$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS197737.roa File: AS197737.roa (raw, json) Hash identifier: KkifqdVA7L5U/+WJIw7QMEi8v6I0oMiqv276jROJdZc= Subject key identifier: 9A:84:B1:2C:D7:0D:CD:82:47:14:C3:4C:64:94:72:10:AD:92:4C:69 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0A43B87738B7611F8678BACBFF172539F15264B5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS197737.roa Signing time: Sun 28 Jun 2026 18:55:36 +0000 ROA not before: Sun 28 Jun 2026 18:50:36 +0000 ROA not after: Sun 27 Jun 2027 18:55:36 +0000 asID: 197737 IP address blocks: 2a0a:6044:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:43:b8:77:38:b7:61:1f:86:78:ba:cb:ff:17:25:39:f1:52:64:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:36 2026 GMT Not After : Jun 27 18:55:36 2027 GMT Subject: CN=9A84B12CD70DCD824714C34C64947210AD924C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:7b:df:a8:93:ca:1c:24:22:03:cc:87:4f: ac:4f:dd:6c:ea:01:b5:4b:1d:8d:c9:4b:86:42:b0: c2:1e:da:9e:23:d0:74:39:90:e2:d7:b2:b5:ff:c3: 34:0c:22:fa:bf:77:4a:af:d7:4e:88:fd:56:90:d8: 21:1d:e3:6c:34:88:41:19:9b:87:d2:de:e6:49:6e: 14:48:d7:c4:a2:73:59:cc:77:b9:46:05:b6:42:56: b9:1d:22:82:d4:e5:b1:8a:ba:97:43:87:ab:9d:19: de:f9:fc:b9:f8:02:38:62:82:64:6a:45:dd:84:00: a4:ec:ac:72:5e:8a:7e:5d:c6:ad:5a:d3:12:fb:76: 90:09:c2:9b:00:83:44:94:8f:9d:2a:9b:8d:7d:d4: a7:9d:1f:5b:aa:8d:7f:ba:29:7c:38:04:15:3e:ef: 53:df:87:50:1b:e3:63:6a:1d:08:5d:48:83:34:7b: e7:6b:92:a2:1c:4e:cb:23:b7:ce:82:07:c9:ba:7f: 28:ea:2e:1b:a4:d6:17:2c:05:28:86:d4:7a:6f:b8: 69:7d:eb:8c:d2:90:67:25:d0:33:6c:d9:b8:8f:01: f2:44:72:9d:65:bc:67:e4:2a:83:98:5e:cb:c2:c7: a3:93:e1:36:cc:83:d7:2b:81:cf:05:fd:36:43:87: 2b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:84:B1:2C:D7:0D:CD:82:47:14:C3:4C:64:94:72:10:AD:92:4C:69 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS197737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:cf:2a:8e:e7:d3:fb:fb:c9:29:9d:ef:0c:90:21:4d:9f:fc: 65:a5:7e:ba:15:70:6d:f2:31:f8:c2:20:15:15:3c:d0:60:71: 8c:a0:05:d4:aa:c4:14:3f:e0:ee:f1:f5:c9:6c:c6:67:f8:19: ad:a1:b2:f3:d4:04:38:39:b3:d8:c9:dd:07:ce:5f:9d:c5:04: 74:89:82:d4:e8:d5:a9:f1:a5:39:52:fb:1e:80:ed:dd:87:a2: 29:25:4e:b2:e1:68:2b:c2:02:ba:b0:82:09:38:bd:11:20:5a: 25:a3:bd:ce:e2:7b:ad:88:4e:bf:e4:49:51:ac:65:c2:b5:4b: 28:1d:46:5d:f8:99:02:16:5b:93:96:cc:3b:b0:c6:0c:a3:98: 3e:54:cd:b6:29:2f:5d:2d:fc:26:26:00:07:64:45:2b:95:f1: f3:09:aa:7e:02:72:3d:c6:41:d2:b5:6e:f2:3b:e0:8c:22:7d: c2:30:bc:90:fe:b0:b0:3d:d6:d0:07:98:5c:04:87:e8:92:58: a3:32:68:35:f2:fd:ac:24:e9:c1:67:89:ea:ef:0e:51:60:76: 10:ce:d9:b2:8a:f3:47:44:43:95:e9:c0:10:1c:fd:25:e6:a4: 7f:42:af:0e:5d:59:b0:eb:8c:a2:b7:7a:6f:04:37:ad:98:99: 01:a3:fa:19 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUCkO4dzi3YR+GeLrL/xclOfFSZLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwMzZaFw0yNzA2MjcxODU1MzZaMDMxMTAvBgNV BAMTKDlBODRCMTJDRDcwRENEODI0NzE0QzM0QzY0OTQ3MjEwQUQ5MjRDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwHvfqJPKHCQiA8yHT6xP3Wzq AbVLHY3JS4ZCsMIe2p4j0HQ5kOLXsrX/wzQMIvq/d0qv106I/VaQ2CEd42w0iEEZ m4fS3uZJbhRI18Sic1nMd7lGBbZCVrkdIoLU5bGKupdDh6udGd75/Ln4AjhigmRq Rd2EAKTsrHJein5dxq1a0xL7dpAJwpsAg0SUj50qm4191KedH1uqjX+6KXw4BBU+ 71Pfh1Ab42NqHQhdSIM0e+drkqIcTssjt86CB8m6fyjqLhuk1hcsBSiG1HpvuGl9 64zSkGcl0DNs2biPAfJEcp1lvGfkKoOYXsvCx6OT4TbMg9crgc8F/TZDhyvFAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUmoSxLNcNzYJHFMNMZJRyEK2STGkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTc3Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEoDANBgkqhkiG9w0BAQsFAAOCAQEAe88qjufT+/vJKZ3vDJAhTZ/8ZaV+uhVw bfIx+MIgFRU80GBxjKAF1KrEFD/g7vH1yWzGZ/gZraGy89QEODmz2MndB85fncUE dImC1OjVqfGlOVL7HoDt3YeiKSVOsuFoK8ICurCCCTi9ESBaJaO9zuJ7rYhOv+RJ UaxlwrVLKB1GXfiZAhZbk5bMO7DGDKOYPlTNtikvXS38JiYAB2RFK5Xx8wmqfgJy PcZB0rVu8jvgjCJ9wjC8kP6wsD3W0AeYXASH6JJYozJoNfL9rCTpwWeJ6u8OUWB2 EM7ZsorzR0RDlenAEBz9Jeakf0KvDl1ZsOuMord6bwQ3rZiZAaP6GQ== -----END CERTIFICATE-----Generated at Fri Jul 10 16:10:25 2026 by rpki-client