
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/32332e3137322e3132302e302f32342d3332203d3e203437323732.roa
File: 32332e3137322e3132302e302f32342d3332203d3e203437323732.roa (raw, json)
Hash identifier: k8k8vB3IVu6dP5PCIXmJ2rvsaOgzPH6kR+9cNg0q29k=
Subject key identifier: 6E:C7:6A:4A:E3:07:AD:17:03:71:90:C0:53:15:D3:65:BB:43:63:4E
Certificate issuer: /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial: 183FFAA4260FC552EB6A7CFB841D34E2DD431906
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/1/32332e3137322e3132302e302f32342d3332203d3e203437323732.roa
Signing time: Thu 04 Jun 2026 15:51:43 +0000
ROA not before: Thu 04 Jun 2026 15:46:43 +0000
ROA not after: Thu 03 Jun 2027 15:51:43 +0000
asID: 47272
IP address blocks: 23.172.120.0/24 maxlen: 32
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 19:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3f:fa:a4:26:0f:c5:52:eb:6a:7c:fb:84:1d:34:e2:dd:43:19:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Validity
Not Before: Jun 4 15:46:43 2026 GMT
Not After : Jun 3 15:51:43 2027 GMT
Subject: CN=6EC76A4AE307AD17037190C05315D365BB43634E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1f:b4:e2:47:ee:3d:2a:67:71:a7:6a:c3:5c:
79:47:b7:33:45:8e:72:c5:d1:cb:3d:08:91:70:21:
c1:ef:4c:ff:16:09:64:92:ae:16:09:2c:13:60:3d:
87:07:e3:ad:15:1b:73:68:8d:aa:cd:f9:4f:ea:ef:
54:4d:5c:4b:71:93:d0:a7:a0:69:2b:58:c7:f0:16:
d7:2c:c2:86:6e:16:8b:8d:2e:8d:1e:51:e1:77:b6:
f5:65:7b:5a:3e:4d:3a:67:29:2d:0c:ee:fe:39:98:
bc:95:2f:a4:ae:0c:42:82:52:cf:b5:d1:ff:14:83:
2d:36:39:a8:c3:a4:8f:33:d0:64:00:92:5e:95:90:
59:66:b5:2d:10:88:68:fb:6d:a1:05:fe:d5:f3:f8:
b1:b3:a3:24:0d:a6:58:95:0f:9e:2d:c7:d0:e9:7f:
8c:87:8f:5d:f6:31:b2:b8:44:37:a0:1b:08:62:8b:
ca:f0:ea:b4:3e:df:49:3d:14:47:0f:fa:26:ea:d4:
33:95:8b:9f:6b:9e:89:2d:9f:c4:eb:4e:cb:b8:81:
e8:a8:dd:80:ce:4a:1e:be:9e:4d:f1:2b:28:6a:80:
3f:f2:6f:62:e3:b4:bf:34:15:53:6b:29:19:ef:a0:
03:ca:da:e9:5d:e7:09:2e:0b:6e:5b:c8:f6:05:51:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C7:6A:4A:E3:07:AD:17:03:71:90:C0:53:15:D3:65:BB:43:63:4E
X509v3 Authority Key Identifier:
keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/32332e3137322e3132302e302f32342d3332203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.172.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f5:6e:ec:cf:f3:db:4f:82:5d:29:58:51:2b:67:a0:a2:19:
0b:19:18:7e:fd:46:d3:85:78:ba:c4:72:e8:fa:b4:28:5c:74:
2c:37:91:cd:24:e5:09:f3:14:e9:72:48:be:f0:fd:25:47:9e:
ff:fa:d5:3f:20:45:4a:6b:87:d8:50:42:9d:fd:d9:be:b3:78:
