$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/2/3138352e3230342e31322e302f32332d3234203d3e2037303130.roa File: 3138352e3230342e31322e302f32332d3234203d3e2037303130.roa (raw, json) Hash identifier: H6lpVqhTo6auF0x96lwq73jMTc3hnhIFKTAFHMPN7K4= Subject key identifier: 95:21:D0:D7:79:81:B0:31:70:FD:E2:62:06:81:89:65:16:50:A3:CC Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 46B51D7BF25850EA0BDBEE23C8CD6BB591E28A04 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/3138352e3230342e31322e302f32332d3234203d3e2037303130.roa Signing time: Mon 09 Nov 2026 16:02:53 +0000 ROA not before: Mon 09 Nov 2026 15:57:53 +0000 ROA not after: Mon 08 Nov 2027 16:02:53 +0000 asID: 7010 IP address blocks: 185.204.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b5:1d:7b:f2:58:50:ea:0b:db:ee:23:c8:cd:6b:b5:91:e2:8a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Nov 9 15:57:53 2026 GMT Not After : Nov 8 16:02:53 2027 GMT Subject: CN=9521D0D77981B03170FDE262068189651650A3CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:84:e8:8f:c9:81:98:2a:b9:10:5b:84:82: 9e:b7:30:87:8e:02:3a:55:8a:1c:2a:95:33:19:32: 4d:e6:fe:91:fc:48:c5:2c:c6:92:0c:dc:9a:e9:da: 06:3a:50:8f:2b:88:70:1d:17:1b:58:cf:1f:4a:63: 5a:f4:8d:fc:33:d8:55:ff:34:94:45:6d:c1:63:b1: 29:c6:17:e5:93:30:3b:cf:32:09:ed:51:54:ba:5f: 3e:53:9e:83:d8:ad:06:20:c5:58:97:92:6a:a7:b8: ac:ce:e0:91:62:02:e5:f4:e1:2a:76:27:d0:84:cb: 71:d0:c2:5a:92:bc:fe:ad:0c:4c:3d:45:2c:d8:84: d0:25:4a:fb:50:10:b4:88:9d:6d:61:05:46:b5:e2: 0a:63:3d:78:3f:34:1f:c9:67:09:3b:74:15:73:8e: 65:78:63:48:85:2e:60:bf:d2:4c:8f:19:ab:aa:92: a8:f7:fa:a0:58:d6:87:3d:91:a2:1b:07:69:5d:14: 43:c9:c5:39:2f:dc:dd:bc:26:dd:ce:c0:ba:91:4f: 42:9b:de:1b:d1:eb:41:d3:e5:20:54:3f:0b:29:1b: 61:a8:49:9f:fe:13:c9:e5:84:87:21:a0:c9:c6:c5: 6a:47:91:5a:83:64:bd:bd:f8:f5:54:27:18:40:b7: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:21:D0:D7:79:81:B0:31:70:FD:E2:62:06:81:89:65:16:50:A3:CC X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/3138352e3230342e31322e302f32332d3234203d3e2037303130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.12.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:25:34:ad:e9:f6:ac:04:af:73:81:29:a5:79:bd:9b:4b:2e: 54:3e:16:91:58:4d:3b:37:5c:fe:4b:34:87:a0:39:53:f6:ec: d5:2b:f0:55:19:5c:b6:95:cb:89:0c:a2:19:60:ce:5d:26:70: fe:d5:14:df:05:dc:5c:79:8a:07:ef:d4:80:cb:99:95:7e:05: 44:89:de:3e:3f:46:6d:1a:0a:dd:2a:56:e5:87:81:72:a2:a6: 4c:ed:a4:fb:12:c0:75:23:6b:89:73:d8:64:50:8f:0c:9e:9d: 56:e8:c0:da:f8:8a:10:93:00:33:36:d2:c9:13:b3:81:9a:01: 36:24:0b:2f:2d:76:51:30:35:7d:60:b4:62:e6:4b:d9:fc:af: 8c:98:52:83:89:13:f8:af:b1:12:05:f5:3e:79:ad:64:79:40: c2:7b:0b:5c:e5:eb:76:32:2f:df:ee:d8:2c:35:27:db:6f:24: 7e:21:c3:de:a6:b4:c9:23:04:c8:8b:93:9d:f4:09:c3:e0:ff: 52:dc:65:cc:3d:1a:39:27:e3:4e:3b:17:4b:3b:0c:6c:a1:31: 24:d7:1c:6d:dc:76:7b:a1:17:56:2a:a9:b6:93:37:1a:aa:26: 9c:03:94:50:c6:d5:a2:b0:14:52:78:11:65:5a:c4:c0:46:15: 55:cc:a4:3f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURrUde/JYUOoL2+4jyM1rtZHiigQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYxMTA5MTU1NzUzWhcNMjcxMTA4MTYwMjUz WjAzMTEwLwYDVQQDEyg5NTIxRDBENzc5ODFCMDMxNzBGREUyNjIwNjgxODk2NTE2 NTBBM0NDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yuE6I/JgZgq uRBbhIKetzCHjgI6VYocKpUzGTJN5v6R/EjFLMaSDNya6doGOlCPK4hwHRcbWM8f SmNa9I38M9hV/zSURW3BY7EpxhflkzA7zzIJ7VFUul8+U56D2K0GIMVYl5Jqp7is zuCRYgLl9OEqdifQhMtx0MJakrz+rQxMPUUs2ITQJUr7UBC0iJ1tYQVGteIKYz14 PzQfyWcJO3QVc45leGNIhS5gv9JMjxmrqpKo9/qgWNaHPZGiGwdpXRRDycU5L9zd vCbdzsC6kU9Cm94b0etB0+UgVD8LKRthqEmf/hPJ5YSHIaDJxsVqR5Fag2S9vfj1 VCcYQLd7BQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFJUh0Nd5gbAxcP3iYgaBiWUW UKPMMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuG YnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzMxMzgz NTJlMzIzMDM0MmUzMTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzczMDMxMzAu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAG5zAwwDQYJKoZIhvcNAQELBQADggEBAFslNK3p9qwEr3OBKaV5 vZtLLlQ+FpFYTTs3XP5LNIegOVP27NUr8FUZXLaVy4kMohlgzl0mcP7VFN8F3Fx5 igfv1IDLmZV+BUSJ3j4/Rm0aCt0qVuWHgXKipkztpPsSwHUja4lz2GRQjwyenVbo wNr4ihCTADM20skTs4GaATYkCy8tdlEwNX1gtGLmS9n8r4yYUoOJE/ivsRIF9T55 rWR5QMJ7C1zl63YyL9/u2Cw1J9tvJH4hw96mtMkjBMiLk530CcPg/1LcZcw9Gjkn 4047F0s7DGyhMSTXHG3cdnuhF1YqqbaTNxqqJpwDlFDG1aKwFFJ4EWVaxMBGFVXM pD8= -----END CERTIFICATE-----Generated at Sun Nov 15 22:18:46 2026 by rpki-client