$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS206987.roa File: AS206987.roa (raw, json) Hash identifier: iH7TizuGCF9AMCcpp+6RFgTdcWL1qMKlJGv4w7ITpzU= Subject key identifier: 3E:EE:6B:A6:64:8E:6F:7C:05:88:F8:D4:5B:AF:C8:93:E3:E4:69:DC Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 41B288287731BF317573DB0B49DE6FB4915019BF Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS206987.roa Signing time: Sun 14 Sep 2025 16:45:07 +0000 ROA not before: Sun 14 Sep 2025 16:40:07 +0000 ROA not after: Sun 13 Sep 2026 16:45:07 +0000 asID: 206987 IP address blocks: 2a0f:6283:1100::/48 maxlen: 48 2a0f:6284:4212::/48 maxlen: 48 2a0f:6284:4216::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 12:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b2:88:28:77:31:bf:31:75:73:db:0b:49:de:6f:b4:91:50:19:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 14 16:40:07 2025 GMT Not After : Sep 13 16:45:07 2026 GMT Subject: CN=3EEE6BA6648E6F7C0588F8D45BAFC893E3E469DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:99:20:fc:5c:29:2a:02:14:bd:c7:82:54: 5e:88:5f:ff:c0:f7:27:40:25:bc:6e:06:1d:80:f1: 9c:7b:e7:1e:a6:d7:8c:f2:7f:68:0b:88:3f:ef:e2: 2a:93:cf:e3:0d:48:96:1d:b7:ed:9b:01:9e:f6:09: 8e:50:9d:fc:8d:62:ac:1c:36:23:74:0f:19:e9:a9: 0d:f2:80:5e:c7:57:e5:02:dc:b8:68:cc:55:f8:af: c0:78:11:ae:5d:cf:96:7f:30:61:23:59:f9:e0:38: 55:2f:0e:64:5b:25:59:2b:76:4a:b4:44:05:39:a7: d6:85:41:56:32:0c:d7:39:62:3a:c6:10:56:71:b5: dc:6c:50:83:21:29:08:96:9f:1c:3b:ea:60:60:2b: c8:52:c6:29:33:84:f8:a3:64:d1:d1:5f:76:0a:32: ba:07:b7:f0:d3:c9:04:d1:67:08:8f:74:56:e5:11: 14:eb:8b:00:44:f9:03:fd:28:2f:e2:a6:c0:ce:07: 0a:7a:25:88:8c:6e:a1:00:25:b0:c8:f1:4d:bd:f3: 91:30:3e:48:39:a1:7f:e1:e9:f9:9d:ac:ce:25:1f: 30:64:9d:48:33:0c:ae:fd:32:2c:24:d7:2f:7f:c8: d0:1b:96:35:5a:b4:74:02:ef:ac:86:2f:09:df:be: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EE:6B:A6:64:8E:6F:7C:05:88:F8:D4:5B:AF:C8:93:E3:E4:69:DC X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS206987.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:1100::/48 2a0f:6284:4212::/48 2a0f:6284:4216::/48 Signature Algorithm: sha256WithRSAEncryption 23:e3:be:7d:6d:c1:c7:e2:89:04:e6:74:b8:04:ad:69:89:b6: d1:3a:d5:79:2a:3e:df:51:9c:4e:ab:4c:f0:cb:d5:d3:a4:db: 30:63:ff:5e:d0:bf:ee:18:cb:2c:9b:b7:10:30:99:26:5a:b6: eb:d4:60:f0:47:06:15:be:36:f2:40:cf:b7:11:45:1a:46:7d: ac:94:68:6d:ab:21:a3:77:5a:8d:6a:c2:03:7c:f8:b1:e7:b9: fe:d4:7b:47:da:b7:5c:a9:18:43:9f:1c:50:5d:2b:b1:ab:31: d9:61:36:51:9f:27:54:d6:75:ff:77:c0:f7:08:1a:66:e1:ee: 61:d9:a0:68:d7:3e:11:66:e2:2f:3c:5f:ed:2a:c5:9b:c0:73: 84:42:ea:16:a2:b6:fb:e6:80:95:bd:7c:de:ae:fb:7f:45:91: 20:cc:b7:08:f1:e7:fc:e1:23:c8:e8:bd:ef:ee:7f:59:f6:07: b8:b3:8d:69:24:f0:ce:f1:6c:0a:e4:02:b1:cd:ce:01:2c:7e: 52:6a:db:f2:64:3d:c0:41:75:d8:2c:e0:0e:23:6e:e9:e0:0a: 43:b8:ac:45:54:e8:9e:29:f3:b2:41:9d:ee:99:0c:ad:ef:8e: d4:5f:8e:3f:44:6b:9d:37:84:aa:1d:64:fb:4d:4a:e7:58:48: c2:64:e3:a6 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUQbKIKHcxvzF1c9sLSd5vtJFQGb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA5MTQxNjQwMDdaFw0yNjA5MTMxNjQ1MDdaMDMxMTAvBgNV BAMTKDNFRUU2QkE2NjQ4RTZGN0MwNTg4RjhENDVCQUZDODkzRTNFNDY5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf2Zkg/FwpKgIUvceCVF6IX//A 9ydAJbxuBh2A8Zx75x6m14zyf2gLiD/v4iqTz+MNSJYdt+2bAZ72CY5QnfyNYqwc NiN0DxnpqQ3ygF7HV+UC3LhozFX4r8B4Ea5dz5Z/MGEjWfngOFUvDmRbJVkrdkq0 RAU5p9aFQVYyDNc5YjrGEFZxtdxsUIMhKQiWnxw76mBgK8hSxikzhPijZNHRX3YK MroHt/DTyQTRZwiPdFblERTriwBE+QP9KC/ipsDOBwp6JYiMbqEAJbDI8U2985Ew Pkg5oX/h6fmdrM4lHzBknUgzDK79Miwk1y9/yNAbljVatHQC76yGLwnfvpdpAgMB AAGjggHxMIIB7TAdBgNVHQ4EFgQUPu5rpmSOb3wFiPjUW6/Ik+PkadwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDY5ODcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMCEEAgACMBsDBwAq D2KDEQADBwAqD2KEQhIDBwAqD2KEQhYwDQYJKoZIhvcNAQELBQADggEBACPjvn1t wcfiiQTmdLgErWmJttE61XkqPt9RnE6rTPDL1dOk2zBj/17Qv+4YyyybtxAwmSZa tuvUYPBHBhW+NvJAz7cRRRpGfayUaG2rIaN3Wo1qwgN8+LHnuf7Ue0fat1ypGEOf HFBdK7GrMdlhNlGfJ1TWdf93wPcIGmbh7mHZoGjXPhFm4i88X+0qxZvAc4RC6hai tvvmgJW9fN6u+39FkSDMtwjx5/zhI8jove/uf1n2B7izjWkk8M7xbArkArHNzgEs flJq2/JkPcBBddgs4A4jbungCkO4rEVU6J4p87JBne6ZDK3vjtRfjj9Ea503hKod ZPtNSudYSMJk46Y= -----END CERTIFICATE-----Generated at Sun Oct 19 22:29:26 2025 by rpki-client