$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS201398.roa File: AS201398.roa (raw, json) Hash identifier: ZRNDMj9ErZ/Nf+7PuHzSb7+lo682K6mGRCk9J0xZFSk= Subject key identifier: D8:DE:4D:33:18:43:4A:91:CF:0B:FC:37:86:ED:2A:6C:BE:FF:6C:1F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0CF9453F935725B6D96E362BB696E260F9FB4FE3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS201398.roa Signing time: Thu 12 Feb 2026 19:06:51 +0000 ROA not before: Thu 12 Feb 2026 19:01:51 +0000 ROA not after: Thu 11 Feb 2027 19:06:51 +0000 asID: 201398 IP address blocks: 2a0f:6282:4000::/34 maxlen: 34 2a0f:6284:a000::/36 maxlen: 36 2a0f:6284:a7f5::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f9:45:3f:93:57:25:b6:d9:6e:36:2b:b6:96:e2:60:f9:fb:4f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 12 19:01:51 2026 GMT Not After : Feb 11 19:06:51 2027 GMT Subject: CN=D8DE4D3318434A91CF0BFC3786ED2A6CBEFF6C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:a7:17:c7:a1:3f:02:84:92:b5:2f:63:ee: ee:3b:5b:c7:91:e0:7f:61:dd:f6:7e:16:fb:a5:6e: 78:8f:e6:63:d7:df:22:e0:4c:9f:2a:6c:92:4a:9c: e8:27:73:db:fc:c2:e0:16:97:88:68:5b:4f:51:e7: 1a:92:4e:46:a8:13:cc:ef:0d:4d:5a:11:1f:b9:cc: 9c:93:04:ad:a0:74:fe:cc:ca:bd:56:dd:82:6a:2b: 68:92:5c:c3:30:d6:05:e8:c3:73:d8:6b:82:62:92: b7:1f:34:80:f5:d0:63:05:e4:62:53:de:39:f1:d1: ec:06:13:64:7b:5f:26:aa:b4:ba:04:d4:48:78:d1: 11:f1:57:c5:2e:60:69:d2:05:b2:ba:5e:d6:8d:f8: 08:9b:b5:95:ba:1d:af:85:d4:f3:f0:ff:66:e0:51: 66:f5:4c:1c:f4:de:e5:58:a2:d9:d3:1a:70:1e:5c: aa:ad:ce:3a:a0:24:ac:35:e3:3a:b2:dc:f3:50:51: 85:41:e2:8b:82:d8:c0:7c:bc:7a:1a:c4:01:52:a3: c0:f2:fa:3b:aa:e4:9a:d3:98:ff:4f:44:98:10:80: 72:46:6d:0c:2b:6b:27:ee:98:17:39:ac:ea:eb:29: a8:f0:b9:06:f9:67:0c:ef:0c:30:b7:9e:8b:15:db: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DE:4D:33:18:43:4A:91:CF:0B:FC:37:86:ED:2A:6C:BE:FF:6C:1F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS201398.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:4000::/34 2a0f:6284:a000::/36 Signature Algorithm: sha256WithRSAEncryption 72:e2:46:06:11:df:b2:01:9b:43:f7:24:88:7e:ad:4a:6f:1a: a4:39:43:3d:62:cf:cc:2c:dc:90:92:53:3f:fc:50:bd:59:13: ca:98:36:13:02:a6:b4:7f:af:77:76:f4:d0:e0:d0:83:84:66: 1d:fa:3c:c2:cc:76:3f:be:20:9c:56:14:81:bf:f5:f2:3d:68: 61:b3:49:5e:f0:b1:60:7a:3c:de:0c:a9:b1:96:c9:f8:80:ac: ff:4a:4a:2d:a5:4d:37:de:6f:21:1c:d6:75:99:f6:42:4a:df: a4:29:e2:ba:59:9c:61:50:43:ab:3a:29:70:41:72:d7:a3:8b: 4b:c3:54:c1:8e:7e:64:64:38:8c:b4:b6:79:29:49:2f:97:87: ab:db:26:5f:8e:86:3d:52:62:db:90:95:b4:b7:52:d0:12:4e: c2:fe:0a:85:ce:89:d6:8e:f5:1e:be:1b:79:dd:2e:88:c4:c4: fb:99:fc:73:c7:da:da:d3:eb:f1:51:2f:41:01:ac:9d:4b:fd: 3f:36:96:de:a3:89:16:6b:20:95:b8:1a:9a:65:ae:7d:a6:53: 6f:ef:83:a1:c8:ac:64:19:b2:5e:d0:50:8f:11:34:cb:c8:29: 47:0d:9f:69:ae:ce:25:64:cc:36:f7:22:4e:98:4f:55:bc:56: 32:5e:7c:7f -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUDPlFP5NXJbbZbjYrtpbiYPn7T+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMTIxOTAxNTFaFw0yNzAyMTExOTA2NTFaMDMxMTAvBgNV BAMTKEQ4REU0RDMzMTg0MzRBOTFDRjBCRkMzNzg2RUQyQTZDQkVGRjZDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMuqcXx6E/AoSStS9j7u47W8eR 4H9h3fZ+FvulbniP5mPX3yLgTJ8qbJJKnOgnc9v8wuAWl4hoW09R5xqSTkaoE8zv DU1aER+5zJyTBK2gdP7Myr1W3YJqK2iSXMMw1gXow3PYa4JikrcfNID10GMF5GJT 3jnx0ewGE2R7XyaqtLoE1Eh40RHxV8UuYGnSBbK6XtaN+AibtZW6Ha+F1PPw/2bg UWb1TBz03uVYotnTGnAeXKqtzjqgJKw14zqy3PNQUYVB4ouC2MB8vHoaxAFSo8Dy +juq5JrTmP9PRJgQgHJGbQwrayfumBc5rOrrKajwuQb5ZwzvDDC3nosV21JTAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQU2N5NMxhDSpHPC/w3hu0qbL7/bB8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDEzOTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgYq D2KCQAMGBCoPYoSgMA0GCSqGSIb3DQEBCwUAA4IBAQBy4kYGEd+yAZtD9ySIfq1K bxqkOUM9Ys/MLNyQklM//FC9WRPKmDYTAqa0f693dvTQ4NCDhGYd+jzCzHY/viCc VhSBv/XyPWhhs0le8LFgejzeDKmxlsn4gKz/SkotpU033m8hHNZ1mfZCSt+kKeK6 WZxhUEOrOilwQXLXo4tLw1TBjn5kZDiMtLZ5KUkvl4er2yZfjoY9UmLbkJW0t1LQ Ek7C/gqFzonWjvUevht53S6IxMT7mfxzx9ra0+vxUS9BAaydS/0/Npbeo4kWayCV uBqaZa59plNv74OhyKxkGbJe0FCPETTLyClHDZ9prs4lZMw29yJOmE9VvFYyXnx/ -----END CERTIFICATE-----Generated at Mon Feb 23 06:23:39 2026 by rpki-client