e:19:28:24:7f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844 Validity Not Before: Jul 3 21:53:44 2025 GMT Not After : Jul 2 21:58:44 2026 GMT Subject: CN=519458F69CB54EC902FD2B94567B9B45F9A2E03C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:99:22:61:98:aa:7a:e3:86:cf:68:47:dd:e1: f1:07:c8:ec:aa:00:75:dc:a2:15:0d:49:01:60:76: da:2d:80:8b:d6:55:e2:2c:29:ad:5a:a7:2e:a6:be: d6:f6:ab:69:9e:72:27:b5:96:ca:03:dc:8b:02:6b: 89:63:69:21:c8:77:fb:ea:b6:63:29:e7:5a:3f:c2: a4:a4:f7:ef:11:b8:b5:78:50:85:c8:e0:75:e9:89: 4c:c9:0b:69:6c:92:0b:30:7c:ef:c7:f0:58:e6:9a: ba:1f:e2:42:e7:23:34:88:6a:d3:45:9a:f0:84:b6: 8f:17:3c:a8:91:56:99:c7:ce:39:79:71:80:9f:0d: ce:4c:2c:8c:75:a5:96:7d:39:d6:3d:3b:28:a9:64: 25:4d:89:1d:70:02:0b:a8:52:77:3e:8b:d0:35:32: e9:41:aa:1c:3a:67:5f:0c:d9:4a:67:6f:ed:10:f9: ef:fd:a2:44:d1:d2:7c:29:85:07:21:04:6d:33:98: 41:a2:95:a3:79:cc:57:4e:9a:55:46:9d:d4:68:62: bc:d4:f2:d6:80:a1:f5:33:1a:1a:8a:06:f9:a9:be: 41:b4:45:cc:96:fe:50:34:cd:63:02:59:3c:1a:50: 19:92:d1:11:ce:06:92:f9:07:f1:d2:63:c3:f5:aa: cf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:94:58:F6:9C:B5:4E:C9:02:FD:2B:94:56:7B:9B:45:F9:A2:E0:3C X509v3 Authority Key Identifier: keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613866623a3a2f34382d3438203d3e20323134343935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a8fb::/48 Signature Algorithm: sha256WithRSAEncryption 4e:34:2e:7a:c0:e6:5c:e4:71:3c:5c:d0:ed:38:1f:1d:05:ea: 4b:69:da:e8:7d:0e:c0:3b:2e:cc:3c:ef:bd:aa:a2:b5:27:13: d5:d6:76:8a:d6:ee:fe:e5:5e:3a:04:a3:47:6d:49:7d:31:3b: b7:c1:df:95:d3:6e:cd:1d:e3:0b:ad:9b:a1:d0:11:54:0e:f4: 7c:7c:14:af:9a:c8:42:40:f1:b4:26:d2:fc:8a:94:46:b3:33: be:80:05:1e:96:6f:19:74:96:de:e8:26:53:78:fe:9a:46:97: 74:16:7c:ec:3e:00:ff:dd:8b:27:c7:4a:a8:57:3d:7b:f2:2b: 27:65:3f:a6:55:f0:8a:35:27:73:ba:c1:d5:13:b1:b5:c6:43: de:ba:27:79:06:b8:94:e4:71:66:3e:06:0e:6c:74:6c:2a:73: 5a:28:87:20:06:d4:71:78:7f:84:2b:02:5d:4a:9b:a1:a5:bb: e0:e3:dd:07:6f:bb:55:a2:3c:ad:75:72:50:1c:00:68:85:2a: 54:ee:55:9c:b2:de:84:34:eb:67:7a:68:6f:08:51:61:51:be: a2:ac:f5:f0:43:20:ff:26:2e:8e:ab:b2:7e:ed:d5:ff:66:94: 4f:4e:3e:40:cd:24:d0:4f:63:9a:08:9c:fe:dc:b3:45:06:9a: e7:63:10:ce -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUF5LgWTxzy+ohhqktUQKOGSgkf38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFQjUwRTM2NDI3N0NFQjA2M0RDQThDMzcxMzY0RkUx Q0M5ODg0NDAeFw0yNTA3MDMyMTUzNDRaFw0yNjA3MDIyMTU4NDRaMDMxMTAvBgNV BAMTKDUxOTQ1OEY2OUNCNTRFQzkwMkZEMkI5NDU2N0I5QjQ1RjlBMkUwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDomSJhmKp644bPaEfd4fEHyOyq AHXcohUNSQFgdtotgIvWVeIsKa1apy6mvtb2q2mecie1lsoD3IsCa4ljaSHId/vq tmMp51o/wqSk9+8RuLV4UIXI4HXpiUzJC2lskgswfO/H8Fjmmrof4kLnIzSIatNF mvCEto8XPKiRVpnHzjl5cYCfDc5MLIx1pZZ9OdY9OyipZCVNiR1wAguoUnc+i9A1 MulBqhw6Z18M2Upnb+0Q+e/9okTR0nwphQchBG0zmEGilaN5zFdOmlVGndRoYrzU 8taAofUzGhqKBvmpvkG0RcyW/lA0zWMCWTwaUBmS0RHOBpL5B/HSY8P1qs9nAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUUZRY9py1TskC/SuUVnubRfmi4DwwHwYDVR0j BBgwFoAU6etQ42QnfOsGPcqMNxNk/hzJiEQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvNC9FOUVCNTBFMzY0 Mjc3Q0VCMDYzRENBOEMzNzEzNjRGRTFDQzk4ODQ0LmNybDBvBggrBgEFBQcBAQRj MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF SE9TVC81L0U5RUI1MEUzNjQyNzdDRUIwNjNEQ0E4QzM3MTM2NEZFMUNDOTg4NDQu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQz ZDU4MzZmZjFiMjkvNC8zMjYxMzA2MTNhMzYzMDM0MzQzYTYxMzg2NjYyM2EzYTJm MzQzODJkMzQzODIwM2QzZTIwMzIzMTM0MzQzOTM1LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRKj7 MA0GCSqGSIb3DQEBCwUAA4IBAQBONC56wOZc5HE8XNDtOB8dBepLadrofQ7AOy7M PO+9qqK1JxPV1naK1u7+5V46BKNHbUl9MTu3wd+V027NHeMLrZuh0BFUDvR8fBSv mshCQPG0JtL8ipRGszO+gAUelm8ZdJbe6CZTeP6aRpd0FnzsPgD/3Ysnx0qoVz17 8isnZT+mVfCKNSdzusHVE7G1xkPeuid5BriU5HFmPgYObHRsKnNaKIcgBtRxeH+E KwJdSpuhpbvg490Hb7tVojytdXJQHABohSpU7lWcst6ENOtnemhvCFFhUb6irPXw QyD/Ji6Oq7J+7dX/ZpRPTj5AzSTQT2OaCJz+3LNFBprnYxDO -----END CERTIFICATE-----Generated at Sat Jul 5 08:56:03 2025 by rpki-client