$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS205778.roa File: AS205778.roa (raw, json) Hash identifier: WB1DelSzRsD/y122XYory4YUPKRh2yfOJIfj0XC72jY= Subject key identifier: E2:9F:AB:AB:0A:A4:A9:C1:4A:AA:D0:7A:E5:34:F1:59:E0:58:5E:6C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0D6EEA080914123A851ED0B138D72C194848DB27 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205778.roa Signing time: Mon 04 Aug 2025 15:57:12 +0000 ROA not before: Mon 04 Aug 2025 15:52:12 +0000 ROA not after: Mon 03 Aug 2026 15:57:12 +0000 asID: 205778 IP address blocks: 2a0f:6284:4210::/48 maxlen: 48 2a0f:6284:4211::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6e:ea:08:09:14:12:3a:85:1e:d0:b1:38:d7:2c:19:48:48:db:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 4 15:52:12 2025 GMT Not After : Aug 3 15:57:12 2026 GMT Subject: CN=E29FABAB0AA4A9C14AAAD07AE534F159E0585E6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:00:90:97:ad:71:27:54:ff:2a:b9:43:9d:46: 46:73:1e:98:db:90:7a:e8:5b:8a:88:0a:f9:32:00: bd:12:f4:11:ef:54:aa:f4:c2:fb:5d:5a:a2:bf:5b: af:05:86:4a:ae:7d:63:3f:47:3e:fc:ee:38:db:37: 49:dd:36:9e:49:12:9a:3e:4a:0b:42:74:ad:23:b7: d7:85:13:70:a1:6b:59:cb:be:89:bc:6a:a3:8b:6e: 0b:18:69:3d:01:01:44:e5:6d:09:8b:57:61:df:06: da:2f:92:c6:49:cf:41:e6:39:31:a2:60:4e:5e:5b: c5:23:2f:0b:b7:a1:b9:e9:3b:ba:85:6f:9b:db:82: ba:2a:71:5c:d0:45:24:5b:03:33:e3:d7:af:5f:02: 3d:d2:25:be:c5:00:f5:50:d3:f9:c9:8b:3b:fc:03: 2d:bf:52:8b:a2:e5:07:b2:9d:e0:02:d2:7f:75:d4: f5:50:f1:91:21:96:b5:13:3d:c7:d4:d0:f4:2a:3e: 58:7e:47:e0:34:f3:93:db:94:bb:c0:ed:cd:21:ac: 2a:97:d2:1e:a0:d1:dc:7c:55:65:e4:b2:e4:db:c7: ca:08:b6:e4:f4:16:ad:bb:a7:ad:d5:9c:7c:ad:05: b4:76:0f:f8:45:3a:11:b3:7c:34:32:2d:b1:b8:85: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9F:AB:AB:0A:A4:A9:C1:4A:AA:D0:7A:E5:34:F1:59:E0:58:5E:6C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205778.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4210::/47 Signature Algorithm: sha256WithRSAEncryption 13:10:ef:c4:34:03:1c:be:42:5b:bd:4e:d9:d8:a1:4b:72:89: 9c:37:ce:04:4c:65:50:54:92:36:ac:32:f0:8b:ce:e5:d5:e9: ae:23:f6:1b:b9:4b:a2:45:4d:ae:dc:b8:e0:d0:20:39:6c:88: 4d:c9:6c:a7:ed:bb:d0:54:e6:c4:17:3c:aa:30:c7:49:81:19: 31:1e:d8:3d:88:6e:94:51:d9:fe:d4:02:d0:37:16:c3:e1:06: cf:a4:62:12:16:76:bb:53:d0:04:0f:1f:e6:a8:6b:6a:f6:3e: 6a:7f:5b:30:55:e5:39:e6:15:63:e5:00:38:dd:ee:89:34:5b: 4d:8a:b5:b6:39:4e:0d:a0:2b:d9:63:4b:91:bc:d3:90:1d:52: 1e:e4:23:10:fe:fc:54:b7:ca:18:56:25:dd:c8:0c:f5:c9:67: 35:a5:44:42:53:e5:a7:63:fe:0f:8e:a9:db:1f:5b:21:67:53: 80:f8:ee:86:1f:a7:df:0a:ce:eb:8a:3a:1b:a0:ca:a3:75:5c: ed:70:e4:3b:cf:83:fd:2c:44:82:2a:05:73:2b:aa:79:95:8d: 8f:9e:60:33:a4:7b:f5:8a:5a:e2:55:dd:d1:c7:e3:16:0c:f1: ef:23:05:72:91:dc:e3:11:78:64:30:b5:9d:bb:15:e0:61:6f: e4:de:8b:ee -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUDW7qCAkUEjqFHtCxONcsGUhI2ycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA4MDQxNTUyMTJaFw0yNjA4MDMxNTU3MTJaMDMxMTAvBgNV BAMTKEUyOUZBQkFCMEFBNEE5QzE0QUFBRDA3QUU1MzRGMTU5RTA1ODVFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAJCXrXEnVP8quUOdRkZzHpjb kHroW4qICvkyAL0S9BHvVKr0wvtdWqK/W68FhkqufWM/Rz787jjbN0ndNp5JEpo+ SgtCdK0jt9eFE3Cha1nLvom8aqOLbgsYaT0BAUTlbQmLV2HfBtovksZJz0HmOTGi YE5eW8UjLwu3obnpO7qFb5vbgroqcVzQRSRbAzPj169fAj3SJb7FAPVQ0/nJizv8 Ay2/Uoui5QeyneAC0n911PVQ8ZEhlrUTPcfU0PQqPlh+R+A085PblLvA7c0hrCqX 0h6g0dx8VWXksuTbx8oItuT0Fq27p63VnHytBbR2D/hFOhGzfDQyLbG4hU9hAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU4p+rqwqkqcFKqtB65TTxWeBYXmwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDU3Nzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEq D2KEQhAwDQYJKoZIhvcNAQELBQADggEBABMQ78Q0Axy+Qlu9TtnYoUtyiZw3zgRM ZVBUkjasMvCLzuXV6a4j9hu5S6JFTa7cuODQIDlsiE3JbKftu9BU5sQXPKowx0mB GTEe2D2IbpRR2f7UAtA3FsPhBs+kYhIWdrtT0AQPH+aoa2r2Pmp/WzBV5TnmFWPl ADjd7ok0W02KtbY5Tg2gK9ljS5G805AdUh7kIxD+/FS3yhhWJd3IDPXJZzWlREJT 5adj/g+OqdsfWyFnU4D47oYfp98KzuuKOhugyqN1XO1w5DvPg/0sRIIqBXMrqnmV jY+eYDOke/WKWuJV3dHH4xYM8e8jBXKR3OMReGQwtZ27FeBhb+Tei+4= -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:28 2025 by rpki-client