$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS53343.roa File: AS53343.roa (raw, json) Hash identifier: ZgTR3ImgiXWHFOozzJTT9Q2HqLAhAD4xJm8oly49mjY= Subject key identifier: D8:DA:4A:88:D7:EA:0E:EE:63:1A:1E:6E:7B:92:2B:88:CC:0B:E9:B0 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 41CD262BB609573D213CB9CAA18292B5D8BF9BE3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS53343.roa Signing time: Sun 28 Jun 2026 18:56:02 +0000 ROA not before: Sun 28 Jun 2026 18:51:02 +0000 ROA not after: Sun 27 Jun 2027 18:56:02 +0000 asID: 53343 IP address blocks: 2a0a:6044:a800::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cd:26:2b:b6:09:57:3d:21:3c:b9:ca:a1:82:92:b5:d8:bf:9b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:51:02 2026 GMT Not After : Jun 27 18:56:02 2027 GMT Subject: CN=D8DA4A88D7EA0EEE631A1E6E7B922B88CC0BE9B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:00:82:23:4d:5e:75:8d:d8:05:5b:9a:f9:41: 0c:4d:d9:d5:93:40:dc:73:11:cd:e8:d7:69:a4:c7: 18:b3:62:2d:f1:37:95:7e:8c:f3:6f:7b:62:9c:d1: 2b:95:85:9b:8a:1d:a1:1a:eb:9a:13:8e:19:74:99: 26:00:ea:f9:4b:f1:7e:79:d3:2d:b7:90:58:8f:4a: 05:ee:f8:ea:9b:ad:a5:f0:fe:72:89:72:45:91:e0: d6:5a:6e:ec:77:42:73:19:a7:ca:b8:87:10:1c:e8: aa:51:b9:fc:35:29:78:40:26:64:d8:e7:55:f1:3e: 85:ab:93:3e:0b:23:92:88:97:3d:7f:78:70:6b:60: 3d:0c:93:08:c6:38:e7:d5:cc:e8:b5:0a:03:10:35: d4:b4:06:59:01:18:d5:95:4e:cf:55:ca:53:fe:f3: a8:70:7c:bf:f5:a9:a8:b6:b5:87:64:76:4d:ce:ab: 83:b5:8a:fa:45:90:21:02:f8:dc:1b:f3:73:87:53: eb:e4:1b:c3:45:9e:61:54:47:2f:33:f3:11:1b:e6: 50:e0:af:f2:b4:45:a1:e3:43:81:51:56:82:78:e5: b7:bd:96:e7:7c:c2:c1:d9:32:1b:b4:cd:75:27:63: 47:90:94:b8:24:4f:0a:a3:94:ac:0d:b6:7f:f6:7c: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DA:4A:88:D7:EA:0E:EE:63:1A:1E:6E:7B:92:2B:88:CC:0B:E9:B0 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS53343.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a800::/40 Signature Algorithm: sha256WithRSAEncryption 43:14:29:fc:24:6c:e0:c9:5a:c9:b8:5b:8e:78:ad:8c:dd:7a: 55:fe:a0:ec:29:0e:d3:08:f4:7f:73:ed:5a:13:97:17:31:39: 13:cd:65:9b:16:7a:54:cf:f5:32:9c:8f:2b:f4:52:f7:a2:07: 06:6a:55:46:0d:c2:7e:ea:a0:5c:33:91:da:0c:02:cf:f9:0f: 49:8f:38:8a:a1:19:3a:51:fb:56:e5:3c:7d:0c:ca:86:d0:7f: 15:d6:23:9e:38:cb:ad:29:16:9b:0a:a2:7d:5d:d5:97:89:dd: 89:ab:84:f5:62:6d:9a:82:aa:75:1b:d7:c0:4a:1c:8a:41:0f: c4:0e:9e:3c:dd:e0:d8:d6:92:df:6f:bb:bb:49:3c:09:eb:05: e9:bb:39:a1:ea:17:59:a9:82:ce:d9:30:90:7e:f8:ea:9d:d2: 05:75:b0:5e:cf:9c:33:ef:a1:c5:c3:d7:67:b0:fb:bf:01:7f: 89:2f:82:17:0a:75:a6:52:7e:24:7b:c1:b0:2d:16:32:c6:16: 60:ee:b8:20:4d:ce:14:3c:e0:47:66:ff:87:11:d7:c7:1a:91: da:2f:d5:b7:f9:70:cf:d0:85:11:65:94:ae:23:17:7f:7c:b6: 59:4d:04:14:b2:d5:ab:b2:16:d6:25:2d:6d:c1:0c:d0:a5:fc: 61:4d:d6:bd -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUQc0mK7YJVz0hPLnKoYKStdi/m+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUxMDJaFw0yNzA2MjcxODU2MDJaMDMxMTAvBgNV BAMTKEQ4REE0QTg4RDdFQTBFRUU2MzFBMUU2RTdCOTIyQjg4Q0MwQkU5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAIIjTV51jdgFW5r5QQxN2dWT QNxzEc3o12mkxxizYi3xN5V+jPNve2Kc0SuVhZuKHaEa65oTjhl0mSYA6vlL8X55 0y23kFiPSgXu+OqbraXw/nKJckWR4NZabux3QnMZp8q4hxAc6KpRufw1KXhAJmTY 51XxPoWrkz4LI5KIlz1/eHBrYD0MkwjGOOfVzOi1CgMQNdS0BlkBGNWVTs9VylP+ 86hwfL/1qai2tYdkdk3Oq4O1ivpFkCEC+Nwb83OHU+vkG8NFnmFURy8z8xEb5lDg r/K0RaHjQ4FRVoJ45be9lud8wsHZMhu0zXUnY0eQlLgkTwqjlKwNtn/2fOB9AgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQU2NpKiNfqDu5jGh5ue5IriMwL6bAwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM1MzM0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoK YESoMA0GCSqGSIb3DQEBCwUAA4IBAQBDFCn8JGzgyVrJuFuOeK2M3XpV/qDsKQ7T CPR/c+1aE5cXMTkTzWWbFnpUz/UynI8r9FL3ogcGalVGDcJ+6qBcM5HaDALP+Q9J jziKoRk6UftW5Tx9DMqG0H8V1iOeOMutKRabCqJ9XdWXid2Jq4T1Ym2agqp1G9fA ShyKQQ/EDp483eDY1pLfb7u7STwJ6wXpuzmh6hdZqYLO2TCQfvjqndIFdbBez5wz 76HFw9dnsPu/AX+JL4IXCnWmUn4ke8GwLRYyxhZg7rggTc4UPOBHZv+HEdfHGpHa L9W3+XDP0IURZZSuIxd/fLZZTQQUstWrshbWJS1twQzQpfxhTda9 -----END CERTIFICATE-----Generated at Fri Jul 10 16:09:59 2026 by rpki-client