$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS136535.roa File: AS136535.roa (raw, json) Hash identifier: Rku58YUTCQAWCJbmKxDWbRQuZNSd+QSAj61KJP1vC7E= Subject key identifier: 5A:4A:A0:1C:F3:02:64:6E:D6:E6:AA:0A:63:16:B4:7C:FB:73:71:4E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 42622411411A92800DA55EA7AC444CD8AC679953 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS136535.roa Signing time: Mon 17 Aug 2026 06:25:48 +0000 ROA not before: Mon 17 Aug 2026 06:20:48 +0000 ROA not after: Mon 16 Aug 2027 06:25:48 +0000 asID: 136535 IP address blocks: 2a0f:6280:1700::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 03:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:62:24:11:41:1a:92:80:0d:a5:5e:a7:ac:44:4c:d8:ac:67:99:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 17 06:20:48 2026 GMT Not After : Aug 16 06:25:48 2027 GMT Subject: CN=5A4AA01CF302646ED6E6AA0A6316B47CFB73714E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1b:44:70:39:20:79:2a:e1:50:62:05:d3:56: b8:97:39:1a:b5:d3:6e:1d:42:e3:dd:9b:c4:73:e5: 9b:0c:c9:f2:35:c5:7e:0d:91:84:7a:c2:71:64:ed: 57:d4:d5:3a:14:de:78:72:07:70:e3:4e:c8:4d:f3: 57:8a:83:41:72:56:86:a4:4b:ed:b0:6c:36:5d:dc: be:28:82:71:30:c2:9d:17:3e:b8:3c:e9:87:7c:8f: 65:d2:bf:9a:81:20:c2:2f:0f:55:24:19:fa:75:e2: df:32:48:63:84:40:3c:e9:14:18:b9:13:dd:57:b2: 26:28:c5:9b:56:82:20:bb:41:bf:5d:9a:40:ae:ae: 93:d6:68:53:e2:af:59:e7:27:4b:a8:53:b3:64:b0: 04:ed:ff:a9:96:9d:2a:4f:79:94:09:aa:77:0a:17: 1e:82:fd:2c:58:e0:9d:49:1b:63:1e:c3:f4:2e:de: 1c:99:79:c6:0c:8f:a1:18:12:d0:c9:01:ca:1d:71: 69:1c:c4:9e:da:70:ee:36:2c:42:b0:66:22:7d:3a: 16:74:db:dd:39:1e:a1:71:61:9d:ba:01:61:69:47: 38:2d:c6:5a:70:e2:87:5c:c9:35:5e:d4:88:7a:d2: 6d:04:b4:81:e6:e3:af:39:98:64:a2:8e:0a:a4:bf: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4A:A0:1C:F3:02:64:6E:D6:E6:AA:0A:63:16:B4:7C:FB:73:71:4E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS136535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1700::/40 Signature Algorithm: sha256WithRSAEncryption 2b:5d:36:60:0b:5f:5b:61:6b:b7:ab:9d:ce:c7:cf:e0:30:de: 8b:65:c9:93:37:da:86:6a:74:7c:1d:0f:8d:98:1c:5d:37:3c: b3:f7:51:4a:e4:a4:28:d8:f3:46:75:5a:67:c7:52:ee:ef:12: ad:0a:58:4f:93:e2:86:30:9b:e2:1d:15:85:4e:63:bc:e8:7e: d0:91:5f:df:0f:45:b1:0f:9d:ca:ad:9a:64:b0:0b:06:87:06: 70:82:0c:eb:d4:67:52:a6:0b:5f:34:c2:73:25:e2:b4:77:51: 00:01:f4:1c:46:24:35:3c:90:bc:29:9d:64:a1:52:1f:7b:a5: 2a:67:a5:0b:95:72:cc:cf:22:77:b2:38:21:05:c6:51:f5:0c: c4:9f:e8:27:01:2b:4c:24:d7:1e:b1:6e:52:35:d3:31:75:0a: 14:53:d4:18:f5:60:5c:29:47:2c:a7:6b:41:34:96:e6:0b:8b: 56:30:d5:ac:0f:f5:00:68:84:d0:42:29:eb:6b:d0:4f:47:6d: fa:ed:f1:ed:a1:5e:f0:3f:d1:15:17:9d:00:03:fe:b0:df:2e: 8e:8c:aa:11:bf:b2:bc:c1:4e:14:bd:5d:33:82:67:31:96:4b: 42:28:8f:0e:74:a0:5d:a5:8e:13:59:77:f5:64:18:05:e6:18: 1f:c4:72:75 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUQmIkEUEakoANpV6nrERM2KxnmVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTcwNjIwNDhaFw0yNzA4MTYwNjI1NDhaMDMxMTAvBgNV BAMTKDVBNEFBMDFDRjMwMjY0NkVENkU2QUEwQTYzMTZCNDdDRkI3MzcxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLG0RwOSB5KuFQYgXTVriXORq1 024dQuPdm8Rz5ZsMyfI1xX4NkYR6wnFk7VfU1ToU3nhyB3DjTshN81eKg0FyVoak S+2wbDZd3L4ognEwwp0XPrg86Yd8j2XSv5qBIMIvD1UkGfp14t8ySGOEQDzpFBi5 E91XsiYoxZtWgiC7Qb9dmkCurpPWaFPir1nnJ0uoU7NksATt/6mWnSpPeZQJqncK Fx6C/SxY4J1JG2Mew/Qu3hyZecYMj6EYEtDJAcodcWkcxJ7acO42LEKwZiJ9OhZ0 2905HqFxYZ26AWFpRzgtxlpw4odcyTVe1Ih60m0EtIHm4685mGSijgqkvzcbAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUWkqgHPMCZG7W5qoKYxa0fPtzcU4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxMzY1MzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KAFzANBgkqhkiG9w0BAQsFAAOCAQEAK102YAtfW2Frt6udzsfP4DDei2XJkzfa hmp0fB0PjZgcXTc8s/dRSuSkKNjzRnVaZ8dS7u8SrQpYT5PihjCb4h0VhU5jvOh+ 0JFf3w9FsQ+dyq2aZLALBocGcIIM69RnUqYLXzTCcyXitHdRAAH0HEYkNTyQvCmd ZKFSH3ulKmelC5VyzM8id7I4IQXGUfUMxJ/oJwErTCTXHrFuUjXTMXUKFFPUGPVg XClHLKdrQTSW5guLVjDVrA/1AGiE0EIp62vQT0dt+u3x7aFe8D/RFRedAAP+sN8u joyqEb+yvMFOFL1dM4JnMZZLQiiPDnSgXaWOE1l39WQYBeYYH8RydQ== -----END CERTIFICATE-----Generated at Wed Aug 26 17:22:30 2026 by rpki-client