$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS202941.roa File: AS202941.roa (raw, json) Hash identifier: k0j8NcxNam9XWa9pzXydFV6Qu7oqPGuo2yAdCR0uwwY= Subject key identifier: AA:1B:F1:F5:E5:14:0A:85:EA:DC:50:02:45:BE:AE:80:06:5A:BA:B9 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6502D35C7AA01F8A4C904A031C8A13BA941D8359 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS202941.roa Signing time: Mon 03 Nov 2025 23:06:51 +0000 ROA not before: Mon 03 Nov 2025 23:01:51 +0000 ROA not after: Mon 02 Nov 2026 23:06:51 +0000 asID: 202941 IP address blocks: 2a0f:6284:200::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:02:d3:5c:7a:a0:1f:8a:4c:90:4a:03:1c:8a:13:ba:94:1d:83:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 3 23:01:51 2025 GMT Not After : Nov 2 23:06:51 2026 GMT Subject: CN=AA1BF1F5E5140A85EADC500245BEAE80065ABAB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:f0:54:4b:a1:d1:1a:b0:0a:2e:11:70:5b: 72:eb:18:51:23:3c:69:8e:87:c2:77:e7:cd:bf:63: 99:4d:df:aa:5c:f1:e2:d0:49:3f:3a:24:37:1c:1b: 98:a6:89:25:99:50:39:d4:9d:82:1b:96:5a:7f:ab: cf:c1:a2:3b:4f:cb:62:bc:c4:bc:82:c2:4b:d0:dd: 08:7e:13:ea:26:20:33:55:7b:9c:c5:da:17:22:b2: bd:cc:c0:6b:ac:60:3b:db:e9:a3:44:c9:59:53:1e: ba:f2:7c:63:c9:02:2f:2f:9f:04:11:d8:a3:04:37: 96:47:3b:10:52:e8:de:22:9e:66:d1:df:c3:b9:a9: 7e:f3:dc:25:06:1a:a7:92:15:56:a5:dc:aa:20:e9: 87:21:fb:42:e4:34:8d:9a:d6:3d:e8:d9:c0:91:62: a8:ca:25:53:16:5e:a7:b5:d2:d2:0e:a3:64:90:92: b9:8e:c3:56:27:6a:57:ab:1d:bd:af:39:5a:ae:04: 22:99:86:60:fb:09:e7:81:cd:45:e5:ed:c6:ce:4e: ca:51:50:08:e5:eb:cc:f2:de:18:a7:f1:f8:97:80: 29:91:dd:26:1f:0d:f9:fc:97:23:88:8a:28:4a:5e: 51:fb:4d:52:2d:25:06:2e:4f:bd:d4:6f:61:db:43: 81:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1B:F1:F5:E5:14:0A:85:EA:DC:50:02:45:BE:AE:80:06:5A:BA:B9 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS202941.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:200::/48 Signature Algorithm: sha256WithRSAEncryption 90:5c:9e:8e:d0:df:e6:2d:55:6b:39:d1:f1:d8:7b:ca:69:0a: 6a:9c:70:45:3b:96:9f:b1:70:4d:4f:4f:76:e5:c2:d7:e3:4b: c2:d3:21:b1:7b:0f:a3:8b:62:ef:b3:6d:49:73:68:a7:90:88: 6f:15:6e:b2:69:d1:0a:c6:8c:26:a3:61:3a:91:46:b1:2c:25: 71:68:e7:96:07:a1:8a:d7:69:53:f6:70:08:6a:0d:03:68:62: 05:41:4b:00:67:66:e4:ac:dd:d5:1c:67:a2:68:31:67:e6:23: fc:5c:f7:3d:48:d2:a4:32:88:dc:3a:41:60:8e:9f:39:ab:d9: cd:2e:8b:85:14:0c:0a:aa:d3:f3:e3:51:b2:94:69:cc:3d:91: 5a:9d:3e:65:8f:68:94:e1:c4:bb:11:9e:01:7d:db:02:b7:f2: 9c:e9:4a:41:83:68:ea:d4:3d:ce:5b:90:cb:ed:3e:27:99:46: 63:00:7a:86:a2:16:2f:05:d2:a0:bd:e3:30:8d:6a:98:15:13: cb:14:32:9b:35:d0:bb:43:51:03:31:a0:51:81:c8:07:70:36: 90:54:c9:75:3c:21:8e:0d:dc:4b:ce:7b:7e:4d:36:d8:f9:95: 53:ee:49:90:bc:35:f1:b3:e7:89:26:f5:1b:27:a2:00:ce:e9: fd:7a:c2:79 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUZQLTXHqgH4pMkEoDHIoTupQdg1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTExMDMyMzAxNTFaFw0yNjExMDIyMzA2NTFaMDMxMTAvBgNV BAMTKEFBMUJGMUY1RTUxNDBBODVFQURDNTAwMjQ1QkVBRTgwMDY1QUJBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qPBUS6HRGrAKLhFwW3LrGFEj PGmOh8J3582/Y5lN36pc8eLQST86JDccG5imiSWZUDnUnYIbllp/q8/BojtPy2K8 xLyCwkvQ3Qh+E+omIDNVe5zF2hcisr3MwGusYDvb6aNEyVlTHrryfGPJAi8vnwQR 2KMEN5ZHOxBS6N4inmbR38O5qX7z3CUGGqeSFVal3Kog6Ych+0LkNI2a1j3o2cCR YqjKJVMWXqe10tIOo2SQkrmOw1YnalerHb2vOVquBCKZhmD7CeeBzUXl7cbOTspR UAjl68zy3hin8fiXgCmR3SYfDfn8lyOIiihKXlH7TVItJQYuT73Ub2HbQ4FFAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUqhvx9eUUCoXq3FACRb6ugAZaurkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDI5NDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAgAwDQYJKoZIhvcNAQELBQADggEBAJBcno7Q3+YtVWs50fHYe8ppCmqccEU7 lp+xcE1PT3blwtfjS8LTIbF7D6OLYu+zbUlzaKeQiG8VbrJp0QrGjCajYTqRRrEs JXFo55YHoYrXaVP2cAhqDQNoYgVBSwBnZuSs3dUcZ6JoMWfmI/xc9z1I0qQyiNw6 QWCOnzmr2c0ui4UUDAqq0/PjUbKUacw9kVqdPmWPaJThxLsRngF92wK38pzpSkGD aOrUPc5bkMvtPieZRmMAeoaiFi8F0qC94zCNapgVE8sUMps10LtDUQMxoFGByAdw NpBUyXU8IY4N3EvOe35NNtj5lVPuSZC8NfGz54km9RsnogDO6f16wnk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:09:26 2025 by rpki-client