$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207083.roa File: AS207083.roa (raw, json) Hash identifier: VFmB29KIHErQ7vQpIUfDlCYKZmpnFW9Pna787P14pj4= Subject key identifier: 1B:2E:48:A4:A8:E6:4F:F5:4B:03:AC:95:2A:C0:62:46:21:32:2A:12 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 62B2F437FDDA08804F9B576110CA2A071C03ED66 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207083.roa Signing time: Thu 03 Jul 2025 15:53:11 +0000 ROA not before: Thu 03 Jul 2025 15:48:11 +0000 ROA not after: Thu 02 Jul 2026 15:53:11 +0000 asID: 207083 IP address blocks: 2a09:54c6:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b2:f4:37:fd:da:08:80:4f:9b:57:61:10:ca:2a:07:1c:03:ed:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:48:11 2025 GMT Not After : Jul 2 15:53:11 2026 GMT Subject: CN=1B2E48A4A8E64FF54B03AC952AC0624621322A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:bc:ce:95:63:84:c8:02:5d:dd:84:18:5a: f8:c2:65:45:fc:67:61:2e:d7:de:d5:d6:c6:ce:49: bb:2f:a1:b4:11:88:e9:e8:b4:6f:29:90:f0:3d:cc: 9c:f5:ad:6f:1b:06:98:90:4d:74:ac:0a:b5:ce:78: 03:e7:f5:21:8e:53:8f:f1:f8:96:b1:80:1c:fc:dd: fb:3e:75:61:7f:5d:88:87:a7:35:91:b7:9e:10:d4: b7:e7:71:0b:5e:30:4f:b9:5d:cc:77:63:ae:0e:e4: 97:e9:c4:38:8e:49:01:e1:c4:e2:09:54:71:92:85: 86:6e:4e:b2:92:72:f8:4a:d2:ff:9a:2e:07:de:3c: 9b:9e:9d:79:3f:ac:23:17:2f:b2:e6:e9:13:f2:23: 8a:0b:c6:aa:64:46:93:91:cc:82:f1:aa:a8:f0:13: df:31:38:64:f3:c5:54:98:48:38:39:54:ed:a4:a3: 80:66:89:fa:46:6e:6a:88:9b:e8:28:1a:74:0e:f3: cf:4f:0e:72:47:bc:d2:b6:19:77:03:47:09:6a:a9: 5c:a0:9f:33:0e:f1:8f:d1:98:ac:23:7c:d5:a8:f5: 61:42:45:27:e5:30:14:41:7c:08:a4:7b:2d:c1:bc: 9a:40:e1:1d:c9:81:b9:55:11:41:ba:b6:92:77:ed: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2E:48:A4:A8:E6:4F:F5:4B:03:AC:95:2A:C0:62:46:21:32:2A:12 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207083.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:a000::/48 Signature Algorithm: sha256WithRSAEncryption 07:13:52:36:8a:85:05:19:cb:71:a3:b4:05:09:eb:6c:c3:49: db:ed:6c:92:27:90:b9:9c:4b:2d:cf:80:aa:26:02:d4:85:c7: 24:9d:9f:4e:85:07:72:b0:6f:0d:1c:75:52:63:d5:68:2d:ca: be:c6:64:d9:b8:b3:33:9a:51:96:89:2b:bc:2e:a8:9a:fc:a1: 5e:41:1f:49:d1:7c:a3:ea:86:09:6b:e4:e4:77:a6:73:24:5e: 00:e2:ec:65:1f:97:66:08:32:ff:b6:ca:30:da:d5:70:17:fc: f6:b5:8a:b8:c5:14:98:85:01:9b:27:66:ff:4a:d6:4f:45:5c: 76:22:31:32:b5:82:b8:86:1e:a0:75:6a:73:82:06:0b:c0:61: 73:96:5b:8b:63:f9:70:48:36:0d:0c:6f:c4:4f:9f:07:20:e7: 05:5a:c6:14:3f:2c:e3:70:55:7e:37:e2:be:a5:40:a6:ee:3a: 0f:00:e4:04:8e:4c:da:57:e8:22:9c:42:a8:df:30:35:2a:4c: 5c:c2:aa:de:95:bf:9b:0e:1d:b8:38:d3:e3:b1:7a:90:0a:c5: 0d:34:1d:c1:08:3f:fc:e0:b2:d0:01:b5:58:49:6f:9d:76:1a: 45:3b:e9:96:1f:11:75:76:1d:a8:07:ff:53:a0:89:65:6a:e7: ce:68:48:2d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUYrL0N/3aCIBPm1dhEMoqBxwD7WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ4MTFaFw0yNjA3MDIxNTUzMTFaMDMxMTAvBgNV BAMTKDFCMkU0OEE0QThFNjRGRjU0QjAzQUM5NTJBQzA2MjQ2MjEzMjJBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+LzOlWOEyAJd3YQYWvjCZUX8 Z2Eu197V1sbOSbsvobQRiOnotG8pkPA9zJz1rW8bBpiQTXSsCrXOeAPn9SGOU4/x +JaxgBz83fs+dWF/XYiHpzWRt54Q1LfncQteME+5Xcx3Y64O5JfpxDiOSQHhxOIJ VHGShYZuTrKScvhK0v+aLgfePJuenXk/rCMXL7Lm6RPyI4oLxqpkRpORzILxqqjw E98xOGTzxVSYSDg5VO2ko4BmifpGbmqIm+goGnQO889PDnJHvNK2GXcDRwlqqVyg nzMO8Y/RmKwjfNWo9WFCRSflMBRBfAikey3BvJpA4R3JgblVEUG6tpJ37RFrAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUGy5IpKjmT/VLA6yVKsBiRiEyKhIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDcwODMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq CVTGoAAwDQYJKoZIhvcNAQELBQADggEBAAcTUjaKhQUZy3GjtAUJ62zDSdvtbJIn kLmcSy3PgKomAtSFxySdn06FB3Kwbw0cdVJj1Wgtyr7GZNm4szOaUZaJK7wuqJr8 oV5BH0nRfKPqhglr5OR3pnMkXgDi7GUfl2YIMv+2yjDa1XAX/Pa1irjFFJiFAZsn Zv9K1k9FXHYiMTK1griGHqB1anOCBgvAYXOWW4tj+XBINg0Mb8RPnwcg5wVaxhQ/ LONwVX434r6lQKbuOg8A5ASOTNpX6CKcQqjfMDUqTFzCqt6Vv5sOHbg40+OxepAK xQ00HcEIP/zgstABtVhJb512GkU76ZYfEXV2HagH/1OgiWVq585oSC0= -----END CERTIFICATE-----Generated at Sat Jul 5 02:24:30 2025 by rpki-client