$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: uLC7AdbtIPm0YmPNQwuNa5RvhN08XX3gF1Ow8oku6GU= Subject key identifier: 94:97:7B:6B:CF:FC:B4:9C:68:F3:56:A6:FD:6A:AC:34:96:99:B5:A7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5313DA6A85B3865BE3F93CD6B81FE85DEDCD63E0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS7029.roa Signing time: Fri 29 Aug 2025 20:34:27 +0000 ROA not before: Fri 29 Aug 2025 20:29:27 +0000 ROA not after: Fri 28 Aug 2026 20:34:27 +0000 asID: 7029 IP address blocks: 2a09:54c4::/32 maxlen: 32 2a0f:6281::/32 maxlen: 32 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 02:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:13:da:6a:85:b3:86:5b:e3:f9:3c:d6:b8:1f:e8:5d:ed:cd:63:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 29 20:29:27 2025 GMT Not After : Aug 28 20:34:27 2026 GMT Subject: CN=94977B6BCFFCB49C68F356A6FD6AAC349699B5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:82:28:8e:ed:de:67:20:5a:56:3f:a9:74: 9d:f4:52:39:23:a0:0d:56:78:0d:7e:58:7c:34:9d: c7:a5:ae:28:b4:4d:3d:b7:a9:6d:bf:c3:a5:50:52: ff:b1:6e:03:d5:3a:3b:33:99:d2:6d:10:6c:e5:16: 51:f6:c0:48:61:ef:12:71:14:26:9f:75:bf:c1:ff: ac:d6:13:64:15:73:f3:e1:66:bb:5e:85:16:3b:13: fa:99:af:09:c2:af:4a:1f:0c:52:b9:21:50:3d:e8: bb:75:68:16:fc:5c:3d:17:33:0c:9b:8a:bd:14:d7: 08:0f:81:48:60:45:85:6c:82:3c:d4:95:12:eb:d2: c6:aa:85:c4:61:0a:b9:97:55:dc:7a:da:7f:de:c7: 4f:ed:95:5d:6d:bc:1e:e2:66:08:52:a3:07:bb:d4: ce:1a:2c:4d:4e:4a:c5:5f:69:46:5c:aa:b1:7b:28: 9f:7d:1a:ac:b5:a0:62:36:1f:65:5c:8b:82:72:c1: b6:96:bc:98:f6:e8:48:f3:ac:6f:7a:59:a2:07:34: c0:1b:46:90:29:c5:d9:4e:fe:b6:9a:2f:78:92:13: 66:2a:f8:cc:0f:8a:21:50:ce:e6:a1:66:b8:30:54: 34:6f:79:71:a4:32:07:36:a2:7e:d3:9f:b0:c4:19: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:97:7B:6B:CF:FC:B4:9C:68:F3:56:A6:FD:6A:AC:34:96:99:B5:A7 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c4::/32 2a0f:6281::/32 Signature Algorithm: sha256WithRSAEncryption 23:59:23:53:3d:38:23:b7:a5:c4:8e:b4:e5:87:12:8c:21:53: 55:71:09:28:c2:df:02:59:71:6d:93:5b:e3:8d:a5:cc:de:a5: ca:2c:c5:1a:85:e4:cf:df:1f:6f:56:f2:6f:24:59:0a:e6:31: 1a:56:8e:e3:7f:71:a0:d0:cf:c9:64:d7:3d:0b:e8:60:9e:0a: b7:3c:a7:c7:30:3f:69:9b:d8:1b:20:46:08:d4:87:79:ec:70: d9:25:dc:3d:19:cb:f9:6b:e0:e4:7e:0f:b3:1d:e3:e1:8b:47: a4:a2:e3:d7:81:11:83:39:83:8d:30:ac:9c:5a:de:56:c5:60: 61:d7:c4:6e:de:7e:2b:ac:b3:ab:66:b1:a6:0a:78:13:92:0d: cb:36:3f:d0:ff:b3:85:b2:70:a8:42:35:13:b2:92:e8:b4:c3: 56:84:62:ee:16:2b:59:0d:9f:23:32:10:7b:1f:78:5d:24:0d: 58:98:c5:b1:99:03:7a:90:af:03:31:d8:b0:6c:f0:db:74:8d: 1d:57:01:f6:0f:04:d0:88:a2:04:8b:78:06:da:84:08:fc:a1: 76:7e:b9:b5:72:3c:6c:bf:9e:ef:75:ba:4d:77:7f:12:2d:97: 8c:e3:d3:6d:0a:84:22:c8:75:41:78:6c:24:2d:6d:11:3c:d6: 5d:e0:25:8a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUUxPaaoWzhlvj+TzWuB/oXe3NY+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA4MjkyMDI5MjdaFw0yNjA4MjgyMDM0MjdaMDMxMTAvBgNV BAMTKDk0OTc3QjZCQ0ZGQ0I0OUM2OEYzNTZBNkZENkFBQzM0OTY5OUI1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyYIoju3eZyBaVj+pdJ30Ujkj oA1WeA1+WHw0ncelrii0TT23qW2/w6VQUv+xbgPVOjszmdJtEGzlFlH2wEhh7xJx FCafdb/B/6zWE2QVc/PhZrtehRY7E/qZrwnCr0ofDFK5IVA96Lt1aBb8XD0XMwyb ir0U1wgPgUhgRYVsgjzUlRLr0saqhcRhCrmXVdx62n/ex0/tlV1tvB7iZghSowe7 1M4aLE1OSsVfaUZcqrF7KJ99Gqy1oGI2H2Vci4JywbaWvJj26EjzrG96WaIHNMAb RpApxdlO/raaL3iSE2Yq+MwPiiFQzuahZrgwVDRveXGkMgc2on7Tn7DEGaSlAgMB AAGjggHiMIIB3jAdBgNVHQ4EFgQUlJd7a8/8tJxo81am/WqsNJaZtacwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME0GCCsGAQUFBwELBEEwPzA9BggrBgEFBQcwC4YxcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM3MDI5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKglU xAMFACoPYoEwDQYJKoZIhvcNAQELBQADggEBACNZI1M9OCO3pcSOtOWHEowhU1Vx CSjC3wJZcW2TW+ONpczepcosxRqF5M/fH29W8m8kWQrmMRpWjuN/caDQz8lk1z0L 6GCeCrc8p8cwP2mb2BsgRgjUh3nscNkl3D0Zy/lr4OR+D7Md4+GLR6Si49eBEYM5 g40wrJxa3lbFYGHXxG7efiuss6tmsaYKeBOSDcs2P9D/s4WycKhCNROykui0w1aE Yu4WK1kNnyMyEHsfeF0kDViYxbGZA3qQrwMx2LBs8Nt0jR1XAfYPBNCIogSLeAba hAj8oXZ+ubVyPGy/nu91uk13fxItl4zj020KhCLIdUF4bCQtbRE81l3gJYo= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:21 2025 by rpki-client