$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS203446.roa File: AS203446.roa (raw, json) Hash identifier: dgi64c5nHUCQq5JEtjmDIbTDKO/FN2Gnnp+bkbI95b8= Subject key identifier: 98:1E:23:60:CC:21:9E:3E:83:C6:E2:04:2E:FC:91:67:28:DB:94:9E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6B208C4BD3AA3E61CAB7E1A7FE548BF83CFFACF9 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS203446.roa Signing time: Mon 31 Aug 2026 12:55:26 +0000 ROA not before: Mon 31 Aug 2026 12:50:26 +0000 ROA not after: Mon 30 Aug 2027 12:55:26 +0000 asID: 203446 IP address blocks: 2a0f:6282:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:20:8c:4b:d3:aa:3e:61:ca:b7:e1:a7:fe:54:8b:f8:3c:ff:ac:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 31 12:50:26 2026 GMT Not After : Aug 30 12:55:26 2027 GMT Subject: CN=981E2360CC219E3E83C6E2042EFC916728DB949E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a7:4d:5c:f3:a9:e8:2f:f2:56:2e:fb:2a:f7: a3:bf:55:e4:cd:68:3b:9b:f0:1a:e8:10:b2:e0:0a: f4:25:9a:29:b3:cd:7b:6c:e9:0f:45:33:78:8c:3e: ae:64:fa:cd:c5:5b:8d:92:09:ec:8a:1c:a2:52:c6: a9:04:f6:e5:0f:0b:90:2f:19:94:3a:43:e0:7d:3b: 8d:5a:2b:38:80:97:33:88:07:d9:c8:96:51:35:b5: 93:f0:4c:e8:06:20:fa:ce:be:2b:f5:2f:49:f8:23: 36:4d:07:8a:1a:64:74:3f:04:42:23:9e:2e:7a:d3: 0a:42:2d:a7:94:22:d3:d4:32:01:b3:2e:cd:57:8b: 85:97:26:a3:7a:00:dc:86:ce:6f:65:9d:f7:26:23: 60:f2:79:60:29:d1:b7:d7:a7:cf:cd:34:53:5f:7a: 91:d5:5e:b5:87:a8:eb:a8:b1:6c:31:10:37:28:ab: 56:43:f7:a1:45:5f:56:e1:b9:43:c1:b9:1b:8f:c0: f5:22:c9:a9:6a:c5:bc:12:5f:39:4e:13:d4:2f:7d: 91:e3:95:18:bc:d9:1b:07:c8:4a:95:35:e7:e7:68: 8b:6c:80:80:66:5c:e9:21:46:9e:e2:cd:be:7c:0d: 2b:dd:67:14:97:b3:17:01:e6:dd:d7:12:e2:ce:69: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1E:23:60:CC:21:9E:3E:83:C6:E2:04:2E:FC:91:67:28:DB:94:9E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS203446.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:b000::/36 Signature Algorithm: sha256WithRSAEncryption 24:f2:ff:11:08:b2:42:f1:d0:f3:ac:de:2b:9b:68:2c:79:13: ff:e3:cb:28:b6:12:76:31:71:99:10:1d:16:58:b0:4b:e1:67: b9:4d:0d:f7:cd:39:0b:47:df:e1:87:51:f2:99:a8:85:52:24: 9f:75:8b:51:af:d7:17:32:e1:da:a0:72:7c:3c:92:53:37:00: bd:a7:5c:76:4c:22:ab:1e:63:20:fc:f0:0e:70:12:eb:9f:39: 04:7d:99:c6:6e:a1:5d:8d:96:e9:42:23:91:93:a5:dd:38:1d: 52:1f:7f:71:58:89:f0:d0:ed:c6:9c:98:bd:5d:2a:22:17:8e: 0e:d7:11:80:46:18:bc:5d:ad:37:92:57:7f:7e:28:fc:3e:4b: 14:87:1f:3c:de:c8:18:32:0c:2e:91:bc:d2:e7:56:1e:52:24: 70:63:c2:6d:74:83:72:5d:38:3e:12:44:91:f2:66:6a:cf:61: e7:d7:d2:e3:d3:36:4e:e4:72:71:ef:66:79:3c:69:3c:51:04: 9d:cf:59:92:0f:e1:39:81:1d:d7:3f:f0:d4:b9:da:51:e7:29: 93:2d:e5:2b:84:1c:2c:a0:90:e5:2c:02:08:4a:f8:5c:2b:c3: 8a:94:6a:ae:17:b6:e7:87:92:83:92:1e:da:13:fb:9f:7e:19: 3f:b4:a4:16 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUayCMS9OqPmHKt+Gn/lSL+Dz/rPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MzExMjUwMjZaFw0yNzA4MzAxMjU1MjZaMDMxMTAvBgNV BAMTKDk4MUUyMzYwQ0MyMTlFM0U4M0M2RTIwNDJFRkM5MTY3MjhEQjk0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUp01c86noL/JWLvsq96O/VeTN aDub8BroELLgCvQlmimzzXts6Q9FM3iMPq5k+s3FW42SCeyKHKJSxqkE9uUPC5Av GZQ6Q+B9O41aKziAlzOIB9nIllE1tZPwTOgGIPrOviv1L0n4IzZNB4oaZHQ/BEIj ni560wpCLaeUItPUMgGzLs1Xi4WXJqN6ANyGzm9lnfcmI2DyeWAp0bfXp8/NNFNf epHVXrWHqOuosWwxEDcoq1ZD96FFX1bhuUPBuRuPwPUiyalqxbwSXzlOE9QvfZHj lRi82RsHyEqVNefnaItsgIBmXOkhRp7izb58DSvdZxSXsxcB5t3XEuLOaSwdAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUmB4jYMwhnj6DxuIELvyRZyjblJ4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDM0NDYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KCsDANBgkqhkiG9w0BAQsFAAOCAQEAJPL/EQiyQvHQ86zeK5toLHkT/+PLKLYS djFxmRAdFliwS+FnuU0N9805C0ff4YdR8pmohVIkn3WLUa/XFzLh2qByfDySUzcA vadcdkwiqx5jIPzwDnAS6585BH2Zxm6hXY2W6UIjkZOl3TgdUh9/cViJ8NDtxpyY vV0qIheODtcRgEYYvF2tN5JXf34o/D5LFIcfPN7IGDIMLpG80udWHlIkcGPCbXSD cl04PhJEkfJmas9h59fS49M2TuRyce9meTxpPFEEnc9Zkg/hOYEd1z/w1LnaUecp ky3lK4QcLKCQ5SwCCEr4XCvDipRqrhe254eSg5Ie2hP7n34ZP7SkFg== -----END CERTIFICATE-----Generated at Fri Sep 4 17:15:13 2026 by rpki-client