
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/3139322e302e312e302f32342d3332203d3e20323036393234.roa
File: 3139322e302e312e302f32342d3332203d3e20323036393234.roa (raw, json)
Hash identifier: pqnStJBvTRyytyBJLn4RqHvsUPtqMnAx2tGe3zf9H+A=
Subject key identifier: 01:92:F4:25:C9:78:FA:98:B6:29:E1:2D:91:2F:8D:C6:D5:50:BA:BF
Certificate issuer: /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial: 4F95CE71E20C0982830A81BF359E84ED775C7BD0
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/1/3139322e302e312e302f32342d3332203d3e20323036393234.roa
Signing time: Sun 15 Mar 2026 14:44:52 +0000
ROA not before: Sun 15 Mar 2026 14:39:52 +0000
ROA not after: Sun 14 Mar 2027 14:44:52 +0000
asID: 206924
IP address blocks: 192.0.1.0/24 maxlen: 32
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 22:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:95:ce:71:e2:0c:09:82:83:0a:81:bf:35:9e:84:ed:77:5c:7b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Validity
Not Before: Mar 15 14:39:52 2026 GMT
Not After : Mar 14 14:44:52 2027 GMT
Subject: CN=0192F425C978FA98B629E12D912F8DC6D550BABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:98:7e:89:0e:d7:ac:b2:8c:80:b1:3c:17:
3a:db:1f:ff:bf:5b:1c:1e:3f:94:9e:40:f2:5b:c7:
64:d3:b3:db:d4:83:88:38:20:77:85:21:2f:24:1a:
66:70:df:27:79:fc:6c:f8:9a:c2:60:8c:30:a3:dd:
21:da:c1:ac:39:4e:d1:1f:00:9b:17:1c:d4:eb:ca:
35:e2:e1:34:7d:6e:8e:a5:34:ae:a3:fe:4e:b5:1e:
37:91:64:30:41:ea:8d:09:a6:56:8f:02:77:bd:36:
15:c8:2e:fa:ee:8c:79:18:64:11:2a:43:12:86:41:
c6:f6:fa:75:46:a7:74:2e:67:62:a4:e1:b4:da:1c:
d7:cc:dc:8a:e1:05:65:2b:a1:69:72:c4:14:2d:e5:
b5:8b:6b:97:bd:88:ee:a0:82:9e:d1:96:f2:50:fa:
90:6d:16:21:90:a6:5f:07:9b:70:79:b5:60:90:de:
af:7e:bb:5d:a1:d9:30:6d:9c:2f:79:76:29:ec:b7:
8b:80:cb:85:82:2b:97:00:06:d1:c4:3a:4c:46:2f:
c0:f9:57:b9:df:ef:6d:84:1a:4c:1b:48:77:1b:ac:
23:0f:ce:74:22:89:83:d1:41:d4:85:ad:0c:72:0b:
47:41:e9:5e:21:1a:05:45:c2:bd:09:e6:45:cf:c9:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:92:F4:25:C9:78:FA:98:B6:29:E1:2D:91:2F:8D:C6:D5:50:BA:BF
X509v3 Authority Key Identifier:
keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/3139322e302e312e302f32342d3332203d3e20323036393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.0.1.0/24
Signature Algorithm: sha256WithRSAEncryption
09:27:cb:3c:df:cc:25:ac:ac:2b:a6:fb:48:20:27:e6:1d:4c:
ae:af:60:89:42:db:84:a9:29:a1:b5:68:14:c1:81:84:06:c7:
87:ab:2d:81:36:69:fd:ed:22:1a:e8:2e:a4:b7:57:b1:08:52:
ff:0f:61:30:a6:eb:32:d9:eb:6c:84:12:96:3b:7b:d6:9d:f0:
cb:bf:0e:f2:64:0c:f6:81:c1:83:1d:ea:05:31:ce:b3:65:bd:
64:74:9c:ed:c8:67:04:67:56:39:5b:bc:30:5a:42:cc:d1:b5:
0d:04:c5:cf:65:e5:ac:d0:4e:f8:bb:ce:79:94:62:f7:05:f8:
2f:88:9e:42:58:08:a7:d8:29:cd:df:d4:91:a0:c9:3f:fd:25:
2b:d8:02:d7:17:68:e5:c1:ef:f0:ec:59:a8:bf:20:e7:c3:f8:
36:64:fd:31:ed:c2:fa:b0:e4:61:84:fb:ad:b0:fa:21:df:02:
36:83:39:7b:e0:f0:fb:1f:6d:1f:52:22:db:50:38:af:25:09:
65:b8:96:72:b7:dc:d2:be:37:e9:a6:60:97:bf:bb:88:7d:b3:
a7:78:9f:a4:48:2b:30:1d:5e:dc:68:86:4b:8e:95:0e:a2:16:
16:6e:0b:15:52:79:0b:e2:17:dc:a2:64:da:31:6e:77:8a:79:
8a:c2:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:53 2026 by rpki-client