$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: fvd8NWU/43Fg/GYZXJWDgKHjQou7EeizmEXFBpCTwCY= Subject key identifier: 91:42:A4:BA:1A:E8:97:FE:F7:4E:10:41:9E:07:97:F6:1F:A3:68:CB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0B0F3F12C13B417602B0EBE1BDF658087433F3E3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa Signing time: Mon 10 Aug 2026 14:51:49 +0000 ROA not before: Mon 10 Aug 2026 14:46:49 +0000 ROA not after: Mon 09 Aug 2027 14:51:49 +0000 asID: 40676 IP address blocks: 2a0f:6282:b000::/36 maxlen: 48 2a0f:6284:9000::/36 maxlen: 48 2a0f:6284:c000::/36 maxlen: 36 2a0f:6287:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0f:3f:12:c1:3b:41:76:02:b0:eb:e1:bd:f6:58:08:74:33:f3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 10 14:46:49 2026 GMT Not After : Aug 9 14:51:49 2027 GMT Subject: CN=9142A4BA1AE897FEF74E10419E0797F61FA368CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:4c:a3:58:70:e6:2e:d3:b5:b8:9e:8b:84: 52:cd:29:87:6c:d6:c1:ba:78:0b:09:02:59:e2:65: 62:76:68:c9:17:34:32:9b:f8:21:55:61:d8:4d:14: b7:f6:61:88:8c:fb:80:cb:68:fa:2d:9d:12:5f:5b: 2d:fe:ca:7c:22:ef:8d:05:12:d2:55:b7:c4:91:b3: 6e:f6:99:70:b0:84:c5:5e:5b:35:aa:14:b8:12:8f: 2b:06:05:3c:5f:f5:88:ab:74:85:4f:6a:3a:9c:57: bd:82:06:60:4e:a4:11:47:14:ac:0a:0c:c5:1a:ce: eb:c5:6f:8b:65:f3:22:11:3a:2a:a7:c3:af:c3:1a: 47:56:a7:fa:12:df:50:88:a0:25:1f:b6:3f:15:3b: be:3f:1f:6b:41:5f:5c:d5:11:a8:fc:f6:39:e3:35: 75:39:11:35:f0:b2:1b:d0:c5:b6:7f:24:5d:70:05: 77:e2:8f:28:d3:6c:a0:d2:23:18:69:09:82:40:8e: 38:86:08:ec:f3:1f:e8:4e:33:ca:e6:ca:e3:e0:9a: 66:5c:99:86:36:a4:06:5b:0b:ff:21:a0:60:e5:8f: b1:da:60:d2:73:9d:4f:91:39:e0:8c:7a:55:b3:ee: 91:47:99:fb:35:91:99:f4:b3:2e:d7:1c:d0:50:1e: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:42:A4:BA:1A:E8:97:FE:F7:4E:10:41:9E:07:97:F6:1F:A3:68:CB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:b000::/36 2a0f:6284:9000::/36 2a0f:6284:c000::/36 2a0f:6287:3000::/36 Signature Algorithm: sha256WithRSAEncryption 8c:86:5c:69:7e:c3:6c:78:70:67:d7:6a:be:ff:eb:cb:33:37: 7b:29:af:d2:a1:77:72:8d:c0:f5:aa:24:b6:3c:fb:13:8d:70: c1:68:f6:12:bc:28:f3:19:e8:95:72:40:23:c6:15:21:53:60: 1a:f4:48:ae:53:43:81:81:ce:ec:2b:23:b4:72:13:02:1d:2f: d0:b4:4b:4e:dc:f7:25:c5:c2:13:b0:7d:b7:a1:66:18:9b:d3: 5d:c4:16:6e:dc:c0:09:cb:62:08:35:9d:76:8a:f1:5c:f5:d5: 16:11:66:36:f4:44:0a:6b:fe:70:79:1e:2b:f9:5b:51:e1:20: b0:cb:de:96:a4:c8:87:4d:98:70:8c:e9:ad:98:b0:e5:4d:fd: 5d:f2:53:da:5c:03:de:b8:8a:0e:8c:dd:c5:76:d7:40:ed:37: ba:aa:61:b4:6b:16:50:a6:0b:3d:18:e7:86:1e:c8:b8:4f:a9: 70:23:4b:ce:f7:1a:49:ce:8d:51:bf:21:6e:14:49:3c:3a:23: dc:fb:d6:06:b3:6d:26:58:eb:6e:4e:11:2e:7e:b8:d1:9a:46: aa:f2:35:61:0e:68:38:4e:02:e6:e3:35:0f:01:3b:25:a7:66: 3c:2a:7f:d1:3a:38:06:01:b3:72:11:33:6f:de:55:33:9d:7b: 45:0f:3d:8b -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUCw8/EsE7QXYCsOvhvfZYCHQz8+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTAxNDQ2NDlaFw0yNzA4MDkxNDUxNDlaMDMxMTAvBgNV BAMTKDkxNDJBNEJBMUFFODk3RkVGNzRFMTA0MTlFMDc5N0Y2MUZBMzY4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3EyjWHDmLtO1uJ6LhFLNKYds 1sG6eAsJAlniZWJ2aMkXNDKb+CFVYdhNFLf2YYiM+4DLaPotnRJfWy3+ynwi740F EtJVt8SRs272mXCwhMVeWzWqFLgSjysGBTxf9YirdIVPajqcV72CBmBOpBFHFKwK DMUazuvFb4tl8yIROiqnw6/DGkdWp/oS31CIoCUftj8VO74/H2tBX1zVEaj89jnj NXU5ETXwshvQxbZ/JF1wBXfijyjTbKDSIxhpCYJAjjiGCOzzH+hOM8rmyuPgmmZc mYY2pAZbC/8hoGDlj7HaYNJznU+ROeCMelWz7pFHmfs1kZn0sy7XHNBQHmFFAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUkUKkuhrol/73ThBBngeX9h+jaMswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0MDY3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAIwIAMGBCoP YoKwAwYEKg9ihJADBgQqD2KEwAMGBCoPYocwMA0GCSqGSIb3DQEBCwUAA4IBAQCM hlxpfsNseHBn12q+/+vLMzd7Ka/SoXdyjcD1qiS2PPsTjXDBaPYSvCjzGeiVckAj xhUhU2Aa9EiuU0OBgc7sKyO0chMCHS/QtEtO3PclxcITsH23oWYYm9NdxBZu3MAJ y2IINZ12ivFc9dUWEWY29EQKa/5weR4r+VtR4SCwy96WpMiHTZhwjOmtmLDlTf1d 8lPaXAPeuIoOjN3FdtdA7Te6qmG0axZQpgs9GOeGHsi4T6lwI0vO9xpJzo1RvyFu FEk8OiPc+9YGs20mWOtuThEufrjRmkaq8jVhDmg4TgLm4zUPATslp2Y8Kn/ROjgG AbNyETNv3lUznXtFDz2L -----END CERTIFICATE-----Generated at Wed Aug 26 07:55:58 2026 by rpki-client