$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS57110.roa File: AS57110.roa (raw, json) Hash identifier: RyCZFPVtFPoSCIEQYluFNVDp6Mm6ftB71stTFVnXpT0= Subject key identifier: BF:FB:D7:7F:C2:D3:DA:4B:C1:0F:B9:FE:30:C4:D4:3E:BE:9E:86:2A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 70277C65AF410AB676A1F4A0F5B8A9B213D9B236 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS57110.roa Signing time: Wed 16 Jul 2025 21:42:42 +0000 ROA not before: Wed 16 Jul 2025 21:37:42 +0000 ROA not after: Wed 15 Jul 2026 21:42:42 +0000 asID: 57110 IP address blocks: 2a0a:6044:3000::/40 maxlen: 40 2a0a:6044:3001::/48 maxlen: 48 2a0f:6283:1101::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:27:7c:65:af:41:0a:b6:76:a1:f4:a0:f5:b8:a9:b2:13:d9:b2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 16 21:37:42 2025 GMT Not After : Jul 15 21:42:42 2026 GMT Subject: CN=BFFBD77FC2D3DA4BC10FB9FE30C4D43EBE9E862A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:5f:08:15:13:bf:ca:fe:dc:06:bb:95:5b: 57:c8:75:be:46:21:ff:f5:c0:31:ff:fb:7a:47:7d: 91:cf:e6:cf:a5:a0:65:e3:a0:99:fb:61:50:b9:a6: e7:e3:37:e3:d3:96:b3:14:f5:7f:97:86:98:5b:f2: 0d:46:72:fd:f0:14:6e:4d:63:ba:5d:13:bd:e7:56: 6b:5f:b6:fe:57:27:0e:32:77:48:1d:8a:55:fc:61: b2:f7:ea:99:c0:af:c6:97:74:ea:75:50:3d:ac:18: 69:0d:68:ec:e3:ef:4d:d1:fa:c4:c1:07:b4:ac:e7: 0d:ea:ab:c5:1f:bc:ea:8e:fb:de:50:15:f8:3e:cd: 41:6e:53:59:a6:37:0e:b2:37:9c:5d:9c:c0:f2:92: 1d:5e:5c:ec:98:6d:9c:83:d6:b9:e8:6c:da:49:9c: d6:b7:2d:de:76:7e:70:e3:27:dd:e0:50:65:29:1e: de:01:2f:a1:b6:23:0e:a6:d9:d9:c6:40:83:f5:30: e0:86:4e:53:ce:07:6d:b1:80:f8:9c:26:ff:97:d8: 04:b3:d3:bb:0f:07:a2:2d:08:95:a9:1c:b8:19:77: c9:42:d4:63:13:2b:c9:5c:5b:25:8e:30:c3:fe:3d: 96:bb:b2:1c:67:92:30:cd:ac:7b:f9:0b:df:1e:13: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FB:D7:7F:C2:D3:DA:4B:C1:0F:B9:FE:30:C4:D4:3E:BE:9E:86:2A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS57110.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:3000::/40 2a0f:6283:1101::/48 Signature Algorithm: sha256WithRSAEncryption 48:d8:aa:77:30:92:3f:f7:32:d6:11:16:bb:a2:ac:95:bd:84: e5:9f:92:24:96:c0:52:e8:1c:da:2a:a1:78:ee:47:c1:94:e8: 39:3a:9a:81:67:17:d9:90:ff:c0:a4:16:69:76:12:50:b8:5b: ea:97:a8:ee:cb:ce:1e:c1:f5:eb:25:c7:d5:cd:c4:66:98:ad: ba:6a:7f:bd:12:c8:ad:24:3c:fa:4c:8e:5b:41:90:52:fa:c2: 52:a2:ee:e9:f1:a1:60:44:59:58:8f:97:ea:76:89:64:1a:6a: 8b:19:8a:21:2f:d9:81:7a:02:be:a1:67:14:a0:7d:31:22:32: cc:a9:50:ab:f4:c9:34:d6:f5:09:61:9d:69:1f:48:ea:e4:32: 44:fb:f2:91:11:d9:7e:83:59:ef:f1:8a:ba:6a:c8:31:80:9c: 39:e1:c1:da:1c:d0:e9:81:bc:0c:2c:d1:3c:28:cf:1c:04:3a: 0f:9c:2c:00:19:c1:aa:24:18:e1:c1:2e:b8:b5:b5:a2:23:7f: 79:21:46:58:06:4c:a1:77:b6:bd:5e:dd:d5:33:ac:cc:40:33: f9:cf:d5:5d:61:e8:de:ea:61:f3:b9:9e:b3:57:af:21:ae:71: 76:08:82:a0:3e:4b:51:2f:e9:69:18:4c:88:fe:ae:f0:de:78: e8:36:b8:6b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUcCd8Za9BCrZ2ofSg9bipshPZsjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MTYyMTM3NDJaFw0yNjA3MTUyMTQyNDJaMDMxMTAvBgNV BAMTKEJGRkJENzdGQzJEM0RBNEJDMTBGQjlGRTMwQzRENDNFQkU5RTg2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj3F8IFRO/yv7cBruVW1fIdb5G If/1wDH/+3pHfZHP5s+loGXjoJn7YVC5pufjN+PTlrMU9X+Xhphb8g1Gcv3wFG5N Y7pdE73nVmtftv5XJw4yd0gdilX8YbL36pnAr8aXdOp1UD2sGGkNaOzj703R+sTB B7Ss5w3qq8UfvOqO+95QFfg+zUFuU1mmNw6yN5xdnMDykh1eXOyYbZyD1rnobNpJ nNa3Ld52fnDjJ93gUGUpHt4BL6G2Iw6m2dnGQIP1MOCGTlPOB22xgPicJv+X2ASz 07sPB6ItCJWpHLgZd8lC1GMTK8lcWyWOMMP+PZa7shxnkjDNrHv5C98eE3mjAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUv/vXf8LT2kvBD7n+MMTUPr6ehiowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM1NzExMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQbMBkwFwQCAAIwEQMGACoK YEQwAwcAKg9igxEBMA0GCSqGSIb3DQEBCwUAA4IBAQBI2Kp3MJI/9zLWERa7oqyV vYTln5IklsBS6BzaKqF47kfBlOg5OpqBZxfZkP/ApBZpdhJQuFvql6juy84ewfXr JcfVzcRmmK26an+9EsitJDz6TI5bQZBS+sJSou7p8aFgRFlYj5fqdolkGmqLGYoh L9mBegK+oWcUoH0xIjLMqVCr9Mk01vUJYZ1pH0jq5DJE+/KREdl+g1nv8Yq6asgx gJw54cHaHNDpgbwMLNE8KM8cBDoPnCwAGcGqJBjhwS64tbWiI395IUZYBkyhd7a9 Xt3VM6zMQDP5z9VdYeje6mHzuZ6zV68hrnF2CIKgPktRL+lpGEyI/q7w3njoNrhr -----END CERTIFICATE-----Generated at Wed Jul 23 06:12:02 2025 by rpki-client