$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS198679.roa File: AS198679.roa (raw, json) Hash identifier: nVIb4DwDkizOHM4nppTHKS1azbQu5feihysjx3cquE4= Subject key identifier: DE:A0:65:F9:2C:71:BB:60:AA:D6:8E:08:36:56:3B:52:28:73:BB:CD Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5BCBB4D28E524A97BB9AD992454795E3F2C1BF43 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS198679.roa Signing time: Wed 14 Oct 2026 16:58:02 +0000 ROA not before: Wed 14 Oct 2026 16:53:02 +0000 ROA not after: Wed 13 Oct 2027 16:58:02 +0000 asID: 198679 IP address blocks: 2a0f:6284:75::/48 maxlen: 48 2a0f:6284:77::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 16:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:cb:b4:d2:8e:52:4a:97:bb:9a:d9:92:45:47:95:e3:f2:c1:bf:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 14 16:53:02 2026 GMT Not After : Oct 13 16:58:02 2027 GMT Subject: CN=DEA065F92C71BB60AAD68E0836563B522873BBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:1a:e7:57:1b:90:43:ae:43:61:df:a9:bc: 9a:e5:48:0b:e6:27:be:cb:02:bc:68:a4:81:8f:c9: 9f:e4:77:05:66:7c:bd:90:16:9a:c6:11:3e:60:d1: b8:95:74:41:ea:dc:1d:9a:6e:92:45:a6:57:50:d3: a6:cd:bf:04:f4:73:f5:63:d7:f1:51:c7:9b:53:4a: 4f:07:f3:05:28:db:98:8e:3e:d3:e8:6d:b8:11:51: 39:a8:13:12:9f:9e:c7:e7:7f:f0:21:26:c7:a0:4c: b6:e5:8a:47:f4:17:0c:fa:76:02:99:d3:9c:26:16: bd:3c:d4:2d:76:64:f2:64:6d:00:4b:dc:64:51:00: ab:4a:fd:16:f6:cf:63:47:16:62:a2:c1:51:bb:4f: 12:c8:09:32:80:55:f0:c2:16:3d:50:7a:a0:29:d2: 33:02:ee:49:aa:9b:84:14:5d:bc:dc:4b:9e:cb:76: 92:d6:56:98:ca:0c:2a:e6:f2:b0:a7:c1:69:bc:71: 9c:0e:de:aa:2b:82:cc:89:e8:0b:9d:e0:dd:09:65: 0d:3e:38:a9:5d:b5:70:a5:37:20:32:ac:4f:87:e9: 61:98:08:82:47:13:97:46:f6:20:68:0e:54:45:cd: b6:e0:a8:e8:ef:35:88:e0:44:a1:55:a3:f4:a2:ee: b2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A0:65:F9:2C:71:BB:60:AA:D6:8E:08:36:56:3B:52:28:73:BB:CD X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS198679.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:75::/48 2a0f:6284:77::/48 Signature Algorithm: sha256WithRSAEncryption 13:15:fb:9f:d6:40:a8:16:b7:a5:ab:4a:c8:21:ea:90:2d:9f: a1:23:31:2d:7d:e6:93:93:eb:79:5a:19:60:fa:4b:20:54:47: b6:0d:64:bf:f8:0c:58:b3:10:44:55:94:3f:0e:53:17:90:f2: 0b:8e:88:aa:a1:36:14:0d:6f:6e:e2:6f:7d:72:2e:02:e6:e9: 7b:79:7e:27:5b:ed:63:c2:f4:40:91:22:47:79:e1:70:1f:a1: 17:92:7c:36:c3:02:b8:6f:2a:5d:5e:da:07:7b:5e:77:cf:7b: 39:47:25:fa:d3:47:a9:76:93:a5:a5:7f:77:f9:09:dd:fd:a6: 37:f2:6b:4b:0b:cc:7f:4d:fa:37:ce:03:bb:38:80:54:59:5c: 43:a2:0a:33:6e:1f:aa:45:4b:7e:b3:13:1c:40:9e:ab:e6:2e: 0a:f0:6f:d9:c8:49:62:ad:9f:79:3f:e2:41:c3:7b:fe:13:f7: a0:0c:79:a8:3c:53:2a:93:52:82:8f:8a:a1:2b:c0:0d:cd:19: e7:6b:7e:34:2b:7e:fe:df:72:85:49:bb:76:1a:88:72:33:51: 18:46:63:a0:ab:b4:32:3b:0c:82:23:a1:83:de:61:ca:9e:25: 30:41:8c:f9:44:35:59:ba:9d:c9:40:22:c8:b1:dc:e0:a4:cd: ab:66:fd:dc -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUW8u00o5SSpe7mtmSRUeV4/LBv0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMTQxNjUzMDJaFw0yNzEwMTMxNjU4MDJaMDMxMTAvBgNV BAMTKERFQTA2NUY5MkM3MUJCNjBBQUQ2OEUwODM2NTYzQjUyMjg3M0JCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTRrnVxuQQ65DYd+pvJrlSAvm J77LArxopIGPyZ/kdwVmfL2QFprGET5g0biVdEHq3B2abpJFpldQ06bNvwT0c/Vj 1/FRx5tTSk8H8wUo25iOPtPobbgRUTmoExKfnsfnf/AhJsegTLblikf0Fwz6dgKZ 05wmFr081C12ZPJkbQBL3GRRAKtK/Rb2z2NHFmKiwVG7TxLICTKAVfDCFj1QeqAp 0jMC7kmqm4QUXbzcS57LdpLWVpjKDCrm8rCnwWm8cZwO3qorgsyJ6Aud4N0JZQ0+ OKldtXClNyAyrE+H6WGYCIJHE5dG9iBoDlRFzbbgqOjvNYjgRKFVo/Si7rJTAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU3qBl+Sxxu2Cq1o4INlY7Uihzu80wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTg2Nzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KEAHUDBwAqD2KEAHcwDQYJKoZIhvcNAQELBQADggEBABMV+5/WQKgWt6WrSsgh 6pAtn6EjMS195pOT63laGWD6SyBUR7YNZL/4DFizEERVlD8OUxeQ8guOiKqhNhQN b27ib31yLgLm6Xt5fidb7WPC9ECRIkd54XAfoReSfDbDArhvKl1e2gd7XnfPezlH JfrTR6l2k6Wlf3f5Cd39pjfya0sLzH9N+jfOA7s4gFRZXEOiCjNuH6pFS36zExxA nqvmLgrwb9nISWKtn3k/4kHDe/4T96AMeag8UyqTUoKPiqErwA3NGedrfjQrfv7f coVJu3YaiHIzURhGY6CrtDI7DIIjoYPeYcqeJTBBjPlENVm6nclAIsix3OCkzatm /dw= -----END CERTIFICATE-----Generated at Fri Oct 23 07:13:50 2026 by rpki-client