$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS204134.roa File: AS204134.roa (raw, json) Hash identifier: oayW9pw3EAnTKZ7lZt1yPTIndQKOvrwaaknv3FXR4bg= Subject key identifier: A6:BD:11:B8:35:3E:DB:82:04:E3:98:85:B0:21:50:99:57:06:15:8C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6B14E42646465DF38F1B5C3B005E546E585E4FA7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS204134.roa Signing time: Sat 15 Nov 2025 12:56:54 +0000 ROA not before: Sat 15 Nov 2025 12:51:54 +0000 ROA not after: Sat 14 Nov 2026 12:56:54 +0000 asID: 204134 IP address blocks: 2a0f:6284:3::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Nov 2025 14:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:14:e4:26:46:46:5d:f3:8f:1b:5c:3b:00:5e:54:6e:58:5e:4f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 15 12:51:54 2025 GMT Not After : Nov 14 12:56:54 2026 GMT Subject: CN=A6BD11B8353EDB8204E39885B02150995706158C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ea:d6:eb:83:f1:17:ba:6e:08:11:dc:8b:ee: a5:6e:02:71:c8:98:0b:e9:7e:69:e0:e1:ac:dd:d8: 22:9f:b0:f0:66:c8:b6:d1:5f:d7:9c:0c:b2:e9:77: 2e:c0:79:b7:43:03:87:80:10:7c:3a:f7:0d:6b:97: 14:db:ed:c6:e5:b9:94:22:92:ea:37:e1:26:a3:9e: d2:05:1b:2f:6d:34:0d:7c:36:26:68:ac:d6:f7:1b: 52:5c:54:c4:84:f3:57:46:18:66:70:75:5f:f0:42: e3:ab:d3:20:eb:c2:88:5f:83:f5:8b:34:4a:46:60: fa:c6:b4:f9:32:53:28:d4:08:27:8f:64:08:23:71: c7:4f:94:51:0c:e1:b0:3e:b2:da:13:02:38:72:55: 84:37:11:1f:7a:1b:91:cc:c0:99:8d:5e:b8:97:34: ab:a4:ff:1e:e3:df:32:45:ee:9d:b4:fc:d8:70:0d: 91:64:7a:68:81:71:89:a3:31:e1:42:ae:ca:de:db: 73:a5:79:95:62:9e:19:b7:d3:ac:2f:60:d6:b0:4d: 9b:67:8a:42:27:9c:39:fb:3c:d2:7e:08:aa:fe:72: 45:fc:44:9f:1d:55:d5:3d:71:ce:ce:c5:63:ba:6f: f3:cb:cc:26:8e:2a:98:0f:08:c4:5a:94:59:32:0a: 08:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BD:11:B8:35:3E:DB:82:04:E3:98:85:B0:21:50:99:57:06:15:8C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS204134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:3::/48 Signature Algorithm: sha256WithRSAEncryption 22:12:96:16:30:a7:51:83:cd:83:85:f6:7d:9a:b8:1f:3b:04: 6b:39:17:96:87:a7:27:bb:5c:79:0a:51:fb:54:bc:4e:98:5d: 86:6b:f5:62:8c:e6:51:54:33:74:3e:2a:29:8e:a8:28:66:09: 91:58:9d:b4:c8:27:89:9a:9c:02:49:3a:ff:d2:cc:8e:86:8e: 05:6f:a7:0a:d4:45:47:7e:49:5e:75:e2:3a:e6:52:8e:56:ce: 22:6a:70:49:e0:31:98:55:19:cb:d8:c8:50:2c:3c:7e:2b:6c: 7c:64:46:92:78:3f:ce:8a:e0:80:44:48:6b:1e:58:32:ea:e3: e4:c6:1a:dd:59:55:78:0b:31:14:dd:dc:94:6f:f4:13:e6:ad: f4:66:7b:27:13:40:36:a4:30:b4:ef:76:5e:47:15:96:fe:46: 4c:ef:27:97:17:e5:2c:e5:0a:f0:44:a0:53:f0:94:5e:cf:4d: a1:15:a4:84:3a:ea:73:fe:fd:58:1b:18:13:a8:89:8c:a9:d4: 27:61:ff:20:1a:43:0b:96:26:c2:d8:4b:7d:e1:29:a2:6d:af: 18:9b:b9:51:1d:2d:da:12:70:b9:d5:3e:e2:90:7e:a9:62:63: 79:b4:62:24:7b:1c:a3:93:23:0f:a6:66:8e:2b:55:a9:ef:90: 0f:9a:6a:eb -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUaxTkJkZGXfOPG1w7AF5UblheT6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTExMTUxMjUxNTRaFw0yNjExMTQxMjU2NTRaMDMxMTAvBgNV BAMTKEE2QkQxMUI4MzUzRURCODIwNEUzOTg4NUIwMjE1MDk5NTcwNjE1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg6tbrg/EXum4IEdyL7qVuAnHI mAvpfmng4azd2CKfsPBmyLbRX9ecDLLpdy7AebdDA4eAEHw69w1rlxTb7cbluZQi kuo34SajntIFGy9tNA18NiZorNb3G1JcVMSE81dGGGZwdV/wQuOr0yDrwohfg/WL NEpGYPrGtPkyUyjUCCePZAgjccdPlFEM4bA+stoTAjhyVYQ3ER96G5HMwJmNXriX NKuk/x7j3zJF7p20/NhwDZFkemiBcYmjMeFCrsre23OleZVinhm306wvYNawTZtn ikInnDn7PNJ+CKr+ckX8RJ8dVdU9cc7OxWO6b/PLzCaOKpgPCMRalFkyCgi3AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUpr0RuDU+24IE45iFsCFQmVcGFYwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDQxMzQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAAMwDQYJKoZIhvcNAQELBQADggEBACISlhYwp1GDzYOF9n2auB87BGs5F5aH pye7XHkKUftUvE6YXYZr9WKM5lFUM3Q+KimOqChmCZFYnbTIJ4manAJJOv/SzI6G jgVvpwrURUd+SV514jrmUo5WziJqcEngMZhVGcvYyFAsPH4rbHxkRpJ4P86K4IBE SGseWDLq4+TGGt1ZVXgLMRTd3JRv9BPmrfRmeycTQDakMLTvdl5HFZb+RkzvJ5cX 5SzlCvBEoFPwlF7PTaEVpIQ66nP+/VgbGBOoiYyp1Cdh/yAaQwuWJsLYS33hKaJt rxibuVEdLdoScLnVPuKQfqliY3m0YiR7HKOTIw+mZo4rVanvkA+aaus= -----END CERTIFICATE-----Generated at Mon Nov 17 22:16:12 2025 by rpki-client