$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS47509.roa File: AS47509.roa (raw, json) Hash identifier: lh6elRy2SFwrUWHxF417GEkWV6Eri/qDdJrr4G31ZhM= Subject key identifier: 0B:B5:65:03:CC:AA:14:60:95:87:52:B1:A3:5B:4D:FF:D0:DC:81:55 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5FC792DEB44E684FFCB9A6C7E76C256D42861686 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS47509.roa Signing time: Thu 03 Jul 2025 15:53:00 +0000 ROA not before: Thu 03 Jul 2025 15:48:00 +0000 ROA not after: Thu 02 Jul 2026 15:53:00 +0000 asID: 47509 IP address blocks: 2a0a:6044:b100::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c7:92:de:b4:4e:68:4f:fc:b9:a6:c7:e7:6c:25:6d:42:86:16:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:48:00 2025 GMT Not After : Jul 2 15:53:00 2026 GMT Subject: CN=0BB56503CCAA1460958752B1A35B4DFFD0DC8155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1d:9b:20:d1:e0:92:90:40:6c:05:6f:4e:dc: 77:4d:a9:30:81:54:70:48:4c:ca:16:a7:cc:2c:3f: a9:9e:25:03:fc:32:01:da:b0:67:2f:b5:48:c2:3c: 1f:58:d0:f0:db:6a:a0:2a:9f:51:d3:83:fd:d2:b4: 7f:91:08:eb:50:e4:f5:24:d9:7b:7d:87:98:42:fa: c0:93:86:06:2f:b7:eb:db:2a:1b:aa:20:54:ba:83: 36:6e:df:8f:60:28:0f:6e:5e:33:57:55:76:68:76: 85:e6:a6:d7:b1:2c:73:18:ca:94:68:3e:e6:a4:47: f6:b5:0d:4c:41:0d:43:2f:7f:a7:67:82:2d:af:29: 15:27:46:1d:f7:38:90:6a:01:73:a6:d2:08:d7:23: e7:40:ca:a8:05:df:e9:07:c4:c8:02:3d:21:b7:d7: 71:ed:20:de:36:18:f4:03:d2:57:dc:b4:58:09:aa: 58:db:d2:bf:b2:75:fa:e1:44:41:92:2c:c5:6a:c0: 82:80:97:98:79:1c:3d:72:24:9e:c8:3b:6a:83:0d: bd:5d:8c:70:a4:98:e9:58:a9:54:37:b8:8d:75:cd: 3c:db:48:7f:41:fa:fb:b9:90:1d:e5:15:b4:31:14: 50:99:a0:8b:d5:c9:aa:e3:54:e4:90:19:0c:e0:ac: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B5:65:03:CC:AA:14:60:95:87:52:B1:A3:5B:4D:FF:D0:DC:81:55 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS47509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b100::/40 Signature Algorithm: sha256WithRSAEncryption 06:47:a4:4b:03:37:cc:c8:20:e8:74:8c:b6:0d:e7:bd:79:89: 54:76:4c:9b:04:97:0a:b1:e5:9c:60:a0:f3:16:b4:96:40:b3: 07:4a:59:46:1f:14:91:d9:5e:55:94:f4:f6:5b:e6:6a:2e:13: 9f:d8:fd:42:9e:21:17:cf:1f:a0:74:0e:db:40:2c:29:94:de: 5a:ec:df:ad:eb:08:3c:02:5e:5b:4a:6f:08:44:71:a9:f9:bf: b1:5c:b2:0f:89:52:88:b2:a1:c4:3c:a6:30:61:57:ec:8d:ed: 09:9b:e3:a7:7a:79:1d:93:24:de:77:78:78:f3:b0:ec:c5:23: 4e:b0:f1:51:eb:92:49:4b:a1:ba:dd:a4:2e:72:50:9c:a3:3b: 0c:86:0c:e0:dd:6e:44:31:2a:ea:c6:f5:b0:af:d2:d8:40:7a: c0:2a:91:2c:04:b9:79:db:a0:e6:0c:0c:e3:63:a4:b7:2c:23: 64:2b:eb:dd:55:72:f3:03:b2:13:6b:f1:49:3d:cf:6e:0d:15: 55:f2:3d:83:9e:f9:84:a5:b0:71:92:c6:3d:da:fb:5e:8e:bb: 8f:80:e5:e4:88:52:5f:ce:a6:63:07:83:c7:73:34:f4:b8:63: 24:e6:81:e5:b4:da:51:6b:d3:9a:5c:ee:dd:59:c1:b2:89:90: 70:dd:d1:e6 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUX8eS3rROaE/8uabH52wlbUKGFoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ4MDBaFw0yNjA3MDIxNTUzMDBaMDMxMTAvBgNV BAMTKDBCQjU2NTAzQ0NBQTE0NjA5NTg3NTJCMUEzNUI0REZGRDBEQzgxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHZsg0eCSkEBsBW9O3HdNqTCB VHBITMoWp8wsP6meJQP8MgHasGcvtUjCPB9Y0PDbaqAqn1HTg/3StH+RCOtQ5PUk 2Xt9h5hC+sCThgYvt+vbKhuqIFS6gzZu349gKA9uXjNXVXZodoXmptexLHMYypRo PuakR/a1DUxBDUMvf6dngi2vKRUnRh33OJBqAXOm0gjXI+dAyqgF3+kHxMgCPSG3 13HtIN42GPQD0lfctFgJqljb0r+ydfrhREGSLMVqwIKAl5h5HD1yJJ7IO2qDDb1d jHCkmOlYqVQ3uI11zTzbSH9B+vu5kB3lFbQxFFCZoIvVyarjVOSQGQzgrBYVAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUC7VlA8yqFGCVh1Kxo1tN/9DcgVUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0NzUwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoK YESxMA0GCSqGSIb3DQEBCwUAA4IBAQAGR6RLAzfMyCDodIy2Dee9eYlUdkybBJcK seWcYKDzFrSWQLMHSllGHxSR2V5VlPT2W+ZqLhOf2P1CniEXzx+gdA7bQCwplN5a 7N+t6wg8Al5bSm8IRHGp+b+xXLIPiVKIsqHEPKYwYVfsje0Jm+OnenkdkyTed3h4 87DsxSNOsPFR65JJS6G63aQuclCcozsMhgzg3W5EMSrqxvWwr9LYQHrAKpEsBLl5 26DmDAzjY6S3LCNkK+vdVXLzA7ITa/FJPc9uDRVV8j2DnvmEpbBxksY92vtejruP gOXkiFJfzqZjB4PHczT0uGMk5oHltNpRa9OaXO7dWcGyiZBw3dHm -----END CERTIFICATE-----Generated at Sat Jul 5 02:08:07 2025 by rpki-client