$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS202294.roa File: AS202294.roa (raw, json) Hash identifier: kRsuHXshu/HVjHIke1V3cjX0b7y4vM7R/3p2xDQhimM= Subject key identifier: 1A:70:65:24:F7:C2:7C:C2:78:AB:E4:A9:8E:6D:26:C1:BA:14:70:73 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1742CAD041C41A501A8E13F42520DAD561D18773 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS202294.roa Signing time: Mon 03 Aug 2026 06:00:32 +0000 ROA not before: Mon 03 Aug 2026 05:55:32 +0000 ROA not after: Mon 02 Aug 2027 06:00:32 +0000 asID: 202294 IP address blocks: 2a0f:6284:8::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:42:ca:d0:41:c4:1a:50:1a:8e:13:f4:25:20:da:d5:61:d1:87:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 3 05:55:32 2026 GMT Not After : Aug 2 06:00:32 2027 GMT Subject: CN=1A706524F7C27CC278ABE4A98E6D26C1BA147073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:44:f7:a9:25:d6:37:7e:85:98:66:1b:e7: 7f:2b:1b:83:83:00:af:61:10:ed:4d:ef:ae:0c:6c: 60:f0:7e:6a:7d:65:ad:cc:cd:04:8a:ee:6d:69:45: c6:95:82:45:2e:77:d2:b8:e8:2a:4c:14:bd:52:ec: 49:66:9e:d2:b5:41:b7:9e:a4:02:06:0d:13:c3:58: 4d:74:5f:b2:3c:af:c3:ee:af:c1:6f:09:51:42:dd: 8f:92:68:fc:1b:27:c4:b2:b3:be:09:9e:53:02:5e: 3d:d5:a8:22:e6:9d:82:52:fa:2a:e4:14:d1:90:fe: f1:1b:cc:60:91:54:27:ab:60:ca:0b:1f:1b:dc:63: 0e:ac:64:96:3c:8d:c5:a6:ff:4b:9b:95:e8:76:53: 25:b9:cf:43:dc:83:b6:bf:c0:7c:1e:76:32:5e:86: 65:9e:d7:a0:ae:25:bf:da:44:c7:0f:e5:14:98:5a: 23:20:e1:53:be:70:05:8b:05:39:d3:60:81:13:13: 5e:cc:29:89:33:6b:5b:f4:d7:27:ac:8c:7b:23:12: ac:8f:b5:61:d4:83:d9:20:c6:42:f1:39:0e:a6:f0: 15:4d:e3:e0:cb:f8:d6:11:79:79:c7:1b:f4:1d:56: d1:93:85:31:79:2b:9d:d1:1e:75:c2:c9:6b:65:d2: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:70:65:24:F7:C2:7C:C2:78:AB:E4:A9:8E:6D:26:C1:BA:14:70:73 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS202294.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:8::/48 Signature Algorithm: sha256WithRSAEncryption 52:9b:9b:c8:48:fe:16:70:5c:48:69:0d:58:3c:8d:26:eb:4e: f4:fe:89:5d:df:ac:b7:a7:be:a5:47:6e:8d:99:55:c4:0c:4e: 63:1e:fb:d1:da:b0:8b:57:b2:de:ce:b1:00:99:f4:3a:30:fa: df:ad:d1:aa:d8:e6:76:05:8e:45:1c:c1:b3:41:60:42:72:2d: 79:3d:03:99:b7:26:43:e0:66:76:ca:33:26:db:d1:62:14:3d: fc:bd:27:b3:fb:91:39:66:03:dd:a0:d4:c3:4c:eb:e9:17:1b: 9d:4f:15:74:6a:cd:72:5c:5c:ff:5a:99:1a:9c:54:57:de:9a: 26:ae:9f:cf:b3:14:ca:5d:b0:48:90:f9:55:f9:96:81:70:78: 0e:81:7b:68:42:fd:27:81:5d:a7:f4:32:b2:8c:15:55:9d:a5: 7b:17:52:6d:63:7e:39:91:d0:5d:0f:c0:b3:be:cb:8a:9a:6d: 07:e8:ac:06:1d:c9:7a:ae:38:b9:79:dc:a8:1e:29:94:06:03: 4e:b1:91:0d:f2:a8:42:7a:1a:0e:74:95:d9:33:76:1b:18:50: f6:9a:04:cc:ad:98:bf:30:44:87:8a:72:2d:7e:26:0c:f4:d1: a7:37:29:3a:14:40:76:35:62:0c:1e:da:ea:95:1c:ca:3b:48: 34:47:1c:70 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUF0LK0EHEGlAajhP0JSDa1WHRh3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MDMwNTU1MzJaFw0yNzA4MDIwNjAwMzJaMDMxMTAvBgNV BAMTKDFBNzA2NTI0RjdDMjdDQzI3OEFCRTRBOThFNkQyNkMxQkExNDcwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4j0T3qSXWN36FmGYb538rG4OD AK9hEO1N764MbGDwfmp9Za3MzQSK7m1pRcaVgkUud9K46CpMFL1S7ElmntK1Qbee pAIGDRPDWE10X7I8r8Pur8FvCVFC3Y+SaPwbJ8Sys74JnlMCXj3VqCLmnYJS+irk FNGQ/vEbzGCRVCerYMoLHxvcYw6sZJY8jcWm/0ubleh2UyW5z0Pcg7a/wHwedjJe hmWe16CuJb/aRMcP5RSYWiMg4VO+cAWLBTnTYIETE17MKYkza1v01yesjHsjEqyP tWHUg9kgxkLxOQ6m8BVN4+DL+NYReXnHG/QdVtGThTF5K53RHnXCyWtl0gDvAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUGnBlJPfCfMJ4q+Spjm0mwboUcHMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDIyOTQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAAgwDQYJKoZIhvcNAQELBQADggEBAFKbm8hI/hZwXEhpDVg8jSbrTvT+iV3f rLenvqVHbo2ZVcQMTmMe+9HasItXst7OsQCZ9Dow+t+t0arY5nYFjkUcwbNBYEJy LXk9A5m3JkPgZnbKMybb0WIUPfy9J7P7kTlmA92g1MNM6+kXG51PFXRqzXJcXP9a mRqcVFfemiaun8+zFMpdsEiQ+VX5loFweA6Be2hC/SeBXaf0MrKMFVWdpXsXUm1j fjmR0F0PwLO+y4qabQforAYdyXquOLl53KgeKZQGA06xkQ3yqEJ6Gg50ldkzdhsY UPaaBMytmL8wRIeKci1+Jgz00ac3KToUQHY1Ygwe2uqVHMo7SDRHHHA= -----END CERTIFICATE-----Generated at Wed Aug 26 06:18:12 2026 by rpki-client