$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207836.roa File: AS207836.roa (raw, json) Hash identifier: dR+Cm8OKS0KJ53EutP7n1nmft90yPQZgQZsxZKeojhk= Subject key identifier: D6:4B:74:B7:16:A3:C9:E0:4A:CA:D6:57:91:31:97:EC:80:6E:0D:35 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4ED90A6688851E7AF38D50FF687D6223F4D426C7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207836.roa Signing time: Thu 14 Aug 2025 18:34:31 +0000 ROA not before: Thu 14 Aug 2025 18:29:31 +0000 ROA not after: Thu 13 Aug 2026 18:34:31 +0000 asID: 207836 IP address blocks: 2a0f:6284:4500::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d9:0a:66:88:85:1e:7a:f3:8d:50:ff:68:7d:62:23:f4:d4:26:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 14 18:29:31 2025 GMT Not After : Aug 13 18:34:31 2026 GMT Subject: CN=D64B74B716A3C9E04ACAD657913197EC806E0D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:1f:01:98:e6:77:b4:1b:af:d8:b5:ce:ff: e6:47:76:92:13:45:96:f1:31:b3:14:5c:0d:5e:f2: 8a:a3:5f:52:0c:d2:bb:de:ec:0c:ae:e1:35:16:f4: 36:41:52:b2:80:c9:2d:16:cc:26:dc:6e:84:c7:48: 7d:5e:59:24:42:6b:74:8d:91:19:98:5a:dd:b4:e3: 38:b7:1f:7d:fd:84:11:b8:ac:e3:6b:07:c1:3b:bf: c0:b6:f5:7f:87:00:40:b0:83:0c:62:ef:3a:a2:03: 5e:fb:0e:fc:72:ab:d0:ae:9d:77:a5:8d:7e:bc:ee: e2:77:5a:9f:e5:ed:26:fa:38:9e:62:34:11:92:04: 07:6d:06:9c:ca:df:5b:3f:01:9b:f3:46:8e:ff:c4: 59:d3:06:c5:e8:bc:f9:c3:53:a5:3b:74:f1:18:09: f8:5a:17:8f:17:46:56:f3:5c:47:de:96:48:38:e7: 19:88:9b:75:59:53:3e:23:ed:af:e1:28:02:4d:73: 5d:65:b0:ff:51:c7:fe:7e:77:64:07:2a:d0:ef:ac: 02:af:ad:0e:af:f6:6b:d7:17:30:7f:24:5d:48:d5: 2e:28:89:d9:a6:51:be:28:06:8a:63:67:e0:80:58: 34:7f:d3:9c:df:f5:cb:02:4d:91:4c:a1:e7:18:4c: 5b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:74:B7:16:A3:C9:E0:4A:CA:D6:57:91:31:97:EC:80:6E:0D:35 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4500::/40 Signature Algorithm: sha256WithRSAEncryption 61:ec:57:9d:95:f9:69:92:f8:54:a8:50:03:4f:9a:ef:52:33: 69:f8:c3:7b:2b:b5:ef:4a:5a:e5:67:57:73:20:8b:35:4a:69: 7e:1b:8c:1b:ad:0c:55:bd:17:27:84:dc:dd:00:97:3a:46:43: 78:83:82:aa:4d:d3:a4:f1:dc:d2:a7:ca:bd:90:c7:36:58:8e: 1c:49:1a:8b:62:9a:bc:bd:38:db:e4:27:d9:4f:9a:2d:af:6a: 28:05:3f:07:9d:7c:03:09:3a:ef:29:61:1e:68:9c:57:a6:79: f6:2c:37:9b:a8:17:f4:8c:89:10:47:15:13:27:87:34:2a:33: bd:49:e2:8c:07:9a:2b:3c:2e:81:89:46:d6:21:54:c1:b5:36: 5f:1e:29:f0:38:45:e3:69:2d:a3:03:45:9d:8f:6d:ac:fb:d7: b3:ce:17:86:00:a0:7f:66:33:2c:cf:6c:48:42:3b:80:42:0c: 4e:00:a6:88:ef:44:04:25:3d:fb:8d:e5:ca:49:e3:41:ed:da: 5b:c0:7d:bd:b7:03:92:0d:a1:7f:7f:bf:4b:89:c3:38:cd:a0: 1e:4b:af:52:bd:fb:8c:18:c0:f4:f2:dc:36:7e:7a:c0:03:cb: 05:71:f5:81:42:7e:39:12:c7:e2:f7:84:ba:b9:d5:d3:3a:eb: 53:f4:8e:54 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUTtkKZoiFHnrzjVD/aH1iI/TUJscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA4MTQxODI5MzFaFw0yNjA4MTMxODM0MzFaMDMxMTAvBgNV BAMTKEQ2NEI3NEI3MTZBM0M5RTA0QUNBRDY1NzkxMzE5N0VDODA2RTBEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Hh8BmOZ3tBuv2LXO/+ZHdpIT RZbxMbMUXA1e8oqjX1IM0rve7Ayu4TUW9DZBUrKAyS0WzCbcboTHSH1eWSRCa3SN kRmYWt204zi3H339hBG4rONrB8E7v8C29X+HAECwgwxi7zqiA177Dvxyq9CunXel jX687uJ3Wp/l7Sb6OJ5iNBGSBAdtBpzK31s/AZvzRo7/xFnTBsXovPnDU6U7dPEY CfhaF48XRlbzXEfelkg45xmIm3VZUz4j7a/hKAJNc11lsP9Rx/5+d2QHKtDvrAKv rQ6v9mvXFzB/JF1I1S4oidmmUb4oBopjZ+CAWDR/05zf9csCTZFMoecYTFudAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU1kt0txajyeBKytZXkTGX7IBuDTUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDc4MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KERTANBgkqhkiG9w0BAQsFAAOCAQEAYexXnZX5aZL4VKhQA0+a71IzafjDeyu1 70pa5WdXcyCLNUppfhuMG60MVb0XJ4Tc3QCXOkZDeIOCqk3TpPHc0qfKvZDHNliO HEkai2KavL042+Qn2U+aLa9qKAU/B518Awk67ylhHmicV6Z59iw3m6gX9IyJEEcV EyeHNCozvUnijAeaKzwugYlG1iFUwbU2Xx4p8DhF42ktowNFnY9trPvXs84XhgCg f2YzLM9sSEI7gEIMTgCmiO9EBCU9+43lyknjQe3aW8B9vbcDkg2hf3+/S4nDOM2g HkuvUr37jBjA9PLcNn56wAPLBXH1gUJ+ORLH4veEurnV0zrrU/SOVA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:50:18 2025 by rpki-client