$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS401903.roa File: AS401903.roa (raw, json) Hash identifier: BKTDEGUJV2PKB7C3MXgyfrzEcLgHICBQb37cdkgwykU= Subject key identifier: 6F:B6:43:EC:BB:DD:7B:2B:DC:C7:87:B6:75:6D:B2:93:B8:9D:C9:3C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 70DF38ACB54729480B8C85F0579ED65CF804CB82 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS401903.roa Signing time: Fri 10 Jul 2026 16:04:34 +0000 ROA not before: Fri 10 Jul 2026 15:59:34 +0000 ROA not after: Fri 09 Jul 2027 16:04:34 +0000 asID: 401903 IP address blocks: 2a0f:6283:1200::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:df:38:ac:b5:47:29:48:0b:8c:85:f0:57:9e:d6:5c:f8:04:cb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 10 15:59:34 2026 GMT Not After : Jul 9 16:04:34 2027 GMT Subject: CN=6FB643ECBBDD7B2BDCC787B6756DB293B89DC93C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:30:95:e6:40:72:f2:8b:ad:64:c3:87:fb: 00:ba:17:f1:4b:0c:34:00:bb:38:19:c0:ef:c4:af: 76:1c:c4:55:26:2a:77:8a:20:c7:ce:67:af:3d:36: 27:fb:6d:69:b2:e0:70:ba:1a:8e:e8:cc:e2:38:f2: 94:7b:01:28:ca:23:ed:72:1d:51:bf:98:c4:b0:a3: d5:26:ea:bb:e1:60:22:f8:28:69:41:70:0b:7a:b8: 57:79:63:52:0a:83:fb:89:58:de:60:b2:89:55:2d: 12:7c:60:ff:6a:23:a4:88:cf:09:65:f0:e6:77:ae: 12:52:cb:b8:1a:e7:cf:d3:6a:0f:70:28:85:0b:21: 8b:1c:fb:f3:d2:af:2d:87:89:2f:53:e9:90:1e:e5: a4:be:cf:e5:31:f7:8b:95:03:e5:c6:9c:00:be:eb: be:78:84:31:eb:8e:bd:2b:0d:ec:45:79:66:f3:32: 64:32:4b:8d:4b:25:19:1e:ef:1e:bc:b9:09:ca:5e: 02:91:b7:a1:f3:96:72:b8:85:a9:93:1b:af:b1:c4: 13:a5:d6:35:18:df:94:3c:a4:e0:17:f4:fc:85:8a: 72:c9:d6:22:e2:8a:fe:d3:d9:e8:bb:d7:34:4d:ff: da:96:5d:b8:c4:fd:fb:7f:a6:98:6f:6f:06:a8:62: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B6:43:EC:BB:DD:7B:2B:DC:C7:87:B6:75:6D:B2:93:B8:9D:C9:3C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS401903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:1200::/40 Signature Algorithm: sha256WithRSAEncryption 4f:2d:d3:9c:76:b0:9d:49:7d:e5:9f:dd:7e:91:63:a8:ea:f1: cb:b0:7e:d5:5f:27:8d:c3:79:30:38:c3:f9:1a:bd:5d:b7:1f: 73:51:fd:77:ed:5a:54:26:eb:c4:10:d7:e0:12:f3:33:fd:fa: 3e:f4:c8:15:2b:b8:a5:62:68:01:fb:f5:69:41:f2:cf:0b:f1: 0a:f7:84:7e:03:02:5c:37:48:1f:41:f4:cc:7a:22:00:e9:1b: 1e:46:76:39:83:90:a8:d5:fa:43:75:9d:8b:93:68:ed:11:4c: 11:67:86:41:31:ac:b2:96:22:ca:5f:c6:1c:8e:b8:af:9f:07: 39:ea:81:9a:dd:cc:66:fb:5d:db:c0:14:d8:58:0b:5d:8a:3c: b2:b5:3a:ce:88:a7:33:20:59:0a:b6:ac:77:e1:61:27:5c:08: 53:45:6b:0f:bc:6b:1c:b6:03:1c:97:17:0f:0d:32:f3:2a:e2: 81:22:1c:db:b4:eb:4c:5c:e7:ef:58:ab:5c:95:e1:61:b7:40: 7e:b0:e6:e4:9a:ab:ef:87:85:b7:61:1f:55:d8:d8:5b:e3:67: a5:5f:8e:8c:5f:a6:27:e5:70:ec:c1:82:d5:9f:45:8e:6d:61: 5a:dc:dc:bb:2b:39:4e:91:75:a1:b7:d2:2b:8b:3e:7f:4b:2f: 55:43:65:03 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUcN84rLVHKUgLjIXwV57WXPgEy4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTAxNTU5MzRaFw0yNzA3MDkxNjA0MzRaMDMxMTAvBgNV BAMTKDZGQjY0M0VDQkJERDdCMkJEQ0M3ODdCNjc1NkRCMjkzQjg5REM5M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9DCV5kBy8outZMOH+wC6F/FL DDQAuzgZwO/Er3YcxFUmKneKIMfOZ689Nif7bWmy4HC6Go7ozOI48pR7ASjKI+1y HVG/mMSwo9Um6rvhYCL4KGlBcAt6uFd5Y1IKg/uJWN5gsolVLRJ8YP9qI6SIzwll 8OZ3rhJSy7ga58/Tag9wKIULIYsc+/PSry2HiS9T6ZAe5aS+z+Ux94uVA+XGnAC+ 6754hDHrjr0rDexFeWbzMmQyS41LJRke7x68uQnKXgKRt6HzlnK4hamTG6+xxBOl 1jUY35Q8pOAX9PyFinLJ1iLiiv7T2ei71zRN/9qWXbjE/ft/pphvbwaoYsQ5AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUb7ZD7Lvdeyvcx4e2dW2yk7idyTwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0MDE5MDMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KDEjANBgkqhkiG9w0BAQsFAAOCAQEATy3TnHawnUl95Z/dfpFjqOrxy7B+1V8n jcN5MDjD+Rq9Xbcfc1H9d+1aVCbrxBDX4BLzM/36PvTIFSu4pWJoAfv1aUHyzwvx CveEfgMCXDdIH0H0zHoiAOkbHkZ2OYOQqNX6Q3Wdi5No7RFMEWeGQTGsspYiyl/G HI64r58HOeqBmt3MZvtd28AU2FgLXYo8srU6zoinMyBZCrasd+FhJ1wIU0VrD7xr HLYDHJcXDw0y8yrigSIc27TrTFzn71irXJXhYbdAfrDm5Jqr74eFt2EfVdjYW+Nn pV+OjF+mJ+Vw7MGC1Z9Fjm1hWtzcuys5TpF1obfSK4s+f0svVUNlAw== -----END CERTIFICATE-----Generated at Tue Jul 21 18:08:06 2026 by rpki-client