$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS205378.roa File: AS205378.roa (raw, json) Hash identifier: AlGZGjtAdqDJeJLOMHzFIOQEODoTJbBNPy0vDqOA84s= Subject key identifier: CA:CC:8B:61:A3:9E:0B:71:40:20:EB:14:4F:A4:82:E8:5A:8E:73:C1 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 13CD209B1C9A7393338B30ADC8C0B0A88D77EDE7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205378.roa Signing time: Tue 19 Aug 2025 21:42:09 +0000 ROA not before: Tue 19 Aug 2025 21:37:09 +0000 ROA not after: Tue 18 Aug 2026 21:42:09 +0000 asID: 205378 IP address blocks: 2a0f:6284:46a0::/48 maxlen: 48 2a0f:6284:46f0::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:cd:20:9b:1c:9a:73:93:33:8b:30:ad:c8:c0:b0:a8:8d:77:ed:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 19 21:37:09 2025 GMT Not After : Aug 18 21:42:09 2026 GMT Subject: CN=CACC8B61A39E0B714020EB144FA482E85A8E73C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:35:b4:52:55:e0:36:37:94:e1:94:26:b8: 4a:41:a0:fa:da:24:2a:ed:1f:f0:a9:1b:f2:a2:7b: f2:f4:21:6e:f7:fe:ce:be:c8:54:21:4a:7c:c9:a2: 24:ad:da:30:46:fb:46:32:20:a8:83:07:d9:b1:bf: a8:a7:28:f9:55:2f:06:dd:44:b2:e1:61:c8:96:dc: cd:99:0c:2f:88:14:20:90:e7:08:e2:49:58:7b:f2: 85:2d:ba:62:dc:66:e0:fb:00:07:4c:69:d5:28:53: a5:80:b0:16:6e:ba:75:e3:e6:d7:85:d1:17:d8:4e: a3:f5:d8:3d:e7:8b:45:8d:1a:dc:36:dc:e5:d4:f1: b3:e1:41:0a:e5:7d:a2:16:1a:f4:83:22:c3:bb:b5: b4:fd:2f:eb:d1:a2:b7:b0:06:95:44:dd:85:ad:e7: ba:86:1c:37:c3:61:9d:63:c9:c8:6e:1b:95:fd:a7: c4:d2:78:63:7a:da:ba:e1:c2:73:eb:96:57:b7:57: d8:ab:77:22:57:3c:05:70:ca:b0:1b:2f:5e:c0:3c: 2e:3e:50:af:c9:87:ae:59:11:72:18:a0:40:81:46: 71:25:26:f5:cd:5f:99:3a:f1:a6:aa:72:80:2e:ff: 08:6a:c2:22:57:11:76:34:3f:02:01:d3:39:f9:af: 6f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CC:8B:61:A3:9E:0B:71:40:20:EB:14:4F:A4:82:E8:5A:8E:73:C1 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205378.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:46a0::/48 2a0f:6284:46f0::/48 Signature Algorithm: sha256WithRSAEncryption 50:83:02:85:2a:6a:00:13:ea:5c:a4:9a:16:c5:4d:10:e1:20: 78:c2:f1:4f:6a:a0:bc:f8:c2:df:06:eb:1b:49:3a:8d:5d:5f: c3:f0:22:ac:4f:d4:97:e4:33:ce:57:08:cc:d1:25:bf:91:31: d1:b7:f5:e6:28:07:69:07:0d:e9:16:8b:40:09:35:df:cb:c5: 4e:63:7a:16:22:82:2e:cd:62:f3:a0:51:b9:dd:8c:1f:35:45: 0c:24:3e:30:b5:b8:36:aa:d7:8a:18:81:41:2a:f1:cb:65:62: 95:ca:25:80:a3:10:20:9e:f1:79:25:3f:39:4e:a1:9c:49:3e: ed:ce:9c:27:4d:5c:eb:3c:42:7d:dc:eb:55:3e:51:7a:9e:bc: db:b0:51:76:8f:9c:93:e8:da:f7:d4:a6:f8:ab:10:06:c8:1a: 1a:0c:95:24:72:45:a8:bb:5c:b0:f7:0e:b9:d1:95:20:d7:53: 70:50:88:ec:f7:d4:12:19:e5:4f:50:fa:0d:a9:f1:0d:31:55: d8:a0:c5:2a:24:cf:07:94:b9:2a:fa:47:31:e7:96:42:ab:00: e0:81:2f:87:44:1f:f9:0f:b9:07:de:56:12:2d:6e:cf:d6:5e: f0:b1:be:bd:d7:c6:d8:b0:dd:20:e6:4d:62:1d:f4:29:00:8c: f3:4d:f7:22 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUE80gmxyac5MzizCtyMCwqI137ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA4MTkyMTM3MDlaFw0yNjA4MTgyMTQyMDlaMDMxMTAvBgNV BAMTKENBQ0M4QjYxQTM5RTBCNzE0MDIwRUIxNDRGQTQ4MkU4NUE4RTczQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/TW0UlXgNjeU4ZQmuEpBoPra JCrtH/CpG/Kie/L0IW73/s6+yFQhSnzJoiSt2jBG+0YyIKiDB9mxv6inKPlVLwbd RLLhYciW3M2ZDC+IFCCQ5wjiSVh78oUtumLcZuD7AAdMadUoU6WAsBZuunXj5teF 0RfYTqP12D3ni0WNGtw23OXU8bPhQQrlfaIWGvSDIsO7tbT9L+vRorewBpVE3YWt 57qGHDfDYZ1jychuG5X9p8TSeGN62rrhwnPrlle3V9irdyJXPAVwyrAbL17APC4+ UK/Jh65ZEXIYoECBRnElJvXNX5k68aaqcoAu/whqwiJXEXY0PwIB0zn5r2/nAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUysyLYaOeC3FAIOsUT6SC6FqOc8EwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDUzNzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KERqADBwAqD2KERvAwDQYJKoZIhvcNAQELBQADggEBAFCDAoUqagAT6lykmhbF TRDhIHjC8U9qoLz4wt8G6xtJOo1dX8PwIqxP1JfkM85XCMzRJb+RMdG39eYoB2kH DekWi0AJNd/LxU5jehYigi7NYvOgUbndjB81RQwkPjC1uDaq14oYgUEq8ctlYpXK JYCjECCe8XklPzlOoZxJPu3OnCdNXOs8Qn3c61U+UXqevNuwUXaPnJPo2vfUpvir EAbIGhoMlSRyRai7XLD3DrnRlSDXU3BQiOz31BIZ5U9Q+g2p8Q0xVdigxSokzweU uSr6RzHnlkKrAOCBL4dEH/kPuQfeVhItbs/WXvCxvr3Xxtiw3SDmTWId9CkAjPNN 9yI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:00:40 2025 by rpki-client