$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200950.roa File: AS200950.roa (raw, json) Hash identifier: 7WCj26WqFe3vwBvJwzblMNshhW2LG0A2GA6NlPAeExI= Subject key identifier: 48:7A:16:D9:D8:88:9C:8F:94:A7:2A:4A:A4:FD:FC:C4:86:17:77:B0 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 221FEF96294C6DDD779A1BE0BD40958E1E2D0FF9 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200950.roa Signing time: Mon 20 Oct 2025 12:06:23 +0000 ROA not before: Mon 20 Oct 2025 12:01:23 +0000 ROA not after: Mon 19 Oct 2026 12:06:23 +0000 asID: 200950 IP address blocks: 2a06:1281:70::/44 maxlen: 44 2a06:1281:70::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 07:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1f:ef:96:29:4c:6d:dd:77:9a:1b:e0:bd:40:95:8e:1e:2d:0f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 20 12:01:23 2025 GMT Not After : Oct 19 12:06:23 2026 GMT Subject: CN=487A16D9D8889C8F94A72A4AA4FDFCC4861777B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:f8:df:a5:af:1f:fd:20:40:d6:d2:85:a3: 0d:99:12:3a:86:02:f0:8d:d4:40:e6:75:93:2e:3c: 1f:b5:da:e8:95:2c:a5:f9:aa:59:8f:a8:8f:03:ba: d2:1a:93:03:27:51:27:34:ef:0b:ca:9b:da:c0:48: 42:88:a6:dc:33:44:24:b6:c5:3c:c0:6d:a8:44:b4: f3:35:1d:55:3d:90:6b:9c:bf:b1:ce:d4:b6:c5:90: da:af:41:fe:c6:be:29:6e:6e:92:cf:6e:13:47:ce: db:30:8e:f9:42:7d:08:60:3d:92:6d:2b:e7:87:a7: f4:7d:39:98:d4:c5:a7:e7:c9:92:6b:da:8e:74:75: f8:e6:f4:61:fe:39:bc:46:a1:d6:82:a0:c1:00:ad: 27:fc:47:42:06:d7:c2:60:2c:2e:10:28:c9:e3:44: bf:bb:0e:3e:b3:6b:d6:b1:a2:81:72:d1:68:e4:55: f2:e4:33:5c:1f:b1:a0:73:68:46:c6:d7:29:4b:d1: f5:18:96:28:b0:d7:56:ff:e7:a4:b3:06:56:f0:45: 11:67:19:a7:fd:47:30:f8:44:17:3e:20:6f:b1:ea: b6:53:80:8f:54:ee:71:94:e6:89:03:6d:87:a1:02: 18:b0:69:ac:75:96:20:fd:7f:a7:a7:0e:bc:16:fe: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7A:16:D9:D8:88:9C:8F:94:A7:2A:4A:A4:FD:FC:C4:86:17:77:B0 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200950.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:70::/44 Signature Algorithm: sha256WithRSAEncryption 78:76:dc:f0:a6:eb:53:61:14:b6:67:68:3e:27:0e:da:0b:35: 46:07:38:21:35:ac:3c:88:bd:04:89:09:ae:0f:bd:f7:85:47: 6c:62:88:9a:97:09:e8:32:b1:65:06:8b:16:77:97:10:73:72: a0:9b:fd:04:20:d2:cf:d8:a1:52:00:7b:9e:de:e0:f7:18:31: 6f:e2:fa:aa:02:b4:70:cc:4c:30:51:2a:fd:ed:32:f7:95:1a: a8:97:d5:85:b2:ac:23:ab:ba:9a:dc:1f:95:2e:74:55:27:38: 9e:6e:b0:cc:91:85:b8:f5:6f:3a:d6:70:46:e8:fa:77:e4:ab: 40:3c:ec:90:b9:7f:a9:18:26:d4:56:32:74:bb:25:c3:46:25: 86:a2:ce:68:65:9f:43:3b:9e:c6:3e:18:95:9f:74:9d:33:ed: 1e:06:d3:d0:f3:21:f2:ec:07:cf:6d:de:d8:e4:3e:db:c4:e2: 56:bc:a9:e4:6e:b9:72:bd:ab:3c:a3:0a:29:53:93:39:91:a8: 67:20:e0:59:fe:d7:86:f9:74:8f:9a:f3:2a:3a:e0:d2:30:ba: fe:68:47:44:eb:37:75:80:01:ae:b7:28:d2:23:f6:0f:11:fe: 6a:ea:45:c4:81:d7:43:fa:c2:a0:40:e6:bd:90:2e:21:9e:6e: ca:a5:9f:e2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUIh/vlilMbd13mhvgvUCVjh4tD/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEwMjAxMjAxMjNaFw0yNjEwMTkxMjA2MjNaMDMxMTAvBgNV BAMTKDQ4N0ExNkQ5RDg4ODlDOEY5NEE3MkE0QUE0RkRGQ0M0ODYxNzc3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kPjfpa8f/SBA1tKFow2ZEjqG AvCN1EDmdZMuPB+12uiVLKX5qlmPqI8DutIakwMnUSc07wvKm9rASEKIptwzRCS2 xTzAbahEtPM1HVU9kGucv7HO1LbFkNqvQf7GvilubpLPbhNHztswjvlCfQhgPZJt K+eHp/R9OZjUxafnyZJr2o50dfjm9GH+ObxGodaCoMEArSf8R0IG18JgLC4QKMnj RL+7Dj6za9axooFy0WjkVfLkM1wfsaBzaEbG1ylL0fUYliiw11b/56SzBlbwRRFn Gaf9RzD4RBc+IG+x6rZTgI9U7nGU5okDbYehAhiwaax1liD9f6enDrwW/h8tAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUSHoW2diInI+UpypKpP38xIYXd7AwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDA5NTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq BhKBAHAwDQYJKoZIhvcNAQELBQADggEBAHh23PCm61NhFLZnaD4nDtoLNUYHOCE1 rDyIvQSJCa4PvfeFR2xiiJqXCegysWUGixZ3lxBzcqCb/QQg0s/YoVIAe57e4PcY MW/i+qoCtHDMTDBRKv3tMveVGqiX1YWyrCOruprcH5UudFUnOJ5usMyRhbj1bzrW cEbo+nfkq0A87JC5f6kYJtRWMnS7JcNGJYaizmhln0M7nsY+GJWfdJ0z7R4G09Dz IfLsB89t3tjkPtvE4la8qeRuuXK9qzyjCilTkzmRqGcg4Fn+14b5dI+a8yo64NIw uv5oR0TrN3WAAa63KNIj9g8R/mrqRcSB10P6wqBA5r2QLiGebsqln+I= -----END CERTIFICATE-----Generated at Wed Oct 22 10:12:39 2025 by rpki-client