$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS153997.roa File: AS153997.roa (raw, json) Hash identifier: UjHmAJHhK3FMU85Q3+cpfjD7CZ0t0/qs+vYo2NwDoP4= Subject key identifier: 64:67:E4:91:8A:1C:12:E9:25:79:21:08:87:FD:38:BF:E1:AB:A8:DA Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2F4EC438F006F98B0BD55DBE5280B0ABADD97FC1 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS153997.roa Signing time: Sun 28 Jun 2026 18:58:06 +0000 ROA not before: Sun 28 Jun 2026 18:53:06 +0000 ROA not after: Sun 27 Jun 2027 18:58:06 +0000 asID: 153997 IP address blocks: 2a0f:6284:e::/48 maxlen: 48 2a0f:6284:33ff::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4e:c4:38:f0:06:f9:8b:0b:d5:5d:be:52:80:b0:ab:ad:d9:7f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:53:06 2026 GMT Not After : Jun 27 18:58:06 2027 GMT Subject: CN=6467E4918A1C12E92579210887FD38BFE1ABA8DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2a:29:9c:21:1a:cc:9b:1d:fe:03:24:6a:c7: 5a:0a:c9:76:cb:49:54:7d:db:bf:53:04:bb:be:c2: 8d:ca:08:bb:49:c3:ad:53:89:2b:bf:3c:0d:81:79: e2:e1:8d:d3:5b:55:79:c1:52:06:cf:47:9b:c2:c5: ce:36:af:ee:27:85:87:93:5f:5a:cb:30:81:89:54: 27:46:b2:30:1a:94:2d:97:39:bc:96:7b:06:bb:b7: c3:fe:31:0a:50:86:2b:e7:35:7a:73:bc:7f:4d:8d: c4:8b:d9:70:37:8c:9f:90:10:74:be:92:89:be:86: ce:ab:f1:5d:c1:66:f0:b1:e1:5c:ef:d5:6e:ac:92: 5c:77:26:87:f0:89:f5:37:c8:fc:3d:81:58:8a:09: 33:72:e6:e5:05:de:4a:dd:ec:54:02:34:0a:da:dc: df:94:a9:67:5f:66:7b:ae:21:50:57:ae:05:e3:d6: bd:c4:1a:15:a5:6a:98:05:dd:99:f1:8f:94:c4:3c: 78:ee:e7:14:09:6e:51:11:5e:7a:2c:5f:a0:05:0e: 08:1f:4c:31:0a:00:de:2b:16:20:1b:27:3b:55:f3: 2a:49:ba:70:55:c9:c2:59:91:e0:17:e3:a8:5b:05: bb:67:84:ec:38:6a:c0:25:f3:bd:24:e7:ce:2e:d7: 24:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:E4:91:8A:1C:12:E9:25:79:21:08:87:FD:38:BF:E1:AB:A8:DA X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS153997.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:e::/48 2a0f:6284:33ff::/48 Signature Algorithm: sha256WithRSAEncryption 06:e9:f3:24:6e:7e:8a:26:89:c3:f1:e8:98:4d:68:01:06:5b: f0:08:66:91:aa:92:75:50:a7:d3:9b:a7:c9:de:77:fb:d9:78: 6a:27:bd:79:35:d5:99:9f:1e:d4:80:4f:b9:0d:06:bd:e6:13: 68:a4:f2:c0:a2:01:02:93:d8:30:1a:b1:bc:8c:db:66:35:ac: 7c:a4:33:cf:d1:31:dd:a4:5e:ab:b4:cb:83:f7:31:ac:85:75: 82:1c:8e:02:d9:61:20:f1:90:11:a4:5f:a4:d5:57:07:05:d7: d2:81:3a:0f:01:24:3e:d2:a8:49:3b:21:c8:62:8e:ba:62:ec: 6c:05:b7:fd:b6:46:c6:30:f6:8e:9e:b6:24:f4:04:85:27:76: 17:bf:9f:29:d2:0c:6b:b8:c4:d1:92:19:49:9c:7c:6d:d1:68: ea:ad:c8:37:30:77:52:8f:6c:16:8d:23:ab:42:40:f8:9b:13: 8b:29:3c:be:18:bd:d6:3a:44:11:b4:45:13:ed:05:94:18:2c: 8a:fa:6d:f0:09:65:7b:d9:5d:98:ca:ae:ca:af:f0:c1:c6:78: 6b:5f:a6:66:17:95:c8:51:d1:5a:8d:b8:cf:7f:b6:69:b2:31: 16:46:06:50:23:ce:ab:f1:87:81:f9:6e:59:13:2d:46:5d:e3: dc:d7:00:1b -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUL07EOPAG+YsL1V2+UoCwq63Zf8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUzMDZaFw0yNzA2MjcxODU4MDZaMDMxMTAvBgNV BAMTKDY0NjdFNDkxOEExQzEyRTkyNTc5MjEwODg3RkQzOEJGRTFBQkE4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKimcIRrMmx3+AyRqx1oKyXbL SVR9279TBLu+wo3KCLtJw61TiSu/PA2BeeLhjdNbVXnBUgbPR5vCxc42r+4nhYeT X1rLMIGJVCdGsjAalC2XObyWewa7t8P+MQpQhivnNXpzvH9NjcSL2XA3jJ+QEHS+ kom+hs6r8V3BZvCx4Vzv1W6sklx3JofwifU3yPw9gViKCTNy5uUF3krd7FQCNAra 3N+UqWdfZnuuIVBXrgXj1r3EGhWlapgF3Znxj5TEPHju5xQJblERXnosX6AFDggf TDEKAN4rFiAbJztV8ypJunBVycJZkeAX46hbBbtnhOw4asAl870k584u1yTnAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUZGfkkYocEukleSEIh/04v+GrqNowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxNTM5OTcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KEAA4DBwAqD2KEM/8wDQYJKoZIhvcNAQELBQADggEBAAbp8yRufoomicPx6JhN aAEGW/AIZpGqknVQp9Obp8ned/vZeGonvXk11ZmfHtSAT7kNBr3mE2ik8sCiAQKT 2DAasbyM22Y1rHykM8/RMd2kXqu0y4P3MayFdYIcjgLZYSDxkBGkX6TVVwcF19KB Og8BJD7SqEk7Ichijrpi7GwFt/22RsYw9o6etiT0BIUndhe/nynSDGu4xNGSGUmc fG3RaOqtyDcwd1KPbBaNI6tCQPibE4spPL4YvdY6RBG0RRPtBZQYLIr6bfAJZXvZ XZjKrsqv8MHGeGtfpmYXlchR0VqNuM9/tmmyMRZGBlAjzqvxh4H5blkTLUZd49zX ABs= -----END CERTIFICATE-----Generated at Fri Jul 10 16:12:07 2026 by rpki-client