$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a3a2f33322d3438203d3e20323139313839.roa File: 326130363a613030303a3a2f33322d3438203d3e20323139313839.roa (raw, json) Hash identifier: 0AtjwM4P+NrBu9C8k0a3NpF+FQ/24FdKj1jU2kFPqrs= Subject key identifier: 90:C0:73:2E:D6:23:9F:A4:18:71:C9:29:93:CB:28:34:7A:06:B3:C0 Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 67D288785462460B8FC2CA9BB67A417D3EFEBC8E Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a3a2f33322d3438203d3e20323139313839.roa Signing time: Tue 21 Jul 2026 15:15:41 +0000 ROA not before: Tue 21 Jul 2026 15:10:41 +0000 ROA not after: Tue 20 Jul 2027 15:15:41 +0000 asID: 219189 IP address blocks: 2a06:a000::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d2:88:78:54:62:46:0b:8f:c2:ca:9b:b6:7a:41:7d:3e:fe:bc:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Jul 21 15:10:41 2026 GMT Not After : Jul 20 15:15:41 2027 GMT Subject: CN=90C0732ED6239FA41871C92993CB28347A06B3C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:f1:22:ec:af:3a:c1:81:ef:6c:ee:8a:47: 0d:30:53:56:03:2b:04:f9:17:1e:9f:2f:55:75:0d: 48:19:38:93:ae:c1:b9:da:68:94:b8:f1:ef:e5:74: 76:63:65:31:67:b1:bf:ae:51:9f:92:8a:b7:8a:e2: df:b4:f3:a8:c0:12:0e:f9:75:fc:20:b5:a1:e4:88: 78:01:37:ce:44:d8:b6:11:4a:89:b3:a7:73:88:02: c5:04:f8:0f:93:1e:83:16:47:b6:4b:74:f3:b3:90: 88:a2:07:1e:84:f2:6f:a5:a2:81:40:07:b2:1d:f2: 9b:f9:fd:ed:26:a7:40:39:65:f3:a7:8b:23:7e:78: 5f:a4:8d:02:84:58:33:4f:a2:93:63:a9:32:99:32: 20:51:d9:be:01:1d:4b:df:63:28:54:82:55:cb:25: a0:77:89:e8:e5:dc:88:f5:0f:24:fa:39:25:39:fc: e0:e7:6c:bf:f3:4c:59:25:2e:5b:e5:ec:09:93:ff: 20:a9:56:87:50:ea:e7:86:ab:3c:ca:af:c4:01:4b: 0a:cf:06:4b:a5:25:36:60:db:87:70:c3:60:a4:d3: e5:ac:bd:c8:8c:c3:b7:2e:ef:c6:e1:19:be:9c:0c: 45:4b:41:c8:ec:ba:ad:d6:27:7b:ed:54:85:88:14: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C0:73:2E:D6:23:9F:A4:18:71:C9:29:93:CB:28:34:7A:06:B3:C0 X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a3a2f33322d3438203d3e20323139313839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a000::/32 Signature Algorithm: sha256WithRSAEncryption 88:cd:e8:d4:05:34:51:4c:1e:67:1a:5b:e5:55:c2:ba:17:ad: 6a:a9:b6:53:35:25:ad:60:c6:0f:96:57:6f:45:ba:32:37:58: 25:cf:3e:e9:53:e6:3d:39:6b:7f:65:3a:74:da:de:37:f5:cf: 3f:92:4b:19:8e:9c:82:3b:db:05:31:9e:a0:9e:6b:cb:2b:eb: d0:40:17:d5:89:26:3b:9a:9f:09:41:ef:e9:72:81:a0:aa:62: 93:27:12:b7:37:33:ff:c2:bb:8b:f2:51:2f:21:26:38:6f:b0: 3a:0d:60:c5:88:8e:27:22:3b:42:ad:e2:68:d7:bf:f5:2f:a5: b6:a9:6e:30:f9:b7:48:1a:77:ee:aa:8d:06:9d:09:aa:56:69: 32:68:1e:13:cc:1a:19:a3:50:aa:a1:33:71:ab:7f:12:0f:03: d3:29:94:81:48:53:f3:e0:17:25:06:80:07:0b:19:cb:f4:af: 18:4c:07:7d:89:22:ed:ba:87:44:47:5b:1d:3d:94:0d:36:1f: cd:77:89:7d:5e:24:48:22:a8:8a:64:9d:5f:a8:53:5f:fb:3d: 92:b7:be:d4:5a:6d:c6:09:f6:46:4a:ed:ad:70:37:12:75:a5: c6:0d:bb:48:9e:5b:75:79:7c:1d:6e:da:6f:8f:f4:1f:b4:d2: 42:c3:23:40 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUZ9KIeFRiRguPwsqbtnpBfT7+vI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA3MjExNTEwNDFaFw0yNzA3MjAxNTE1NDFaMDMxMTAvBgNV BAMTKDkwQzA3MzJFRDYyMzlGQTQxODcxQzkyOTkzQ0IyODM0N0EwNkIzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKfEi7K86wYHvbO6KRw0wU1YD KwT5Fx6fL1V1DUgZOJOuwbnaaJS48e/ldHZjZTFnsb+uUZ+SireK4t+086jAEg75 dfwgtaHkiHgBN85E2LYRSomzp3OIAsUE+A+THoMWR7ZLdPOzkIiiBx6E8m+looFA B7Id8pv5/e0mp0A5ZfOniyN+eF+kjQKEWDNPopNjqTKZMiBR2b4BHUvfYyhUglXL JaB3iejl3Ij1DyT6OSU5/ODnbL/zTFklLlvl7AmT/yCpVodQ6ueGqzzKr8QBSwrP BkulJTZg24dww2Ck0+WsvciMw7cu78bhGb6cDEVLQcjsuq3WJ3vtVIWIFBvHAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUkMBzLtYjn6QYcckpk8soNHoGs8AwHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4ZpcnN5 bmM6Ly9yc3luYy5rcmlsbC5jbG5leHVzLmRldi9yZXBvL0NMTmV4dXMvMi8zMjYx MzAzNjNhNjEzMDMwMzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjMxMzkzMTM4 Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAqBqAAMA0GCSqGSIb3DQEBCwUAA4IBAQCIzejUBTRRTB5n GlvlVcK6F61qqbZTNSWtYMYPlldvRboyN1glzz7pU+Y9OWt/ZTp02t439c8/kksZ jpyCO9sFMZ6gnmvLK+vQQBfViSY7mp8JQe/pcoGgqmKTJxK3NzP/wruL8lEvISY4 b7A6DWDFiI4nIjtCreJo17/1L6W2qW4w+bdIGnfuqo0GnQmqVmkyaB4TzBoZo1Cq oTNxq38SDwPTKZSBSFPz4BclBoAHCxnL9K8YTAd9iSLtuodER1sdPZQNNh/Nd4l9 XiRIIqiKZJ1fqFNf+z2St77UWm3GCfZGSu2tcDcSdaXGDbtInlt1eXwdbtpvj/Qf tNJCwyNA -----END CERTIFICATE-----Generated at Tue Jul 21 23:24:37 2026 by rpki-client