$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209503.roa File: AS209503.roa (raw, json) Hash identifier: nmF9l9a7JyY73H89ltT6jDm6fALkMPZxObIQ7Yu+oO4= Subject key identifier: 9A:88:69:61:64:86:5A:C7:F8:45:48:AD:01:AF:11:98:6E:C7:61:E8 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 529832D653F302918A8C61446D2EFD58404B77E4 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209503.roa Signing time: Sun 28 Jun 2026 18:55:40 +0000 ROA not before: Sun 28 Jun 2026 18:50:40 +0000 ROA not after: Sun 27 Jun 2027 18:55:40 +0000 asID: 209503 IP address blocks: 2a0f:6284:4217::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:98:32:d6:53:f3:02:91:8a:8c:61:44:6d:2e:fd:58:40:4b:77:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:40 2026 GMT Not After : Jun 27 18:55:40 2027 GMT Subject: CN=9A88696164865AC7F84548AD01AF11986EC761E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:4c:e8:fa:c3:63:67:2a:0a:8e:0a:cc:9a: 22:45:26:56:94:b4:bc:21:e5:31:e1:1f:d0:cd:07: 94:82:aa:e9:cb:e4:f3:e1:b8:3b:7e:61:20:7c:f5: f0:30:76:26:d2:51:4a:6a:3b:fa:64:4d:7a:6f:34: 24:01:3c:49:f4:b8:d7:a3:c8:9f:22:b1:7a:3c:63: 74:ac:f8:99:00:cc:7d:81:78:54:0e:08:23:d5:51: 0a:91:c5:6e:0b:ee:b3:42:6d:58:76:2b:63:36:8d: 2a:0d:59:de:9f:02:4a:b4:0c:cb:a6:12:e3:b2:80: 19:02:b8:d6:e7:5e:c0:7c:cf:bd:42:5b:47:27:a2: 88:6e:1a:8a:3d:15:92:81:71:5c:c4:4c:00:f0:22: 30:15:d3:2f:7a:f0:5f:88:a0:08:41:39:53:29:95: 1a:66:db:cb:74:07:f5:32:be:89:30:25:d3:10:0d: 70:76:45:95:bc:1b:5c:21:8b:d8:99:51:38:a4:c5: 60:c0:84:b6:b2:6e:1b:08:7e:15:54:8e:be:1f:76: 47:d5:67:64:cc:27:66:ae:fd:77:ac:c7:86:1d:bc: 2b:5a:57:3d:71:12:fc:26:93:d4:e3:68:4c:c0:73: 41:e8:ac:3c:75:5c:28:1d:df:56:96:9d:20:39:98: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:69:61:64:86:5A:C7:F8:45:48:AD:01:AF:11:98:6E:C7:61:E8 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209503.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4217::/48 Signature Algorithm: sha256WithRSAEncryption 81:a8:48:cd:25:29:90:91:52:de:4c:ea:06:56:0e:8d:dd:5c: cd:1b:e6:d1:7e:bb:23:14:05:ca:ca:f0:a2:b0:dd:e5:00:d1: 81:7b:75:4b:a6:a2:31:0c:7b:51:fd:6a:bb:c4:51:d5:4e:06: 8c:3b:1c:31:4f:c4:5d:76:af:aa:c7:97:c8:80:ac:e2:fa:29: 92:0a:f5:89:6e:1d:17:9b:17:90:02:1c:9e:09:79:2c:bc:9b: 3a:c2:d3:fa:9d:64:a7:44:4e:7a:8f:80:1b:4c:84:9d:b1:66: bd:6d:c7:66:45:28:9f:59:f9:fe:65:7a:d2:19:1b:d4:ea:cd: d4:1e:b2:cf:8d:b1:76:ed:01:c8:4d:5b:15:c3:0c:bd:26:8a: a0:a1:89:d5:31:75:17:e5:7a:36:f6:3a:eb:d6:92:05:1f:6b: a2:b1:d6:1e:bf:b8:4d:c8:33:ae:a4:c9:e4:25:90:be:4e:1b: 21:c7:10:b4:84:f9:19:75:01:e5:6c:c7:0e:61:2f:66:e4:28: f9:ca:f6:fe:ca:fa:4b:da:ab:4f:57:00:0f:fc:4d:8a:88:36: 81:7c:80:7d:d8:96:f4:f5:18:c1:fa:18:1a:f0:6b:28:2b:cc: 6f:b9:bd:bf:a0:68:53:09:54:33:e7:da:5e:50:0c:78:b0:d7: 07:50:6b:c2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUUpgy1lPzApGKjGFEbS79WEBLd+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwNDBaFw0yNzA2MjcxODU1NDBaMDMxMTAvBgNV BAMTKDlBODg2OTYxNjQ4NjVBQzdGODQ1NDhBRDAxQUYxMTk4NkVDNzYxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIkzo+sNjZyoKjgrMmiJFJlaU tLwh5THhH9DNB5SCqunL5PPhuDt+YSB89fAwdibSUUpqO/pkTXpvNCQBPEn0uNej yJ8isXo8Y3Ss+JkAzH2BeFQOCCPVUQqRxW4L7rNCbVh2K2M2jSoNWd6fAkq0DMum EuOygBkCuNbnXsB8z71CW0cnoohuGoo9FZKBcVzETADwIjAV0y968F+IoAhBOVMp lRpm28t0B/UyvokwJdMQDXB2RZW8G1whi9iZUTikxWDAhLaybhsIfhVUjr4fdkfV Z2TMJ2au/Xesx4YdvCtaVz1xEvwmk9TjaEzAc0HorDx1XCgd31aWnSA5mMHxAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUmohpYWSGWsf4RUitAa8RmG7HYegwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDk1MDMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEQhcwDQYJKoZIhvcNAQELBQADggEBAIGoSM0lKZCRUt5M6gZWDo3dXM0b5tF+ uyMUBcrK8KKw3eUA0YF7dUumojEMe1H9arvEUdVOBow7HDFPxF12r6rHl8iArOL6 KZIK9YluHRebF5ACHJ4JeSy8mzrC0/qdZKdETnqPgBtMhJ2xZr1tx2ZFKJ9Z+f5l etIZG9TqzdQess+NsXbtAchNWxXDDL0miqChidUxdRflejb2OuvWkgUfa6Kx1h6/ uE3IM66kyeQlkL5OGyHHELSE+Rl1AeVsxw5hL2bkKPnK9v7K+kvaq09XAA/8TYqI NoF8gH3YlvT1GMH6GBrwaygrzG+5vb+gaFMJVDPn2l5QDHiw1wdQa8I= -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:40 2026 by rpki-client