$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS8075.roa File: AS8075.roa (raw, json) Hash identifier: X9aL/Js9kkf7QGZt748Ypm8V6iC+HIuqNWus25BLNRY= Subject key identifier: 16:8C:26:48:02:A9:FD:5A:8B:0F:EC:17:16:FF:69:21:5C:01:54:E3 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4294EA0DC857B4B441E613BDC3F9EC1FDAFD48B1 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS8075.roa Signing time: Sun 28 Jun 2026 18:57:43 +0000 ROA not before: Sun 28 Jun 2026 18:52:43 +0000 ROA not after: Sun 27 Jun 2027 18:57:43 +0000 asID: 8075 IP address blocks: 2a0f:6284:9ff::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:94:ea:0d:c8:57:b4:b4:41:e6:13:bd:c3:f9:ec:1f:da:fd:48:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:52:43 2026 GMT Not After : Jun 27 18:57:43 2027 GMT Subject: CN=168C264802A9FD5A8B0FEC1716FF69215C0154E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:88:9d:15:7a:d4:54:fd:fc:d3:50:d3:cd: cb:fc:c2:f1:c8:eb:7b:f2:8d:5c:86:09:09:b2:21: bf:6b:64:3d:42:85:5f:5c:0e:17:53:c0:bb:60:59: cd:e8:89:71:1d:51:c8:71:b8:3c:a5:6c:11:0e:e3: 86:6f:10:18:24:30:35:81:64:4a:c9:89:40:47:df: 44:0a:c9:de:35:43:18:9b:9c:5a:4e:f7:25:6a:c3: 2d:da:a9:ef:55:20:ae:d0:c4:7e:e7:17:df:14:d4: 72:97:11:e4:2b:d1:04:e2:cb:f9:a8:65:57:d7:d2: c2:0f:3d:ea:af:88:94:24:cd:26:2d:dc:79:7c:62: 91:2c:1a:ae:a2:05:aa:cf:d8:65:86:55:0b:a8:7e: 87:70:79:c9:31:e7:35:45:4b:e6:f2:6c:23:bc:c7: e2:99:e1:c1:b7:ff:d8:9d:67:03:c1:9b:76:d0:8c: 06:b4:61:94:3d:86:dc:20:bd:67:2f:51:24:af:63: 18:0c:68:c0:b1:b2:28:44:d9:bb:5f:87:e3:36:0e: 98:eb:bf:11:77:0c:be:9a:5b:59:2f:13:1c:84:47: 50:7e:2e:78:70:1e:4c:dc:9e:e3:38:ec:a5:d9:5b: df:91:96:25:79:b0:c7:e7:30:3c:f8:b8:02:28:e6: 99:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8C:26:48:02:A9:FD:5A:8B:0F:EC:17:16:FF:69:21:5C:01:54:E3 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS8075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:9ff::/48 Signature Algorithm: sha256WithRSAEncryption 52:2f:b5:1c:c4:90:ff:0b:c1:62:eb:69:18:56:75:00:25:8e: 7f:23:f9:a4:af:0e:8c:e3:d0:dd:09:f2:0f:71:9d:27:b3:83: c6:96:40:d5:23:34:28:c3:d4:0e:36:6a:2d:3e:95:8b:6d:06: e2:ef:33:c3:43:94:e8:27:d9:d7:da:a1:1f:df:77:c7:8d:b0: 4f:2b:61:7c:5c:c6:ea:8c:93:c6:cc:03:07:a5:3f:2f:e3:19: 3e:b3:0e:99:3f:22:b5:17:05:d9:f3:a5:b0:f1:4f:44:7d:bc: 6f:91:52:50:bf:76:fc:5d:1c:fc:7f:49:0d:9a:c2:93:47:51: af:a5:a5:5d:a4:7a:d0:d6:12:0e:d3:85:e0:27:41:52:f1:7f: f8:02:78:c2:75:cf:f9:c6:b3:31:6d:cc:d2:fb:c4:03:60:f9: 43:41:7a:e6:e5:f1:eb:2e:97:6d:2d:43:69:ab:a6:7f:89:b5: 2d:ed:d5:dd:91:73:d0:37:9e:56:c3:01:99:7d:20:3f:42:d7: 75:b5:3e:d8:26:5a:4a:12:c4:c6:97:9a:c3:f2:dc:cf:bf:07: de:9a:6e:a2:5a:a0:38:79:ee:26:b7:67:a4:fb:ed:d1:8b:09: e9:f6:5c:28:8f:d1:da:ad:cd:87:56:98:fb:d3:a7:62:0f:38: 47:64:4e:2c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUQpTqDchXtLRB5hO9w/nsH9r9SLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUyNDNaFw0yNzA2MjcxODU3NDNaMDMxMTAvBgNV BAMTKDE2OEMyNjQ4MDJBOUZENUE4QjBGRUMxNzE2RkY2OTIxNUMwMTU0RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJoidFXrUVP3801DTzcv8wvHI 63vyjVyGCQmyIb9rZD1ChV9cDhdTwLtgWc3oiXEdUchxuDylbBEO44ZvEBgkMDWB ZErJiUBH30QKyd41QxibnFpO9yVqwy3aqe9VIK7QxH7nF98U1HKXEeQr0QTiy/mo ZVfX0sIPPeqviJQkzSYt3Hl8YpEsGq6iBarP2GWGVQuofodweckx5zVFS+bybCO8 x+KZ4cG3/9idZwPBm3bQjAa0YZQ9htwgvWcvUSSvYxgMaMCxsihE2btfh+M2Dpjr vxF3DL6aW1kvExyER1B+LnhwHkzcnuM47KXZW9+RliV5sMfnMDz4uAIo5pnPAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUFowmSAKp/VqLD+wXFv9pIVwBVOMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME0GCCsGAQUFBwELBEEwPzA9BggrBgEFBQcwC4YxcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM4MDc1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9i hAn/MA0GCSqGSIb3DQEBCwUAA4IBAQBSL7UcxJD/C8Fi62kYVnUAJY5/I/mkrw6M 49DdCfIPcZ0ns4PGlkDVIzQow9QONmotPpWLbQbi7zPDQ5ToJ9nX2qEf33fHjbBP K2F8XMbqjJPGzAMHpT8v4xk+sw6ZPyK1FwXZ86Ww8U9EfbxvkVJQv3b8XRz8f0kN msKTR1GvpaVdpHrQ1hIO04XgJ0FS8X/4AnjCdc/5xrMxbczS+8QDYPlDQXrm5fHr LpdtLUNpq6Z/ibUt7dXdkXPQN55WwwGZfSA/Qtd1tT7YJlpKEsTGl5rD8tzPvwfe mm6iWqA4ee4mt2ek++3Riwnp9lwoj9Harc2HVpj706diDzhHZE4s -----END CERTIFICATE-----Generated at Tue Jul 21 04:53:17 2026 by rpki-client