$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207083.roa File: AS207083.roa (raw, json) Hash identifier: LM8Wdi7G1ZSqnu0UmwfWcs0BxK1gLFS4cXk5tRk5lk0= Subject key identifier: 88:0F:20:EF:90:FE:A4:83:32:10:B1:F7:91:8E:22:C6:EB:2D:03:EB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 43779CCEF125B2E21A721F77F2BF0F4079C239DF Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207083.roa Signing time: Mon 20 Jul 2026 22:18:44 +0000 ROA not before: Mon 20 Jul 2026 22:13:44 +0000 ROA not after: Mon 19 Jul 2027 22:18:44 +0000 asID: 207083 IP address blocks: 2a0f:6282:f000::/36 maxlen: 36 2a0f:6283:1102::/48 maxlen: 48 2a0f:6284:4213::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:77:9c:ce:f1:25:b2:e2:1a:72:1f:77:f2:bf:0f:40:79:c2:39:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 20 22:13:44 2026 GMT Not After : Jul 19 22:18:44 2027 GMT Subject: CN=880F20EF90FEA4833210B1F7918E22C6EB2D03EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:da:59:33:86:3d:66:da:08:a9:82:03:67: 9b:8f:ec:a7:d2:29:73:13:22:f6:4f:39:eb:ba:19: cb:44:db:09:63:cd:d5:d9:23:10:11:a1:7e:7d:9e: 03:f2:16:04:7b:87:be:18:6a:7a:62:16:cc:ef:8e: e9:87:7e:a5:3c:2d:cf:14:00:c6:8f:b8:63:91:20: 1f:74:5a:b5:93:18:7e:47:8d:6d:e7:90:7c:72:00: 4c:e2:83:00:72:5c:11:3a:24:d8:c4:b6:ca:ab:a6: da:9f:c9:63:c8:ee:67:a0:01:5c:dd:a8:86:64:29: 06:3f:57:07:1f:cf:25:82:fb:03:f7:13:25:44:b0: 67:bd:f8:ee:79:fe:ba:13:e6:35:2d:bd:10:dd:cb: 2a:62:9f:b0:b9:77:fb:ee:eb:c5:8b:3d:69:01:78: db:07:64:56:b3:22:d9:6e:a3:ae:b8:67:3d:07:31: 77:8b:c9:c8:22:74:61:ea:66:05:32:c2:eb:d3:fa: 9c:13:bb:39:93:01:14:a6:7a:fb:ac:7b:26:39:a6: fa:51:c9:e8:db:6d:a4:c6:57:d3:84:cd:5c:74:2d: 47:42:35:5a:33:a4:d7:f2:18:96:01:68:8e:2b:a4: 0d:e7:93:ef:7f:2f:1c:a3:ef:65:44:31:f3:2d:29: cc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0F:20:EF:90:FE:A4:83:32:10:B1:F7:91:8E:22:C6:EB:2D:03:EB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207083.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:f000::/36 2a0f:6283:1102::/48 2a0f:6284:4213::/48 Signature Algorithm: sha256WithRSAEncryption 16:c6:6e:1d:0a:23:33:5d:f7:4e:4f:11:95:db:15:29:73:ce: e4:00:87:1b:8c:44:9f:1e:c5:38:5c:de:f0:f8:a9:fc:86:b7: 3c:48:98:c9:cc:68:31:e2:1e:b2:a1:4d:47:39:43:c0:17:59: e4:b9:96:06:df:27:74:7c:65:27:b3:0d:e9:be:c2:25:5e:93: b4:30:24:8c:19:d6:48:86:02:8e:a9:8a:49:e3:fb:65:c5:7b: 13:94:11:84:f8:66:f5:ae:af:97:5b:82:5c:ff:a7:2e:ae:83: a7:fd:a4:08:15:7e:1e:e9:99:1b:b9:48:bd:97:8a:fc:2d:3a: f7:1f:8a:f6:e3:13:ed:9e:89:62:10:33:df:32:e6:92:92:9e: da:67:64:b8:61:61:a9:de:21:d6:33:53:8c:a9:24:7c:93:3e: f8:88:5f:dc:43:aa:95:be:2f:4b:f3:b7:e9:21:52:ed:b3:4a: a3:89:75:fe:f0:e6:b2:65:e3:81:39:ca:ce:61:2a:8c:67:28: 0b:9e:02:a5:40:19:27:f9:f1:53:e4:4c:6b:a3:a6:be:79:44: 40:eb:24:ff:02:ca:5f:7d:cc:9c:b5:a7:59:6a:9f:d9:54:49: d9:d1:21:86:19:27:69:95:7b:68:27:0c:b8:a4:c0:76:ee:7c: 93:84:97:96 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUQ3eczvElsuIach938r8PQHnCOd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjAyMjEzNDRaFw0yNzA3MTkyMjE4NDRaMDMxMTAvBgNV BAMTKDg4MEYyMEVGOTBGRUE0ODMzMjEwQjFGNzkxOEUyMkM2RUIyRDAzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4NpZM4Y9ZtoIqYIDZ5uP7KfS KXMTIvZPOeu6GctE2wljzdXZIxARoX59ngPyFgR7h74YanpiFszvjumHfqU8Lc8U AMaPuGORIB90WrWTGH5HjW3nkHxyAEzigwByXBE6JNjEtsqrptqfyWPI7megAVzd qIZkKQY/VwcfzyWC+wP3EyVEsGe9+O55/roT5jUtvRDdyypin7C5d/vu68WLPWkB eNsHZFazItluo664Zz0HMXeLycgidGHqZgUywuvT+pwTuzmTARSmevuseyY5pvpR yejbbaTGV9OEzVx0LUdCNVozpNfyGJYBaI4rpA3nk+9/Lxyj72VEMfMtKcxLAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUiA8g75D+pIMyELH3kY4ixustA+swHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDcwODMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgACMBoDBgQq D2KC8AMHACoPYoMRAgMHACoPYoRCEzANBgkqhkiG9w0BAQsFAAOCAQEAFsZuHQoj M133Tk8RldsVKXPO5ACHG4xEnx7FOFze8Pip/Ia3PEiYycxoMeIesqFNRzlDwBdZ 5LmWBt8ndHxlJ7MN6b7CJV6TtDAkjBnWSIYCjqmKSeP7ZcV7E5QRhPhm9a6vl1uC XP+nLq6Dp/2kCBV+HumZG7lIvZeK/C069x+K9uMT7Z6JYhAz3zLmkpKe2mdkuGFh qd4h1jNTjKkkfJM++Ihf3EOqlb4vS/O36SFS7bNKo4l1/vDmsmXjgTnKzmEqjGco C54CpUAZJ/nxU+RMa6OmvnlEQOsk/wLKX33MnLWnWWqf2VRJ2dEhhhknaZV7aCcM uKTAdu58k4SXlg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:39 2026 by rpki-client