$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209503.roa File: AS209503.roa (raw, json) Hash identifier: v32MLQcmAUYOCB+TIwWSDwCykwK3YO9qEyFPD0iOn3o= Subject key identifier: ED:6A:46:D8:BB:75:5A:19:C2:1E:F8:09:D5:46:AC:22:A7:04:89:14 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3D19B9F967B0A22D960778648AE9443089E4472D Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209503.roa Signing time: Wed 24 Sep 2025 18:53:44 +0000 ROA not before: Wed 24 Sep 2025 18:48:44 +0000 ROA not after: Wed 23 Sep 2026 18:53:44 +0000 asID: 209503 IP address blocks: 2a0f:6284:4217::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:19:b9:f9:67:b0:a2:2d:96:07:78:64:8a:e9:44:30:89:e4:47:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 24 18:48:44 2025 GMT Not After : Sep 23 18:53:44 2026 GMT Subject: CN=ED6A46D8BB755A19C21EF809D546AC22A7048914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c3:68:24:8e:e6:fd:19:8d:88:89:ca:45:95: 3d:d9:46:09:42:e0:d5:68:7d:f9:02:0e:14:da:52: 10:84:21:b8:d5:f1:db:38:01:62:49:53:ff:9f:5e: 91:30:bb:cb:e4:45:b5:6b:22:fe:8c:d5:a4:2e:25: 04:d9:eb:91:5d:bd:12:85:85:cf:39:d0:c4:5c:5e: 0e:20:77:b9:cc:bd:72:59:de:b4:c2:44:6f:52:22: 69:41:57:1d:70:62:1f:26:0c:01:d0:3e:47:30:8d: ed:38:e9:96:fa:b3:19:bb:03:65:00:65:ed:c5:26: 9d:4b:d5:93:13:a0:29:c5:01:69:17:24:88:61:a8: 64:ae:47:cb:67:6d:30:4e:bb:83:bc:f1:39:0a:e4: 43:6e:ac:46:a6:ad:d0:1d:d8:dc:e8:31:e9:e5:ac: a2:80:23:8e:57:63:b9:98:b9:39:47:a9:e4:60:f2: f4:b1:d4:00:2e:0d:e3:e0:93:24:9f:5e:28:d7:7d: e3:64:2f:c5:09:c2:87:f7:36:36:96:35:28:48:70: 54:ac:e9:42:e9:22:b2:e9:49:f7:39:f7:1b:88:9a: 92:b0:54:c2:23:f5:b5:7b:20:fd:db:b1:b0:a3:d4: 11:53:78:30:1f:8d:b3:6e:e1:4c:1f:96:37:ac:fd: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6A:46:D8:BB:75:5A:19:C2:1E:F8:09:D5:46:AC:22:A7:04:89:14 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209503.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4217::/48 Signature Algorithm: sha256WithRSAEncryption 81:23:cd:88:37:7b:06:33:3a:68:ff:6d:e5:f3:56:8f:b6:87: 51:da:a7:e8:74:6f:89:99:d4:46:46:eb:69:9f:e7:ae:0f:ff: b6:05:d5:75:6b:88:af:da:d1:6d:92:47:4f:b8:80:82:d9:3d: b7:22:0c:77:2f:cf:31:5c:36:f7:68:da:2e:7e:e0:b2:47:90: 81:32:e5:19:ad:17:95:cc:d5:3b:d2:ee:34:38:15:1b:f7:28: c9:b4:53:17:5a:91:7c:5f:64:5c:e2:5a:77:42:63:da:5a:ee: 25:3a:aa:60:9d:04:e6:18:bc:f9:6d:71:ac:c0:29:8f:ae:7b: 29:75:52:e7:95:98:aa:ed:a5:fa:49:57:a0:06:60:35:2b:70: 12:20:28:59:7f:84:d1:38:ec:aa:7a:7c:05:f6:22:99:c4:14: 55:7c:5e:e0:cd:5f:b2:ac:6b:9f:52:c6:92:f4:4f:b5:ce:04: a6:48:ff:ec:c2:d8:5d:48:e0:7e:01:1d:ec:31:b4:af:f3:38: c8:67:4b:bb:64:ab:5a:e4:ab:6a:b7:d2:24:4f:99:48:9b:c0: 65:0f:e1:3e:e0:ce:80:8b:30:82:2c:e2:95:eb:7b:4e:22:a4: 36:99:3f:3c:ba:a0:f3:2e:4f:2f:29:ba:b2:7e:32:81:5d:03: 40:ad:10:56 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUPRm5+Wewoi2WB3hkiulEMInkRy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA5MjQxODQ4NDRaFw0yNjA5MjMxODUzNDRaMDMxMTAvBgNV BAMTKEVENkE0NkQ4QkI3NTVBMTlDMjFFRjgwOUQ1NDZBQzIyQTcwNDg5MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0w2gkjub9GY2IicpFlT3ZRglC 4NVoffkCDhTaUhCEIbjV8ds4AWJJU/+fXpEwu8vkRbVrIv6M1aQuJQTZ65FdvRKF hc850MRcXg4gd7nMvXJZ3rTCRG9SImlBVx1wYh8mDAHQPkcwje046Zb6sxm7A2UA Ze3FJp1L1ZMToCnFAWkXJIhhqGSuR8tnbTBOu4O88TkK5ENurEamrdAd2NzoMenl rKKAI45XY7mYuTlHqeRg8vSx1AAuDePgkySfXijXfeNkL8UJwof3NjaWNShIcFSs 6ULpIrLpSfc59xuImpKwVMIj9bV7IP3bsbCj1BFTeDAfjbNu4Uwfljes/XrTAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU7WpG2Lt1WhnCHvgJ1UasIqcEiRQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDk1MDMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEQhcwDQYJKoZIhvcNAQELBQADggEBAIEjzYg3ewYzOmj/beXzVo+2h1Hap+h0 b4mZ1EZG62mf564P/7YF1XVriK/a0W2SR0+4gILZPbciDHcvzzFcNvdo2i5+4LJH kIEy5RmtF5XM1TvS7jQ4FRv3KMm0UxdakXxfZFziWndCY9pa7iU6qmCdBOYYvPlt cazAKY+ueyl1UueVmKrtpfpJV6AGYDUrcBIgKFl/hNE47Kp6fAX2IpnEFFV8XuDN X7Ksa59SxpL0T7XOBKZI/+zC2F1I4H4BHewxtK/zOMhnS7tkq1rkq2q30iRPmUib wGUP4T7gzoCLMIIs4pXre04ipDaZPzy6oPMuTy8purJ+MoFdA0CtEFY= -----END CERTIFICATE-----Generated at Wed Oct 8 17:40:36 2025 by rpki-client