$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS208915.roa File: AS208915.roa (raw, json) Hash identifier: 9uuhUWa0aqj3lX8htDUJAyj6rBRC0SpUHJuhDWucQPM= Subject key identifier: D0:5A:BF:D3:B2:B4:AE:DA:49:A8:FE:61:F3:60:9F:89:18:98:17:94 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 753D79994A0FA0F98073ABFE3087558282959CB7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS208915.roa Signing time: Sun 28 Jun 2026 18:25:39 +0000 ROA not before: Sun 28 Jun 2026 18:20:39 +0000 ROA not after: Sun 27 Jun 2027 18:25:39 +0000 asID: 208915 IP address blocks: 2a0f:6284:700::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3d:79:99:4a:0f:a0:f9:80:73:ab:fe:30:87:55:82:82:95:9c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:20:39 2026 GMT Not After : Jun 27 18:25:39 2027 GMT Subject: CN=D05ABFD3B2B4AEDA49A8FE61F3609F8918981794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:8e:23:ae:2a:7f:ed:5b:5f:d0:6d:74:71: c0:b2:fc:f1:83:98:b0:e4:78:71:cc:18:1e:1c:f4: 48:18:4d:ec:c7:64:18:94:77:72:f7:bd:c1:5b:d6: c3:d7:1f:97:19:9c:f5:9b:12:a0:48:b2:26:e5:f3: 6c:7e:da:fa:4d:86:e5:f5:3d:0a:67:e6:31:fb:32: e5:81:c1:c4:30:47:d6:fe:e5:db:7e:57:c8:25:b8: 8c:a2:9a:38:51:db:d2:73:7d:5f:28:39:29:c4:cd: 98:d0:37:f4:e6:eb:d4:a2:c2:2f:46:63:b9:24:f2: 55:eb:cf:95:3d:2a:fb:d9:bb:a1:51:00:8e:84:64: b3:ad:c8:49:b3:04:eb:d3:bb:54:c8:4f:79:5d:4f: 11:52:25:ff:78:94:71:26:bd:55:67:c5:3e:86:bd: e5:8c:ab:f5:5f:35:cc:7d:72:7a:5d:80:57:b6:ce: ab:c7:5a:eb:0d:7b:8f:f1:d3:4b:ab:42:bc:6a:05: a3:dd:94:cd:88:23:63:de:74:40:27:31:93:ef:c5: 96:f6:a4:48:bf:28:ff:11:e8:18:e5:65:24:8e:bd: 3f:1d:7a:bd:2b:b9:7f:91:14:f2:2d:63:54:9d:d4: 36:6f:ad:13:4a:07:32:ef:9b:ba:02:09:c0:c6:ef: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5A:BF:D3:B2:B4:AE:DA:49:A8:FE:61:F3:60:9F:89:18:98:17:94 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS208915.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:700::/40 Signature Algorithm: sha256WithRSAEncryption 7f:e3:18:fb:9e:8a:30:91:bf:bb:c3:1e:1f:3e:d1:6e:3d:4b: 20:ff:05:33:91:82:52:05:ef:8c:9e:13:dc:9e:7b:70:2d:a7: a2:14:63:b9:c5:09:72:0b:12:92:d6:28:b8:96:c4:38:3b:6c: df:84:b7:3d:a4:16:3b:dd:24:e5:e0:e1:4c:cc:e5:4a:78:d3: 18:13:4e:3f:42:4d:33:0b:da:21:87:02:b2:35:3a:70:27:b2: f6:68:86:f4:47:bf:29:3c:17:a3:99:ca:ce:a6:a7:95:c1:94: 84:89:9e:04:93:b1:cb:ec:77:ea:8b:43:00:2a:c1:f3:e6:2d: 87:65:c5:13:93:cb:b3:a9:d1:1e:c2:f3:d6:1a:8d:87:69:9d: ed:00:9d:b9:e7:37:e4:33:15:6a:7d:2b:5d:16:eb:19:61:81: 70:ce:13:17:49:ed:66:af:15:88:46:a4:20:25:3e:96:78:9f: 34:35:45:78:4e:04:f6:10:fe:1c:ef:05:d2:79:f8:1d:70:00: ea:c8:a9:4d:84:1d:a4:ea:30:69:e9:8d:f0:6f:d7:2f:ea:ef: fc:c5:fa:04:92:01:9b:f3:5d:25:84:29:1a:08:b2:74:40:69: ca:09:39:9b:d8:ae:5a:e9:67:c5:ac:c5:ca:f7:13:69:e8:a0: f5:20:58:36 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUdT15mUoPoPmAc6v+MIdVgoKVnLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODIwMzlaFw0yNzA2MjcxODI1MzlaMDMxMTAvBgNV BAMTKEQwNUFCRkQzQjJCNEFFREE0OUE4RkU2MUYzNjA5Rjg5MTg5ODE3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Co4jrip/7Vtf0G10ccCy/PGD mLDkeHHMGB4c9EgYTezHZBiUd3L3vcFb1sPXH5cZnPWbEqBIsibl82x+2vpNhuX1 PQpn5jH7MuWBwcQwR9b+5dt+V8gluIyimjhR29JzfV8oOSnEzZjQN/Tm69Siwi9G Y7kk8lXrz5U9KvvZu6FRAI6EZLOtyEmzBOvTu1TIT3ldTxFSJf94lHEmvVVnxT6G veWMq/VfNcx9cnpdgFe2zqvHWusNe4/x00urQrxqBaPdlM2II2PedEAnMZPvxZb2 pEi/KP8R6BjlZSSOvT8der0ruX+RFPItY1Sd1DZvrRNKBzLvm7oCCcDG71LRAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU0Fq/07K0rtpJqP5h82CfiRiYF5QwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDg5MTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KEBzANBgkqhkiG9w0BAQsFAAOCAQEAf+MY+56KMJG/u8MeHz7Rbj1LIP8FM5GC UgXvjJ4T3J57cC2nohRjucUJcgsSktYouJbEODts34S3PaQWO90k5eDhTMzlSnjT GBNOP0JNMwvaIYcCsjU6cCey9miG9Ee/KTwXo5nKzqanlcGUhImeBJOxy+x36otD ACrB8+Yth2XFE5PLs6nRHsLz1hqNh2md7QCduec35DMVan0rXRbrGWGBcM4TF0nt Zq8ViEakICU+lnifNDVFeE4E9hD+HO8F0nn4HXAA6sipTYQdpOowaemN8G/XL+rv /MX6BJIBm/NdJYQpGgiydEBpygk5m9iuWulnxazFyvcTaeig9SBYNg== -----END CERTIFICATE-----Generated at Fri Jul 10 16:13:14 2026 by rpki-client