$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS201445.roa File: AS201445.roa (raw, json) Hash identifier: SUyahEw27ekatu/YsARqI+aFNaA7VVc/t9ot13cHBN4= Subject key identifier: AE:D2:A3:AE:F2:9C:FE:A3:D8:0C:9C:C9:C4:9B:A7:59:75:01:91:85 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 68BE6DD69AEB0C157A33F94D4860AF0429F96646 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS201445.roa Signing time: Sun 24 May 2026 09:02:08 +0000 ROA not before: Sun 24 May 2026 08:57:08 +0000 ROA not after: Sun 23 May 2027 09:02:08 +0000 asID: 201445 IP address blocks: 2a0f:6284:3400::/40 maxlen: 40 2a0f:6284:3467::/48 maxlen: 48 2a0f:6284:3469::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 01:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:be:6d:d6:9a:eb:0c:15:7a:33:f9:4d:48:60:af:04:29:f9:66:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 24 08:57:08 2026 GMT Not After : May 23 09:02:08 2027 GMT Subject: CN=AED2A3AEF29CFEA3D80C9CC9C49BA75975019185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:18:b7:e4:8a:3e:fb:f4:ef:0f:69:2c:3d:12: a6:dc:eb:ff:2f:67:c4:8f:e1:3b:5c:a3:c4:f3:e5: 02:19:52:d9:e3:a2:29:90:46:06:a5:b0:ad:f0:97: 69:98:ed:a5:b0:c7:3a:09:c1:7a:72:d9:de:a1:4b: e6:84:98:8e:5f:89:94:f7:66:39:22:c8:6d:93:b6: 75:68:5f:bb:8d:7d:4e:a9:a9:7e:12:89:50:b1:b8: 57:95:10:2a:08:93:b4:5a:66:1f:fb:c4:27:5b:f0: 62:c4:a9:8d:43:99:17:05:fd:9c:91:1d:a6:b0:b0: 2d:68:81:4c:16:80:88:39:2d:e9:d1:c1:6f:19:f1: fa:c4:b2:8a:5f:83:47:6f:70:ba:33:de:cf:e6:73: c1:af:ef:ff:dd:82:cc:ed:2e:dd:1a:41:f8:d0:71: a6:f0:d3:30:3d:ef:4d:da:e6:87:e2:7d:92:5b:41: 29:c1:ae:e0:d5:85:a4:df:ce:19:8e:59:a3:e0:fb: 16:0f:eb:e8:37:11:3b:9b:ef:d1:ef:78:49:e3:99: 44:05:33:ab:6c:9b:49:e0:30:83:bb:33:5a:a8:05: 89:6f:76:5b:e6:7d:04:f4:61:d7:e2:dc:5e:14:0b: 64:80:6c:b3:d2:89:ee:b1:01:f9:eb:8c:a5:2f:2c: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D2:A3:AE:F2:9C:FE:A3:D8:0C:9C:C9:C4:9B:A7:59:75:01:91:85 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS201445.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:3400::/40 Signature Algorithm: sha256WithRSAEncryption 52:15:b7:a8:be:31:0a:a4:a1:6b:26:53:4f:7c:1d:f2:ee:9d: e5:bd:96:5a:ec:75:f7:06:4f:5b:d3:3f:06:f8:40:21:e7:7f: aa:52:81:37:e4:92:73:cf:e3:8a:48:48:3a:6a:9f:da:98:c7: ac:23:d7:18:5b:07:eb:e4:05:49:86:1c:cf:f7:e2:5f:b0:56: 5e:de:8b:0b:d7:d0:e7:fc:8a:da:6e:08:cd:e9:76:21:d9:b3: 70:fd:01:68:bf:0b:8b:0c:7f:00:7d:22:17:71:ee:b0:5f:a2: c4:29:63:49:b7:c3:ec:fd:9c:00:f3:09:41:53:2b:86:e6:fe: ff:97:58:1c:3a:3e:a0:0f:b1:b1:a6:dd:1d:06:aa:71:de:a5: 19:73:6d:56:26:39:d1:c4:08:51:29:bf:00:b6:c4:e5:84:64: 3f:f2:31:28:64:98:d5:af:2b:80:b2:bd:c0:a8:ab:b6:41:51: 5e:bd:96:72:e3:33:15:bb:14:60:60:01:67:80:1d:56:c5:70: 01:12:59:e9:a6:4b:77:82:ee:70:39:24:6c:4b:4d:0b:74:3c: 5f:31:63:a2:d8:ae:e4:21:2a:25:f6:54:4e:94:0d:ea:35:65: ef:fa:32:8c:a1:d4:0e:8c:3d:47:4e:1d:c8:44:1b:8e:b2:72: 02:8e:1a:6b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUaL5t1prrDBV6M/lNSGCvBCn5ZkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MjQwODU3MDhaFw0yNzA1MjMwOTAyMDhaMDMxMTAvBgNV BAMTKEFFRDJBM0FFRjI5Q0ZFQTNEODBDOUNDOUM0OUJBNzU5NzUwMTkxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKGLfkij779O8PaSw9Eqbc6/8v Z8SP4Ttco8Tz5QIZUtnjoimQRgalsK3wl2mY7aWwxzoJwXpy2d6hS+aEmI5fiZT3 ZjkiyG2TtnVoX7uNfU6pqX4SiVCxuFeVECoIk7RaZh/7xCdb8GLEqY1DmRcF/ZyR HaawsC1ogUwWgIg5LenRwW8Z8frEsopfg0dvcLoz3s/mc8Gv7//dgsztLt0aQfjQ cabw0zA9703a5ofifZJbQSnBruDVhaTfzhmOWaPg+xYP6+g3ETub79HveEnjmUQF M6tsm0ngMIO7M1qoBYlvdlvmfQT0Ydfi3F4UC2SAbLPSie6xAfnrjKUvLLrPAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUrtKjrvKc/qPYDJzJxJunWXUBkYUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDE0NDUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KENDANBgkqhkiG9w0BAQsFAAOCAQEAUhW3qL4xCqShayZTT3wd8u6d5b2WWux1 9wZPW9M/BvhAIed/qlKBN+SSc8/jikhIOmqf2pjHrCPXGFsH6+QFSYYcz/fiX7BW Xt6LC9fQ5/yK2m4Izel2IdmzcP0BaL8Liwx/AH0iF3HusF+ixCljSbfD7P2cAPMJ QVMrhub+/5dYHDo+oA+xsabdHQaqcd6lGXNtViY50cQIUSm/ALbE5YRkP/IxKGSY 1a8rgLK9wKirtkFRXr2WcuMzFbsUYGABZ4AdVsVwARJZ6aZLd4LucDkkbEtNC3Q8 XzFjotiu5CEqJfZUTpQN6jVl7/oyjKHUDow9R04dyEQbjrJyAo4aaw== -----END CERTIFICATE-----Generated at Mon May 25 14:58:36 2026 by rpki-client