$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS204902.roa File: AS204902.roa (raw, json) Hash identifier: UpnBMRJcPAI9Yzilwjc8CCvbnOa5V8bgCX/zc+iUnng= Subject key identifier: 0C:49:AD:96:D7:D8:46:C8:FA:26:70:14:89:A4:82:EA:B8:7E:92:B3 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 11E60BE23B9CA8CD6874AF27CE7EB35BB14469D6 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS204902.roa Signing time: Thu 10 Jul 2025 02:00:29 +0000 ROA not before: Thu 10 Jul 2025 01:55:29 +0000 ROA not after: Thu 09 Jul 2026 02:00:29 +0000 asID: 204902 IP address blocks: 2a0f:6283:1110::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e6:0b:e2:3b:9c:a8:cd:68:74:af:27:ce:7e:b3:5b:b1:44:69:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 10 01:55:29 2025 GMT Not After : Jul 9 02:00:29 2026 GMT Subject: CN=0C49AD96D7D846C8FA26701489A482EAB87E92B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ab:69:e6:67:6d:07:1b:43:bc:e7:2a:24:70: 68:20:34:e3:c0:82:33:39:e9:1e:f7:30:a5:fa:fc: 21:78:b7:e9:26:0e:b7:d6:78:6b:97:fb:6a:09:6f: 45:8f:1c:97:0f:29:e5:0c:90:49:5e:d4:cf:32:87: b0:f9:77:f4:98:c4:e0:14:6f:09:8a:b9:c8:b2:65: 11:7e:72:a7:65:28:09:68:a1:c8:bc:35:31:2e:dd: 1b:a8:d3:d1:fc:01:40:22:a9:79:7e:35:63:a8:c9: a2:9b:ee:b7:23:8e:b1:74:20:b3:72:fb:fc:95:63: 95:14:0c:a0:9d:2f:6b:a3:3c:1f:4e:20:25:d7:f7: 0c:5f:49:12:54:47:d5:d4:86:0e:61:85:43:c2:06: 82:c8:61:8d:f2:30:78:7b:e4:ad:6f:fc:e1:e8:eb: 4d:1d:1d:38:d2:d6:62:c4:67:79:8d:95:a8:93:2d: d7:4c:60:df:8d:f3:e5:51:d3:84:8c:cc:5e:97:47: 22:4a:f7:1c:d4:41:e8:28:5b:08:f2:6a:0b:95:62: d2:18:75:0a:0f:a0:42:a0:bc:23:06:40:ba:0c:cb: 0b:ca:6f:65:34:84:0f:d7:47:8b:18:0e:19:a3:93: da:c1:b3:4f:54:bd:b2:b9:9f:73:53:7a:74:fc:72: a5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:49:AD:96:D7:D8:46:C8:FA:26:70:14:89:A4:82:EA:B8:7E:92:B3 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS204902.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:1110::/48 Signature Algorithm: sha256WithRSAEncryption 68:f7:19:9f:f8:4b:ac:c7:5e:1d:f6:b9:3d:d4:87:f7:77:41: 86:7b:3e:06:c2:47:0b:c6:7b:51:32:ab:e8:13:48:de:56:b3: c6:08:1a:b9:b3:73:9b:0f:8d:32:64:eb:cb:11:b2:f6:f8:b7: 81:fb:ed:7c:80:58:ae:61:45:7e:85:18:7b:61:b1:1b:09:f3: 27:2f:61:7a:4a:61:aa:01:16:5c:96:a1:3a:b1:14:b5:32:38: 9c:5d:55:98:4d:7e:7d:9f:14:a1:e6:3e:f1:07:cc:ef:23:43: 20:61:fd:ae:8e:59:69:40:84:d0:4f:bb:4e:17:a6:bc:b2:1f: c7:2d:06:55:54:89:44:b0:fd:8d:fe:4e:75:20:24:12:ff:8b: 49:34:ee:98:76:ee:b0:de:65:43:84:77:0f:24:2b:06:b7:63: eb:11:7d:53:40:cf:54:30:f4:93:89:15:3d:2a:e3:93:e0:c0: 15:98:3e:ad:d4:85:22:83:16:30:af:ec:6d:f5:44:b2:d5:d0: 74:65:52:4e:b8:a3:e8:82:16:47:c0:97:77:72:d8:0b:33:77: ad:6e:03:7e:83:c7:4e:06:23:16:e8:55:d8:c8:52:ad:83:bd: bb:bc:5f:80:59:eb:31:fc:0c:88:79:28:f2:c8:e9:cc:b2:1a: bc:08:d2:15 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUEeYL4jucqM1odK8nzn6zW7FEadYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MTAwMTU1MjlaFw0yNjA3MDkwMjAwMjlaMDMxMTAvBgNV BAMTKDBDNDlBRDk2RDdEODQ2QzhGQTI2NzAxNDg5QTQ4MkVBQjg3RTkyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfq2nmZ20HG0O85yokcGggNOPA gjM56R73MKX6/CF4t+kmDrfWeGuX+2oJb0WPHJcPKeUMkEle1M8yh7D5d/SYxOAU bwmKuciyZRF+cqdlKAlooci8NTEu3Ruo09H8AUAiqXl+NWOoyaKb7rcjjrF0ILNy +/yVY5UUDKCdL2ujPB9OICXX9wxfSRJUR9XUhg5hhUPCBoLIYY3yMHh75K1v/OHo 600dHTjS1mLEZ3mNlaiTLddMYN+N8+VR04SMzF6XRyJK9xzUQegoWwjyaguVYtIY dQoPoEKgvCMGQLoMywvKb2U0hA/XR4sYDhmjk9rBs09UvbK5n3NTenT8cqWBAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUDEmtltfYRsj6JnAUiaSC6rh+krMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDQ5MDIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KDERAwDQYJKoZIhvcNAQELBQADggEBAGj3GZ/4S6zHXh32uT3Uh/d3QYZ7PgbC RwvGe1Eyq+gTSN5Ws8YIGrmzc5sPjTJk68sRsvb4t4H77XyAWK5hRX6FGHthsRsJ 8ycvYXpKYaoBFlyWoTqxFLUyOJxdVZhNfn2fFKHmPvEHzO8jQyBh/a6OWWlAhNBP u04XpryyH8ctBlVUiUSw/Y3+TnUgJBL/i0k07ph27rDeZUOEdw8kKwa3Y+sRfVNA z1Qw9JOJFT0q45PgwBWYPq3UhSKDFjCv7G31RLLV0HRlUk64o+iCFkfAl3dy2Asz d61uA36Dx04GIxboVdjIUq2Dvbu8X4BZ6zH8DIh5KPLI6cyyGrwI0hU= -----END CERTIFICATE-----Generated at Mon Oct 27 18:22:33 2025 by rpki-client