$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS205778.roa File: AS205778.roa (raw, json) Hash identifier: v8Vi1qP2ztixLCTsWNrZvQH6SW5YGF6zwfK9XFTx8hQ= Subject key identifier: CA:DC:C7:68:A6:C8:5E:DE:9E:80:55:C9:7D:57:33:ED:80:D4:9D:85 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 620B1DAE04E68C42E434CDB5455ECD3F593628B2 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205778.roa Signing time: Sun 28 Jun 2026 18:58:17 +0000 ROA not before: Sun 28 Jun 2026 18:53:17 +0000 ROA not after: Sun 27 Jun 2027 18:58:17 +0000 asID: 205778 IP address blocks: 2a0f:6284:4210::/48 maxlen: 48 2a0f:6284:4211::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0b:1d:ae:04:e6:8c:42:e4:34:cd:b5:45:5e:cd:3f:59:36:28:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:53:17 2026 GMT Not After : Jun 27 18:58:17 2027 GMT Subject: CN=CADCC768A6C85EDE9E8055C97D5733ED80D49D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:30:51:88:af:b2:17:79:cb:42:36:52:74: d6:db:62:2d:30:76:91:98:d5:ef:98:91:48:fe:a2: a9:4c:97:a3:f6:57:59:8a:3f:ec:cb:a6:1e:0d:4c: 8c:b2:d8:27:70:87:47:9c:ed:c4:a4:f3:3a:b1:8b: fe:35:0d:70:37:cd:b2:b7:8d:b4:9b:84:db:91:df: 06:d2:e7:a7:5f:be:f1:f2:4d:6b:1b:02:7f:19:ae: 64:6d:71:a2:3a:32:6e:d5:ae:83:e3:00:69:0a:c7: 8b:c2:d1:3e:02:cf:7f:5e:5b:7d:82:34:5c:30:da: 0f:77:59:36:38:ee:f9:22:73:07:09:43:7c:aa:5c: 69:bf:db:45:b1:5c:6d:30:a9:7f:f2:00:f5:1d:e7: 53:18:4f:80:0d:0e:fa:6f:55:cd:a0:78:1a:71:5b: 72:bf:67:4d:9e:87:5c:0f:89:b7:a3:c8:fa:fb:17: 42:a3:bb:74:95:e2:9f:d2:8a:28:ea:be:71:28:14: 83:cb:68:87:a0:39:91:24:91:66:d4:6e:db:9e:62: 48:10:1b:a4:13:1e:b3:32:47:40:c4:58:8e:67:5a: 2b:46:40:c4:15:a8:09:89:fd:40:73:74:15:20:ee: 22:9d:e3:f1:23:4e:39:d8:89:f7:75:8d:ad:99:f6: dd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DC:C7:68:A6:C8:5E:DE:9E:80:55:C9:7D:57:33:ED:80:D4:9D:85 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205778.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4210::/47 Signature Algorithm: sha256WithRSAEncryption 8b:45:d8:c8:13:1e:8e:fb:90:f4:4e:57:73:7f:51:8f:6f:04: a9:2c:9a:9a:78:78:16:52:45:cc:af:52:30:4d:86:7a:7e:28: 2d:a9:94:fd:e2:ca:f2:6c:c5:14:52:35:c3:92:6d:3c:be:1f: b4:c2:41:39:80:b6:c0:de:f5:d3:e4:b9:cc:d8:0e:de:0d:d0: 3a:df:fd:2a:f6:86:ad:5e:01:65:5d:ea:14:db:b8:2a:42:93: b6:e3:c8:af:ae:67:1e:91:ee:df:cf:99:8d:13:72:5c:d6:f6: 15:ba:b7:d3:00:44:8a:d9:2e:03:74:c1:a3:1c:36:9c:11:cc: be:50:f3:79:5e:a1:d0:9d:ad:08:10:6f:58:83:d2:78:51:91: 69:91:48:c1:8c:74:84:de:43:0e:50:09:90:c2:02:19:a2:bf: 8a:82:7f:75:39:38:d7:45:e5:99:64:81:a1:35:4f:54:d1:63: 45:67:ac:60:cc:b2:de:8d:53:95:8c:ab:d7:46:36:7b:0d:d5: 13:6f:a4:39:d6:20:b5:ff:2b:c7:64:4e:4e:25:9f:36:15:c4: 32:33:dc:8a:99:11:6e:e9:85:08:15:78:f3:41:98:5a:bc:89: 8b:b0:44:9a:3f:55:a7:3e:50:19:32:ab:19:59:d4:66:f6:3e: 42:9a:e8:35 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUYgsdrgTmjELkNM21RV7NP1k2KLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUzMTdaFw0yNzA2MjcxODU4MTdaMDMxMTAvBgNV BAMTKENBRENDNzY4QTZDODVFREU5RTgwNTVDOTdENTczM0VEODBENDlEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/jBRiK+yF3nLQjZSdNbbYi0w dpGY1e+YkUj+oqlMl6P2V1mKP+zLph4NTIyy2Cdwh0ec7cSk8zqxi/41DXA3zbK3 jbSbhNuR3wbS56dfvvHyTWsbAn8ZrmRtcaI6Mm7VroPjAGkKx4vC0T4Cz39eW32C NFww2g93WTY47vkicwcJQ3yqXGm/20WxXG0wqX/yAPUd51MYT4ANDvpvVc2geBpx W3K/Z02eh1wPibejyPr7F0Kju3SV4p/SiijqvnEoFIPLaIegOZEkkWbUbtueYkgQ G6QTHrMyR0DEWI5nWitGQMQVqAmJ/UBzdBUg7iKd4/EjTjnYifd1ja2Z9t0nAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUytzHaKbIXt6egFXJfVcz7YDUnYUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDU3Nzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEq D2KEQhAwDQYJKoZIhvcNAQELBQADggEBAItF2MgTHo77kPROV3N/UY9vBKksmpp4 eBZSRcyvUjBNhnp+KC2plP3iyvJsxRRSNcOSbTy+H7TCQTmAtsDe9dPkuczYDt4N 0Drf/Sr2hq1eAWVd6hTbuCpCk7bjyK+uZx6R7t/PmY0TclzW9hW6t9MARIrZLgN0 waMcNpwRzL5Q83leodCdrQgQb1iD0nhRkWmRSMGMdITeQw5QCZDCAhmiv4qCf3U5 ONdF5ZlkgaE1T1TRY0VnrGDMst6NU5WMq9dGNnsN1RNvpDnWILX/K8dkTk4lnzYV xDIz3IqZEW7phQgVePNBmFq8iYuwRJo/Vac+UBkyqxlZ1Gb2PkKa6DU= -----END CERTIFICATE-----Generated at Fri Jul 10 16:12:06 2026 by rpki-client