$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200790.roa File: AS200790.roa (raw, json) Hash identifier: Wk0DKwg3HBzCgBbCZgNZTvYhzF0joyDm0P8AeiQtlXU= Subject key identifier: FD:DD:07:C7:60:9D:D4:89:A1:B7:F3:0B:B7:97:DA:B4:93:71:DE:3E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 32FA096E0E1C3ADE1DEE6996AF4BF6463BD498D0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200790.roa Signing time: Mon 22 Jun 2026 12:31:44 +0000 ROA not before: Mon 22 Jun 2026 12:26:44 +0000 ROA not after: Mon 21 Jun 2027 12:31:44 +0000 asID: 200790 IP address blocks: 2a0f:6284:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fa:09:6e:0e:1c:3a:de:1d:ee:69:96:af:4b:f6:46:3b:d4:98:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 22 12:26:44 2026 GMT Not After : Jun 21 12:31:44 2027 GMT Subject: CN=FDDD07C7609DD489A1B7F30BB797DAB49371DE3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c6:43:a4:c0:14:cd:5d:30:49:ad:3d:0d:69: 62:83:d7:e3:84:27:a4:e7:10:ed:4a:a2:68:f0:b1: c3:5f:51:47:b7:f7:fe:41:f3:f2:36:c9:b7:6a:9b: 56:74:9f:b3:c7:3c:96:a3:57:8c:99:01:31:55:07: 1c:72:9c:9e:2d:bf:ee:81:c3:9f:f0:16:dd:d8:d9: 8d:69:52:df:f3:86:c7:0e:0d:f4:a3:a8:60:a0:74: 5b:6f:fb:c0:64:c8:00:d4:cc:c5:d5:b9:d0:f4:43: 35:5b:14:31:d3:d4:bc:e1:fc:34:ce:6e:09:29:2f: 8d:65:09:b1:0d:de:93:30:f0:8f:6b:57:0e:bb:7b: e5:25:ed:1c:35:f7:30:d9:b6:af:10:41:4a:22:35: 17:3c:e0:57:4c:05:e9:8a:1e:f9:bb:25:c0:47:68: fe:2f:60:78:81:f3:a0:d9:d9:f0:88:fd:7d:61:b3: 9c:a2:d3:7a:fa:09:d0:c1:65:ca:31:30:a5:aa:88: 03:34:7f:81:cb:38:c0:10:ab:44:2e:27:64:63:50: 99:28:9b:23:0c:d0:20:c7:89:49:14:d8:6c:49:64: 3f:4a:2f:25:e1:cd:78:65:70:8c:7b:d9:bd:5e:f1: 3f:92:85:11:e1:c0:0a:b5:76:d8:c3:d4:ef:43:4c: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DD:07:C7:60:9D:D4:89:A1:B7:F3:0B:B7:97:DA:B4:93:71:DE:3E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200790.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:8000::/40 Signature Algorithm: sha256WithRSAEncryption 05:03:7f:78:34:2a:52:45:67:c3:49:d1:cb:e0:76:d0:6c:de: ec:ef:9a:8b:0b:b7:25:73:a1:fe:6d:45:01:95:ce:63:a2:1d: f0:9f:fe:50:78:76:99:0e:5a:52:a0:32:b0:6f:70:91:0b:b5: 64:1d:f9:aa:4d:81:8b:58:62:18:97:1f:32:03:83:c3:3b:74: 6a:62:0c:da:34:27:ce:26:d7:9c:a8:33:8d:f5:a9:a0:e3:7c: a4:6c:3b:39:78:84:be:5b:51:ad:c3:10:d9:6b:df:f7:dc:fd: 2e:d2:3b:e9:d3:84:4b:4e:ae:d8:9a:b2:70:8e:39:c7:83:bf: 9d:45:84:5b:58:91:65:a1:30:84:83:11:e4:dc:8c:5c:11:9f: d8:6c:e3:b8:8b:21:01:61:8b:98:7f:50:55:83:67:f3:de:47: aa:60:0e:9c:f9:e0:aa:d6:df:dc:5b:45:39:0d:59:90:16:1b: 80:4d:a0:d2:59:56:d5:74:90:c8:81:e0:c5:d3:6a:6a:68:34: d6:02:05:5d:fc:0d:be:46:d7:d1:b7:8b:59:cb:5a:c5:c8:3c: cd:c6:63:cd:dd:f2:af:ad:4a:ba:25:f6:11:b8:b2:bc:7c:ad: 4a:62:e7:59:d4:f5:08:d7:70:fe:bb:96:94:ce:b1:58:8b:3b: 3e:c4:f2:d4 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUMvoJbg4cOt4d7mmWr0v2RjvUmNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjIxMjI2NDRaFw0yNzA2MjExMjMxNDRaMDMxMTAvBgNV BAMTKEZEREQwN0M3NjA5REQ0ODlBMUI3RjMwQkI3OTdEQUI0OTM3MURFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxkOkwBTNXTBJrT0NaWKD1+OE J6TnEO1KomjwscNfUUe39/5B8/I2ybdqm1Z0n7PHPJajV4yZATFVBxxynJ4tv+6B w5/wFt3Y2Y1pUt/zhscODfSjqGCgdFtv+8BkyADUzMXVudD0QzVbFDHT1Lzh/DTO bgkpL41lCbEN3pMw8I9rVw67e+Ul7Rw19zDZtq8QQUoiNRc84FdMBemKHvm7JcBH aP4vYHiB86DZ2fCI/X1hs5yi03r6CdDBZcoxMKWqiAM0f4HLOMAQq0QuJ2RjUJko myMM0CDHiUkU2GxJZD9KLyXhzXhlcIx72b1e8T+ShRHhwAq1dtjD1O9DTFd/AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU/d0Hx2Cd1Imht/MLt5fatJNx3j4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDA3OTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KEgDANBgkqhkiG9w0BAQsFAAOCAQEABQN/eDQqUkVnw0nRy+B20Gze7O+aiwu3 JXOh/m1FAZXOY6Id8J/+UHh2mQ5aUqAysG9wkQu1ZB35qk2Bi1hiGJcfMgODwzt0 amIM2jQnzibXnKgzjfWpoON8pGw7OXiEvltRrcMQ2Wvf99z9LtI76dOES06u2Jqy cI45x4O/nUWEW1iRZaEwhIMR5NyMXBGf2GzjuIshAWGLmH9QVYNn895HqmAOnPng qtbf3FtFOQ1ZkBYbgE2g0llW1XSQyIHgxdNqamg01gIFXfwNvkbX0beLWctaxcg8 zcZjzd3yr61KuiX2EbiyvHytSmLnWdT1CNdw/ruWlM6xWIs7PsTy1A== -----END CERTIFICATE-----Generated at Fri Jul 10 16:13:13 2026 by rpki-client