$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS199340.roa File: AS199340.roa (raw, json) Hash identifier: TjQiJOHPdXiIAyNu5mlvnktCIneljCoQgg6fAWBD8/g= Subject key identifier: 65:5E:E4:13:4C:A0:B5:61:49:D6:16:EA:61:27:E9:D9:15:03:8D:B9 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 34F626DF675AB0EAF0D3CC818C47A5940059E264 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS199340.roa Signing time: Sat 18 Oct 2025 07:41:06 +0000 ROA not before: Sat 18 Oct 2025 07:36:06 +0000 ROA not after: Sat 17 Oct 2026 07:41:06 +0000 asID: 199340 IP address blocks: 2a09:54c6:9000::/36 maxlen: 48 2a0f:6287:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f6:26:df:67:5a:b0:ea:f0:d3:cc:81:8c:47:a5:94:00:59:e2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 18 07:36:06 2025 GMT Not After : Oct 17 07:41:06 2026 GMT Subject: CN=655EE4134CA0B56149D616EA6127E9D915038DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:9c:eb:c4:2c:31:b7:37:6f:06:ca:fb:62: 44:36:32:a3:d2:20:e0:02:63:22:fc:0b:4d:6d:ce: 6a:5f:9a:69:e1:16:77:39:79:d8:e9:d5:be:b6:87: 44:12:42:78:54:b5:58:20:14:c4:34:58:d9:b5:e2: 60:07:fb:21:1c:81:22:63:4c:7a:6a:8d:07:bd:ea: 0a:83:a8:d3:f4:0b:26:c5:fa:cf:9a:20:9b:7f:f7: ad:9f:0b:4d:c6:cd:fb:2d:8e:a5:51:01:20:51:95: 4a:00:67:0d:ef:cf:2f:77:e3:7b:47:d1:42:2d:2e: f2:3d:ba:78:0f:cc:7a:ff:c6:3a:be:69:62:6c:68: 73:00:eb:a0:53:85:e1:e0:50:34:ec:e7:73:e1:77: 8f:a1:6a:fa:5b:81:e5:69:c6:1a:f8:50:3a:a3:44: 2c:c7:c7:fb:e6:39:07:1f:ac:88:99:e7:50:3b:6f: 1d:17:96:86:8d:ed:b4:28:60:05:29:13:1b:01:50: 4b:e3:4e:a9:b4:78:3c:a0:b5:2e:08:15:72:20:84: 9c:91:d3:18:9a:73:c0:0a:d5:06:f3:44:4e:98:0c: 91:cb:6a:86:7a:3b:47:64:e3:fa:26:59:72:73:5a: e2:11:81:a9:44:bc:24:f5:18:f9:5b:05:8a:55:08: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5E:E4:13:4C:A0:B5:61:49:D6:16:EA:61:27:E9:D9:15:03:8D:B9 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS199340.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:9000::/36 2a0f:6287:b000::/36 Signature Algorithm: sha256WithRSAEncryption 6b:e0:8c:3d:24:f6:39:41:b3:15:36:89:7f:af:5d:57:65:d4: 44:e4:f5:a1:a4:bf:8e:ea:ea:c1:73:a9:8f:92:77:32:bf:50: 17:5d:73:76:1d:7b:9d:70:64:85:7e:87:21:c5:d9:e4:4c:4a: a9:66:2b:e8:96:9a:85:01:2e:58:08:3d:e8:97:ad:0f:84:1d: 10:36:e6:5a:a8:96:55:fb:db:c0:37:8a:ac:b7:9d:f5:97:01: 27:94:da:16:dd:13:aa:a0:57:3f:8f:e2:f5:d0:82:38:ef:2e: 70:8b:9d:b8:a2:ae:6f:f0:21:55:5e:de:ed:4c:d1:00:14:be: 30:5a:c9:97:b7:3a:3d:e2:93:1d:0d:22:16:9d:94:94:84:3e: d1:ab:82:fa:57:eb:6a:0f:c2:d3:f4:00:7d:ca:8a:36:c4:4b: 4b:dd:70:c1:76:0b:7d:92:39:72:5d:f9:b2:75:e0:72:a9:ad: 44:7d:be:38:32:69:ee:6e:82:9c:d9:e2:d2:9c:04:f5:fb:44: 17:fd:d4:a4:00:e9:0e:a6:6a:3a:d2:13:d1:ab:89:9f:a8:6c: 75:dc:80:1b:f3:ba:56:75:1b:6d:a2:c9:46:92:e7:e2:19:5a: 6c:ce:36:bb:47:62:51:2b:d6:3b:8a:06:0a:80:83:66:55:ab: 7d:54:cf:45 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUNPYm32dasOrw08yBjEellABZ4mQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEwMTgwNzM2MDZaFw0yNjEwMTcwNzQxMDZaMDMxMTAvBgNV BAMTKDY1NUVFNDEzNENBMEI1NjE0OUQ2MTZFQTYxMjdFOUQ5MTUwMzhEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1G5zrxCwxtzdvBsr7YkQ2MqPS IOACYyL8C01tzmpfmmnhFnc5edjp1b62h0QSQnhUtVggFMQ0WNm14mAH+yEcgSJj THpqjQe96gqDqNP0CybF+s+aIJt/962fC03GzfstjqVRASBRlUoAZw3vzy9343tH 0UItLvI9ungPzHr/xjq+aWJsaHMA66BTheHgUDTs53Phd4+havpbgeVpxhr4UDqj RCzHx/vmOQcfrIiZ51A7bx0XloaN7bQoYAUpExsBUEvjTqm0eDygtS4IFXIghJyR 0xiac8AK1QbzRE6YDJHLaoZ6O0dk4/omWXJzWuIRgalEvCT1GPlbBYpVCJJnAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUZV7kE0ygtWFJ1hbqYSfp2RUDjbkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTkzNDAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgQq CVTGkAMGBCoPYoewMA0GCSqGSIb3DQEBCwUAA4IBAQBr4Iw9JPY5QbMVNol/r11X ZdRE5PWhpL+O6urBc6mPkncyv1AXXXN2HXudcGSFfochxdnkTEqpZivolpqFAS5Y CD3ol60PhB0QNuZaqJZV+9vAN4qst531lwEnlNoW3ROqoFc/j+L10II47y5wi524 oq5v8CFVXt7tTNEAFL4wWsmXtzo94pMdDSIWnZSUhD7Rq4L6V+tqD8LT9AB9yoo2 xEtL3XDBdgt9kjlyXfmydeByqa1Efb44MmnuboKc2eLSnAT1+0QX/dSkAOkOpmo6 0hPRq4mfqGx13IAb87pWdRttoslGkufiGVpszja7R2JRK9Y7igYKgINmVat9VM9F -----END CERTIFICATE-----Generated at Sun Oct 19 20:03:22 2025 by rpki-client