$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS205378.roa File: AS205378.roa (raw, json) Hash identifier: Z/2YOlkMJTjc4uIjv9lBrjqYEfLhtIzWKDwaGvhMJ2g= Subject key identifier: 41:60:A9:C3:F7:29:10:1D:CA:3B:93:B7:B8:7B:A9:DA:23:32:85:AB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2E07D3A562B2D333EFE4A70EFCDF1AEEBD332400 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205378.roa Signing time: Wed 19 Aug 2026 08:33:41 +0000 ROA not before: Wed 19 Aug 2026 08:28:41 +0000 ROA not after: Wed 18 Aug 2027 08:33:41 +0000 asID: 205378 IP address blocks: 2a0f:6284:4600::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:07:d3:a5:62:b2:d3:33:ef:e4:a7:0e:fc:df:1a:ee:bd:33:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 19 08:28:41 2026 GMT Not After : Aug 18 08:33:41 2027 GMT Subject: CN=4160A9C3F729101DCA3B93B7B87BA9DA233285AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:5f:18:2f:50:c1:d4:23:ed:38:6c:e3:c2: 0f:47:a8:1d:87:08:45:f3:2e:ff:da:c0:4c:59:e7: 60:a3:75:08:f4:83:2f:5a:26:59:c2:13:06:2e:ca: 0b:fc:97:69:b4:8d:de:2f:87:0f:71:44:0e:be:9b: f0:c5:e7:5a:09:45:53:e7:1c:97:8e:66:ef:12:ce: 11:80:fa:cb:2d:4c:f3:6b:d7:ca:04:08:8b:b4:a9: b9:01:d0:d9:15:fd:e8:8f:dc:a7:84:3b:7d:ed:cb: dc:26:59:9a:5a:9a:fa:d3:a3:d6:d9:32:ab:0b:00: 0a:38:33:7c:b0:fc:1f:50:65:d4:2d:0a:e7:2f:8c: 47:63:66:d1:12:fc:1d:12:14:34:a0:af:65:90:33: ca:5b:46:42:6e:f3:57:aa:e2:0a:7e:30:bb:39:7c: 17:ce:5b:06:92:3a:0e:ff:5d:b0:2f:f9:aa:a3:55: 0f:bd:8a:34:cd:ec:66:d8:08:0d:7d:06:04:37:d1: d2:c9:13:8e:7a:b5:a4:59:c4:16:78:e8:d5:b2:e9: 14:49:53:8c:e7:98:84:f1:59:40:32:45:0a:03:cb: 07:f0:32:c9:a6:6c:7f:e7:be:47:d4:38:45:52:20: 86:da:14:99:45:a3:c9:14:8b:38:46:fb:0c:04:9b: 59:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:A9:C3:F7:29:10:1D:CA:3B:93:B7:B8:7B:A9:DA:23:32:85:AB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205378.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4600::/40 Signature Algorithm: sha256WithRSAEncryption 53:d7:f3:af:8c:cb:06:47:6a:47:66:3c:da:6b:28:88:56:61: 7b:a3:bb:8c:6f:5e:85:4e:c9:f5:06:01:ac:44:e0:8f:1b:d2: 1b:07:3a:de:9d:e8:18:47:1d:3c:db:c1:8f:a5:98:12:99:a6: 2a:eb:51:d2:57:0e:bd:fa:5b:41:e6:93:9f:1b:d2:d8:c1:37: 28:f4:41:66:75:df:71:80:b9:e4:f1:ed:d3:29:9a:4d:4b:b1: 1a:46:df:d3:f7:c9:41:ef:f4:41:6f:34:1a:fb:b7:3b:2e:c3: 38:37:24:8b:89:56:1f:2f:12:ee:8b:69:85:f1:1d:89:2d:35: c6:e8:12:84:3f:11:69:0a:57:44:98:f6:82:94:39:f4:ec:7f: e2:0b:77:e1:f3:bc:6b:72:b8:89:75:d3:37:88:5f:7a:c0:54: d4:e4:74:f2:2a:21:55:f8:5b:e8:5b:30:c3:b8:30:c9:90:1d: cd:91:26:16:97:a1:b0:86:2c:ea:2e:98:aa:3b:3c:d0:66:60: f1:65:61:3d:40:be:5d:f0:37:38:e0:57:5f:49:1d:61:63:76: 87:8d:46:5c:0b:21:dd:9e:f4:d8:cc:bb:98:bc:be:86:56:31: f7:cd:ea:c2:b3:a6:b6:4d:ea:68:02:45:d1:a6:d3:86:aa:9c: e1:8f:ef:dd -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIULgfTpWKy0zPv5KcO/N8a7r0zJAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTkwODI4NDFaFw0yNzA4MTgwODMzNDFaMDMxMTAvBgNV BAMTKDQxNjBBOUMzRjcyOTEwMURDQTNCOTNCN0I4N0JBOURBMjMzMjg1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwl8YL1DB1CPtOGzjwg9HqB2H CEXzLv/awExZ52CjdQj0gy9aJlnCEwYuygv8l2m0jd4vhw9xRA6+m/DF51oJRVPn HJeOZu8SzhGA+sstTPNr18oECIu0qbkB0NkV/eiP3KeEO33ty9wmWZpamvrTo9bZ MqsLAAo4M3yw/B9QZdQtCucvjEdjZtES/B0SFDSgr2WQM8pbRkJu81eq4gp+MLs5 fBfOWwaSOg7/XbAv+aqjVQ+9ijTN7GbYCA19BgQ30dLJE456taRZxBZ46NWy6RRJ U4znmITxWUAyRQoDywfwMsmmbH/nvkfUOEVSIIbaFJlFo8kUizhG+wwEm1mvAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUQWCpw/cpEB3KO5O3uHup2iMyhaswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDUzNzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KERjANBgkqhkiG9w0BAQsFAAOCAQEAU9fzr4zLBkdqR2Y82msoiFZhe6O7jG9e hU7J9QYBrETgjxvSGwc63p3oGEcdPNvBj6WYEpmmKutR0lcOvfpbQeaTnxvS2ME3 KPRBZnXfcYC55PHt0ymaTUuxGkbf0/fJQe/0QW80Gvu3Oy7DODcki4lWHy8S7otp hfEdiS01xugShD8RaQpXRJj2gpQ59Ox/4gt34fO8a3K4iXXTN4hfesBU1OR08ioh Vfhb6Fsww7gwyZAdzZEmFpehsIYs6i6Yqjs80GZg8WVhPUC+XfA3OOBXX0kdYWN2 h41GXAsh3Z702My7mLy+hlYx983qwrOmtk3qaAJF0abThqqc4Y/v3Q== -----END CERTIFICATE-----Generated at Fri Sep 4 23:20:07 2026 by rpki-client