$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS203534.roa File: AS203534.roa (raw, json) Hash identifier: FYgJ4WAddM63rkJrP1z6o8eunrf2txKbo0ZtCuOKMWw= Subject key identifier: 5C:76:D8:87:C3:B0:9B:66:C2:23:85:C1:E0:78:04:11:EC:76:D7:E0 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 78B77866B3555EC504FC3947D1291B740509F506 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS203534.roa Signing time: Thu 02 Jul 2026 20:10:50 +0000 ROA not before: Thu 02 Jul 2026 20:05:50 +0000 ROA not after: Thu 01 Jul 2027 20:10:50 +0000 asID: 203534 IP address blocks: 2a0f:6282:e00::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b7:78:66:b3:55:5e:c5:04:fc:39:47:d1:29:1b:74:05:09:f5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 2 20:05:50 2026 GMT Not After : Jul 1 20:10:50 2027 GMT Subject: CN=5C76D887C3B09B66C22385C1E0780411EC76D7E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a4:13:8c:34:7f:88:2c:f3:c6:08:60:d8:5f: 01:2b:37:da:85:13:ed:cb:0e:83:2c:14:a5:8e:e6: 25:3a:87:04:37:4b:a5:d9:13:a2:bc:36:81:fe:25: 83:24:ea:92:47:5f:28:3d:12:cf:c3:c2:1c:3f:58: 1f:e5:e7:04:d4:d0:7e:be:0b:fd:86:61:c5:f7:df: f7:43:76:a2:56:09:0e:ea:7e:b0:e6:4b:af:4b:30: c3:59:c5:c6:cc:e0:4f:71:7e:e8:6e:68:94:78:b9: ad:3c:1e:d6:c0:3f:3d:12:1b:3e:7d:95:6e:f7:a5: 38:28:c7:02:57:fb:00:df:df:ac:8e:39:00:2e:5b: 28:e9:b9:c9:ba:6f:56:89:68:73:aa:0d:93:63:08: 37:59:c8:ff:2a:66:24:7b:db:8d:f2:a3:b4:e4:26: 7e:58:b6:8d:98:34:92:d7:5d:00:72:e6:40:7b:ef: 8b:fd:f2:be:b1:41:1d:c9:2c:b6:00:3a:51:81:9b: a6:a7:b7:e8:66:26:ae:8c:73:9b:6d:6f:22:bd:0b: 62:58:a5:af:b3:23:59:f6:58:76:62:fb:e3:ec:ef: 2e:0e:92:c7:4a:b6:19:c8:36:b4:ce:e0:43:59:45: 27:23:0c:73:ce:29:b5:69:26:45:d7:cb:0a:44:0c: 14:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:76:D8:87:C3:B0:9B:66:C2:23:85:C1:E0:78:04:11:EC:76:D7:E0 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS203534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:e00::/44 Signature Algorithm: sha256WithRSAEncryption 7c:6f:27:cc:74:d6:54:5e:58:30:17:6c:f6:b7:65:19:6e:0b: c3:f7:8b:e6:7f:a7:e2:d6:8e:cc:5a:8c:6e:37:f7:a9:d2:42: 40:a1:09:aa:45:c1:2a:8e:b2:53:87:fc:60:22:aa:3e:26:50: 21:6a:cb:62:52:b1:53:41:d0:3c:fa:00:14:3d:00:75:44:06: 05:3b:f7:33:e7:f6:c5:88:29:39:c1:40:d8:64:3d:43:ed:36: 6d:58:f5:48:01:09:df:2b:82:0c:e2:f3:0a:b5:4b:93:00:b9: 82:10:1f:db:e5:04:5a:f0:13:dc:d6:3c:10:23:e6:7d:33:6b: cd:51:20:a0:8f:a5:1e:df:26:e1:6a:47:c8:1c:c4:91:65:9d: 3f:36:b3:88:73:97:3b:f9:5c:06:51:4a:14:84:c9:30:34:4c: 16:69:2a:d6:c9:41:5d:a2:7e:e0:52:3b:2b:27:e0:9b:5d:83: 0d:5c:b6:cf:40:01:78:fb:e2:f2:91:aa:25:15:ac:55:8f:aa: b4:3e:61:f1:a4:3e:d3:94:a6:ff:4c:99:94:08:85:42:34:e6: d4:86:99:37:4f:80:4b:c6:4e:30:f4:5e:a6:69:f9:0b:31:7b: 43:9d:50:32:4c:1e:5d:92:db:fb:53:f3:63:c9:1c:e6:8a:97: fa:5b:25:10 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUeLd4ZrNVXsUE/DlH0SkbdAUJ9QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MDIyMDA1NTBaFw0yNzA3MDEyMDEwNTBaMDMxMTAvBgNV BAMTKDVDNzZEODg3QzNCMDlCNjZDMjIzODVDMUUwNzgwNDExRUM3NkQ3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZpBOMNH+ILPPGCGDYXwErN9qF E+3LDoMsFKWO5iU6hwQ3S6XZE6K8NoH+JYMk6pJHXyg9Es/Dwhw/WB/l5wTU0H6+ C/2GYcX33/dDdqJWCQ7qfrDmS69LMMNZxcbM4E9xfuhuaJR4ua08HtbAPz0SGz59 lW73pTgoxwJX+wDf36yOOQAuWyjpucm6b1aJaHOqDZNjCDdZyP8qZiR7243yo7Tk Jn5Yto2YNJLXXQBy5kB774v98r6xQR3JLLYAOlGBm6ant+hmJq6Mc5ttbyK9C2JY pa+zI1n2WHZi++Ps7y4OksdKthnINrTO4ENZRScjDHPOKbVpJkXXywpEDBTFAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUXHbYh8Owm2bCI4XB4HgEEex21+AwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDM1MzQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KCDgAwDQYJKoZIhvcNAQELBQADggEBAHxvJ8x01lReWDAXbPa3ZRluC8P3i+Z/ p+LWjsxajG4396nSQkChCapFwSqOslOH/GAiqj4mUCFqy2JSsVNB0Dz6ABQ9AHVE BgU79zPn9sWIKTnBQNhkPUPtNm1Y9UgBCd8rggzi8wq1S5MAuYIQH9vlBFrwE9zW PBAj5n0za81RIKCPpR7fJuFqR8gcxJFlnT82s4hzlzv5XAZRShSEyTA0TBZpKtbJ QV2ifuBSOysn4Jtdgw1cts9AAXj74vKRqiUVrFWPqrQ+YfGkPtOUpv9MmZQIhUI0 5tSGmTdPgEvGTjD0XqZp+Qsxe0OdUDJMHl2S2/tT82PJHOaKl/pbJRA= -----END CERTIFICATE-----Generated at Fri Jul 10 16:10:08 2026 by rpki-client