$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200472.roa File: AS200472.roa (raw, json) Hash identifier: ipN4kXPwTWzehziR575dLUFLDOP+us5bsWxQXxLcVko= Subject key identifier: 90:9F:13:89:11:6F:90:37:8D:AC:AF:69:8D:98:DA:E1:3A:65:1F:07 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0D9E3E161FB385E266ED320EF2F7736EAC943A33 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200472.roa Signing time: Sun 28 Jun 2026 18:55:19 +0000 ROA not before: Sun 28 Jun 2026 18:50:19 +0000 ROA not after: Sun 27 Jun 2027 18:55:19 +0000 asID: 200472 IP address blocks: 2a09:54c4::/32 maxlen: 32 2a0f:6282:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9e:3e:16:1f:b3:85:e2:66:ed:32:0e:f2:f7:73:6e:ac:94:3a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:19 2026 GMT Not After : Jun 27 18:55:19 2027 GMT Subject: CN=909F1389116F90378DACAF698D98DAE13A651F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:42:f8:d1:b3:55:c1:0e:31:b2:ec:f7:ef: db:99:fd:eb:43:f9:a4:2a:bd:bc:54:fa:b5:fb:7f: 86:23:3b:03:ff:3b:3a:37:f3:c3:e7:c8:b0:8d:99: 31:3f:c2:c1:fb:c2:6d:a1:f9:f5:ef:43:54:5c:42: 37:81:b6:42:3b:d9:78:8d:b0:bd:89:39:51:67:f5: 10:44:07:03:51:4a:49:39:d2:df:7f:4b:22:55:84: 89:3a:02:82:d5:6d:4d:e6:68:8c:ec:90:0a:d5:d8: 86:b6:ed:56:9a:68:0a:45:31:6b:fe:40:13:80:12: ae:1b:58:40:9f:3e:a9:f9:4c:a4:79:20:8e:db:77: 8a:e3:5d:2d:25:e0:86:8e:5c:2f:d4:81:d0:0e:26: 71:2c:36:2e:9c:bb:a8:81:be:15:c3:a1:e0:e0:2f: 64:71:fd:e8:0c:b3:73:da:f5:56:be:15:df:f0:7e: d6:47:25:76:67:8c:68:96:68:eb:3a:28:0f:33:81: 31:38:6f:3d:24:35:ac:0d:3c:95:95:ed:47:28:9b: ad:8b:8e:27:d2:54:4e:ac:85:88:de:f6:38:f0:98: 6e:0c:f9:85:7f:3d:5a:b2:b3:1c:41:88:e8:5c:a7: 48:c3:ad:ca:20:c5:05:ca:30:5e:a0:2e:bb:05:41: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9F:13:89:11:6F:90:37:8D:AC:AF:69:8D:98:DA:E1:3A:65:1F:07 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200472.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c4::/32 2a0f:6282:3000::/36 Signature Algorithm: sha256WithRSAEncryption 77:a2:79:d4:ea:c3:1c:fe:0c:82:e0:62:cf:8d:c0:c0:21:1d: 93:f5:b0:4b:df:04:f2:25:52:61:18:34:fa:72:b5:b6:c8:a2: f2:73:0c:bc:4a:1f:81:b6:e3:a9:c2:d9:cb:9a:4e:ce:76:78: 49:aa:ba:33:0b:29:8c:bd:9d:c9:64:d7:41:d5:8d:12:6f:cf: 47:8b:55:80:1d:8b:0a:2c:a4:ba:ac:ea:aa:24:b8:08:c0:df: f3:97:0e:5d:da:36:81:75:6e:7a:8a:ab:60:07:1f:3d:ea:0e: 7e:96:2b:ba:fa:d3:87:a5:a9:bc:64:01:71:07:cd:77:73:94: c2:af:b6:e5:ec:26:c1:0b:ae:56:0e:b1:ae:de:cd:ce:da:4a: c0:93:6f:04:7c:41:76:f8:ad:f1:95:c2:04:53:42:55:cf:6d: e6:a8:64:79:df:4b:2f:d0:02:d1:63:fb:e9:0d:75:5b:7b:c3: 6c:73:2d:d6:c3:1b:c4:4a:f6:a4:11:6a:1a:b6:02:c5:88:1f: f9:5a:1d:50:b6:57:bc:59:30:a7:f2:88:c8:f7:fa:ab:e9:6a: 1e:66:74:72:f6:a2:df:6a:4f:30:ad:d0:14:e2:ad:37:ac:87: 9e:a8:53:8d:61:0a:0c:61:a0:b1:6b:8f:6c:bf:d3:c5:fa:fe: 25:a9:e7:38 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUDZ4+Fh+zheJm7TIO8vdzbqyUOjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwMTlaFw0yNzA2MjcxODU1MTlaMDMxMTAvBgNV BAMTKDkwOUYxMzg5MTE2RjkwMzc4REFDQUY2OThEOThEQUUxM0E2NTFGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rEL40bNVwQ4xsuz379uZ/etD +aQqvbxU+rX7f4YjOwP/Ozo388PnyLCNmTE/wsH7wm2h+fXvQ1RcQjeBtkI72XiN sL2JOVFn9RBEBwNRSkk50t9/SyJVhIk6AoLVbU3maIzskArV2Ia27VaaaApFMWv+ QBOAEq4bWECfPqn5TKR5II7bd4rjXS0l4IaOXC/UgdAOJnEsNi6cu6iBvhXDoeDg L2Rx/egMs3Pa9Va+Fd/wftZHJXZnjGiWaOs6KA8zgTE4bz0kNawNPJWV7Ucom62L jifSVE6shYje9jjwmG4M+YV/PVqysxxBiOhcp0jDrcogxQXKMF6gLrsFQQ5hAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUkJ8TiRFvkDeNrK9pjZja4TplHwcwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDA0NzIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKAYIKwYBBQUHAQcBAf8EGTAXMBUEAgACMA8DBQAq CVTEAwYEKg9igjAwDQYJKoZIhvcNAQELBQADggEBAHeiedTqwxz+DILgYs+NwMAh HZP1sEvfBPIlUmEYNPpytbbIovJzDLxKH4G246nC2cuaTs52eEmqujMLKYy9nclk 10HVjRJvz0eLVYAdiwospLqs6qokuAjA3/OXDl3aNoF1bnqKq2AHHz3qDn6WK7r6 04elqbxkAXEHzXdzlMKvtuXsJsELrlYOsa7ezc7aSsCTbwR8QXb4rfGVwgRTQlXP beaoZHnfSy/QAtFj++kNdVt7w2xzLdbDG8RK9qQRahq2AsWIH/laHVC2V7xZMKfy iMj3+qvpah5mdHL2ot9qTzCt0BTirTesh56oU41hCgxhoLFrj2y/08X6/iWp5zg= -----END CERTIFICATE-----Generated at Fri Jul 10 16:12:56 2026 by rpki-client