13:77:6e:8d:08:88:14:aa:e9:c4:f6:10:1b:88:2c:e0:3e:c8:
88:8d:15:71:16:9e:29:46:18:e0:41:9e:37:1b:3d:0c:8d:9f:
e8:58:18:70:35:06:ca:4b:07:09:32:e5:a8:7c:bc:f1:f4:26:
71:00:d8:a7:48:df:ff:26:9f:a1:bc:37:d5:4a:f3:45:ad:69:
80:55:13:78:9d:8a:5d:28:6e:e9:48:d8:28:97:f2:53:63:56:
d7:78:8d:2a:86:4d:20:ba:1d:a7:d2:35:c6:bc:3f:c4:63:05:
68:de:ba:48:61:00:2d:41:4f:e4:0b:c6:b5:26:6c:61:2b:da:
f6:4e:bd:b5:74:92:92:f8:54:1b:52:5e:c9:8f:d8:24:88:76:
72:fd:2c:3c:ef:58:46:f3:c3:f4:31:8c:5e:ff:cd:18:d4:e9:
fc:83:ba:38:b5:d2:fd:87:83:50:09:7f:f8:64:b8:e9:61:d5:
8b:9b:1a:e5
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIUGD/6pCYPxVLranz7hB004t1DGQYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYWQzMTkyODNmYjI0MjJiNGQwMGMwODQ5
YjlhODNjOTY0NGY4ODhjYmIwHhcNMjYwNjA0MTU0NjQzWhcNMjcwNjAzMTU1MTQz
WjAzMTEwLwYDVQQDEyg2RUM3NkE0QUUzMDdBRDE3MDM3MTkwQzA1MzE1RDM2NUJC
NDM2MzRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B+04kfuPSpn
cadqw1x5R7czRY5yxdHLPQiRcCHB70z/Fglkkq4WCSwTYD2HB+OtFRtzaI2qzflP
6u9UTVxLcZPQp6BpK1jH8BbXLMKGbhaLjS6NHlHhd7b1ZXtaPk06ZyktDO7+OZi8
lS+krgxCglLPtdH/FIMtNjmow6SPM9BkAJJelZBZZrUtEIho+22hBf7V8/ixs6Mk
DaZYlQ+eLcfQ6X+Mh49d9jGyuEQ3oBsIYovK8Oq0Pt9JPRRHD/om6tQzlYufa56J
LZ/E607LuIHoqN2Azkoevp5N8SsoaoA/8m9i47S/NBVTaykZ76ADytrpXecJLgtu
W8j2BVG3HwIDAQABo4ICajCCAmYwHQYDVR0OBBYEFG7HakrjB60XA3GQwFMV02W7
Q2NOMB8GA1UdIwQYMBaAFID1Ai1qifTqV6sPYTHTNmGqwwvpMA4GA1UdDwEB/wQE
AwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzovL2tyaWxsLjQ3MjcyLm5ldC9y
ZXBvL0hZRUhPU1QvMS84MEY1MDIyRDZBODlGNEVBNTdBQjBGNjEzMUQzMzY2MUFB
QzMwQkU5LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5
bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEy
M2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QvMDJjNzcwNmItM2JhZi00MmNiLWJkZjctNzgy
YjAzNjI1MmIzL2Y0NGM4MmRhYmFkMzE5MjgzZmIyNDIyYjRkMDBjMDg0OWI5YTgz
Yzk2NDRmODg4Y2JiLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJz
eW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9TVC8xLzMyMzMyZTMxMzcz
MjJlMzEzMjMwMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzQzNzMyMzczMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEABeseDANBgkqhkiG9w0BAQsFAAOCAQEATPVu7M/z20+CXSlYUStnoKIZ
CxkYfv1G04V4usRy6Pq0KFx0LDeRzSTlCfMU6XJIvvD9JUee//rVPyBFSmuH2FBC
nf3ZvrN4E3dujQiIFKrpxPYQG4gs4D7IiI0VcRaeKUYY4EGeNxs9DI2f6FgYcDUG
yksHCTLlqHy88fQmcQDYp0jf/yafobw31UrzRa1pgFUTeJ2KXShu6UjYKJfyU2NW
13iNKoZNILodp9I1xrw/xGMFaN66SGEALUFP5AvGtSZsYSva9k69tXSSkvhUG1Je
yY/YJIh2cv0sPO9YRvPD9DGMXv/NGNTp/IO6OLXS/YeDUAl/+GS46WHVi5sa5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:50 2026 by rpki-client