$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS201269.roa File: AS201269.roa (raw, json) Hash identifier: 1EXNhorvH7NJa/zQguYJo9/udG99JtyAJhq/gBe6U24= Subject key identifier: 83:C7:25:A7:37:AB:92:41:20:41:86:EB:64:37:6E:45:5C:CB:F1:0F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1EADB96D69F433D3D3520003B08392D8E3DB7B20 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS201269.roa Signing time: Mon 06 Apr 2026 19:35:59 +0000 ROA not before: Mon 06 Apr 2026 19:30:59 +0000 ROA not after: Mon 05 Apr 2027 19:35:59 +0000 asID: 201269 IP address blocks: 2a0f:6282:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 13:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ad:b9:6d:69:f4:33:d3:d3:52:00:03:b0:83:92:d8:e3:db:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Apr 6 19:30:59 2026 GMT Not After : Apr 5 19:35:59 2027 GMT Subject: CN=83C725A737AB9241204186EB64376E455CCBF10F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:2f:27:00:89:de:1b:fe:56:dc:dd:b1:24: 54:54:81:79:5e:56:67:e1:2a:44:7d:21:2f:a0:71: 8d:9d:04:3c:58:dd:b6:9a:b3:d2:4c:cd:fe:aa:f7: 4e:2a:1d:51:72:33:c4:fd:b1:04:4a:a9:91:fc:b5: ec:14:85:e3:18:cc:a6:ba:ee:e4:c2:32:30:32:39: 26:6b:41:50:46:46:dc:0e:3f:88:81:b9:ff:57:da: 70:66:1c:93:37:5f:81:c6:73:3c:2f:80:f1:be:73: 02:10:28:8f:11:9c:99:e9:8f:22:55:08:22:25:23: 96:de:b7:a7:f9:8a:4f:4a:1f:f4:43:14:f0:67:75: 78:fd:6c:09:a5:96:f5:ba:12:db:e1:33:6a:d2:f9: 76:0a:0d:47:a7:76:50:a5:7d:48:ae:99:d6:62:f9: a1:00:7f:ab:3a:27:0d:be:4d:08:de:c1:66:f7:0c: f0:74:20:4f:66:b6:1f:75:db:d2:5d:9a:23:b2:28: 33:8c:53:ff:c3:0b:71:f3:66:33:d9:b5:a8:79:f0: 60:3a:b0:67:85:6a:f1:92:e7:81:5c:80:4b:96:d5: ae:d3:94:c1:db:36:fc:12:5d:ff:c6:76:ee:6e:b4: 80:f0:18:27:63:42:05:72:56:fb:63:f6:8b:7d:35: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C7:25:A7:37:AB:92:41:20:41:86:EB:64:37:6E:45:5C:CB:F1:0F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS201269.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:1000::/36 Signature Algorithm: sha256WithRSAEncryption 18:ad:ee:92:7e:b0:d1:c6:16:a8:2e:4d:f7:1b:fc:2a:1f:f1: 6a:b6:0b:5c:39:48:ee:cc:85:01:18:5e:96:7b:21:ac:c6:3e: 24:e0:76:21:d0:b7:cb:31:be:ba:95:c8:89:41:8e:6d:dd:0d: 59:28:de:d7:9c:2f:20:89:43:eb:07:a3:e2:f7:14:17:dd:9d: c3:a8:66:cc:a4:d9:67:e6:7f:f0:d5:2a:00:90:cb:f6:9a:ad: 51:36:38:b6:52:3e:90:e7:ce:c2:dc:2f:9d:19:54:a9:88:44: 6d:1d:c6:5d:7c:78:32:e1:91:05:46:23:be:de:73:8c:a7:75: ea:7e:3f:6b:6d:d5:27:5b:02:13:51:2a:15:b0:e9:ac:2d:2f: 66:4a:d8:22:a6:7e:e2:71:b6:23:40:3b:5f:f1:71:20:30:8a: 6d:78:da:f2:81:32:85:3f:68:60:0f:a7:bd:1c:3d:cd:14:04: 2f:b2:ad:a5:ad:bf:a9:c4:12:cb:c2:19:62:1c:d8:ef:ce:e9: 7a:96:7a:34:74:ae:59:e3:bd:78:b8:ce:69:71:f5:4a:c2:f4: 49:0f:5b:ad:dd:a2:df:3a:25:39:9e:72:a6:3b:a6:da:b2:25: 88:c9:1f:6a:99:98:34:3f:2b:03:63:b3:e7:26:7d:e9:7c:d8: fc:ab:e0:87 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUHq25bWn0M9PTUgADsIOS2OPbeyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA0MDYxOTMwNTlaFw0yNzA0MDUxOTM1NTlaMDMxMTAvBgNV BAMTKDgzQzcyNUE3MzdBQjkyNDEyMDQxODZFQjY0Mzc2RTQ1NUNDQkYxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVi8nAIneG/5W3N2xJFRUgXle VmfhKkR9IS+gcY2dBDxY3baas9JMzf6q904qHVFyM8T9sQRKqZH8tewUheMYzKa6 7uTCMjAyOSZrQVBGRtwOP4iBuf9X2nBmHJM3X4HGczwvgPG+cwIQKI8RnJnpjyJV CCIlI5bet6f5ik9KH/RDFPBndXj9bAmllvW6EtvhM2rS+XYKDUendlClfUiumdZi +aEAf6s6Jw2+TQjewWb3DPB0IE9mth9129JdmiOyKDOMU//DC3HzZjPZtah58GA6 sGeFavGS54FcgEuW1a7TlMHbNvwSXf/Gdu5utIDwGCdjQgVyVvtj9ot9NU0bAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUg8clpzerkkEgQYbrZDduRVzL8Q8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDEyNjkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KCEDANBgkqhkiG9w0BAQsFAAOCAQEAGK3ukn6w0cYWqC5N9xv8Kh/xarYLXDlI 7syFARhelnshrMY+JOB2IdC3yzG+upXIiUGObd0NWSje15wvIIlD6wej4vcUF92d w6hmzKTZZ+Z/8NUqAJDL9pqtUTY4tlI+kOfOwtwvnRlUqYhEbR3GXXx4MuGRBUYj vt5zjKd16n4/a23VJ1sCE1EqFbDprC0vZkrYIqZ+4nG2I0A7X/FxIDCKbXja8oEy hT9oYA+nvRw9zRQEL7Ktpa2/qcQSy8IZYhzY787pepZ6NHSuWeO9eLjOaXH1SsL0 SQ9brd2i3zolOZ5ypjum2rIliMkfapmYND8rA2Oz5yZ96XzY/Kvghw== -----END CERTIFICATE-----Generated at Thu Apr 9 22:17:48 2026 by rpki-client