$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS205398.roa File: AS205398.roa (raw, json) Hash identifier: utBfYlxnbrubWx9viY1gMCUsk/DjUgVOeSic8y1i5P0= Subject key identifier: 5D:95:81:B4:08:67:AD:5A:18:04:2F:25:1B:2D:E7:3D:BD:90:20:7D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 56AD81D47A398DD2A816CA5A14903CB46F3BDBB9 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205398.roa Signing time: Thu 03 Jul 2025 15:53:03 +0000 ROA not before: Thu 03 Jul 2025 15:48:03 +0000 ROA not after: Thu 02 Jul 2026 15:53:03 +0000 asID: 205398 IP address blocks: 2a0a:6044:ad00::/40 maxlen: 48 2a0a:6044:ae00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ad:81:d4:7a:39:8d:d2:a8:16:ca:5a:14:90:3c:b4:6f:3b:db:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:48:03 2025 GMT Not After : Jul 2 15:53:03 2026 GMT Subject: CN=5D9581B40867AD5A18042F251B2DE73DBD90207D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a9:a9:84:8d:c1:e6:41:36:86:cb:33:52:58: 11:09:1b:66:75:f9:96:1f:46:c4:58:13:ea:a5:20: a8:e4:c0:5c:73:37:c1:90:80:74:80:cc:8d:36:7f: 53:15:e4:f4:99:4c:bd:54:47:90:ed:35:d4:ef:fe: cf:82:a3:4e:93:f8:91:56:07:ff:65:80:c9:36:83: 2d:6f:d0:be:32:11:78:aa:81:ba:1f:a7:60:31:87: 6f:42:24:52:56:ea:ac:fb:32:90:e6:cc:8a:6a:5b: b2:ee:ad:59:bf:e4:a9:e4:82:d1:b5:bc:80:d2:cf: 32:67:eb:f3:35:78:3c:33:63:41:03:c8:41:dc:6d: 0e:0c:30:1c:03:63:fe:6c:f6:3b:97:ae:d7:50:9f: dd:56:6c:ba:4f:0a:e2:f3:79:8c:4b:ac:b0:c0:71: 06:b8:b9:dd:b8:bc:de:5a:a3:27:bd:9f:f0:72:ca: 84:7f:5a:cb:b3:e9:cb:eb:6b:83:03:3c:9a:6b:b9: b2:95:18:80:6e:fe:3f:2d:87:60:f8:55:6b:45:56: a2:a8:11:ee:fa:09:81:24:17:42:d0:04:25:dc:7f: 21:90:d7:19:8c:94:ab:3f:67:fc:b4:27:a1:2b:9f: 73:32:fd:28:10:9d:2d:ce:e8:b8:71:bf:06:34:b3: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:95:81:B4:08:67:AD:5A:18:04:2F:25:1B:2D:E7:3D:BD:90:20:7D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205398.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ad00::-2a0a:6044:aeff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 52:07:89:bd:42:a6:c7:27:a9:42:26:76:1f:4b:8a:97:68:3f: 0f:25:70:c6:d8:1a:dd:85:26:a4:e6:89:9d:03:4c:60:44:2f: 2f:44:84:20:22:ef:02:bc:af:d1:2f:a0:80:4c:08:39:da:49: 7f:8e:0f:c3:cf:7f:a3:1b:64:0f:62:70:ae:0b:e3:6c:21:28: 3c:9a:0b:a8:96:44:ff:ac:02:f3:28:6d:74:3d:42:0e:f6:ba: 41:4f:8f:47:87:47:64:11:d8:a1:52:ae:0e:0a:36:56:1a:e0: 0c:5c:48:4f:d8:98:d2:e0:f9:f0:d9:b2:28:69:40:90:67:33: 95:5a:75:fc:a4:f9:4d:50:d9:4a:fa:08:79:44:ca:90:8f:65: ad:2f:f6:a7:2e:34:3d:ea:ef:0b:6f:a4:89:b6:26:77:ad:e0: db:4b:c1:7e:50:f8:47:c8:e0:ab:1e:87:1a:a5:79:fd:fd:34: 2a:66:ce:96:66:ae:a8:fe:f4:bc:de:71:7b:df:c9:1f:df:3b: fb:36:ed:89:f0:9e:96:9a:91:3b:12:40:f6:53:90:4a:51:32: 2f:c3:78:27:0a:d9:60:8a:b5:1e:5f:e3:75:bf:ef:00:56:4d: 64:05:61:39:3e:60:29:17:70:7c:ec:cc:ee:46:49:5f:fc:3f: 8d:b0:bc:88 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUVq2B1Ho5jdKoFspaFJA8tG8727kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ4MDNaFw0yNjA3MDIxNTUzMDNaMDMxMTAvBgNV BAMTKDVEOTU4MUI0MDg2N0FENUExODA0MkYyNTFCMkRFNzNEQkQ5MDIwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJqamEjcHmQTaGyzNSWBEJG2Z1 +ZYfRsRYE+qlIKjkwFxzN8GQgHSAzI02f1MV5PSZTL1UR5DtNdTv/s+Co06T+JFW B/9lgMk2gy1v0L4yEXiqgbofp2Axh29CJFJW6qz7MpDmzIpqW7LurVm/5KnkgtG1 vIDSzzJn6/M1eDwzY0EDyEHcbQ4MMBwDY/5s9juXrtdQn91WbLpPCuLzeYxLrLDA cQa4ud24vN5aoye9n/ByyoR/Wsuz6cvra4MDPJprubKVGIBu/j8th2D4VWtFVqKo Ee76CYEkF0LQBCXcfyGQ1xmMlKs/Z/y0J6Ern3My/SgQnS3O6LhxvwY0s9epAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUXZWBtAhnrVoYBC8lGy3nPb2QIH0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDUzOTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIwEAMG ACoKYEStAwYAKgpgRK4wDQYJKoZIhvcNAQELBQADggEBAFIHib1CpscnqUImdh9L ipdoPw8lcMbYGt2FJqTmiZ0DTGBELy9EhCAi7wK8r9EvoIBMCDnaSX+OD8PPf6Mb ZA9icK4L42whKDyaC6iWRP+sAvMobXQ9Qg72ukFPj0eHR2QR2KFSrg4KNlYa4Axc SE/YmNLg+fDZsihpQJBnM5Vadfyk+U1Q2Ur6CHlEypCPZa0v9qcuND3q7wtvpIm2 Jnet4NtLwX5Q+EfI4Ksehxqlef39NCpmzpZmrqj+9LzecXvfyR/fO/s27Ynwnpaa kTsSQPZTkEpRMi/DeCcK2WCKtR5f43W/7wBWTWQFYTk+YCkXcHzszO5GSV/8P42w vIg= -----END CERTIFICATE-----Generated at Sat Jul 5 02:24:30 2025 by rpki-client