$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS133504.roa File: AS133504.roa (raw, json) Hash identifier: 3mkg2e4rqEMwwfTLb4Vir73aWzVNoxPAltIXZ5AHukM= Subject key identifier: E1:6A:78:A8:C7:93:C3:3C:2F:41:33:BB:85:9C:FF:30:4B:44:08:B2 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 20DDEC3008C7E261CA976E36414D0A38F32E9E7F Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS133504.roa Signing time: Wed 29 Jul 2026 09:21:25 +0000 ROA not before: Wed 29 Jul 2026 09:16:25 +0000 ROA not after: Wed 28 Jul 2027 09:21:25 +0000 asID: 133504 IP address blocks: 2a05:dfc3:f700::/40 maxlen: 48 2a05:dfc3:f750::/44 maxlen: 48 2a05:dfc3:f760::/44 maxlen: 48 2a06:1281:80::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 15:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:dd:ec:30:08:c7:e2:61:ca:97:6e:36:41:4d:0a:38:f3:2e:9e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 29 09:16:25 2026 GMT Not After : Jul 28 09:21:25 2027 GMT Subject: CN=E16A78A8C793C33C2F4133BB859CFF304B4408B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:76:a3:f5:d5:fa:5d:0c:65:3c:7d:b2:56: f0:ca:71:06:eb:3e:21:5c:e9:96:5d:7f:76:4e:b7: 31:7f:6e:c4:d5:92:f9:b1:f9:f2:03:88:ba:13:26: 2b:40:f0:7b:a5:9e:ac:bc:8a:62:9f:8c:21:1e:e8: 2a:d4:41:42:73:ac:57:3f:64:e7:0e:e4:22:ca:28: 7e:14:e0:3e:be:75:08:e6:d3:64:e1:f9:2d:85:fb: f6:38:68:3c:a8:33:04:fd:20:81:6e:16:ff:59:bd: 61:23:ca:ee:52:c5:a9:d5:46:72:d1:91:0a:70:b7: cc:89:bc:8a:47:0d:fc:75:7e:00:d4:ba:e7:3f:fc: 0d:9c:26:96:7d:a4:2d:c5:bb:df:7b:ae:33:ee:71: 9b:ea:40:b7:87:24:9f:bc:cb:bc:32:1c:4c:39:6f: dc:c9:77:a7:a9:1f:c7:7f:09:75:42:ad:9e:5b:7a: 8e:c8:25:b8:6e:b8:15:83:fa:60:18:2e:d9:33:a1: 5b:c9:4f:99:b4:98:59:d2:1a:c7:c2:b7:15:4d:2d: 81:e1:4e:91:56:09:2f:e3:ec:dc:87:95:a0:27:d2: 1e:0d:81:18:e0:e5:a7:b1:e3:86:2e:c6:ff:bb:93: f0:0a:64:8c:a6:c4:8d:99:bf:7d:4c:85:a4:4a:cd: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6A:78:A8:C7:93:C3:3C:2F:41:33:BB:85:9C:FF:30:4B:44:08:B2 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS133504.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f700::/40 2a06:1281:80::/44 Signature Algorithm: sha256WithRSAEncryption 85:7f:ff:3e:f3:c2:73:d2:b7:8e:8b:18:2b:da:43:e3:ee:6d: 22:5c:19:ce:e6:6e:c7:9a:32:a9:b0:78:9a:23:7a:f5:71:90: 4f:6b:f1:0e:51:fa:ec:93:fd:53:8e:51:bb:5a:5b:af:ec:ce: 46:d1:94:f4:30:27:98:72:65:e5:6a:f4:cb:80:92:f8:e7:7f: 93:a3:36:cb:e1:23:e6:52:bb:c7:a3:03:a0:fb:29:c7:0a:a9: 15:10:71:bb:ed:d3:9f:0c:20:c0:eb:85:d3:fe:8f:43:91:a6: 14:63:10:f7:74:85:a5:e3:5b:77:83:e3:be:cd:83:ae:8b:51: 55:0f:db:d2:3b:8f:a2:f9:05:08:38:78:40:83:a1:e6:92:75: de:dc:60:6c:0f:9c:c4:85:84:b3:cf:ef:d3:fc:53:4a:67:8a: 9c:8c:50:3b:40:12:30:3f:b0:a6:be:eb:42:7f:b1:79:3f:81: 09:51:89:64:53:9a:5a:1e:4c:17:77:d3:84:92:28:b8:8d:6f: 0b:94:12:38:f8:7e:a5:98:76:16:ab:a4:4a:0f:cb:d4:79:4f: 17:fb:8e:ea:eb:2d:a6:f1:a6:67:0b:c5:96:2b:76:a6:ad:9a: b2:75:66:2f:2c:e1:f1:53:98:22:a8:2e:1f:0c:bc:c2:47:35: dd:84:d1:48 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUIN3sMAjH4mHKl242QU0KOPMunn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjkwOTE2MjVaFw0yNzA3MjgwOTIxMjVaMDMxMTAvBgNV BAMTKEUxNkE3OEE4Qzc5M0MzM0MyRjQxMzNCQjg1OUNGRjMwNEI0NDA4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosHaj9dX6XQxlPH2yVvDKcQbr PiFc6ZZdf3ZOtzF/bsTVkvmx+fIDiLoTJitA8Hulnqy8imKfjCEe6CrUQUJzrFc/ ZOcO5CLKKH4U4D6+dQjm02Th+S2F+/Y4aDyoMwT9IIFuFv9ZvWEjyu5SxanVRnLR kQpwt8yJvIpHDfx1fgDUuuc//A2cJpZ9pC3Fu997rjPucZvqQLeHJJ+8y7wyHEw5 b9zJd6epH8d/CXVCrZ5beo7IJbhuuBWD+mAYLtkzoVvJT5m0mFnSGsfCtxVNLYHh TpFWCS/j7NyHlaAn0h4NgRjg5aex44Yuxv+7k/AKZIymxI2Zv31MhaRKzZFFAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQU4Wp4qMeTwzwvQTO7hZz/MEtECLIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxMzM1MDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBgAq Bd/D9wMHBCoGEoEAgDANBgkqhkiG9w0BAQsFAAOCAQEAhX//PvPCc9K3josYK9pD 4+5tIlwZzuZux5oyqbB4miN69XGQT2vxDlH67JP9U45Ru1pbr+zORtGU9DAnmHJl 5Wr0y4CS+Od/k6M2y+Ej5lK7x6MDoPspxwqpFRBxu+3TnwwgwOuF0/6PQ5GmFGMQ 93SFpeNbd4Pjvs2DrotRVQ/b0juPovkFCDh4QIOh5pJ13txgbA+cxIWEs8/v0/xT SmeKnIxQO0ASMD+wpr7rQn+xeT+BCVGJZFOaWh5MF3fThJIouI1vC5QSOPh+pZh2 FqukSg/L1HlPF/uO6ustpvGmZwvFlit2pq2asnVmLyzh8VOYIqguHwy8wkc13YTR SA== -----END CERTIFICATE-----Generated at Thu Aug 13 07:12:08 2026 by rpki-client