$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS396982.roa File: AS396982.roa (raw, json) Hash identifier: qzuX3WdLghDMvSxc/eyNT4CXBKAxDaHUkMyU/Zi0K+0= Subject key identifier: C7:67:F3:04:C6:10:6B:94:69:14:1C:D4:4D:12:C0:FE:16:57:65:9E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 255A5425FE1E204E0297C9C18A235F49F5624EB5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS396982.roa Signing time: Sun 28 Jun 2026 18:55:18 +0000 ROA not before: Sun 28 Jun 2026 18:50:18 +0000 ROA not after: Sun 27 Jun 2027 18:55:18 +0000 asID: 396982 IP address blocks: 2a0f:6284:7::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Jul 2026 09:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5a:54:25:fe:1e:20:4e:02:97:c9:c1:8a:23:5f:49:f5:62:4e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:18 2026 GMT Not After : Jun 27 18:55:18 2027 GMT Subject: CN=C767F304C6106B9469141CD44D12C0FE1657659E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:0e:c5:c9:2a:bd:9e:06:c4:38:c7:07:3b: f5:3d:ca:af:28:10:68:f3:6c:86:3d:54:28:97:ae: 7e:31:97:2f:b0:3a:fe:93:ca:8c:a1:29:9a:e1:71: 2a:e7:1d:12:d5:e9:50:c4:40:59:e5:bd:cc:88:d8: 93:d6:28:58:b5:d9:92:97:40:17:be:f5:b5:b2:59: d3:8e:34:b0:1e:23:8c:c4:ca:5f:1d:8c:f3:1c:54: d1:0e:8f:a4:51:fb:0f:da:54:81:ce:a3:29:3f:30: 73:db:1f:f4:77:e2:69:43:d3:f4:44:df:eb:be:01: 39:40:0b:43:dc:d6:3d:f5:f0:fe:b0:02:12:77:cd: 93:18:cb:ad:8f:87:21:12:0e:5e:b9:5f:f1:6a:11: ff:38:66:d5:d2:f5:38:1b:92:a1:cf:40:dc:11:a6: 45:38:05:63:57:ab:38:82:cc:e3:51:4e:70:0f:3b: 02:97:7d:2c:ea:5e:c9:59:33:66:42:08:5e:b2:f1: 58:31:65:2a:dd:50:a4:e7:93:30:75:44:94:07:6e: e0:b8:f6:40:97:72:9f:91:b5:c0:98:24:a0:a2:48: 16:8e:b6:19:a0:c8:21:9a:ea:81:5e:c9:9a:28:63: 45:0b:fe:ba:a0:26:e4:cd:3e:ed:6c:a2:11:0d:fb: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:67:F3:04:C6:10:6B:94:69:14:1C:D4:4D:12:C0:FE:16:57:65:9E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS396982.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:7::/48 Signature Algorithm: sha256WithRSAEncryption 41:4b:c8:85:e6:a1:d7:06:20:74:95:26:95:8a:bd:ed:6e:d4: c9:ee:4e:ff:b1:a3:96:e1:ed:2c:20:8f:e0:c0:d1:2e:c0:1e: b6:b7:72:73:45:bd:30:e6:9f:fb:40:dc:c3:e9:98:93:1f:c3: a5:81:a9:b4:5f:22:58:18:78:b3:b4:18:20:d9:30:2c:44:4f: 8d:94:63:49:ec:c8:90:35:6c:34:37:87:9f:cb:a6:33:83:ab: fd:1a:d5:81:58:b5:a6:dd:df:92:ab:db:f2:08:45:92:13:89: 8b:9d:77:5f:92:98:9d:76:34:b4:e8:92:79:a8:0f:e1:d6:21: 99:04:00:47:6f:09:ac:85:9d:af:dd:28:2e:47:6c:88:e5:2a: c5:5e:13:fb:ae:32:4a:2a:54:53:2c:07:ed:7a:3f:2b:28:fc: b9:5a:f7:6b:91:80:4b:c9:06:01:15:e9:c0:d3:bc:4a:c0:5c: df:22:37:d5:64:61:b4:f2:e0:45:b2:26:ca:df:9d:c2:5d:4c: 9d:df:05:85:0c:0a:fa:92:ab:44:b5:d3:65:b9:c1:06:7e:35: bc:3d:29:e1:ca:5f:aa:2c:59:75:3b:35:e5:5b:28:40:d8:74: b2:b9:2b:3c:77:78:67:96:75:78:33:e3:6d:3b:2c:39:a5:fb: 8b:b8:bf:b7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUJVpUJf4eIE4Cl8nBiiNfSfViTrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwMThaFw0yNzA2MjcxODU1MThaMDMxMTAvBgNV BAMTKEM3NjdGMzA0QzYxMDZCOTQ2OTE0MUNENDREMTJDMEZFMTY1NzY1OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayQ7FySq9ngbEOMcHO/U9yq8o EGjzbIY9VCiXrn4xly+wOv6TyoyhKZrhcSrnHRLV6VDEQFnlvcyI2JPWKFi12ZKX QBe+9bWyWdOONLAeI4zEyl8djPMcVNEOj6RR+w/aVIHOoyk/MHPbH/R34mlD0/RE 3+u+ATlAC0Pc1j318P6wAhJ3zZMYy62PhyESDl65X/FqEf84ZtXS9TgbkqHPQNwR pkU4BWNXqziCzONRTnAPOwKXfSzqXslZM2ZCCF6y8VgxZSrdUKTnkzB1RJQHbuC4 9kCXcp+RtcCYJKCiSBaOthmgyCGa6oFeyZooY0UL/rqgJuTNPu1sohEN+zjbAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUx2fzBMYQa5RpFBzUTRLA/hZXZZ4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMzOTY5ODIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAAcwDQYJKoZIhvcNAQELBQADggEBAEFLyIXmodcGIHSVJpWKve1u1MnuTv+x o5bh7Swgj+DA0S7AHra3cnNFvTDmn/tA3MPpmJMfw6WBqbRfIlgYeLO0GCDZMCxE T42UY0nsyJA1bDQ3h5/LpjODq/0a1YFYtabd35Kr2/IIRZITiYudd1+SmJ12NLTo knmoD+HWIZkEAEdvCayFna/dKC5HbIjlKsVeE/uuMkoqVFMsB+16Pyso/Lla92uR gEvJBgEV6cDTvErAXN8iN9VkYbTy4EWyJsrfncJdTJ3fBYUMCvqSq0S102W5wQZ+ Nbw9KeHKX6osWXU7NeVbKEDYdLK5Kzx3eGeWdXgz4207LDml+4u4v7c= -----END CERTIFICATE-----Generated at Wed Jul 8 17:33:40 2026 by rpki-client