$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: k1nhBd4aWoDEJviGE9eQj3d6Vyqr6o1+rDaprDrQ+gE= Subject key identifier: 85:00:50:25:A4:14:46:D6:CD:05:BB:5D:DC:CA:DD:87:23:EB:03:1A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 37D19DCC3EF62BFBEA8DA14E06D63D3C8FCEB533 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS20473.roa Signing time: Wed 23 Sep 2026 14:25:13 +0000 ROA not before: Wed 23 Sep 2026 14:20:13 +0000 ROA not after: Wed 22 Sep 2027 14:25:13 +0000 asID: 20473 IP address blocks: 2a0a:6044:6600::/40 maxlen: 48 2a0a:6044:7300::/40 maxlen: 40 2a0a:6044:ac60::/44 maxlen: 48 2a0f:6280:1007::/48 maxlen: 48 2a0f:6280:1050::/48 maxlen: 48 2a0f:6282:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d1:9d:cc:3e:f6:2b:fb:ea:8d:a1:4e:06:d6:3d:3c:8f:ce:b5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 23 14:20:13 2026 GMT Not After : Sep 22 14:25:13 2027 GMT Subject: CN=85005025A41446D6CD05BB5DDCCADD8723EB031A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2b:10:f3:3e:5e:62:26:61:77:98:fb:78:b1: ec:04:01:5a:a6:8a:fe:3d:84:97:ee:41:67:ad:03: fe:19:ef:d3:64:c9:f5:42:fb:75:3d:28:5e:87:0a: b1:97:dd:71:15:15:fc:19:7c:dd:46:61:4e:f5:5d: 5f:15:0b:18:38:e2:79:fb:88:7e:92:30:88:42:e9: 56:0a:cd:50:77:1d:9f:f0:3a:f7:27:c7:95:8e:46: 45:41:64:d3:30:2f:1c:cd:68:3b:90:11:71:5b:c3: a1:c2:84:0f:a7:b4:10:11:0c:6e:c3:b2:49:63:d8: 92:b7:ed:ea:a6:29:40:75:40:44:c3:fc:80:6a:e8: 79:eb:4f:f2:14:66:98:8f:26:5b:5f:e4:72:ae:f0: 14:ab:1f:e6:93:f0:1e:d4:39:14:83:b9:e2:b7:5b: d2:36:07:bc:ef:bc:42:8c:42:97:91:80:3f:d7:15: f3:a4:50:52:fc:e7:b9:bf:d0:08:c3:11:45:8c:65: c9:a8:2f:01:9c:0a:0b:50:be:08:57:f8:35:6f:cd: 74:94:b1:38:80:73:5e:e4:1d:2b:3f:5d:66:17:c6: 81:04:0b:6c:d3:10:f7:81:4e:59:83:0f:24:1f:e5: 11:8d:b1:7b:d9:7b:81:ef:4a:6a:4b:7f:40:10:ae: 4d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:00:50:25:A4:14:46:D6:CD:05:BB:5D:DC:CA:DD:87:23:EB:03:1A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6600::/40 2a0a:6044:7300::/40 2a0a:6044:ac60::/44 2a0f:6280:1007::/48 2a0f:6280:1050::/48 2a0f:6282:4000::/36 Signature Algorithm: sha256WithRSAEncryption 29:ab:5c:6b:87:fb:d8:b2:cd:73:5d:b7:d8:49:06:76:26:be: d3:fd:37:be:76:5c:e0:17:c2:43:4e:a5:c4:51:ea:21:54:d0: eb:d3:78:1a:a4:19:d3:63:bd:33:97:ea:18:80:f8:4f:09:d4: 60:8a:82:7e:b4:79:56:1b:72:1d:df:4e:42:cd:21:e0:e3:ab: e7:fb:38:fe:13:62:52:c0:c7:8f:cb:d7:f9:1e:c9:72:30:e0: 83:78:68:d8:57:e1:6c:b7:8c:50:4a:f5:2d:eb:35:93:a5:6e: 6c:c7:04:dd:41:e7:84:0a:ba:e4:92:0d:ba:60:fd:aa:89:bd: 3d:ea:e8:da:79:b3:85:22:65:42:0e:68:a9:50:38:ef:fa:a5: 41:c5:bd:7f:65:dd:69:a4:97:14:fc:6b:16:7b:9d:ea:c1:db: 56:d7:36:96:f7:c7:ee:00:2a:c8:4a:28:cd:e0:04:aa:32:72: 2d:31:22:d4:0d:7e:ea:f7:65:4b:9c:85:02:3c:4e:4b:ac:ff: 4c:d3:c8:44:ee:15:b5:e1:b7:54:d8:06:29:f7:02:af:3f:e3: d0:ff:8c:82:ed:8e:a4:ff:97:18:f2:5f:ba:b0:5c:14:eb:8d: d7:aa:45:be:db:8e:2f:e0:2e:c5:c3:b4:d4:e3:f8:3d:bc:0b: 8d:69:da:83 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUN9GdzD72K/vqjaFOBtY9PI/OtTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MjMxNDIwMTNaFw0yNzA5MjIxNDI1MTNaMDMxMTAvBgNV BAMTKDg1MDA1MDI1QTQxNDQ2RDZDRDA1QkI1RERDQ0FERDg3MjNFQjAzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaKxDzPl5iJmF3mPt4sewEAVqm iv49hJfuQWetA/4Z79NkyfVC+3U9KF6HCrGX3XEVFfwZfN1GYU71XV8VCxg44nn7 iH6SMIhC6VYKzVB3HZ/wOvcnx5WORkVBZNMwLxzNaDuQEXFbw6HChA+ntBARDG7D sklj2JK37eqmKUB1QETD/IBq6HnrT/IUZpiPJltf5HKu8BSrH+aT8B7UORSDueK3 W9I2B7zvvEKMQpeRgD/XFfOkUFL857m/0AjDEUWMZcmoLwGcCgtQvghX+DVvzXSU sTiAc17kHSs/XWYXxoEEC2zTEPeBTlmDDyQf5RGNsXvZe4HvSmpLf0AQrk03AgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUhQBQJaQURtbNBbtd3MrdhyPrAxowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDQ3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB/wQ9MDswOQQCAAIwMwMGACoK YERmAwYAKgpgRHMDBwQqCmBErGADBwAqD2KAEAcDBwAqD2KAEFADBgQqD2KCQDAN BgkqhkiG9w0BAQsFAAOCAQEAKatca4f72LLNc1232EkGdia+0/03vnZc4BfCQ06l xFHqIVTQ69N4GqQZ02O9M5fqGID4TwnUYIqCfrR5VhtyHd9OQs0h4OOr5/s4/hNi UsDHj8vX+R7JcjDgg3ho2FfhbLeMUEr1Les1k6VubMcE3UHnhAq65JINumD9qom9 Pero2nmzhSJlQg5oqVA47/qlQcW9f2XdaaSXFPxrFnud6sHbVtc2lvfH7gAqyEoo zeAEqjJyLTEi1A1+6vdlS5yFAjxOS6z/TNPIRO4VteG3VNgGKfcCrz/j0P+Mgu2O pP+XGPJfurBcFOuN16pFvtuOL+AuxcO01OP4PbwLjWnagw== -----END CERTIFICATE-----Generated at Wed Sep 23 18:43:46 2026 by rpki-client