$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS204208.roa File: AS204208.roa (raw, json) Hash identifier: Rvg9lbNrRyZoeWpCAFtO/pVXXYpcylTdBCrEfajluCQ= Subject key identifier: 11:34:BC:87:A8:86:C9:21:24:92:F3:C4:14:D0:B0:91:71:46:FC:23 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3997ED9CE721C98E32BEC89AE70C043B8E72B6EB Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS204208.roa Signing time: Sun 16 Aug 2026 15:22:00 +0000 ROA not before: Sun 16 Aug 2026 15:17:00 +0000 ROA not after: Sun 15 Aug 2027 15:22:00 +0000 asID: 204208 IP address blocks: 136.148.68.0/24 maxlen: 32 2a05:dfc3::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:97:ed:9c:e7:21:c9:8e:32:be:c8:9a:e7:0c:04:3b:8e:72:b6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 16 15:17:00 2026 GMT Not After : Aug 15 15:22:00 2027 GMT Subject: CN=1134BC87A886C9212492F3C414D0B0917146FC23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:3b:4e:43:6a:73:0f:f5:04:0e:18:af:91: 46:7b:f9:51:a3:93:f2:c6:60:fc:b6:59:34:85:ad: 2c:fc:46:26:fd:9d:60:cd:54:d8:a1:0c:74:48:5a: b1:71:02:45:2f:35:59:c2:d2:c5:2f:31:1c:f3:ec: 82:f8:b0:7c:63:a5:d0:33:8c:3f:e7:ad:e3:50:38: 17:d3:cf:70:dd:ea:f0:b7:ee:e4:be:66:82:39:e9: 2b:69:75:e0:e6:01:99:99:48:45:0c:ee:93:bb:b9: 9a:8c:cb:77:97:f9:29:4b:0f:70:90:fd:9a:76:61: b8:71:40:a9:4a:e3:30:4d:06:fd:fe:f1:d7:80:d5: 64:ed:74:8e:bf:97:46:0d:6f:fa:c0:cb:cc:c4:38: b7:68:7e:e8:b1:71:77:83:26:da:0c:13:ed:1f:80: dc:88:46:b8:b2:32:af:e6:55:0e:e5:0e:c1:64:55: 7b:9d:0b:af:ba:4f:06:f1:06:dc:b9:ef:96:be:51: 01:1d:75:81:5e:c7:e8:e7:bc:c4:b3:f0:fc:f5:b9: 2c:b6:58:93:4d:9a:35:0c:3c:ea:43:cd:60:ca:38: 30:a5:94:b1:60:e2:1a:d2:d1:fe:42:ce:6d:f1:0b: 50:a5:ab:1e:8b:64:ca:32:f6:a8:9b:c5:df:c7:fc: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:34:BC:87:A8:86:C9:21:24:92:F3:C4:14:D0:B0:91:71:46:FC:23 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS204208.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.148.68.0/24 IPv6: 2a05:dfc3::/40 Signature Algorithm: sha256WithRSAEncryption 19:8d:1f:b3:7c:78:a7:2a:4a:06:c2:b8:98:92:c9:1b:f8:81: 19:1e:25:d3:5a:54:61:a9:f4:32:1a:78:56:62:8c:df:5c:cc: 37:6c:d0:35:f4:b7:c8:bc:64:e7:d4:1b:6a:b7:4c:2f:1e:98: 8f:03:66:7e:49:31:8c:77:9b:1c:71:93:b2:d3:25:fa:ad:2f: c3:df:0c:51:d7:8b:ac:76:ad:cc:16:e6:58:af:3f:df:1f:bd: fa:14:27:8e:41:ee:0a:90:9e:0f:66:ed:99:5f:b6:d2:ca:7f: ff:20:c0:18:33:ad:d3:8a:d5:e2:18:29:df:45:74:bc:50:2f: 2d:56:ff:d5:61:a8:6d:49:6b:a6:c2:d4:74:16:4b:2e:78:ac: 9a:87:bf:98:c7:80:28:68:94:d6:45:8e:3c:21:2a:76:6f:7f: 46:4a:95:52:4c:b1:60:02:04:9e:11:f4:fa:fe:25:16:e9:38: 96:18:29:3e:70:7c:1c:65:6c:a4:19:6f:6b:d3:ec:e9:69:18: f3:e7:61:b2:49:42:7a:be:55:10:1f:fa:e7:fd:50:5d:6d:b8: 68:d6:b3:4f:a6:5c:b5:43:4f:27:2e:a4:fa:f9:c5:22:f9:49: 6c:6d:41:2c:7d:a2:65:c7:b5:ff:f0:c6:76:4b:0e:ad:ed:49: 60:54:fe:75 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUOZftnOchyY4yvsia5wwEO45ytuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTYxNTE3MDBaFw0yNzA4MTUxNTIyMDBaMDMxMTAvBgNV BAMTKDExMzRCQzg3QTg4NkM5MjEyNDkyRjNDNDE0RDBCMDkxNzE0NkZDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLDtOQ2pzD/UEDhivkUZ7+VGj k/LGYPy2WTSFrSz8Rib9nWDNVNihDHRIWrFxAkUvNVnC0sUvMRzz7IL4sHxjpdAz jD/nreNQOBfTz3Dd6vC37uS+ZoI56StpdeDmAZmZSEUM7pO7uZqMy3eX+SlLD3CQ /Zp2YbhxQKlK4zBNBv3+8deA1WTtdI6/l0YNb/rAy8zEOLdofuixcXeDJtoME+0f gNyIRriyMq/mVQ7lDsFkVXudC6+6TwbxBty575a+UQEddYFex+jnvMSz8Pz1uSy2 WJNNmjUMPOpDzWDKODCllLFg4hrS0f5Czm3xC1Clqx6LZMoy9qibxd/H/EudAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUETS8h6iGySEkkvPEFNCwkXFG/CMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDQyMDgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBACI lEQwDgQCAAIwCAMGACoF38MAMA0GCSqGSIb3DQEBCwUAA4IBAQAZjR+zfHinKkoG wriYkskb+IEZHiXTWlRhqfQyGnhWYozfXMw3bNA19LfIvGTn1Btqt0wvHpiPA2Z+ STGMd5sccZOy0yX6rS/D3wxR14usdq3MFuZYrz/fH736FCeOQe4KkJ4PZu2ZX7bS yn//IMAYM63TitXiGCnfRXS8UC8tVv/VYahtSWumwtR0FksueKyah7+Yx4AoaJTW RY48ISp2b39GSpVSTLFgAgSeEfT6/iUW6TiWGCk+cHwcZWykGW9r0+zpaRjz52Gy SUJ6vlUQH/rn/VBdbbho1rNPply1Q08nLqT6+cUi+UlsbUEsfaJlx7X/8MZ2Sw6t 7UlgVP51 -----END CERTIFICATE-----Generated at Wed Aug 26 07:55:33 2026 by rpki-client