$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/3139322e302e312e302f32342d3234203d3e203437323732.roa File: 3139322e302e312e302f32342d3234203d3e203437323732.roa (raw, json) Hash identifier: Zid2pum911j4CPTxMsQfV/uOPzBVuTBAzxqsHXZ76lw= Subject key identifier: 52:4D:6F:F2:B7:EF:41:44:D2:27:A8:F4:A8:27:29:15:EB:E2:6C:0B Certificate issuer: /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb Certificate serial: 05BE7E98D276A2390C5075A2BA37FA57F8D7BD19 Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/1/3139322e302e312e302f32342d3234203d3e203437323732.roa Signing time: Mon 06 Oct 2025 15:41:51 +0000 ROA not before: Mon 06 Oct 2025 15:36:51 +0000 ROA not after: Mon 05 Oct 2026 15:41:51 +0000 asID: 47272 IP address blocks: 192.0.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 23:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:be:7e:98:d2:76:a2:39:0c:50:75:a2:ba:37:fa:57:f8:d7:bd:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb Validity Not Before: Oct 6 15:36:51 2025 GMT Not After : Oct 5 15:41:51 2026 GMT Subject: CN=524D6FF2B7EF4144D227A8F4A8272915EBE26C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:2e:02:8a:69:d8:75:1f:9c:16:16:7c:88: bc:90:7f:b6:8d:38:e2:e3:07:79:35:7b:cd:10:7c: 20:ae:13:cb:5a:7a:04:a9:fa:09:f7:b5:23:1b:3a: bf:25:16:07:85:de:86:fe:e8:2d:2f:71:d4:32:92: 1a:ac:db:49:3e:da:66:75:7c:cd:8e:70:54:4f:13: 37:e7:06:6a:7e:9a:22:de:df:fc:bc:54:fa:aa:1c: d3:9c:cc:21:06:a9:1f:70:59:47:5b:bd:32:7e:ac: 03:db:d1:b0:46:02:6b:19:ea:14:c4:1f:47:41:ca: cd:7b:bc:96:0b:2d:20:ab:b9:84:d7:8f:01:7f:94: bb:9b:4c:60:3b:fa:b3:a0:c9:8d:85:b2:b1:25:b9: 01:34:0d:5b:5d:83:77:4e:1e:3f:ca:f5:f1:07:6b: b5:d3:69:c6:d1:3f:bc:3f:e7:b8:30:9a:a2:27:0e: 18:e1:eb:82:74:db:6d:99:39:26:52:88:e3:e7:b2: e9:23:e5:44:f4:57:c9:31:a8:a5:bb:9a:e7:76:8e: 01:a1:9d:9e:94:b9:f7:54:81:8b:f4:68:e7:0c:3c: 93:73:7d:23:bf:03:05:37:72:7c:5b:be:05:ee:ea: 9b:6a:c3:d9:6a:c1:24:2a:3e:c5:4d:30:e5:58:4a: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4D:6F:F2:B7:EF:41:44:D2:27:A8:F4:A8:27:29:15:EB:E2:6C:0B X509v3 Authority Key Identifier: keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/3139322e302e312e302f32342d3234203d3e203437323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.0.1.0/24 Signature Algorithm: sha256WithRSAEncryption a1:40:d0:a5:5b:95:7f:91:3a:ec:eb:da:b5:06:39:6a:e0:78: c7:3d:f3:01:d5:d0:9c:37:3e:33:1a:46:56:a1:0d:12:55:1d: 87:00:93:47:a4:d0:42:b5:06:60:70:bc:48:28:f1:fe:d1:98: bf:55:e5:46:f5:2a:f3:dc:5a:3f:26:09:08:1c:cf:6a:1d:8c: cb:06:77:f6:7a:5a:ae:37:eb:f7:34:b8:15:ee:9b:39:f4:dd: