$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS204490.roa File: AS204490.roa (raw, json) Hash identifier: KHlphpYavllh8//JJPD7lctFthesqaFWnzjyj52N3rQ= Subject key identifier: F9:1C:7C:9A:F0:E9:4D:1C:A8:70:28:18:49:9A:16:37:D4:44:38:AB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 24BB235DA1A1604B34BA0BF2E89CC34C193FB3D7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS204490.roa Signing time: Sun 28 Jun 2026 18:55:33 +0000 ROA not before: Sun 28 Jun 2026 18:50:33 +0000 ROA not after: Sun 27 Jun 2027 18:55:33 +0000 asID: 204490 IP address blocks: 2a0f:6284:53::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bb:23:5d:a1:a1:60:4b:34:ba:0b:f2:e8:9c:c3:4c:19:3f:b3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:33 2026 GMT Not After : Jun 27 18:55:33 2027 GMT Subject: CN=F91C7C9AF0E94D1CA8702818499A1637D44438AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:a8:5c:1a:89:7c:74:78:1d:55:9c:7d:17: 70:df:dc:97:82:6f:e7:3d:4b:46:94:ce:d9:30:c1: 75:b3:fb:f8:8d:72:be:47:ce:1a:d3:3b:54:7c:1e: 78:06:79:0d:df:2d:13:81:bc:f1:c4:4a:69:79:85: a0:45:04:99:3e:db:6d:4f:23:31:d3:f2:a5:f7:36: 17:08:49:85:ef:b8:9c:d0:31:4c:f3:e2:e3:f2:6f: 8d:20:11:ef:c8:be:84:e8:70:d6:9b:ed:3a:38:fb: 38:62:00:81:b0:13:f4:a6:5f:c5:d7:34:14:1f:c7: 02:00:1e:ad:c4:42:95:2d:8a:0f:2d:51:2c:8d:a3: aa:88:64:5c:0b:3a:75:29:86:11:c0:77:e5:1e:ee: 6b:a8:f0:7a:86:b4:01:c5:51:f7:a3:7a:6e:f0:12: 3f:ff:af:56:ee:53:ba:41:c9:f0:a2:80:d2:40:f7: 22:dd:3b:74:34:50:b4:fb:1f:48:ea:8c:b2:12:fa: 76:51:a5:e6:4d:09:32:a9:ac:25:c5:22:4c:47:b8: 8f:bd:35:b0:8b:37:3f:86:85:40:7e:8f:93:12:6d: 9b:e6:63:a1:d0:b2:19:b4:ee:b8:a6:ed:7f:7b:04: 89:52:17:34:28:1d:9d:d3:ef:85:00:e6:12:e5:0e: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:7C:9A:F0:E9:4D:1C:A8:70:28:18:49:9A:16:37:D4:44:38:AB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS204490.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:53::/48 Signature Algorithm: sha256WithRSAEncryption 53:5e:b7:74:19:49:cf:a9:31:2c:e4:e8:90:37:d4:d0:fe:05: 74:f4:dc:54:06:2b:1d:fb:2b:67:d8:ee:16:89:23:db:52:fc: 5e:c9:78:76:84:6a:d9:ab:e0:52:7d:3f:a0:f2:6f:e7:2d:06: e4:74:d2:be:cc:71:1e:c6:85:9e:79:58:06:4a:2d:0a:19:c2: 72:e1:2b:21:b6:48:46:d3:f3:18:63:f8:a2:8f:49:07:a4:a3: 72:d4:30:46:2b:75:b3:d5:94:2a:c4:4e:9a:dd:7c:a4:8d:33: 27:d0:32:c1:6b:ad:89:ba:11:4e:7a:bb:16:13:f3:d3:15:76: 32:14:6c:a1:0f:42:70:4e:93:4a:ea:55:32:84:18:66:cc:00: 7b:88:03:fe:1f:86:77:b5:bc:f7:8e:c6:a9:55:1a:b7:45:74: e7:4b:d3:53:90:c2:9e:29:c8:d2:fb:52:92:ec:3a:01:94:0b: 31:1e:1a:b0:08:13:fd:36:18:f6:ca:e0:68:26:3e:d9:22:24: 3f:10:5c:9e:ae:0c:20:ca:1c:33:40:71:12:2e:a9:1b:85:20: b3:28:3d:f3:ee:40:ed:e3:f3:02:be:44:00:de:4f:a3:67:2e: 56:81:08:ed:d4:17:30:e5:7c:f8:4a:05:83:45:4f:63:37:32: 5a:8a:41:0a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUJLsjXaGhYEs0ugvy6JzDTBk/s9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwMzNaFw0yNzA2MjcxODU1MzNaMDMxMTAvBgNV BAMTKEY5MUM3QzlBRjBFOTREMUNBODcwMjgxODQ5OUExNjM3RDQ0NDM4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2X6hcGol8dHgdVZx9F3Df3JeC b+c9S0aUztkwwXWz+/iNcr5HzhrTO1R8HngGeQ3fLROBvPHESml5haBFBJk+221P IzHT8qX3NhcISYXvuJzQMUzz4uPyb40gEe/IvoTocNab7To4+zhiAIGwE/SmX8XX NBQfxwIAHq3EQpUtig8tUSyNo6qIZFwLOnUphhHAd+Ue7muo8HqGtAHFUfejem7w Ej//r1buU7pByfCigNJA9yLdO3Q0ULT7H0jqjLIS+nZRpeZNCTKprCXFIkxHuI+9 NbCLNz+GhUB+j5MSbZvmY6HQshm07rim7X97BIlSFzQoHZ3T74UA5hLlDmltAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU+Rx8mvDpTRyocCgYSZoWN9REOKswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDQ0OTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAFMwDQYJKoZIhvcNAQELBQADggEBAFNet3QZSc+pMSzk6JA31ND+BXT03FQG Kx37K2fY7haJI9tS/F7JeHaEatmr4FJ9P6Dyb+ctBuR00r7McR7GhZ55WAZKLQoZ wnLhKyG2SEbT8xhj+KKPSQeko3LUMEYrdbPVlCrETprdfKSNMyfQMsFrrYm6EU56 uxYT89MVdjIUbKEPQnBOk0rqVTKEGGbMAHuIA/4fhne1vPeOxqlVGrdFdOdL01OQ wp4pyNL7UpLsOgGUCzEeGrAIE/02GPbK4GgmPtkiJD8QXJ6uDCDKHDNAcRIuqRuF ILMoPfPuQO3j8wK+RADeT6NnLlaBCO3UFzDlfPhKBYNFT2M3MlqKQQo= -----END CERTIFICATE-----Generated at Fri Jul 10 16:13:16 2026 by rpki-client