$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS205305.roa File: AS205305.roa (raw, json) Hash identifier: Lx+H4IMX3dTQBzDVq9/OVf7/zENyfiFi1NnRNjZu3WI= Subject key identifier: F9:81:10:45:B3:82:74:9A:F6:E4:41:87:0B:1D:AF:85:23:BD:8F:83 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 78D16A77416D76EFF83105720AA3C6112FFBFFB3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205305.roa Signing time: Sun 28 Jun 2026 18:57:52 +0000 ROA not before: Sun 28 Jun 2026 18:52:52 +0000 ROA not after: Sun 27 Jun 2027 18:57:52 +0000 asID: 205305 IP address blocks: 2a0f:6282:6000::/46 maxlen: 46 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d1:6a:77:41:6d:76:ef:f8:31:05:72:0a:a3:c6:11:2f:fb:ff:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:52:52 2026 GMT Not After : Jun 27 18:57:52 2027 GMT Subject: CN=F9811045B382749AF6E441870B1DAF8523BD8F83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9a:34:68:d3:27:6d:04:23:04:d1:dc:04:82: 4a:b6:27:09:0d:7b:7e:0f:c2:76:34:1e:a8:ed:e0: 1b:b7:25:e7:e1:e0:21:39:09:63:ee:c7:a1:eb:c0: ca:44:90:d7:24:8f:20:bb:95:ca:7f:8c:a9:12:82: fc:a8:a9:55:83:46:00:9b:11:ce:9a:24:f3:84:9c: a0:1e:ea:0e:f8:de:e2:b4:66:3f:47:4c:30:4f:91: 41:ee:f5:b7:d7:d6:26:43:02:77:92:fc:95:e2:49: 80:9a:2c:8d:89:c4:17:44:9a:84:a2:4e:57:ee:77: 1d:47:ba:82:cf:8f:25:1c:a8:7b:c5:d5:82:0f:a0: be:63:74:71:3e:07:be:2a:66:ab:84:60:4c:30:89: 4d:fa:3e:24:10:6d:a6:15:a1:c7:aa:03:83:88:b5: 19:75:9f:41:21:21:d2:72:44:8d:c0:67:c5:25:bc: 66:46:ae:ca:68:0e:38:b4:05:29:0a:45:7b:66:0a: cc:d7:12:ab:57:fb:32:3a:53:68:6e:0b:a1:ce:b3: 5f:82:72:e5:a7:e9:ae:80:ca:01:fc:47:91:10:de: 44:c2:53:cd:f0:fc:fc:0f:b4:61:4c:76:df:87:94: b6:34:b5:82:2c:26:7a:35:59:2d:a3:79:93:e1:71: 69:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:81:10:45:B3:82:74:9A:F6:E4:41:87:0B:1D:AF:85:23:BD:8F:83 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205305.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:6000::/46 Signature Algorithm: sha256WithRSAEncryption 15:dc:d7:68:99:80:9a:92:c8:8f:60:54:24:5a:c8:7b:d3:7d: 87:8a:b3:4f:0b:5d:12:6c:29:3b:d8:df:76:a6:34:e7:1e:79: 1f:1d:18:2a:9c:4a:a9:5f:bf:d0:41:fe:37:9b:3a:a8:10:93: f9:0a:58:f0:7b:8e:2f:e0:b3:43:e1:cd:c2:be:ea:01:2c:b6: 1c:9c:54:73:25:e1:c8:9b:64:b4:37:ef:2b:84:1b:55:1d:54: 13:c0:a5:56:40:b5:4a:f8:22:55:1f:a5:64:68:bd:e1:75:ac: 5b:60:da:8c:79:0f:04:ac:bf:da:29:77:b2:fd:d2:d5:9b:c8: 09:c4:5e:21:3a:d0:cf:78:0f:85:c3:30:33:97:d3:98:32:6c: de:58:c9:15:89:63:f6:64:f6:3a:6f:ee:7e:a9:cc:d6:f4:9b: ea:f1:b1:c6:93:73:4d:9a:0a:7d:20:4d:5a:36:2d:36:26:f1: 83:78:5c:8b:dd:49:cb:48:3f:e5:43:f9:40:62:2b:60:9e:6d: 98:cc:83:b8:77:71:42:03:06:dd:93:f1:99:c4:5e:93:89:3f: c0:7d:02:8e:76:a1:d9:56:42:f1:61:14:6b:50:fb:d8:0b:2d: 82:1e:05:2a:58:b9:f5:1e:2d:9d:68:d3:9c:33:d3:af:ac:47: 13:e6:97:de -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUeNFqd0Ftdu/4MQVyCqPGES/7/7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUyNTJaFw0yNzA2MjcxODU3NTJaMDMxMTAvBgNV BAMTKEY5ODExMDQ1QjM4Mjc0OUFGNkU0NDE4NzBCMURBRjg1MjNCRDhGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgmjRo0ydtBCME0dwEgkq2JwkN e34PwnY0Hqjt4Bu3Jefh4CE5CWPux6HrwMpEkNckjyC7lcp/jKkSgvyoqVWDRgCb Ec6aJPOEnKAe6g743uK0Zj9HTDBPkUHu9bfX1iZDAneS/JXiSYCaLI2JxBdEmoSi Tlfudx1HuoLPjyUcqHvF1YIPoL5jdHE+B74qZquEYEwwiU36PiQQbaYVoceqA4OI tRl1n0EhIdJyRI3AZ8UlvGZGrspoDji0BSkKRXtmCszXEqtX+zI6U2huC6HOs1+C cuWn6a6AygH8R5EQ3kTCU83w/PwPtGFMdt+HlLY0tYIsJno1WS2jeZPhcWldAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU+YEQRbOCdJr25EGHCx2vhSO9j4MwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDUzMDUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIq D2KCYAAwDQYJKoZIhvcNAQELBQADggEBABXc12iZgJqSyI9gVCRayHvTfYeKs08L XRJsKTvY33amNOceeR8dGCqcSqlfv9BB/jebOqgQk/kKWPB7ji/gs0PhzcK+6gEs thycVHMl4cibZLQ37yuEG1UdVBPApVZAtUr4IlUfpWRoveF1rFtg2ox5DwSsv9op d7L90tWbyAnEXiE60M94D4XDMDOX05gybN5YyRWJY/Zk9jpv7n6pzNb0m+rxscaT c02aCn0gTVo2LTYm8YN4XIvdSctIP+VD+UBiK2CebZjMg7h3cUIDBt2T8ZnEXpOJ P8B9Ao52odlWQvFhFGtQ+9gLLYIeBSpYufUeLZ1o05wz06+sRxPml94= -----END CERTIFICATE-----Generated at Fri Jul 10 16:12:44 2026 by rpki-client