$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS197963.roa File: AS197963.roa (raw, json) Hash identifier: ODwLzj+s1tEVvPXTlUwoJLmNf9ncNYYy/2S2i2KigTs= Subject key identifier: 71:EB:05:D9:77:5B:DE:57:C1:4E:49:FD:16:9F:41:EE:ED:B2:D1:87 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 67F940FDF914BD2E373BFEDC4C3DB460A4246C23 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS197963.roa Signing time: Sun 26 Oct 2025 15:26:49 +0000 ROA not before: Sun 26 Oct 2025 15:21:49 +0000 ROA not after: Sun 25 Oct 2026 15:26:49 +0000 asID: 197963 IP address blocks: 2a0f:6284::/48 maxlen: 48 2a0f:6284:4215::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 10:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f9:40:fd:f9:14:bd:2e:37:3b:fe:dc:4c:3d:b4:60:a4:24:6c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 26 15:21:49 2025 GMT Not After : Oct 25 15:26:49 2026 GMT Subject: CN=71EB05D9775BDE57C14E49FD169F41EEEDB2D187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ce:e4:e8:49:49:21:0c:5b:22:70:07:3a:a0: 48:e0:73:9a:78:e9:bf:2b:05:c4:b5:6b:2f:6d:99: 73:b5:7f:17:18:9d:d7:e6:b0:38:de:26:c4:e8:9e: 72:2f:a1:30:38:ce:2d:97:a3:1d:32:d5:16:2a:9c: ef:c2:ff:d7:28:5c:1b:55:d2:d0:ef:96:59:1c:6a: 01:de:96:59:0e:17:4e:01:61:eb:d8:79:97:bb:bb: d6:3e:1b:1f:63:be:53:ba:ae:f6:37:55:0b:8e:7e: 3d:45:29:4e:52:0d:15:35:50:eb:0d:c9:9a:f0:b4: 4b:a3:b1:1a:b7:df:e3:86:88:a7:7a:9b:7d:c3:94: 22:de:4f:7e:b6:94:10:43:02:7f:94:4b:73:c5:69: 95:ca:b0:d8:1f:9d:6f:42:07:d4:5d:22:8b:16:fa: f1:4f:0e:64:c9:0f:01:cd:75:1f:e9:92:2d:6b:53: 7b:a0:c4:5a:09:9b:80:6d:9c:87:5f:3e:56:11:7a: 7f:75:15:20:a0:5f:91:f8:0c:08:d5:8a:eb:be:4f: 3f:10:46:0c:04:fe:07:22:9f:b1:78:30:b9:c2:88: 6b:63:2a:e6:50:12:d7:5d:d3:26:ab:73:bc:17:d5: 54:25:28:28:cc:58:8c:2f:ab:b0:e6:98:36:bf:6c: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EB:05:D9:77:5B:DE:57:C1:4E:49:FD:16:9F:41:EE:ED:B2:D1:87 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS197963.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284::/48 2a0f:6284:4215::/48 Signature Algorithm: sha256WithRSAEncryption 14:88:e6:3f:a4:a2:16:d9:9f:e5:27:6f:21:fd:6b:a0:f3:bb: a7:70:89:59:59:f4:9c:86:3e:ca:70:36:03:ca:37:dc:99:48: a0:c4:ce:81:99:41:9f:fd:b0:85:cf:96:05:0b:bd:66:ed:5d: c7:e0:df:b8:36:f9:48:85:c4:b5:2f:ce:b7:5b:22:04:55:f4: 47:6c:69:be:1d:04:88:11:d7:af:94:28:a9:83:27:5d:a8:f7: 36:71:86:de:e7:08:b5:c3:60:52:60:f5:88:5e:af:bb:51:43: 6e:10:24:1d:6a:57:ad:46:68:ba:9e:00:5c:02:56:ed:8b:5b: 3e:e6:1d:7b:44:ea:1d:f5:f4:f5:a1:a5:91:1e:b6:2c:21:96: 04:17:0e:7a:36:f2:bb:43:30:47:e3:cd:95:31:f4:4d:4f:de: b9:7a:fd:27:14:c5:3c:72:bd:16:d9:f6:70:d6:06:ae:9d:e7: d3:b2:8d:d3:a2:0f:8d:4d:31:29:62:a5:7b:42:a6:c6:f1:60: 12:90:b0:e6:cd:d4:03:ca:bb:36:f4:8c:0f:b9:e1:16:2b:ad: 4a:be:4a:f0:e1:51:dc:b9:a9:a3:ff:9d:2e:f4:dc:a0:a0:31: 76:28:06:c1:4d:7c:2f:c4:ad:44:ea:dd:16:dd:a6:e8:8d:71: a1:de:71:9d -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUZ/lA/fkUvS43O/7cTD20YKQkbCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEwMjYxNTIxNDlaFw0yNjEwMjUxNTI2NDlaMDMxMTAvBgNV BAMTKDcxRUIwNUQ5Nzc1QkRFNTdDMTRFNDlGRDE2OUY0MUVFRURCMkQxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizuToSUkhDFsicAc6oEjgc5p4 6b8rBcS1ay9tmXO1fxcYndfmsDjeJsTonnIvoTA4zi2Xox0y1RYqnO/C/9coXBtV 0tDvllkcagHellkOF04BYevYeZe7u9Y+Gx9jvlO6rvY3VQuOfj1FKU5SDRU1UOsN yZrwtEujsRq33+OGiKd6m33DlCLeT362lBBDAn+US3PFaZXKsNgfnW9CB9RdIosW +vFPDmTJDwHNdR/pki1rU3ugxFoJm4BtnIdfPlYRen91FSCgX5H4DAjViuu+Tz8Q RgwE/gcin7F4MLnCiGtjKuZQEtdd0yarc7wX1VQlKCjMWIwvq7DmmDa/bIppAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUcesF2Xdb3lfBTkn9Fp9B7u2y0YcwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTc5NjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KEAAADBwAqD2KEQhUwDQYJKoZIhvcNAQELBQADggEBABSI5j+kohbZn+UnbyH9 a6Dzu6dwiVlZ9JyGPspwNgPKN9yZSKDEzoGZQZ/9sIXPlgULvWbtXcfg37g2+UiF xLUvzrdbIgRV9Edsab4dBIgR16+UKKmDJ12o9zZxht7nCLXDYFJg9Yher7tRQ24Q JB1qV61GaLqeAFwCVu2LWz7mHXtE6h319PWhpZEetiwhlgQXDno28rtDMEfjzZUx 9E1P3rl6/ScUxTxyvRbZ9nDWBq6d59OyjdOiD41NMSlipXtCpsbxYBKQsObN1APK uzb0jA+54RYrrUq+SvDhUdy5qaP/nS703KCgMXYoBsFNfC/ErUTq3RbdpuiNcaHe cZ0= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:46 2025 by rpki-client