$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS133504.roa File: AS133504.roa (raw, json) Hash identifier: 1tnUU6iTN3SqkyzA5OU4HzFmCQIQDJR6MRtUXiFrVHM= Subject key identifier: 3C:1C:05:EA:00:B5:B4:04:C1:F9:49:1B:B8:2C:65:21:DC:EF:06:8A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 598F7C8E63689964C5112C47C387CADEBEAF16EE Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS133504.roa Signing time: Thu 03 Jul 2025 15:53:10 +0000 ROA not before: Thu 03 Jul 2025 15:48:10 +0000 ROA not after: Thu 02 Jul 2026 15:53:10 +0000 asID: 133504 IP address blocks: 2a05:dfc3:f700::/40 maxlen: 48 2a05:dfc3:f750::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8f:7c:8e:63:68:99:64:c5:11:2c:47:c3:87:ca:de:be:af:16:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:48:10 2025 GMT Not After : Jul 2 15:53:10 2026 GMT Subject: CN=3C1C05EA00B5B404C1F9491BB82C6521DCEF068A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:c1:00:fc:ea:28:f3:46:e1:a4:70:9e:3a: 4a:18:65:1e:25:0c:5a:0c:31:34:47:2c:c5:56:93: b4:64:9a:6a:10:20:da:b5:45:4b:a1:9e:2e:21:79: ab:53:cc:43:32:53:fc:72:b5:3d:e4:c6:6c:a5:8e: 2d:aa:19:1d:0f:29:2d:09:2a:b2:33:ab:bf:45:27: 1e:7a:a4:47:50:4f:9d:7d:29:b7:9b:f4:53:4a:08: 36:d1:f3:a0:28:5d:7f:cd:30:6b:25:1f:91:c3:dc: e5:fd:66:45:71:be:39:a3:9d:75:ef:c2:dd:6a:de: c4:07:13:d4:86:b5:b7:a7:d4:dd:05:e4:f4:aa:2a: 18:e8:41:36:c6:58:f1:e9:3b:2c:a7:db:22:bd:2c: e2:c7:0d:86:54:87:65:52:49:51:ce:c9:32:15:f8: e6:2d:aa:56:f1:b4:c3:78:59:8b:ca:3d:e4:ed:fb: 4e:a1:58:f8:39:0e:31:ab:d9:5c:35:d1:c2:40:8e: 3c:4a:be:45:fa:5e:e0:ea:4b:ec:ee:42:5b:63:20: 12:a7:28:22:49:0f:a6:b7:b2:ff:df:d4:7b:e6:24: 8f:e7:84:f8:68:27:5e:8a:52:8f:60:93:73:f8:d4: df:f3:99:b1:97:ff:d0:d6:15:4c:f9:36:bf:7c:57: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1C:05:EA:00:B5:B4:04:C1:F9:49:1B:B8:2C:65:21:DC:EF:06:8A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS133504.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f700::/40 Signature Algorithm: sha256WithRSAEncryption 92:45:db:06:44:df:bc:21:d5:60:bc:d2:11:b7:4e:70:bb:86: 40:e2:6e:b1:a1:48:54:c5:f6:31:e0:b0:7b:86:70:f2:6e:24: c8:4f:6d:8c:62:98:6c:e6:58:f1:41:e7:f4:d2:33:a0:12:01: 4e:9c:8c:4e:4c:03:6c:42:40:64:df:c3:97:dc:d4:f3:04:0d: 29:55:e8:67:44:d4:f5:fb:b2:50:01:fc:64:04:8f:07:8a:da: 02:ea:22:39:c1:bd:66:fe:77:07:8d:b0:ea:39:13:34:a6:79: d1:f7:e0:a6:ff:c4:2f:84:be:ca:c8:80:51:95:a0:f5:5e:48: 36:4c:e8:91:77:6b:a6:43:07:88:96:d2:e9:72:ea:82:18:4d: d7:85:2c:ee:85:99:78:e7:dc:73:b6:02:4d:18:04:83:29:fc: 1f:f8:12:c1:d1:2a:f0:74:de:93:c2:16:30:cc:e5:3b:b8:ed: 01:1c:55:55:15:ff:60:d7:76:6e:f3:ed:ee:fe:c6:e2:9f:09: 55:e5:99:1c:46:b5:3f:d4:79:cf:c7:6c:3b:cd:18:49:c9:e2: 4e:00:60:99:1b:29:0a:8a:fd:1a:b9:db:65:4e:fc:ae:bc:52: b8:74:b9:45:b7:37:fc:99:e3:7e:20:bd:38:4a:6d:70:c5:bb: a4:43:34:b2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUWY98jmNomWTFESxHw4fK3r6vFu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ4MTBaFw0yNjA3MDIxNTUzMTBaMDMxMTAvBgNV BAMTKDNDMUMwNUVBMDBCNUI0MDRDMUY5NDkxQkI4MkM2NTIxRENFRjA2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYMEA/Ooo80bhpHCeOkoYZR4l DFoMMTRHLMVWk7RkmmoQINq1RUuhni4heatTzEMyU/xytT3kxmylji2qGR0PKS0J KrIzq79FJx56pEdQT519Kbeb9FNKCDbR86AoXX/NMGslH5HD3OX9ZkVxvjmjnXXv wt1q3sQHE9SGtben1N0F5PSqKhjoQTbGWPHpOyyn2yK9LOLHDYZUh2VSSVHOyTIV +OYtqlbxtMN4WYvKPeTt+06hWPg5DjGr2Vw10cJAjjxKvkX6XuDqS+zuQltjIBKn KCJJD6a3sv/f1HvmJI/nhPhoJ16KUo9gk3P41N/zmbGX/9DWFUz5Nr98V0ddAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUPBwF6gC1tATB+UkbuCxlIdzvBoowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxMzM1MDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq Bd/D9zANBgkqhkiG9w0BAQsFAAOCAQEAkkXbBkTfvCHVYLzSEbdOcLuGQOJusaFI VMX2MeCwe4Zw8m4kyE9tjGKYbOZY8UHn9NIzoBIBTpyMTkwDbEJAZN/Dl9zU8wQN KVXoZ0TU9fuyUAH8ZASPB4raAuoiOcG9Zv53B42w6jkTNKZ50ffgpv/EL4S+ysiA UZWg9V5INkzokXdrpkMHiJbS6XLqghhN14Us7oWZeOfcc7YCTRgEgyn8H/gSwdEq 8HTek8IWMMzlO7jtARxVVRX/YNd2bvPt7v7G4p8JVeWZHEa1P9R5z8dsO80YScni TgBgmRspCor9GrnbZU78rrxSuHS5Rbc3/JnjfiC9OEptcMW7pEM0sg== -----END CERTIFICATE-----Generated at Sat Jul 5 02:04:15 2025 by rpki-client