$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS198624.roa File: AS198624.roa (raw, json) Hash identifier: LqxGpC9iVCCgltZaj2VhdRS3w5MgmY2pFwygrKsY71Y= Subject key identifier: DB:35:10:96:04:D7:9F:A6:11:5A:05:AD:83:EF:6C:80:5C:9B:81:E3 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3229EA4D38A2D0B020DFDACAB02A37914DF4D6A8 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS198624.roa Signing time: Sun 28 Jun 2026 18:55:47 +0000 ROA not before: Sun 28 Jun 2026 18:50:47 +0000 ROA not after: Sun 27 Jun 2027 18:55:47 +0000 asID: 198624 IP address blocks: 2a0f:6284::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:29:ea:4d:38:a2:d0:b0:20:df:da:ca:b0:2a:37:91:4d:f4:d6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:47 2026 GMT Not After : Jun 27 18:55:47 2027 GMT Subject: CN=DB35109604D79FA6115A05AD83EF6C805C9B81E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:55:c0:7e:1a:75:c7:0e:6e:3f:23:4d:93: 55:5a:cc:c1:62:15:33:6c:05:82:b7:b3:bd:75:eb: 20:da:83:c8:fb:b1:74:b7:38:85:b3:a4:93:06:8d: 47:8b:62:cc:c6:d5:ec:8f:0e:6b:69:f4:5f:ae:b7: 05:d7:44:b8:ed:93:4f:01:cb:a6:00:fe:e3:9a:af: fc:de:6b:cd:bb:ee:55:19:1f:1d:7a:2e:99:52:26: 40:e1:c9:75:0d:82:fe:7c:81:e2:03:3d:5e:ab:5e: aa:f4:c1:89:0e:9e:fd:ef:38:c1:50:0c:b2:15:65: 31:d6:0a:95:8c:ab:bc:c3:ba:81:b1:cb:f3:20:38: 5e:ac:12:d1:00:46:3c:5d:c6:79:40:5c:22:19:b9: 18:03:ca:60:0e:05:41:ba:bb:5d:18:ab:91:52:4f: 70:71:39:fe:2e:86:ba:b1:10:07:fa:53:50:38:9d: b3:14:3f:f5:71:1f:3c:6c:c8:9c:25:ef:3d:d2:54: 57:b7:0b:ae:0c:5e:32:c6:a2:ca:2a:37:df:ab:12: 50:24:04:d5:7e:27:50:43:83:cb:d1:5c:ab:d9:fd: 45:17:c1:41:00:25:e7:c8:4b:56:03:9e:57:d3:ac: 71:f1:af:1a:97:eb:1e:aa:b9:ec:c1:6a:59:26:7e: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:35:10:96:04:D7:9F:A6:11:5A:05:AD:83:EF:6C:80:5C:9B:81:E3 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS198624.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284::/48 Signature Algorithm: sha256WithRSAEncryption 4d:6b:bc:ff:c8:5a:31:2b:99:ca:01:85:57:0c:dd:b4:8d:60: 3d:f1:8d:e0:bf:3f:ea:9b:37:9f:42:01:2c:0f:ff:0a:f4:a4: ec:04:3a:69:05:36:e7:36:fb:f3:c6:9c:c1:e5:e6:82:ca:b3: d0:83:59:fd:e9:f3:d1:9a:c9:71:8a:b2:92:f2:0c:73:17:38: 1b:a8:69:9d:48:14:7d:4f:77:db:ad:42:af:9f:56:60:8f:26: a5:24:f6:c2:9b:f4:e6:f8:57:3c:ca:52:4f:66:9d:ea:43:34: 92:7a:bc:3a:52:79:ed:87:39:3a:87:11:7b:7c:7f:3a:58:09: 7a:2d:59:59:aa:68:4f:43:62:3b:c5:96:c5:36:23:9a:85:bd: 81:8e:f2:36:95:61:6b:8a:15:01:44:39:d1:a3:e6:db:9d:04: 3b:70:27:e0:3d:9d:aa:43:07:e7:26:a1:5e:82:c3:91:51:b1: fd:35:9d:5c:11:51:31:8a:17:6e:6a:cb:8c:64:6f:82:12:76: 95:af:cc:10:7f:b6:d6:d6:cb:b3:6f:82:52:00:5f:1e:a7:42: 76:bc:e8:57:a1:5e:f6:9c:5e:97:30:a5:88:37:31:83:e5:19: 6f:8e:fc:c1:ea:c6:eb:05:b9:9c:97:50:7a:8b:54:0b:af:c1: 7e:ba:2c:43 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUMinqTTii0LAg39rKsCo3kU301qgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwNDdaFw0yNzA2MjcxODU1NDdaMDMxMTAvBgNV BAMTKERCMzUxMDk2MDRENzlGQTYxMTVBMDVBRDgzRUY2QzgwNUM5QjgxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGuVXAfhp1xw5uPyNNk1VazMFi FTNsBYK3s7116yDag8j7sXS3OIWzpJMGjUeLYszG1eyPDmtp9F+utwXXRLjtk08B y6YA/uOar/zea8277lUZHx16LplSJkDhyXUNgv58geIDPV6rXqr0wYkOnv3vOMFQ DLIVZTHWCpWMq7zDuoGxy/MgOF6sEtEARjxdxnlAXCIZuRgDymAOBUG6u10Yq5FS T3BxOf4uhrqxEAf6U1A4nbMUP/VxHzxsyJwl7z3SVFe3C64MXjLGosoqN9+rElAk BNV+J1BDg8vRXKvZ/UUXwUEAJefIS1YDnlfTrHHxrxqX6x6quezBalkmfn3/AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU2zUQlgTXn6YRWgWtg+9sgFybgeMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTg2MjQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAAAwDQYJKoZIhvcNAQELBQADggEBAE1rvP/IWjErmcoBhVcM3bSNYD3xjeC/ P+qbN59CASwP/wr0pOwEOmkFNuc2+/PGnMHl5oLKs9CDWf3p89GayXGKspLyDHMX OBuoaZ1IFH1Pd9utQq+fVmCPJqUk9sKb9Ob4VzzKUk9mnepDNJJ6vDpSee2HOTqH EXt8fzpYCXotWVmqaE9DYjvFlsU2I5qFvYGO8jaVYWuKFQFEOdGj5tudBDtwJ+A9 napDB+cmoV6Cw5FRsf01nVwRUTGKF25qy4xkb4ISdpWvzBB/ttbWy7NvglIAXx6n Qna86FehXvacXpcwpYg3MYPlGW+O/MHqxusFuZyXUHqLVAuvwX66LEM= -----END CERTIFICATE-----Generated at Fri Jul 10 16:12:55 2026 by rpki-client