$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS206715.roa File: AS206715.roa (raw, json) Hash identifier: hfcEXZDBFTkzwQ6S8/f9AXBLg0lxxzluQhvU93d6BqM= Subject key identifier: 62:02:2D:C8:56:E8:33:0A:9D:75:3A:23:7C:F1:69:32:49:A9:83:32 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 18552DD4FADF5BD4E995FBF49FD5668A2B3413AA Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS206715.roa Signing time: Sat 30 Aug 2025 23:08:11 +0000 ROA not before: Sat 30 Aug 2025 23:03:11 +0000 ROA not after: Sat 29 Aug 2026 23:08:11 +0000 asID: 206715 IP address blocks: 2a09:54c6:5001::/48 maxlen: 48 2a09:54c6:5002::/48 maxlen: 48 2a09:54c6:5003::/48 maxlen: 48 2a09:54c6:5004::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:55:2d:d4:fa:df:5b:d4:e9:95:fb:f4:9f:d5:66:8a:2b:34:13:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 30 23:03:11 2025 GMT Not After : Aug 29 23:08:11 2026 GMT Subject: CN=62022DC856E8330A9D753A237CF1693249A98332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:31:7f:75:3f:1a:06:ad:32:45:03:45:a1:32: 6e:66:24:b3:eb:fc:fe:20:52:64:a8:c7:69:d3:22: 89:9f:6c:8f:2b:2d:34:3e:29:f6:96:b3:dc:07:da: 73:e9:07:70:4d:40:5a:aa:04:a1:e2:48:99:87:4c: 08:04:fb:45:4a:7b:29:44:8f:89:35:27:af:90:65: 7a:70:be:57:f5:2c:3a:86:cd:26:bf:cb:3c:54:18: ef:7d:f1:80:c8:72:69:e0:5c:6a:3b:82:f0:4f:00: 98:e6:d4:47:d5:e2:91:4e:b0:f7:7f:88:ed:b1:08: 23:42:00:6e:8f:32:41:a1:86:0e:ba:12:5f:73:14: 2e:a3:9e:e5:ff:b1:d8:31:c9:d3:78:0e:34:10:b4: e9:6a:8f:36:da:92:14:34:0a:b9:3b:f4:8e:1c:ca: f1:e1:9f:99:6c:2f:a1:30:cf:26:44:c7:9b:1f:25: 80:63:13:78:22:a5:09:e1:a3:d5:e6:9e:7c:31:9c: ce:81:ac:30:9c:a2:bb:c2:71:de:f0:1f:82:6b:e1: 90:b4:39:e1:45:f1:21:52:94:29:9d:3e:79:1e:8d: 82:ec:c3:08:8e:3d:69:30:21:19:8a:ab:d4:eb:d5: 4c:20:75:24:93:3b:f3:b8:5f:d4:8f:a0:fc:01:87: 1a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:02:2D:C8:56:E8:33:0A:9D:75:3A:23:7C:F1:69:32:49:A9:83:32 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS206715.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:5001::-2a09:54c6:5004:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 51:6b:63:c4:2f:c7:ab:da:47:3f:d5:c0:47:14:12:5c:49:7d: 55:da:fe:3e:06:3c:07:5e:10:d1:45:11:9d:55:5a:7f:d7:ef: 18:22:ec:57:37:52:93:8b:30:2f:90:41:aa:fc:b8:43:6f:d2: 88:14:40:9f:6d:e2:b0:29:cc:4c:2b:f9:b7:ab:bc:29:7f:5f: 68:3d:cd:96:4a:c9:89:fd:c2:f6:d2:48:ee:e3:46:5a:b5:62: 16:15:34:f5:f1:e6:b1:af:39:b1:02:3f:59:f4:ec:2a:14:52: ec:a4:ac:0e:0d:52:aa:85:a7:f2:24:37:62:c2:70:0f:2c:4c: 1a:34:f1:89:a6:44:0f:91:fd:b1:a8:c4:5f:0b:6a:df:7f:fb: 44:a7:9c:84:21:22:b5:ce:a0:da:8e:d8:87:9b:32:f9:50:2f: 52:3c:46:66:a0:16:3f:ba:b4:04:96:4f:fe:05:9e:65:78:7a: dc:05:92:19:4f:f9:38:01:0d:a3:3b:6c:d6:39:b5:46:e9:3e: 34:b5:23:9a:1a:8f:20:7b:62:75:e9:4d:05:cb:45:0e:a8:25: 89:bb:8b:da:1f:44:1e:e9:e5:8c:bc:ec:bd:fb:94:47:c4:35: fa:ad:59:38:a2:fb:98:1a:8b:c9:aa:4f:49:e8:9d:3a:40:d9: c8:4a:5b:66 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUGFUt1PrfW9Tplfv0n9Vmiis0E6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA4MzAyMzAzMTFaFw0yNjA4MjkyMzA4MTFaMDMxMTAvBgNV BAMTKDYyMDIyREM4NTZFODMzMEE5RDc1M0EyMzdDRjE2OTMyNDlBOTgzMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXMX91PxoGrTJFA0WhMm5mJLPr /P4gUmSox2nTIomfbI8rLTQ+KfaWs9wH2nPpB3BNQFqqBKHiSJmHTAgE+0VKeylE j4k1J6+QZXpwvlf1LDqGzSa/yzxUGO998YDIcmngXGo7gvBPAJjm1EfV4pFOsPd/ iO2xCCNCAG6PMkGhhg66El9zFC6jnuX/sdgxydN4DjQQtOlqjzbakhQ0Crk79I4c yvHhn5lsL6EwzyZEx5sfJYBjE3gipQnho9XmnnwxnM6BrDCcorvCcd7wH4Jr4ZC0 OeFF8SFSlCmdPnkejYLswwiOPWkwIRmKq9Tr1UwgdSSTO/O4X9SPoPwBhxqBAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUYgItyFboMwqddTojfPFpMkmpgzIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDY3MTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgACMBQwEgMH ACoJVMZQAQMHACoJVMZQBDANBgkqhkiG9w0BAQsFAAOCAQEAUWtjxC/Hq9pHP9XA RxQSXEl9Vdr+PgY8B14Q0UURnVVaf9fvGCLsVzdSk4swL5BBqvy4Q2/SiBRAn23i sCnMTCv5t6u8KX9faD3NlkrJif3C9tJI7uNGWrViFhU09fHmsa85sQI/WfTsKhRS 7KSsDg1SqoWn8iQ3YsJwDyxMGjTxiaZED5H9sajEXwtq33/7RKechCEitc6g2o7Y h5sy+VAvUjxGZqAWP7q0BJZP/gWeZXh63AWSGU/5OAENozts1jm1Ruk+NLUjmhqP IHtidelNBctFDqglibuL2h9EHunljLzsvfuUR8Q1+q1ZOKL7mBqLyapPSeidOkDZ yEpbZg== -----END CERTIFICATE-----Generated at Wed Nov 5 11:40:05 2025 by rpki-client