$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS206183.roa File: AS206183.roa (raw, json) Hash identifier: fsGoS2X6YMrKb1BjLHNvAr55ySQLdLtj34SgGHCCSoc= Subject key identifier: 3B:E6:D1:65:7A:F8:3C:7C:99:E5:2B:7E:ED:6B:AF:ED:35:CF:A3:76 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 7972BCC5619344F868051F1E3F8145EF0E7DC6AB Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS206183.roa Signing time: Sat 26 Jul 2025 14:36:54 +0000 ROA not before: Sat 26 Jul 2025 14:31:54 +0000 ROA not after: Sat 25 Jul 2026 14:36:54 +0000 asID: 206183 IP address blocks: 2a0f:6283:1104::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 11:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:72:bc:c5:61:93:44:f8:68:05:1f:1e:3f:81:45:ef:0e:7d:c6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 26 14:31:54 2025 GMT Not After : Jul 25 14:36:54 2026 GMT Subject: CN=3BE6D1657AF83C7C99E52B7EED6BAFED35CFA376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e8:d0:23:81:25:a2:d0:c6:44:f5:43:8e:b9: 07:e4:59:a1:6a:00:be:db:bb:5f:c6:08:b3:2d:83: 72:d7:05:b3:99:f7:a5:1d:58:6a:0c:0f:ea:f9:8b: ff:7c:9a:3c:c6:fc:f4:d9:26:15:35:45:41:1f:fa: e7:31:09:83:60:bc:b1:61:d9:e8:a9:96:22:fd:3e: 59:09:3c:fe:40:72:c8:28:cd:e1:fd:10:b4:8f:e1: 77:e2:76:03:d5:1a:08:fd:62:73:ba:10:34:ce:34: d3:f1:45:9f:8a:48:3d:af:10:bc:61:a2:14:90:f6: f3:6c:4c:aa:d6:a9:47:87:64:65:e9:ec:5d:9f:10: 3f:ff:73:4b:f7:53:68:86:96:3d:ae:81:4a:ed:23: 39:25:fd:54:32:26:1b:97:04:37:14:eb:9c:6d:73: 32:fe:55:c6:3c:93:a2:7a:f5:0c:72:63:6a:02:ba: 02:72:14:25:06:43:92:73:2b:b1:ba:92:3d:ea:f4: 85:bc:2b:5a:70:ae:40:80:25:22:5d:20:de:fd:0e: e5:98:91:2d:60:f6:8e:bc:49:00:d1:45:9d:71:f6: a7:2d:d9:52:5d:65:cd:f9:27:76:75:6a:b0:cf:fc: 08:b4:0b:05:91:f9:2c:48:79:93:56:06:02:41:4e: 68:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E6:D1:65:7A:F8:3C:7C:99:E5:2B:7E:ED:6B:AF:ED:35:CF:A3:76 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS206183.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:1104::/48 Signature Algorithm: sha256WithRSAEncryption 56:52:e8:4e:69:36:3c:7c:64:b4:f4:3c:6a:51:9b:f5:4b:bd: 97:af:c6:3e:38:1a:67:dd:24:82:a6:df:37:e3:01:42:ed:09: 70:be:73:fc:8f:62:d3:b3:a1:b4:15:f8:df:19:7c:00:f9:4c: a9:0d:b1:50:98:5a:1e:a0:e3:65:60:ea:94:e1:a5:18:0f:6d: a3:be:7d:46:68:f0:91:10:fc:91:20:6e:b1:79:c0:21:a7:86: f7:10:30:0b:ee:bc:b9:1d:cc:1d:81:35:d1:4e:b8:11:8d:01: a5:e4:e1:e5:ca:89:2c:73:8c:ce:8e:4e:5e:1d:23:79:28:30: b2:76:7f:9b:c9:5b:be:30:e4:15:e6:d5:e1:c5:c8:fc:03:e4: 2e:dd:c1:55:a3:d1:fc:97:2d:d2:85:22:30:66:bc:8c:0e:26: 47:9c:e3:31:1b:03:5b:46:c0:8a:b2:72:b5:07:15:45:8a:6f: 86:43:4a:86:a4:e6:6a:d5:46:74:44:ea:78:d6:e1:77:15:6a: f1:88:91:28:83:cb:3e:a1:b1:bc:97:45:57:c6:2f:7d:95:e1: 96:b6:48:5c:84:f6:b5:07:08:82:80:db:36:42:61:91:30:54: ac:e7:8c:81:8e:27:30:b7:ca:d2:56:f1:c4:ff:07:12:70:2c: c3:79:83:ad -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUeXK8xWGTRPhoBR8eP4FF7w59xqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MjYxNDMxNTRaFw0yNjA3MjUxNDM2NTRaMDMxMTAvBgNV BAMTKDNCRTZEMTY1N0FGODNDN0M5OUU1MkI3RUVENkJBRkVEMzVDRkEzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd6NAjgSWi0MZE9UOOuQfkWaFq AL7bu1/GCLMtg3LXBbOZ96UdWGoMD+r5i/98mjzG/PTZJhU1RUEf+ucxCYNgvLFh 2eipliL9PlkJPP5AcsgozeH9ELSP4XfidgPVGgj9YnO6EDTONNPxRZ+KSD2vELxh ohSQ9vNsTKrWqUeHZGXp7F2fED//c0v3U2iGlj2ugUrtIzkl/VQyJhuXBDcU65xt czL+VcY8k6J69QxyY2oCugJyFCUGQ5JzK7G6kj3q9IW8K1pwrkCAJSJdIN79DuWY kS1g9o68SQDRRZ1x9qct2VJdZc35J3Z1arDP/Ai0CwWR+SxIeZNWBgJBTmhxAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUO+bRZXr4PHyZ5St+7Wuv7TXPo3YwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDYxODMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KDEQQwDQYJKoZIhvcNAQELBQADggEBAFZS6E5pNjx8ZLT0PGpRm/VLvZevxj44 GmfdJIKm3zfjAULtCXC+c/yPYtOzobQV+N8ZfAD5TKkNsVCYWh6g42Vg6pThpRgP baO+fUZo8JEQ/JEgbrF5wCGnhvcQMAvuvLkdzB2BNdFOuBGNAaXk4eXKiSxzjM6O Tl4dI3koMLJ2f5vJW74w5BXm1eHFyPwD5C7dwVWj0fyXLdKFIjBmvIwOJkec4zEb A1tGwIqycrUHFUWKb4ZDSoak5mrVRnRE6njW4XcVavGIkSiDyz6hsbyXRVfGL32V 4Za2SFyE9rUHCIKA2zZCYZEwVKznjIGOJzC3ytJW8cT/BxJwLMN5g60= -----END CERTIFICATE-----Generated at Fri Aug 8 00:45:52 2025 by rpki-client