
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a3130323a3a2f34382d3438203d3e20323138383433.roa
File: 323630323a663936643a3130323a3a2f34382d3438203d3e20323138383433.roa (raw, json)
Hash identifier: BwhUAcixya7ivqVKRSLzmfSe6POLb3qUParXl4M8jVo=
Subject key identifier: 6A:80:CB:32:B8:C3:1E:50:53:76:2D:A6:54:AC:AF:96:6D:52:00:D8
Certificate issuer: /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial: 52A4DBA362241F6BDD597E22C5CD6AC6DAA031D5
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3130323a3a2f34382d3438203d3e20323138383433.roa
Signing time: Sat 29 Aug 2026 19:40:37 +0000
ROA not before: Sat 29 Aug 2026 19:35:37 +0000
ROA not after: Sat 28 Aug 2027 19:40:37 +0000
asID: 218843
IP address blocks: 2602:f96d:102::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 31 Aug 2026 16:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a4:db:a3:62:24:1f:6b:dd:59:7e:22:c5:cd:6a:c6:da:a0:31:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Validity
Not Before: Aug 29 19:35:37 2026 GMT
Not After : Aug 28 19:40:37 2027 GMT
Subject: CN=6A80CB32B8C31E5053762DA654ACAF966D5200D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:75:78:ea:a4:2e:27:a4:00:f7:27:02:9f:
5f:88:a2:dd:8a:70:53:1c:8d:e9:91:79:24:bb:fc:
5f:6e:de:da:a8:c6:e0:ae:06:f9:70:a0:aa:aa:df:
ba:50:88:e1:a6:2f:c8:b5:c2:93:87:41:66:b4:7f:
e7:5f:ad:fb:d3:c7:64:2f:b0:f9:fb:47:15:48:d0:
30:ac:74:c9:f0:54:fe:88:6e:46:30:1b:62:01:31:
df:46:12:0c:07:38:84:b0:e3:ca:b1:9a:d8:4d:1c:
0e:3c:a5:4c:e5:39:e9:37:85:d3:f3:95:4c:4b:61:
e7:a8:c9:6a:f0:cb:0f:28:0e:1a:7c:79:05:11:a4:
23:16:35:4c:ee:cd:7b:f9:5e:ec:bb:9e:4e:64:c9:
af:55:73:e1:d1:45:b0:78:14:a6:c2:c4:9f:c3:4e:
14:cd:a7:d3:0f:67:13:87:7f:4f:11:c5:29:5c:9b:
90:c6:53:9e:78:91:30:5c:11:c5:3f:95:5c:2e:89:
ee:97:c3:5c:c6:65:df:bf:b3:7d:03:ef:52:e0:ae:
70:01:3c:a9:79:00:5d:5a:ec:68:9a:38:43:f7:c0:
d7:8d:79:48:7d:dc:fd:cd:46:7d:8e:92:44:84:1d:
53:92:ea:fa:0f:5a:c8:f4:18:5a:d1:7e:5f:19:5f:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:80:CB:32:B8:C3:1E:50:53:76:2D:A6:54:AC:AF:96:6D:52:00:D8
X509v3 Authority Key Identifier:
keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3130323a3a2f34382d3438203d3e20323138383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:102::/48
Signature Algorithm: sha256WithRSAEncryption
8d:10:b1:59:9c:88:bb:ba:c4:1b:b3:e0:df:05:4f:73:7c:4d:
00:de:5f:e8:8f:05:39:84:12:1e:09:fb:0d:8a:9b:62:06:c9:
33:2c:5c:26:bd:f3:b2:41:3c:65:5d:02:80:24:9d:5e:04:e7:
37:00:92:7f:01:f2:9e:ff:a5:2a:a1:69:e8:be:9e:99:73:02:
6c:cc:71:3f:2a:29:2e:c4:01:1a:da:a0:19:67:27:3c:3c:7a:
60:8a:1e:17:20:15:2c:e5:af:b8:05:3c:18:49:00:ff:e7:76:
3c:88:69:9b:94:22:ec:6e:fe:6c:a8:52:79:3b:93:28:03:d1:
19:d7:73:16:6d:42:ff:b7:d0:f2:6a:9c:62:10:2f:fb:db:bf:
08:92:4e:69:79:7c:8d:4e:a3:14:be:35:49:42:84:85:a8:21:
2f:86:1d:7c:9a:d6:a0:b2:4a:aa:4f:c5:b4:ac:10:94:05:53:
d2:71:e0:eb:83:4e:f2:52:55:82:96:80:fd:8f:d7:01:35:c6:
6e:00:99:d0:9a:e1:55:c8:96:8f:cc:3f:28:96:3c:ed:1b:3e:
39:33:4d:01:21:50:7b:b9:21:14:2e:cc:76:b6:75:ef:db:8b:
77:e6:c3:05:be:c4:4e:64:bc:80:f9:77:cc:43:3e:50:f8:74:
85:80:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 03:15:25 2026 by rpki-client