
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/1/3134332e3230332e3232302e302f32342d3234203d3e203437323732.roa
File: 3134332e3230332e3232302e302f32342d3234203d3e203437323732.roa (raw, json)
Hash identifier: b/qv1E613ipbTbGSiMVOtXit+9C3rWWdwRITxzxsMpo=
Subject key identifier: F3:EA:BC:E0:00:6E:48:9E:37:12:8B:25:8B:CB:A4:C7:B6:C0:7D:92
Certificate issuer: /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial: 2240E6247CD6381BA63D5DB116963186DD57E807
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/1/3134332e3230332e3232302e302f32342d3234203d3e203437323732.roa
Signing time: Sat 03 Oct 2026 13:39:31 +0000
ROA not before: Sat 03 Oct 2026 13:34:31 +0000
ROA not after: Sat 02 Oct 2027 13:39:31 +0000
asID: 47272
IP address blocks: 143.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 15:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:40:e6:24:7c:d6:38:1b:a6:3d:5d:b1:16:96:31:86:dd:57:e8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Validity
Not Before: Oct 3 13:34:31 2026 GMT
Not After : Oct 2 13:39:31 2027 GMT
Subject: CN=F3EABCE0006E489E37128B258BCBA4C7B6C07D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:56:7a:0f:60:8f:86:22:a8:05:37:04:9a:
f2:22:d8:7b:25:9e:e3:1a:fc:32:16:94:1f:70:a8:
0c:6d:03:9c:f5:7f:4a:d6:9e:bc:ca:02:20:c1:72:
c8:7c:df:9d:cf:de:5c:a0:2d:ef:7d:5a:04:7d:ff:
0f:43:b2:d2:74:b7:64:b2:93:37:ce:bd:b6:8b:5d:
0c:fc:57:6f:35:dd:b0:ce:c3:b3:6b:d5:49:02:35:
87:6b:1b:2c:31:ae:c8:74:a2:03:e0:68:50:72:cc:
26:71:ba:45:88:93:a4:84:7e:de:b4:8e:86:82:fd:
50:9d:01:7b:3b:e0:af:d3:8a:95:81:02:88:20:21:
ae:2b:47:b7:3c:76:97:40:79:10:ef:97:65:c2:06:
bd:0c:16:f0:2c:d8:8e:85:76:25:b9:aa:c7:eb:3b:
90:40:ab:ff:0a:68:3d:fb:b0:96:1d:77:31:5d:99:
97:fd:73:b6:d3:6f:18:a3:fc:e1:24:67:c3:26:7b:
48:52:ae:4c:f5:e8:7d:92:eb:27:21:64:2c:8b:34:
04:5b:a8:9e:6f:4b:3a:b5:8f:03:03:4d:89:49:91:
28:5b:ab:65:2c:a1:db:97:11:15:da:2d:6a:bd:4d:
b5:88:6f:72:6e:20:b5:08:ed:8b:f3:e2:13:fd:9d:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EA:BC:E0:00:6E:48:9E:37:12:8B:25:8B:CB:A4:C7:B6:C0:7D:92
X509v3 Authority Key Identifier:
keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/3134332e3230332e3232302e302f32342d3234203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.203.220.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d2:fc:e6:64:43:07:84:14:79:46:e6:39:8d:cf:3c:f6:66:
16:78:21:5d:7e:8a:97:8a:12:10:f3:8e:8b:ac:20:84:d3:7a:
c1:de:28:81:e4:7c:96:78:07:ac:76:57:69:83:60:ff:16:f3:
35:ad:ec:4d:6e:e2:95:47:79:de:de:c0:ef:ff:43:bc:76:e6:
86:ae:2b:bc:7f:1f:5d:00:7e:ea:5e:d1:fa:4a:d1:94:1d:95:
18:86:30:78:59:d1:24:8f:a0:fe:df:a0:e7:78:d8:0b:27:1f:
42:12:30:42:10:93:35:c7:9f:72:e8:dc:98:5c:74:de:c2:73:
90:17:6e:3c:7a:bd:58:26:06:cf:84:05:8f:34:81:7b:cc:de:
0a:d5:76:8d:a6:79:28:22:65:2e:40:d5:cc:52:1c:4f:16:e8:
d0:5c:fb:c9:37:7e:98:72:da:3b:5f:ae:bc:b8:3b:bf:51:6a:
2f:22:9e:8a:fb:59:63:f3:35:0e:6c:7c:b1:dd:2d:e3:67:9d:
80:84:58:4b:3d:c0:97:ca:d8:8d:6c:0b:68:4c:3a:7c:6f:64:
9f:1e:a3:7c:36:a0:18:cb:2d:d2:05:87:87:f6:79:20:8e:64:
d6:8b:45:3f:88:ae:35:d6:cb:11:22:43:b8:0d:10:54:7f:53:
d4:c1:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:56:44 2026 by rpki-client