$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207083.roa File: AS207083.roa (raw, json) Hash identifier: po2cU1b61pXdTNOtxYImPccPMP7as2HXfbpVMIVWJd4= Subject key identifier: 9D:A8:01:56:F9:D2:FA:70:9B:42:64:E0:B3:80:5D:EC:96:12:3D:6F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 7201354952590C9CC5B3613BFFE11DC29AB1C03C Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207083.roa Signing time: Wed 08 Oct 2025 16:46:23 +0000 ROA not before: Wed 08 Oct 2025 16:41:23 +0000 ROA not after: Wed 07 Oct 2026 16:46:23 +0000 asID: 207083 IP address blocks: 2a09:54c6:a000::/48 maxlen: 48 2a0f:6283:1102::/48 maxlen: 48 2a0f:6284:4213::/48 maxlen: 48 2a0f:6284:4219::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:01:35:49:52:59:0c:9c:c5:b3:61:3b:ff:e1:1d:c2:9a:b1:c0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 8 16:41:23 2025 GMT Not After : Oct 7 16:46:23 2026 GMT Subject: CN=9DA80156F9D2FA709B4264E0B3805DEC96123D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:1a:77:d6:85:67:b4:df:6d:c3:cb:13:70: 36:9c:a6:d8:34:7a:18:96:55:3a:89:9a:af:f0:df: 43:96:cc:de:0e:1e:b8:6a:5f:3d:fa:25:c7:5e:6c: d8:3b:b1:73:0c:8d:eb:ac:1b:49:47:b6:a2:48:a0: fa:49:88:6b:a9:f0:66:1a:13:03:3e:7e:fa:64:5f: a1:1c:04:7d:56:f8:b6:e7:40:ec:c3:2a:59:b3:b2: 02:42:a5:8f:92:ff:ae:c3:f7:68:4a:cd:20:f6:80: 7a:1b:2d:5a:bd:8f:d2:82:a7:66:ad:c4:09:b4:54: 99:c4:97:ef:19:7d:a7:d6:cf:86:d0:07:02:10:80: 5f:2f:f3:c6:44:4d:0e:5f:27:a6:47:f3:b3:25:3f: 8a:16:2e:14:02:c1:c0:c0:5f:e5:73:87:1e:09:06: 3a:1a:d3:26:b3:53:c3:f7:24:66:d8:78:2b:89:bd: 9f:1f:e5:07:b1:22:8b:55:8a:e1:a7:96:c9:3d:0f: 61:87:d8:cf:08:5f:aa:51:6e:0a:c6:12:5d:27:13: cf:06:03:2a:f5:7b:0c:da:aa:37:fa:43:3f:06:f9: c8:14:ab:8f:78:3e:8e:84:3f:19:69:cc:83:c6:bf: 0c:4b:1e:82:08:9f:76:c3:82:9e:31:f1:2a:37:09: 87:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A8:01:56:F9:D2:FA:70:9B:42:64:E0:B3:80:5D:EC:96:12:3D:6F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207083.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:a000::/48 2a0f:6283:1102::/48 2a0f:6284:4213::/48 2a0f:6284:4219::/48 Signature Algorithm: sha256WithRSAEncryption 84:b5:7f:0e:d5:8e:5b:d4:b6:ce:a4:42:0c:9e:48:27:90:a1: 68:3d:d0:e6:82:99:c5:64:45:74:59:e9:b0:82:3a:68:23:d7: dc:9d:92:2f:68:e1:a2:e7:7f:86:15:37:cc:95:7f:63:23:2a: a1:55:aa:c9:44:a8:bd:2a:7e:7d:72:23:f5:e6:96:50:38:29: f5:16:2f:c0:61:4e:91:e7:1c:08:4c:bc:fb:08:52:2a:37:41: 8f:7b:6b:69:2d:e0:13:61:e0:62:d5:40:2f:24:59:71:af:25: 22:c1:27:7e:e2:73:71:72:ef:1f:50:61:91:0f:c3:00:d9:81: 00:5b:fd:62:ed:3f:b1:c2:21:62:76:6f:aa:62:a3:49:c7:0f: f5:53:cd:0a:c0:8f:9f:fc:d5:d3:23:37:ac:02:ec:ff:c5:ef: 5e:a5:71:6d:e0:63:d1:3f:25:fc:36:ae:3d:30:26:9c:e7:e8: 85:d7:70:60:67:90:d2:10:60:bc:8a:12:f8:13:47:c9:20:67: 49:72:59:0e:d7:04:5d:08:09:b9:39:52:57:87:5d:c8:a9:ac: a0:90:49:c9:2e:65:67:a6:66:92:da:3f:d6:7f:eb:53:df:ec: ab:50:96:5d:5e:39:8d:5d:b6:2f:e2:8b:a8:c0:20:b4:3f:3a: f1:74:bf:e5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUcgE1SVJZDJzFs2E7/+EdwpqxwDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEwMDgxNjQxMjNaFw0yNjEwMDcxNjQ2MjNaMDMxMTAvBgNV BAMTKDlEQTgwMTU2RjlEMkZBNzA5QjQyNjRFMEIzODA1REVDOTYxMjNENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGhp31oVntN9tw8sTcDacptg0 ehiWVTqJmq/w30OWzN4OHrhqXz36JcdebNg7sXMMjeusG0lHtqJIoPpJiGup8GYa EwM+fvpkX6EcBH1W+LbnQOzDKlmzsgJCpY+S/67D92hKzSD2gHobLVq9j9KCp2at xAm0VJnEl+8ZfafWz4bQBwIQgF8v88ZETQ5fJ6ZH87MlP4oWLhQCwcDAX+Vzhx4J Bjoa0yazU8P3JGbYeCuJvZ8f5QexIotViuGnlsk9D2GH2M8IX6pRbgrGEl0nE88G Ayr1ewzaqjf6Qz8G+cgUq494Po6EPxlpzIPGvwxLHoIIn3bDgp4x8So3CYfVAgMB AAGjggH6MIIB9jAdBgNVHQ4EFgQUnagBVvnS+nCbQmTgs4Bd7JYSPW8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDcwODMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgACMCQDBwAq CVTGoAADBwAqD2KDEQIDBwAqD2KEQhMDBwAqD2KEQhkwDQYJKoZIhvcNAQELBQAD ggEBAIS1fw7VjlvUts6kQgyeSCeQoWg90OaCmcVkRXRZ6bCCOmgj19ydki9o4aLn f4YVN8yVf2MjKqFVqslEqL0qfn1yI/XmllA4KfUWL8BhTpHnHAhMvPsIUio3QY97 a2kt4BNh4GLVQC8kWXGvJSLBJ37ic3Fy7x9QYZEPwwDZgQBb/WLtP7HCIWJ2b6pi o0nHD/VTzQrAj5/81dMjN6wC7P/F716lcW3gY9E/Jfw2rj0wJpzn6IXXcGBnkNIQ YLyKEvgTR8kgZ0lyWQ7XBF0ICbk5UleHXciprKCQSckuZWemZpLaP9Z/61Pf7KtQ ll1eOY1dti/ii6jAILQ/OvF0v+U= -----END CERTIFICATE-----Generated at Wed Oct 8 17:35:50 2025 by rpki-client