$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a313030303a3a2f34342d3438203d3e20323134343230.roa File: 326130363a613030303a313030303a3a2f34342d3438203d3e20323134343230.roa (raw, json) Hash identifier: ZB1QPuwv47KCk1dr0dg362pR9GKXH/C39xSKmvQJXCM= Subject key identifier: 88:33:56:05:40:3F:9D:09:9C:A1:7A:E0:94:79:BE:7F:44:F8:97:4B Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 66A4A6D69F3C9A9CB0901009A138BEECB66ACAA8 Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a313030303a3a2f34342d3438203d3e20323134343230.roa Signing time: Thu 23 Jul 2026 15:14:34 +0000 ROA not before: Thu 23 Jul 2026 15:09:34 +0000 ROA not after: Thu 22 Jul 2027 15:14:34 +0000 asID: 214420 IP address blocks: 2a06:a000:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a4:a6:d6:9f:3c:9a:9c:b0:90:10:09:a1:38:be:ec:b6:6a:ca:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Jul 23 15:09:34 2026 GMT Not After : Jul 22 15:14:34 2027 GMT Subject: CN=88335605403F9D099CA17AE09479BE7F44F8974B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2f:6d:19:8c:02:d8:c7:9a:8f:c6:23:55:4f: 11:27:df:98:fd:00:cf:6f:3a:66:dc:10:86:81:70: 34:27:64:7b:be:ed:87:92:14:61:9f:7a:d4:91:4c: f8:95:c0:f8:ae:71:80:03:b3:f1:6d:bd:2b:1b:e2: 3f:fa:df:a6:50:ee:59:a2:94:e4:a5:38:de:7c:3e: e0:4f:fa:6c:37:c6:56:58:6b:c1:2a:78:a9:d6:5d: f8:69:22:cc:20:18:d6:79:7f:ab:53:db:59:79:ba: 03:85:35:b7:75:e4:85:c3:06:f9:83:80:c1:64:fd: 33:21:b3:dc:71:fd:a0:6e:ce:ad:bc:5c:f0:0b:38: a7:1b:3d:2a:4b:8e:b1:ee:99:8e:ae:5d:43:ba:41: 93:81:c9:df:29:28:42:71:f3:92:98:cd:03:a2:54: 8f:e5:00:da:27:c6:4e:e1:f9:1c:0c:19:d6:6e:09: 5a:b4:68:2b:29:20:89:a9:fb:20:c9:27:1e:97:d9: 8d:0c:1b:d8:8d:8c:49:13:b3:3e:c9:2a:25:5a:11: 2e:fd:3f:5e:c4:11:62:19:15:b9:b2:36:09:b6:7e: 69:8e:06:dd:42:d8:33:d7:4d:e4:a7:e8:4b:b7:7c: 34:ef:7e:67:96:e1:15:63:39:7a:c6:70:80:d4:60: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:33:56:05:40:3F:9D:09:9C:A1:7A:E0:94:79:BE:7F:44:F8:97:4B X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/326130363a613030303a313030303a3a2f34342d3438203d3e20323134343230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a000:1000::/44 Signature Algorithm: sha256WithRSAEncryption a0:8f:ef:d2:72:a9:56:da:87:54:b7:30:b2:d8:5f:69:bb:41: e4:b2:22:77:78:75:01:8a:cc:f9:23:70:e0:e5:e6:14:4e:6e: db:8f:c4:e8:dd:b4:ce:21:a8:f4:07:ab:a3:72:77:9a:be:8f: 15:de:91:f7:dc:37:d8:5a:06:d5:b2:6b:09:81:b7:5e:76:4c: 22:00:be:f1:63:9c:ed:5a:9c:e9:0f:6d:e5:14:b5:0a:7f:56: 7d:88:66:68:f5:43:c4:3f:46:07:c9:ad:5a:1e:ba:b6:7d:74: f3:49:26:53:ed:22:3b:5a:6c:af:44:85:8d:2f:80:9e:0e:9e: 32:fc:d5:a8:7d:1b:b3:bd:01:80:47:73:a8:6c:d2:c2:78:85: 7c:8f:e0:b9:b0:7f:91:ad:09:be:c6:76:7d:60:1b:b9:47:23: c3:26:1f:94:2c:d7:99:52:49:eb:2e:7d:ba:f6:c2:c9:12:b3: 43:ab:40:f6:97:11:c8:c5:92:36:cc:ce:5e:b7:72:11:e2:45: c2:fb:56:69:78:8b:10:c4:d5:11:01:f7:87:ff:2c:c4:0c:72: 5e:67:e2:42:41:52:b0:54:2d:06:3c:d1:dd:d2:7e:98:b8:55: 2a:0d:70:e5:8e:52:fb:c0:ff:f3:92:b7:3d:ee:db:7e:60:9d: c9:a5:d5:ab -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIUZqSm1p88mpywkBAJoTi+7LZqyqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA3MjMxNTA5MzRaFw0yNzA3MjIxNTE0MzRaMDMxMTAvBgNV BAMTKDg4MzM1NjA1NDAzRjlEMDk5Q0ExN0FFMDk0NzlCRTdGNDRGODk3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwL20ZjALYx5qPxiNVTxEn35j9 AM9vOmbcEIaBcDQnZHu+7YeSFGGfetSRTPiVwPiucYADs/FtvSsb4j/636ZQ7lmi lOSlON58PuBP+mw3xlZYa8EqeKnWXfhpIswgGNZ5f6tT21l5ugOFNbd15IXDBvmD gMFk/TMhs9xx/aBuzq28XPALOKcbPSpLjrHumY6uXUO6QZOByd8pKEJx85KYzQOi VI/lANonxk7h+RwMGdZuCVq0aCspIImp+yDJJx6X2Y0MG9iNjEkTsz7JKiVaES79 P17EEWIZFbmyNgm2fmmOBt1C2DPXTeSn6Eu3fDTvfmeW4RVjOXrGcIDUYOKHAgMB AAGjggIqMIICJjAdBgNVHQ4EFgQUiDNWBUA/nQmcoXrglHm+f0T4l0swHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwgZEGCCsGAQUFBwELBIGEMIGBMH8GCCsGAQUFBzALhnNy c3luYzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzMy NjEzMDM2M2E2MTMwMzAzMDNhMzEzMDMwMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNl MjAzMjMxMzQzNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBqAAEAAwDQYJKoZIhvcNAQELBQAD ggEBAKCP79JyqVbah1S3MLLYX2m7QeSyInd4dQGKzPkjcODl5hRObtuPxOjdtM4h qPQHq6Nyd5q+jxXekffcN9haBtWyawmBt152TCIAvvFjnO1anOkPbeUUtQp/Vn2I Zmj1Q8Q/RgfJrVoeurZ9dPNJJlPtIjtabK9EhY0vgJ4OnjL81ah9G7O9AYBHc6hs 0sJ4hXyP4Lmwf5GtCb7Gdn1gG7lHI8MmH5Qs15lSSesufbr2wskSs0OrQPaXEcjF kjbMzl63chHiRcL7Vml4ixDE1REB94f/LMQMcl5n4kJBUrBULQY80d3Sfpi4VSoN cOWOUvvA//OStz3u235gncml1as= -----END CERTIFICATE-----Generated at Thu Jul 23 21:12:02 2026 by rpki-client