$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS201445.roa File: AS201445.roa (raw, json) Hash identifier: wK4/+gO7RnHJqg4x7dqw/cjTsK0/u+4FwPOdbkK2q5Q= Subject key identifier: 07:08:66:70:30:B3:4F:FA:E2:56:AD:03:45:3E:64:F1:77:D0:0F:04 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 26AEC0382EC3CFEC24B91982B9C65275A56EEAF9 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS201445.roa Signing time: Wed 08 Apr 2026 09:29:49 +0000 ROA not before: Wed 08 Apr 2026 09:24:49 +0000 ROA not after: Wed 07 Apr 2027 09:29:49 +0000 asID: 201445 IP address blocks: 2a0f:6284:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 13:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ae:c0:38:2e:c3:cf:ec:24:b9:19:82:b9:c6:52:75:a5:6e:ea:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Apr 8 09:24:49 2026 GMT Not After : Apr 7 09:29:49 2027 GMT Subject: CN=0708667030B34FFAE256AD03453E64F177D00F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8a:6d:b9:d2:8d:bf:db:1c:dc:33:12:18:38: 76:88:16:34:a3:1b:30:20:d6:f1:60:a4:dd:b3:bb: 01:67:5e:f3:fd:1a:3d:48:8a:23:fe:bf:b6:3c:98: dd:cc:c9:21:0a:91:77:ee:4d:c2:e2:3e:06:7d:2b: 9f:f0:ae:61:5f:7f:f3:07:b3:56:f1:49:65:94:71: cb:6b:4d:e3:8b:57:21:47:52:3d:4a:05:32:a8:54: ce:ce:9d:25:ac:d6:e2:da:93:96:61:88:71:65:27: 50:4c:ac:f4:69:cb:30:4f:ac:27:cb:d2:02:0e:8e: 34:48:49:0e:08:e7:7d:ce:be:e6:9e:26:89:6a:42: c8:b9:fa:59:71:10:47:c7:be:09:5b:11:7b:a7:c1: f9:0f:49:f3:8f:54:0c:39:21:26:f8:24:b8:61:9a: 3f:cc:d2:20:6b:82:be:61:67:e7:18:dc:72:64:67: 43:0d:c5:a3:8f:38:ed:57:07:ff:75:7a:90:18:9a: bd:0f:e5:29:95:40:92:0b:81:d0:80:4d:be:45:fb: 86:dc:0d:4d:3d:a6:08:f6:4b:be:41:f2:b3:18:9f: f8:c8:74:56:47:37:cf:db:44:04:28:0c:75:1d:89: c1:d2:de:54:e3:0e:60:b9:3a:a3:1f:ee:ea:e4:b9: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:08:66:70:30:B3:4F:FA:E2:56:AD:03:45:3E:64:F1:77:D0:0F:04 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS201445.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:3400::/40 Signature Algorithm: sha256WithRSAEncryption 54:3c:25:1b:49:7f:4f:aa:c0:91:b1:2e:fc:5b:6f:97:04:ea: 9b:4c:f9:95:31:6c:4e:91:8d:14:bc:0e:0b:fd:f8:00:48:1e: c5:12:2c:35:e9:39:9e:39:b7:1c:f6:2e:b8:77:f7:6a:2b:c5: 39:d2:f9:37:e4:09:10:21:c0:dd:50:24:4e:9a:aa:e4:56:26: be:df:7b:34:1a:00:d9:66:0e:c4:00:33:bf:06:1e:11:5a:be: c5:cb:c2:9a:fd:b8:e5:95:28:cc:b9:ce:46:94:96:f4:db:bf: 95:e8:17:91:25:63:65:2e:be:f8:b2:4d:b0:70:67:e0:a1:e4: 93:08:83:e5:69:e3:78:29:b7:7f:89:b2:6a:e9:61:76:40:e5: 9c:7c:48:6b:57:b1:47:78:01:5b:95:bf:65:c8:b5:3d:8d:92: 9c:68:c8:b5:41:35:6a:0a:04:61:b5:ed:c5:fe:f8:5c:dc:e2: 3a:92:52:ec:9b:88:3b:91:bc:28:ab:ba:f4:3b:7c:3a:12:6f: 54:40:eb:f4:21:db:11:ce:c3:bd:11:6e:88:d3:25:e3:59:ee: d2:44:1d:d4:d6:93:35:91:ec:ce:ad:14:62:0b:f9:72:c2:dd: 3c:5c:35:a3:78:e5:89:11:a3:4e:67:bd:4f:51:92:2f:ca:ac: 4c:73:72:38 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUJq7AOC7Dz+wkuRmCucZSdaVu6vkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA0MDgwOTI0NDlaFw0yNzA0MDcwOTI5NDlaMDMxMTAvBgNV BAMTKDA3MDg2NjcwMzBCMzRGRkFFMjU2QUQwMzQ1M0U2NEYxNzdEMDBGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQim250o2/2xzcMxIYOHaIFjSj GzAg1vFgpN2zuwFnXvP9Gj1IiiP+v7Y8mN3MySEKkXfuTcLiPgZ9K5/wrmFff/MH s1bxSWWUcctrTeOLVyFHUj1KBTKoVM7OnSWs1uLak5ZhiHFlJ1BMrPRpyzBPrCfL 0gIOjjRISQ4I533OvuaeJolqQsi5+llxEEfHvglbEXunwfkPSfOPVAw5ISb4JLhh mj/M0iBrgr5hZ+cY3HJkZ0MNxaOPOO1XB/91epAYmr0P5SmVQJILgdCATb5F+4bc DU09pgj2S75B8rMYn/jIdFZHN8/bRAQoDHUdicHS3lTjDmC5OqMf7urkuRDlAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUBwhmcDCzT/riVq0DRT5k8XfQDwQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDE0NDUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KENDANBgkqhkiG9w0BAQsFAAOCAQEAVDwlG0l/T6rAkbEu/FtvlwTqm0z5lTFs TpGNFLwOC/34AEgexRIsNek5njm3HPYuuHf3aivFOdL5N+QJECHA3VAkTpqq5FYm vt97NBoA2WYOxAAzvwYeEVq+xcvCmv245ZUozLnORpSW9Nu/legXkSVjZS6++LJN sHBn4KHkkwiD5WnjeCm3f4myaulhdkDlnHxIa1exR3gBW5W/Zci1PY2SnGjItUE1 agoEYbXtxf74XNziOpJS7JuIO5G8KKu69Dt8OhJvVEDr9CHbEc7DvRFuiNMl41nu 0kQd1NaTNZHszq0UYgv5csLdPFw1o3jliRGjTme9T1GSL8qsTHNyOA== -----END CERTIFICATE-----Generated at Thu Apr 9 22:16:19 2026 by rpki-client