$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200472.roa File: AS200472.roa (raw, json) Hash identifier: tfT7nUMFpbwuHVMSjEg8v/l9F/PeR2K0afQW0Gqa614= Subject key identifier: EB:BA:12:3F:6B:EA:D3:4F:68:55:F6:7D:51:D9:F3:7E:05:EC:E2:D1 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 7A2EE6941342606AA7BB5D4E48F8D6B4F67B2B67 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200472.roa Signing time: Fri 27 Mar 2026 08:00:32 +0000 ROA not before: Fri 27 Mar 2026 07:55:32 +0000 ROA not after: Fri 26 Mar 2027 08:00:32 +0000 asID: 200472 IP address blocks: 2a09:54c4::/32 maxlen: 32 2a0f:6282:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 13:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2e:e6:94:13:42:60:6a:a7:bb:5d:4e:48:f8:d6:b4:f6:7b:2b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 27 07:55:32 2026 GMT Not After : Mar 26 08:00:32 2027 GMT Subject: CN=EBBA123F6BEAD34F6855F67D51D9F37E05ECE2D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:a7:d9:1a:fe:37:dd:63:b4:a1:fb:64:61: e9:31:a6:a1:1b:b4:28:fc:ad:04:fa:18:57:da:6e: d0:51:3a:01:1f:e1:90:24:b1:44:6a:ee:48:a3:a6: c1:be:28:4d:e4:29:07:36:18:cb:e7:79:ec:9c:04: 29:fc:81:af:3f:ef:de:5c:04:27:b6:64:ba:71:52: c5:80:42:ba:61:28:d0:98:2b:15:29:a3:00:8a:db: 52:18:15:77:d6:bb:f4:f4:2b:af:ad:3e:5e:82:98: fa:3f:05:bc:7e:b6:87:ca:59:ce:a3:97:79:10:6f: 3d:bc:d0:ab:ee:f0:be:c7:67:34:9a:61:d6:5a:cd: 46:68:e5:f1:cc:6d:b4:ae:09:01:fe:b2:c0:7a:38: 43:c5:e6:31:14:83:d9:0f:51:9d:a1:52:f5:fe:57: 6c:42:3c:fd:f0:d5:a2:ea:40:32:92:54:91:37:04: fe:2a:cb:0b:d6:53:c2:f1:47:a6:5e:6d:6a:34:9e: 0f:13:43:32:df:33:5e:96:0b:9e:d8:c2:9f:fe:b4: 8f:46:63:0f:11:5d:c0:51:66:05:b6:c9:37:a2:0c: cb:48:17:01:c3:15:32:de:e2:c1:c6:af:c1:48:df: c2:ee:2b:b6:f6:32:03:37:6d:c5:c4:6e:10:9c:59: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BA:12:3F:6B:EA:D3:4F:68:55:F6:7D:51:D9:F3:7E:05:EC:E2:D1 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200472.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c4::/32 2a0f:6282:3000::/36 Signature Algorithm: sha256WithRSAEncryption 2f:07:e0:99:df:d7:54:fe:3b:b3:89:c3:27:1b:14:bd:e1:bc: 5a:54:da:3b:cb:4b:12:d3:8c:f3:74:e7:c8:11:ed:1a:7f:36: 1d:da:aa:64:5a:ad:96:f5:96:be:26:7f:04:e5:df:c7:74:07: c5:24:a3:03:0c:7d:63:d7:90:cc:c6:aa:78:26:a9:50:1b:05: 85:26:ca:66:dd:cd:f2:d1:29:4a:1c:8d:a8:f9:31:4c:f0:dd: 0a:19:d5:a7:9f:64:15:b8:4e:8d:3c:ff:2d:98:9a:15:fa:45: 65:b4:eb:2b:9a:a2:43:08:6c:6a:85:5c:5e:fe:68:95:c2:61: a9:16:34:63:27:52:1e:9c:1e:a2:ee:63:26:27:3d:e6:23:54: f7:cb:b3:b3:07:98:3c:55:c3:28:81:7f:82:fc:1f:93:e2:40: 0e:fe:df:2c:50:b3:55:2d:a3:57:1e:e7:6a:34:fe:aa:35:66: bd:87:e1:2d:d7:a2:8f:3e:b9:c1:58:b0:9a:27:63:a8:db:8e: b7:61:8f:10:4c:b9:a4:37:64:43:b3:be:6f:4d:24:1c:73:a2: 81:03:a9:7f:72:a3:73:a6:d4:90:3d:f5:ab:eb:03:d9:df:db: 8a:7f:c6:91:4a:94:b7:68:d2:59:f7:48:15:c8:d0:3a:6e:9e: 65:bb:c0:ca -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUei7mlBNCYGqnu11OSPjWtPZ7K2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMjcwNzU1MzJaFw0yNzAzMjYwODAwMzJaMDMxMTAvBgNV BAMTKEVCQkExMjNGNkJFQUQzNEY2ODU1RjY3RDUxRDlGMzdFMDVFQ0UyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4oKfZGv433WO0oftkYekxpqEb tCj8rQT6GFfabtBROgEf4ZAksURq7kijpsG+KE3kKQc2GMvneeycBCn8ga8/795c BCe2ZLpxUsWAQrphKNCYKxUpowCK21IYFXfWu/T0K6+tPl6CmPo/Bbx+tofKWc6j l3kQbz280Kvu8L7HZzSaYdZazUZo5fHMbbSuCQH+ssB6OEPF5jEUg9kPUZ2hUvX+ V2xCPP3w1aLqQDKSVJE3BP4qywvWU8LxR6ZebWo0ng8TQzLfM16WC57Ywp/+tI9G Yw8RXcBRZgW2yTeiDMtIFwHDFTLe4sHGr8FI38LuK7b2MgM3bcXEbhCcWa8XAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQU67oSP2vq009oVfZ9UdnzfgXs4tEwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDA0NzIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKAYIKwYBBQUHAQcBAf8EGTAXMBUEAgACMA8DBQAq CVTEAwYEKg9igjAwDQYJKoZIhvcNAQELBQADggEBAC8H4Jnf11T+O7OJwycbFL3h vFpU2jvLSxLTjPN058gR7Rp/Nh3aqmRarZb1lr4mfwTl38d0B8UkowMMfWPXkMzG qngmqVAbBYUmymbdzfLRKUocjaj5MUzw3QoZ1aefZBW4To08/y2YmhX6RWW06yua okMIbGqFXF7+aJXCYakWNGMnUh6cHqLuYyYnPeYjVPfLs7MHmDxVwyiBf4L8H5Pi QA7+3yxQs1Uto1ce52o0/qo1Zr2H4S3Xoo8+ucFYsJonY6jbjrdhjxBMuaQ3ZEOz vm9NJBxzooEDqX9yo3Om1JA99avrA9nf24p/xpFKlLdo0ln3SBXI0DpunmW7wMo= -----END CERTIFICATE-----Generated at Thu Apr 9 22:16:16 2026 by rpki-client