e5:78:94:e7:75:46:64:42:09:f4:8a:8c:40:11:7b:0f:e5:5f: a0:ee:4a:9c:a6:7e:16:97:b4:e5:6b:8f:42:85:a9:04:8b:a5: 0c:4c:8e:33:21:27:55:5c:21:a2:43:06:0f:85:65:e7:04:b2: 45:02:ab:ea:ef:cf:b0:87:a2:82:5e:06:ca:af:14:16:98:ac: d6:f0:e5:1a:af:7d:8c:43:52:34:15:35:c8:01:dc:53:c3:51: 54:5f:16:db:05:a2:e7:5f:c9:81:52:3a:f1:1d:69:6c:fc:2a: 0b:53:d0:a9:73:2e:d9:4d:cc:9c:ad:96:b0:71:0c:0e:b7:b2: 46:0f:60:3a:5b:a1:3e:82:04:7e:71:79:cb:a7:24:f4:2f:3a: b6:0e:4d:8a:d5:6d:16:0c:51:69:d3:8d:dd:83:c8:ce:0e:f2: 48:3d:fc:5b -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUBb5+mNJ2ojkMUHWiujf6V/jXvRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYWQzMTkyODNmYjI0MjJiNGQwMGMwODQ5 YjlhODNjOTY0NGY4ODhjYmIwHhcNMjUxMDA2MTUzNjUxWhcNMjYxMDA1MTU0MTUx WjAzMTEwLwYDVQQDEyg1MjRENkZGMkI3RUY0MTQ0RDIyN0E4RjRBODI3MjkxNUVC RTI2QzBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3cuAopp2HUf nBYWfIi8kH+2jTji4wd5NXvNEHwgrhPLWnoEqfoJ97UjGzq/JRYHhd6G/ugtL3HU MpIarNtJPtpmdXzNjnBUTxM35wZqfpoi3t/8vFT6qhzTnMwhBqkfcFlHW70yfqwD 29GwRgJrGeoUxB9HQcrNe7yWCy0gq7mE148Bf5S7m0xgO/qzoMmNhbKxJbkBNA1b XYN3Th4/yvXxB2u102nG0T+8P+e4MJqiJw4Y4euCdNttmTkmUojj57LpI+VE9FfJ Mailu5rndo4BoZ2elLn3VIGL9GjnDDyTc30jvwMFN3J8W74F7uqbasPZasEkKj7F TTDlWErB8QIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFFJNb/K370FE0ieo9KgnKRXr 4mwLMB8GA1UdIwQYMBaAFID1Ai1qifTqV6sPYTHTNmGqwwvpMA4GA1UdDwEB/wQE AwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzovL2tyaWxsLjQ3MjcyLm5ldC9y ZXBvL0hZRUhPU1QvMS84MEY1MDIyRDZBODlGNEVBNTdBQjBGNjEzMUQzMzY2MUFB QzMwQkU5LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5 bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEy M2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QvMDJjNzcwNmItM2JhZi00MmNiLWJkZjctNzgy YjAzNjI1MmIzL2Y0NGM4MmRhYmFkMzE5MjgzZmIyNDIyYjRkMDBjMDg0OWI5YTgz Yzk2NDRmODg4Y2JiLmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3Jz eW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9TVC8xLzMxMzkzMjJlMzAy ZTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzMyMzczMi5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMAAATANBgkqhkiG9w0BAQsFAAOCAQEAoUDQpVuVf5E67OvatQY5auB4xz3zAdXQ nDc+MxpGVqENElUdhwCTR6TQQrUGYHC8SCjx/tGYv1XlRvUq89xaPyYJCBzPah2M ywZ39nparjfr9zS4Fe6bOfTd5XiU53VGZEIJ9IqMQBF7D+VfoO5KnKZ+Fpe05WuP QoWpBIulDEyOMyEnVVwhokMGD4Vl5wSyRQKr6u/PsIeigl4Gyq8UFpis1vDlGq99 jENSNBU1yAHcU8NRVF8W2wWi51/JgVI68R1pbPwqC1PQqXMu2U3MnK2WsHEMDrey Rg9gOluhPoIEfnF5y6ck9C86tg5NitVtFgxRadON3YPIzg7ySD38Ww== -----END CERTIFICATE-----Generated at Mon Oct 20 02:47:47 2025 by rpki-client