$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS205712.roa File: AS205712.roa (raw, json) Hash identifier: 1woJ0IEEz90YiJj1C2cOpeTq+KX5spjVc+Uuh7Z3LWg= Subject key identifier: 8E:55:01:60:C6:92:83:CD:AC:84:57:BF:DD:CC:2D:AF:9E:EB:AD:D2 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6D55D722B7C2A6BBB6BB41FB108B6917AACD42F0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205712.roa Signing time: Tue 15 Sep 2026 12:52:18 +0000 ROA not before: Tue 15 Sep 2026 12:47:18 +0000 ROA not after: Tue 14 Sep 2027 12:52:18 +0000 asID: 205712 IP address blocks: 2a0f:6287:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:55:d7:22:b7:c2:a6:bb:b6:bb:41:fb:10:8b:69:17:aa:cd:42:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 15 12:47:18 2026 GMT Not After : Sep 14 12:52:18 2027 GMT Subject: CN=8E550160C69283CDAC8457BFDDCC2DAF9EEBADD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:ab:b1:f8:6c:de:a1:f2:33:72:90:4e:3d: bf:33:77:c9:6a:11:66:57:a8:fe:69:e9:fc:21:0d: 7b:09:a2:f5:da:ff:02:93:eb:4c:fe:f6:d3:4e:4d: 9a:50:b8:f5:27:d2:cb:44:24:45:ed:ff:8d:d0:e3: e0:f4:44:88:26:f4:a0:42:d0:1d:1c:ec:ce:67:da: 3d:f3:1d:2e:f8:f4:5e:b1:b7:cd:f4:7d:3d:c9:94: dc:1b:67:5e:d9:16:58:3d:38:c3:99:4d:de:ea:4e: 52:04:be:05:a4:44:d2:88:a2:3a:80:3f:d2:2c:c0: 2b:18:53:24:f5:95:68:99:d2:9b:2f:15:46:17:13: 9c:f7:1c:8f:f6:03:f4:33:0c:d5:84:62:0b:c4:ee: f3:9c:6f:02:01:90:77:06:bb:09:84:a4:43:d8:cc: 8f:16:6d:d9:12:01:8c:c5:5b:d6:de:63:4d:dc:73: 4c:43:d3:06:3f:87:51:c4:a8:62:b6:4f:e2:aa:4c: f1:bb:b8:15:43:cd:e1:7a:9d:ba:3d:aa:54:a7:18: 0e:cb:49:c0:4e:4d:19:af:db:0c:2c:8e:5c:05:c4: 0a:22:01:a2:88:47:83:18:b4:7a:b0:52:33:b2:d1: 12:4b:75:45:42:b4:93:53:10:da:b6:37:cb:47:25: f1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:55:01:60:C6:92:83:CD:AC:84:57:BF:DD:CC:2D:AF:9E:EB:AD:D2 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205712.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:9000::/36 Signature Algorithm: sha256WithRSAEncryption 66:cc:d2:97:0d:b4:51:12:f9:21:ec:15:59:5a:79:27:93:80: 73:f9:5c:c3:73:77:0e:af:d7:c1:46:d0:33:a1:97:15:eb:82: 6c:05:29:4d:0f:07:c3:18:59:c0:fb:75:0f:3a:86:ad:5a:9b: b1:8c:4b:67:7d:94:b2:20:0f:72:e1:f1:a9:76:07:64:3a:03: fc:73:27:a6:b8:73:67:ed:34:22:32:ab:43:d5:15:f8:f4:a6: 7e:c4:cd:bb:2a:50:ee:ad:7d:08:a3:53:9a:e8:2e:eb:c8:0c: dd:c2:07:e0:a4:31:91:bc:49:75:a9:4e:d6:4e:5b:24:b3:5a: f7:0b:99:e1:88:14:ea:bb:11:ad:c9:2c:2b:ad:d5:f0:16:e2: 46:dc:17:d5:4c:9c:28:d6:67:f6:75:ba:a3:04:55:50:06:6f: 19:b8:5a:c1:07:e9:c1:4d:94:d2:db:f6:10:5f:4b:8d:40:06: 16:f9:f3:09:b4:d5:73:64:98:07:6e:13:c9:fe:fb:51:32:2d: 2e:8f:91:85:00:f9:dd:ba:98:8e:e3:45:56:3d:04:f2:fd:98: 7d:75:b6:19:8a:00:04:0f:1e:89:17:c2:89:5a:6d:74:f6:8e: 21:8f:7a:54:b0:db:5a:91:25:e8:e6:42:78:b8:89:bc:c4:52: 27:be:b7:06 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUbVXXIrfCpru2u0H7EItpF6rNQvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTUxMjQ3MThaFw0yNzA5MTQxMjUyMThaMDMxMTAvBgNV BAMTKDhFNTUwMTYwQzY5MjgzQ0RBQzg0NTdCRkREQ0MyREFGOUVFQkFERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqaux+GzeofIzcpBOPb8zd8lq EWZXqP5p6fwhDXsJovXa/wKT60z+9tNOTZpQuPUn0stEJEXt/43Q4+D0RIgm9KBC 0B0c7M5n2j3zHS749F6xt830fT3JlNwbZ17ZFlg9OMOZTd7qTlIEvgWkRNKIojqA P9IswCsYUyT1lWiZ0psvFUYXE5z3HI/2A/QzDNWEYgvE7vOcbwIBkHcGuwmEpEPY zI8WbdkSAYzFW9beY03cc0xD0wY/h1HEqGK2T+KqTPG7uBVDzeF6nbo9qlSnGA7L ScBOTRmv2wwsjlwFxAoiAaKIR4MYtHqwUjOy0RJLdUVCtJNTENq2N8tHJfEDAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUjlUBYMaSg82shFe/3cwtr57rrdIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDU3MTIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KHkDANBgkqhkiG9w0BAQsFAAOCAQEAZszSlw20URL5IewVWVp5J5OAc/lcw3N3 Dq/XwUbQM6GXFeuCbAUpTQ8HwxhZwPt1DzqGrVqbsYxLZ32UsiAPcuHxqXYHZDoD /HMnprhzZ+00IjKrQ9UV+PSmfsTNuypQ7q19CKNTmugu68gM3cIH4KQxkbxJdalO 1k5bJLNa9wuZ4YgU6rsRrcksK63V8BbiRtwX1UycKNZn9nW6owRVUAZvGbhawQfp wU2U0tv2EF9LjUAGFvnzCbTVc2SYB24Tyf77UTItLo+RhQD53bqYjuNFVj0E8v2Y fXW2GYoABA8eiRfCiVptdPaOIY96VLDbWpEl6OZCeLiJvMRSJ763Bg== -----END CERTIFICATE-----Generated at Sun Sep 20 19:55:36 2026 by rpki-client