$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS203062.roa File: AS203062.roa (raw, json) Hash identifier: Wv2kBM7JCt/b2eOjVpAwDtei/ZjgOLb92L7F8HZponI= Subject key identifier: E6:D8:3F:2F:79:A8:95:CE:D2:4F:0B:AC:0E:CF:41:76:75:7E:A5:E6 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 03D8AA91915DC4C2FC1DED74EFE9B2445B4064E5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS203062.roa Signing time: Sun 28 Jun 2026 18:58:18 +0000 ROA not before: Sun 28 Jun 2026 18:53:18 +0000 ROA not after: Sun 27 Jun 2027 18:58:18 +0000 asID: 203062 IP address blocks: 2a0a:6044:b600::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d8:aa:91:91:5d:c4:c2:fc:1d:ed:74:ef:e9:b2:44:5b:40:64:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:53:18 2026 GMT Not After : Jun 27 18:58:18 2027 GMT Subject: CN=E6D83F2F79A895CED24F0BAC0ECF4176757EA5E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:8f:a0:15:ba:cd:41:74:63:d4:c1:be:1f: fc:0d:39:3f:52:40:e8:9c:7a:c6:b4:5e:40:15:e6: fc:22:03:58:d1:bf:65:a0:9c:c0:75:9c:f5:6f:77: e7:5a:8b:c0:61:f1:2b:4a:02:31:e5:87:7d:3d:99: ac:c4:c4:e2:84:10:ee:bc:88:20:d7:58:67:32:79: f6:11:d0:c8:e0:c6:23:76:20:fb:82:ff:62:33:05: f2:55:c9:6b:14:06:ce:43:fa:11:7f:3d:cb:b1:2c: eb:75:dc:2f:7b:24:d0:04:db:17:11:5e:15:b9:e3: a4:c3:a8:20:8b:66:5a:1e:e0:e5:82:85:b3:ec:f8: 4c:29:f2:70:1c:31:6e:63:ac:a0:b7:f3:92:61:3d: a1:51:9a:c0:a4:c2:47:20:08:55:ce:f9:44:8c:bf: 62:b1:8a:00:fc:43:b7:be:63:05:6c:16:17:86:35: bb:9b:a8:2b:fd:e6:2d:c7:37:bc:46:06:b0:45:6b: 13:40:cc:24:92:f1:f2:13:cc:b3:ed:fc:ca:0e:c4: a5:40:87:02:27:68:a1:d6:af:4d:37:89:a2:d0:e8: 9c:47:64:46:0b:e7:77:5d:b2:82:dc:c7:81:d6:41: da:0b:ed:08:c5:ed:4d:0b:8e:85:95:5a:6d:91:bb: a4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D8:3F:2F:79:A8:95:CE:D2:4F:0B:AC:0E:CF:41:76:75:7E:A5:E6 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS203062.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b600::/40 Signature Algorithm: sha256WithRSAEncryption 4c:c5:9e:3c:9c:9e:88:13:ba:03:dc:b9:f6:17:38:64:57:57: cf:38:ef:46:9e:b8:af:c5:d5:17:f9:7a:db:21:54:c8:83:a7: 1b:0d:47:c9:d3:c3:7d:37:bf:81:43:23:c9:6b:24:d0:2f:70: 98:35:ca:4e:eb:90:84:aa:3b:17:68:ae:67:44:2e:d9:69:9e: f4:dc:6e:aa:88:a0:53:56:39:a3:c5:ad:b8:5c:5c:9d:a0:8d: 28:46:7a:1c:f2:0a:5b:9c:1d:03:1f:3c:5a:0a:78:be:b6:92: 64:ce:29:70:b2:52:2f:04:3f:0f:cb:99:61:82:74:37:db:c8: ca:5f:41:61:f4:f7:e0:de:6e:ed:f9:cb:e7:80:04:51:ec:f8: 46:62:c1:86:04:b5:bf:0a:04:fa:49:0a:64:d9:5d:61:b3:0c: 7b:f1:07:fb:b5:d6:1d:18:63:5a:d4:19:96:c9:58:36:c2:ee: 67:9d:49:b5:95:7d:af:f1:e9:b9:43:32:1b:5d:87:d2:f6:18: ad:f1:84:8c:3c:91:78:73:3f:7b:2c:b8:7c:02:62:42:02:34: 31:63:2e:00:a9:da:4a:ab:4f:44:54:ce:8f:f8:62:5e:34:50: 49:db:18:94:76:52:33:4f:47:54:f9:c4:f3:ea:68:ca:be:3a: 1f:ff:f3:8e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUA9iqkZFdxML8He107+myRFtAZOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUzMThaFw0yNzA2MjcxODU4MThaMDMxMTAvBgNV BAMTKEU2RDgzRjJGNzlBODk1Q0VEMjRGMEJBQzBFQ0Y0MTc2NzU3RUE1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSso+gFbrNQXRj1MG+H/wNOT9S QOicesa0XkAV5vwiA1jRv2WgnMB1nPVvd+dai8Bh8StKAjHlh309mazExOKEEO68 iCDXWGcyefYR0MjgxiN2IPuC/2IzBfJVyWsUBs5D+hF/PcuxLOt13C97JNAE2xcR XhW546TDqCCLZloe4OWChbPs+Ewp8nAcMW5jrKC385JhPaFRmsCkwkcgCFXO+USM v2KxigD8Q7e+YwVsFheGNbubqCv95i3HN7xGBrBFaxNAzCSS8fITzLPt/MoOxKVA hwInaKHWr003iaLQ6JxHZEYL53ddsoLcx4HWQdoL7QjF7U0LjoWVWm2Ru6RlAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU5tg/L3molc7STwusDs9BdnV+peYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDMwNjIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEtjANBgkqhkiG9w0BAQsFAAOCAQEATMWePJyeiBO6A9y59hc4ZFdXzzjvRp64 r8XVF/l62yFUyIOnGw1HydPDfTe/gUMjyWsk0C9wmDXKTuuQhKo7F2iuZ0Qu2Wme 9NxuqoigU1Y5o8WtuFxcnaCNKEZ6HPIKW5wdAx88Wgp4vraSZM4pcLJSLwQ/D8uZ YYJ0N9vIyl9BYfT34N5u7fnL54AEUez4RmLBhgS1vwoE+kkKZNldYbMMe/EH+7XW HRhjWtQZlslYNsLuZ51JtZV9r/HpuUMyG12H0vYYrfGEjDyReHM/eyy4fAJiQgI0 MWMuAKnaSqtPRFTOj/hiXjRQSdsYlHZSM09HVPnE8+poyr46H//zjg== -----END CERTIFICATE-----Generated at Fri Jul 10 16:10:26 2026 by rpki-client