$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a313030303a3a2f34382d3438203d3e20323134343230.roa File: 326130363a613030303a313030303a3a2f34382d3438203d3e20323134343230.roa (raw, json) Hash identifier: p4gnkORMgvFDsq9nz7FG5WOIqptfTiLQCY7htms5ES4= Subject key identifier: AF:B6:4A:B4:15:5D:87:41:A9:B9:1E:3A:CD:74:E4:C2:19:4F:E3:DD Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 0D331A707CF2687DAB33B4299BF6AC4F931A45E4 Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a313030303a3a2f34382d3438203d3e20323134343230.roa Signing time: Tue 21 Jul 2026 15:13:06 +0000 ROA not before: Tue 21 Jul 2026 15:08:06 +0000 ROA not after: Tue 20 Jul 2027 15:13:06 +0000 asID: 214420 IP address blocks: 2a06:a000:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:33:1a:70:7c:f2:68:7d:ab:33:b4:29:9b:f6:ac:4f:93:1a:45:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Jul 21 15:08:06 2026 GMT Not After : Jul 20 15:13:06 2027 GMT Subject: CN=AFB64AB4155D8741A9B91E3ACD74E4C2194FE3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c2:42:04:46:ad:e0:ed:39:b7:98:9f:b8:c8: f2:65:e3:56:55:77:c0:ce:ba:1a:45:a6:78:a0:f8: ac:ad:f0:80:14:90:c8:7b:43:9f:b0:77:c3:78:46: 6a:49:bd:74:4a:34:47:bc:a9:37:c5:9c:a6:d5:18: 3c:d4:e3:8e:a2:e7:36:cc:b6:f7:85:ef:a3:5d:ba: a6:3a:7f:c8:35:47:dc:3b:fc:d7:13:02:f2:75:57: 23:33:0b:3e:e7:8a:cf:ae:e1:5c:cb:8b:bd:bb:f8: 1c:04:0a:ea:58:ae:89:91:fa:64:a1:7d:0a:8c:48: 23:dd:a7:e0:7b:42:1b:d7:27:fd:5c:42:66:9a:b7: e7:2d:61:bf:e4:5f:79:08:cd:11:f0:69:51:6f:67: 3b:15:0e:a4:ad:ef:13:f1:19:72:35:3f:bd:91:79: 1f:c0:91:51:54:c7:ba:9b:6e:2d:10:e1:f8:34:34: bb:4c:26:cd:5c:0d:f9:0f:f1:6d:ba:bc:93:43:2e: 5f:d0:ab:17:65:31:3a:2e:fd:ab:91:f2:a4:73:9c: 25:cf:97:df:e1:87:f4:c4:a4:25:ec:5b:5d:3d:05: f1:cc:8b:14:45:92:2d:e6:a7:87:13:0c:2c:79:2e: 77:06:39:b6:90:54:d8:31:14:73:7a:81:e3:09:82: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B6:4A:B4:15:5D:87:41:A9:B9:1E:3A:CD:74:E4:C2:19:4F:E3:DD X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a313030303a3a2f34382d3438203d3e20323134343230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a000:1000::/48 Signature Algorithm: sha256WithRSAEncryption 9c:02:eb:df:ca:39:79:b5:b7:91:1f:b3:55:7b:7c:f0:df:bc: c7:09:39:59:ea:1f:38:2f:ca:83:d2:c8:d2:b6:5e:0b:e3:c0: 08:74:7c:c7:81:8b:b2:ee:e1:a7:06:d0:4a:bb:b6:6d:cb:1d: ff:bf:54:35:09:b4:a1:bd:68:4f:16:85:d2:58:bb:c9:f7:51: 8d:b0:e6:4b:dc:36:c0:db:79:2e:d5:31:f7:81:12:48:97:f8: cf:1f:61:28:1f:d5:8d:2b:ff:ef:af:6a:6c:bd:33:76:cb:e1: 96:5c:ea:be:1c:b4:14:83:71:c4:1f:ca:14:ac:44:ca:31:2d: d1:6d:60:8f:64:ba:5c:a1:4f:f0:36:9d:81:a1:bd:44:fc:32: 60:3a:10:e3:9e:0e:5b:e2:d6:4b:dc:9e:4a:15:66:08:7c:13: 1d:c9:ac:6c:cc:21:6c:ad:f8:a6:9f:a3:28:64:5e:5d:c2:f4: 96:ac:27:46:da:1f:58:1c:ac:ff:66:55:ec:9c:cd:22:bf:af: de:c0:78:f0:da:4e:88:0e:38:04:a7:30:b8:cf:32:e4:d8:37: 8a:bb:81:8e:08:01:f7:62:e9:e7:80:f4:70:9b:30:9d:d2:ae: 5c:46:6d:f6:14:cf:c6:a3:27:53:cc:18:6a:3a:92:a1:b7:58: 13:65:7f:96 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIUDTMacHzyaH2rM7Qpm/asT5MaReQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA3MjExNTA4MDZaFw0yNzA3MjAxNTEzMDZaMDMxMTAvBgNV BAMTKEFGQjY0QUI0MTU1RDg3NDFBOUI5MUUzQUNENzRFNEMyMTk0RkUzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmwkIERq3g7Tm3mJ+4yPJl41ZV d8DOuhpFpnig+Kyt8IAUkMh7Q5+wd8N4RmpJvXRKNEe8qTfFnKbVGDzU446i5zbM tveF76NduqY6f8g1R9w7/NcTAvJ1VyMzCz7nis+u4VzLi727+BwECupYromR+mSh fQqMSCPdp+B7QhvXJ/1cQmaat+ctYb/kX3kIzRHwaVFvZzsVDqSt7xPxGXI1P72R eR/AkVFUx7qbbi0Q4fg0NLtMJs1cDfkP8W26vJNDLl/QqxdlMTou/auR8qRznCXP l9/hh/TEpCXsW109BfHMixRFki3mp4cTDCx5LncGObaQVNgxFHN6geMJgjU9AgMB AAGjggIqMIICJjAdBgNVHQ4EFgQUr7ZKtBVdh0GpuR46zXTkwhlP490wHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwgZEGCCsGAQUFBwELBIGEMIGBMH8GCCsGAQUFBzALhnNy c3luYzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzMy NjEzMDM2M2E2MTMwMzAzMDNhMzEzMDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl MjAzMjMxMzQzNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBqAAEAAwDQYJKoZIhvcNAQELBQAD ggEBAJwC69/KOXm1t5Efs1V7fPDfvMcJOVnqHzgvyoPSyNK2XgvjwAh0fMeBi7Lu 4acG0Eq7tm3LHf+/VDUJtKG9aE8WhdJYu8n3UY2w5kvcNsDbeS7VMfeBEkiX+M8f YSgf1Y0r/++vamy9M3bL4ZZc6r4ctBSDccQfyhSsRMoxLdFtYI9kulyhT/A2nYGh vUT8MmA6EOOeDlvi1kvcnkoVZgh8Ex3JrGzMIWyt+KafoyhkXl3C9JasJ0baH1gc rP9mVeyczSK/r97AePDaTogOOASnMLjPMuTYN4q7gY4IAfdi6eeA9HCbMJ3SrlxG bfYUz8ajJ1PMGGo6kqG3WBNlf5Y= -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:46 2026 by rpki-client