$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a313030343a3a2f34382d3438203d3e20323134343230.roa File: 326130363a613030303a313030343a3a2f34382d3438203d3e20323134343230.roa (raw, json) Hash identifier: kHUz2ekMB3TuQ3o6qIFFLEgDBVXto8hmxI5D77g+O6I= Subject key identifier: 43:2D:1A:70:F8:A4:8B:9F:D4:4A:AF:CB:F6:15:62:C6:E3:BD:BB:4E Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 52DD12FB287FFA661FB42B93B9ED9BD59153A67A Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a313030343a3a2f34382d3438203d3e20323134343230.roa Signing time: Tue 21 Jul 2026 15:15:18 +0000 ROA not before: Tue 21 Jul 2026 15:10:18 +0000 ROA not after: Tue 20 Jul 2027 15:15:18 +0000 asID: 214420 IP address blocks: 2a06:a000:1004::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:dd:12:fb:28:7f:fa:66:1f:b4:2b:93:b9:ed:9b:d5:91:53:a6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Jul 21 15:10:18 2026 GMT Not After : Jul 20 15:15:18 2027 GMT Subject: CN=432D1A70F8A48B9FD44AAFCBF61562C6E3BDBB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:02:7c:bd:81:b4:9d:b6:75:08:dc:fc:fc: 8d:bc:aa:ed:fc:d1:09:21:42:92:7e:f1:32:0e:61: 23:57:a7:6b:5c:1f:49:3d:76:00:ae:27:d8:30:1b: 39:be:ab:8f:84:99:29:92:a5:e2:1c:dd:5e:a1:ef: 1c:27:b5:e8:36:91:db:eb:be:b9:ae:94:7a:18:48: 9b:5d:38:c7:91:22:46:e0:0a:09:d1:30:b3:ed:ff: c7:8b:62:09:42:4b:b2:02:06:cb:4f:69:ef:cb:ea: 05:ba:7d:60:9e:91:a2:62:a2:5f:b3:ee:f6:84:ac: 72:de:b8:66:61:d8:e0:75:c6:79:9c:c8:d8:3b:a8: 0c:33:64:0d:81:00:cf:33:bc:16:a6:61:59:d6:23: b0:8e:97:e2:26:18:1e:fc:7a:ef:c4:2c:a9:f5:64: 67:9b:d7:31:8e:9e:76:03:c5:01:b0:eb:d2:fd:11: 81:33:87:aa:de:01:2b:5b:94:90:12:61:0e:58:5c: d4:74:3c:f6:2d:0a:b3:cb:6e:a5:bd:06:c2:e5:c0: ba:70:5b:40:02:cc:8f:6b:4d:7c:2a:6b:b6:43:f6: c5:72:0f:80:d2:1c:4f:6f:c8:89:84:01:db:64:c7: 5e:f0:a1:2d:a4:e3:cb:91:d9:10:f6:d8:82:2a:6d: f6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2D:1A:70:F8:A4:8B:9F:D4:4A:AF:CB:F6:15:62:C6:E3:BD:BB:4E X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a313030343a3a2f34382d3438203d3e20323134343230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a000:1004::/48 Signature Algorithm: sha256WithRSAEncryption 90:88:f5:99:4d:d7:8d:26:4a:5c:b8:59:cf:02:02:3b:e3:d6: 9c:5e:00:1c:75:5c:b7:3e:fd:0b:5d:f8:a1:ff:aa:08:61:3f: 17:d2:f1:5d:4a:ee:fc:45:2e:85:bd:5c:ae:23:19:77:1a:cc: 84:e7:e2:88:fa:51:35:ee:ba:1a:f7:ab:68:c5:75:a5:22:01: a9:4d:e7:44:2b:38:e4:bd:0e:09:ca:fd:17:0b:5a:c7:f5:f1: c9:46:1d:e1:4d:14:0e:96:b9:c6:b0:f7:cf:ca:f1:92:b3:3e: c8:42:af:b2:37:b9:59:66:bc:d5:3e:57:eb:d9:5a:e0:10:0b: 1c:31:4b:b9:94:a3:f6:ae:45:67:4b:22:dc:9e:9f:e8:25:0d: f5:82:48:77:c4:b8:c3:08:a5:cb:c8:1b:21:97:89:ad:b3:34: 48:3f:94:06:86:25:dc:e4:3d:2b:9f:72:57:45:a0:44:f8:12: 79:20:1d:f6:52:4a:22:d2:01:b0:7f:59:fb:bd:93:d5:d5:7e: b6:69:aa:12:86:0f:61:6f:a5:5b:21:8d:5e:e9:05:b1:54:af: 9f:1f:b3:92:b8:a0:9f:7e:2b:41:6e:77:61:4e:47:ef:15:ba: 4b:fa:8b:90:7c:51:31:99:07:41:33:c5:ad:f5:75:b3:5b:18: fc:88:c0:a7 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIUUt0S+yh/+mYftCuTue2b1ZFTpnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA3MjExNTEwMThaFw0yNzA3MjAxNTE1MThaMDMxMTAvBgNV BAMTKDQzMkQxQTcwRjhBNDhCOUZENDRBQUZDQkY2MTU2MkM2RTNCREJCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWgJ8vYG0nbZ1CNz8/I28qu38 0QkhQpJ+8TIOYSNXp2tcH0k9dgCuJ9gwGzm+q4+EmSmSpeIc3V6h7xwnteg2kdvr vrmulHoYSJtdOMeRIkbgCgnRMLPt/8eLYglCS7ICBstPae/L6gW6fWCekaJiol+z 7vaErHLeuGZh2OB1xnmcyNg7qAwzZA2BAM8zvBamYVnWI7COl+ImGB78eu/ELKn1 ZGeb1zGOnnYDxQGw69L9EYEzh6reAStblJASYQ5YXNR0PPYtCrPLbqW9BsLlwLpw W0ACzI9rTXwqa7ZD9sVyD4DSHE9vyImEAdtkx17woS2k48uR2RD22IIqbfbJAgMB AAGjggIqMIICJjAdBgNVHQ4EFgQUQy0acPiki5/USq/L9hVixuO9u04wHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwgZEGCCsGAQUFBwELBIGEMIGBMH8GCCsGAQUFBzALhnNy c3luYzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzMy NjEzMDM2M2E2MTMwMzAzMDNhMzEzMDMwMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNl MjAzMjMxMzQzNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBqAAEAQwDQYJKoZIhvcNAQELBQAD ggEBAJCI9ZlN140mSly4Wc8CAjvj1pxeABx1XLc+/Qtd+KH/qghhPxfS8V1K7vxF LoW9XK4jGXcazITn4oj6UTXuuhr3q2jFdaUiAalN50QrOOS9DgnK/RcLWsf18clG HeFNFA6Wucaw98/K8ZKzPshCr7I3uVlmvNU+V+vZWuAQCxwxS7mUo/auRWdLItye n+glDfWCSHfEuMMIpcvIGyGXia2zNEg/lAaGJdzkPSufcldFoET4EnkgHfZSSiLS AbB/Wfu9k9XVfrZpqhKGD2FvpVshjV7pBbFUr58fs5K4oJ9+K0Fud2FOR+8Vukv6 i5B8UTGZB0Ezxa31dbNbGPyIwKc= -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:47 2026 by rpki-client