$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS401615.roa File: AS401615.roa (raw, json) Hash identifier: KUkkqc68RkJ246Z/pS54WnLzMna/aKPehPyjsTIoQ1Y= Subject key identifier: 5A:99:55:C3:DD:43:1D:5D:AF:95:07:26:32:68:7F:5A:28:5E:0C:C0 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0E84C9AE06F4413B8AFF5904EE44676A7844642A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS401615.roa Signing time: Sun 04 Oct 2026 02:44:21 +0000 ROA not before: Sun 04 Oct 2026 02:39:21 +0000 ROA not after: Sun 03 Oct 2027 02:44:21 +0000 asID: 401615 IP address blocks: 2a0f:6280:1d00::/44 maxlen: 44 2a0f:6280:1d10::/44 maxlen: 44 2a0f:6280:1d20::/44 maxlen: 44 2a0f:6280:1d30::/44 maxlen: 44 2a0f:6280:1d40::/44 maxlen: 44 2a0f:6280:1d50::/44 maxlen: 44 2a0f:6280:1d60::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 14:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:84:c9:ae:06:f4:41:3b:8a:ff:59:04:ee:44:67:6a:78:44:64:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 4 02:39:21 2026 GMT Not After : Oct 3 02:44:21 2027 GMT Subject: CN=5A9955C3DD431D5DAF95072632687F5A285E0CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:70:94:01:92:1f:93:e8:6f:6c:0f:96:13:27: 4d:5d:f4:00:68:14:c6:f1:b5:5c:bf:76:f4:2f:ec: 27:e9:16:24:27:7d:5f:a6:93:50:13:6e:58:28:e2: 66:7f:e4:7e:e5:3b:d7:7c:1b:07:f1:e3:ac:df:67: 4f:6b:bb:df:7d:c3:16:fd:c7:70:99:6a:83:25:2e: 44:fe:9d:9c:1d:c2:9c:29:3b:e3:97:d4:0c:10:1b: af:3f:d8:8e:06:db:db:50:1b:4f:22:d9:2e:b7:11: 9e:f5:3a:08:83:ea:02:0d:08:b2:92:07:de:2b:15: 69:c9:3b:3f:22:f9:5e:e8:6f:3d:ee:07:ef:5a:2b: db:b9:ac:9a:28:bd:8f:3a:e8:08:51:cf:6c:45:97: e1:33:69:65:77:ab:73:d4:e0:74:44:46:91:1a:50: e4:d0:ea:26:9d:9c:14:93:0a:d3:aa:75:64:a2:73: 56:e3:37:f1:08:34:16:cd:e4:07:d1:6c:e0:dd:f7: 6f:1d:80:4e:e1:b8:9d:d6:57:ac:1b:59:29:68:0f: 06:7b:68:70:aa:ed:5f:5a:17:6f:c8:9d:1f:cb:3d: ad:54:62:6c:ff:66:78:ce:c0:0d:60:62:16:6f:4a: 22:1f:01:3b:48:ec:df:f9:20:90:0a:7d:b7:a4:5c: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:99:55:C3:DD:43:1D:5D:AF:95:07:26:32:68:7F:5A:28:5E:0C:C0 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS401615.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1d00::-2a0f:6280:1d6f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 81:8c:e6:ee:c5:a4:5d:5f:90:6c:1b:50:0c:1b:38:6c:76:f7: c4:07:97:3d:aa:27:07:f9:ce:c4:c3:3a:81:ab:05:1e:51:ab: 4f:e9:b8:46:b3:01:e9:97:ef:8b:03:7a:c2:96:2e:91:08:29: c1:fd:cb:9c:08:cd:ce:49:53:55:d0:96:07:31:ad:80:2d:82: c7:25:90:a6:04:e4:9a:34:1b:a4:30:42:b0:1d:49:6d:58:e7: 00:1b:ce:08:dc:c3:36:59:c7:78:6f:f4:7c:6f:81:fa:90:21: cc:db:c0:25:f6:97:33:5f:95:0c:4d:f4:7d:21:0c:90:a4:26: 5c:d8:08:44:fb:69:29:eb:91:5f:34:be:3e:b2:18:5e:9f:a8: 17:0b:4c:30:fb:be:83:37:6b:c3:a7:34:b8:b3:c9:39:ba:89: fc:69:89:60:16:2b:32:5b:c1:5a:ae:cc:61:32:39:d6:c6:2a: 60:4b:ad:81:f5:65:d2:f7:be:0f:07:19:5a:93:d1:44:04:53: 50:2f:0b:ea:b9:00:f4:84:db:37:81:d4:b1:fa:04:05:06:58: 20:51:de:81:5e:08:bf:12:c2:ab:9c:a7:4c:2d:59:24:d7:0b: cd:c3:83:8b:ef:af:26:17:16:38:3f:8a:a5:a7:30:78:fd:62: a7:a1:8e:ac -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUDoTJrgb0QTuK/1kE7kRnanhEZCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMDQwMjM5MjFaFw0yNzEwMDMwMjQ0MjFaMDMxMTAvBgNV BAMTKDVBOTk1NUMzREQ0MzFENURBRjk1MDcyNjMyNjg3RjVBMjg1RTBDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccJQBkh+T6G9sD5YTJ01d9ABo FMbxtVy/dvQv7CfpFiQnfV+mk1ATblgo4mZ/5H7lO9d8Gwfx46zfZ09ru999wxb9 x3CZaoMlLkT+nZwdwpwpO+OX1AwQG68/2I4G29tQG08i2S63EZ71OgiD6gINCLKS B94rFWnJOz8i+V7obz3uB+9aK9u5rJoovY866AhRz2xFl+EzaWV3q3PU4HRERpEa UOTQ6iadnBSTCtOqdWSic1bjN/EINBbN5AfRbODd928dgE7huJ3WV6wbWSloDwZ7 aHCq7V9aF2/InR/LPa1UYmz/ZnjOwA1gYhZvSiIfATtI7N/5IJAKfbekXBJ9AgMB AAGjggHpMIIB5TAdBgNVHQ4EFgQUWplVw91DHV2vlQcmMmh/WiheDMAwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0MDE2MTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwLAYIKwYBBQUHAQcBAf8EHTAbMBkEAgACMBMwEQMG ACoPYoAdAwcEKg9igB1gMA0GCSqGSIb3DQEBCwUAA4IBAQCBjObuxaRdX5BsG1AM GzhsdvfEB5c9qicH+c7EwzqBqwUeUatP6bhGswHpl++LA3rCli6RCCnB/cucCM3O SVNV0JYHMa2ALYLHJZCmBOSaNBukMEKwHUltWOcAG84I3MM2Wcd4b/R8b4H6kCHM 28Al9pczX5UMTfR9IQyQpCZc2AhE+2kp65FfNL4+shhen6gXC0ww+76DN2vDpzS4 s8k5uon8aYlgFisyW8FarsxhMjnWxipgS62B9WXS974PBxlak9FEBFNQLwvquQD0 hNs3gdSx+gQFBlggUd6BXgi/EsKrnKdMLVkk1wvNw4OL768mFxY4P4qlpzB4/WKn oY6s -----END CERTIFICATE-----Generated at Sat Oct 10 05:43:54 2026 by rpki-client