$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS57282.roa File: AS57282.roa (raw, json) Hash identifier: wkb3bx19mv8UNMF+iJW8kA6oU2auLBWmpL0qCcjoa2g= Subject key identifier: E2:1C:0F:30:A1:59:23:17:9A:16:3F:4A:86:9F:1E:5C:4E:DF:7F:ED Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 38DD7E246778BC63BCDA8D8360FEC5389CDC5909 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS57282.roa Signing time: Sun 28 Jun 2026 18:56:12 +0000 ROA not before: Sun 28 Jun 2026 18:51:12 +0000 ROA not after: Sun 27 Jun 2027 18:56:12 +0000 asID: 57282 IP address blocks: 2a0f:6283:1103::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:dd:7e:24:67:78:bc:63:bc:da:8d:83:60:fe:c5:38:9c:dc:59:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:51:12 2026 GMT Not After : Jun 27 18:56:12 2027 GMT Subject: CN=E21C0F30A15923179A163F4A869F1E5C4EDF7FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:36:dd:8e:e8:d8:f3:30:39:d1:f3:a4:dc: 14:ca:80:82:6c:84:36:94:ff:1d:86:b3:95:e8:1b: 2a:17:bc:93:d0:0d:4f:39:54:1b:1b:ca:60:3b:61: 27:2f:5c:81:47:6a:93:ca:9e:fe:c3:a3:be:b3:1d: f2:30:95:5b:06:92:5a:d1:33:71:d4:ea:23:cb:f1: 2f:5b:16:57:88:6c:0f:5f:45:7a:1f:66:f7:af:e2: 09:f8:2a:bf:c3:c9:00:4a:bf:d2:dc:4b:50:a5:30: 2a:56:1b:79:fc:e3:18:d9:c0:5e:0f:4a:73:99:3f: 6a:94:4b:9b:50:2e:07:2d:6a:87:91:7e:ef:2a:0c: 5f:ac:36:30:61:64:6a:54:9f:f0:8f:03:ed:cd:6b: b6:ed:ff:9e:24:14:36:83:a4:d1:f8:bd:d9:5b:e4: 83:e5:16:2d:98:c5:76:b2:ad:29:fa:d1:5a:be:db: c3:87:7f:c9:72:c4:b3:60:20:16:df:4d:f1:21:98: d6:9d:e4:c2:4f:7f:94:08:64:67:03:f6:9b:89:42: f2:be:cc:53:31:2b:0a:98:fd:72:1f:cb:2b:46:ad: 23:d5:6a:7a:c4:3c:03:d9:d6:21:7a:36:a7:58:f9: 40:91:de:d5:d6:32:74:4a:85:69:39:ff:51:de:50: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1C:0F:30:A1:59:23:17:9A:16:3F:4A:86:9F:1E:5C:4E:DF:7F:ED X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS57282.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:1103::/48 Signature Algorithm: sha256WithRSAEncryption 6a:97:10:09:77:cf:4c:b6:2e:6b:bd:c9:94:12:04:c6:8e:05: 26:86:92:c4:8d:fd:6c:1c:12:f5:84:89:c6:5a:eb:19:2b:a4: 5e:2d:aa:ad:5c:f9:76:45:ce:90:e2:53:9a:de:5c:93:80:e9: 2d:7a:0a:87:ac:61:74:11:1e:25:dd:6d:6e:11:e3:b7:f6:96: 5a:d3:90:e6:63:ae:49:bd:84:04:d7:47:cc:ef:af:be:cf:e1: 34:2a:76:c9:b5:aa:56:31:47:a0:3d:51:7a:70:4a:19:e3:48: 88:68:01:cd:06:ab:f9:0c:66:eb:5f:ad:86:40:49:93:ad:57: eb:7e:96:db:0c:4a:35:29:d0:80:3d:9f:39:0a:87:e3:8b:ce: d2:cf:d4:66:f5:01:9d:18:6f:3b:a1:15:15:6c:11:cf:40:8d: 8b:62:90:88:8d:1d:01:0f:a0:f5:07:30:9b:10:1a:a7:34:da: 68:51:53:22:53:be:e4:44:cc:3b:7f:b2:ef:62:1a:f3:25:e8: ad:3d:38:3f:ad:1a:f0:76:2b:c4:0f:ac:33:6a:e4:b6:56:15: 89:59:c5:2e:1c:41:7f:13:73:75:b8:2b:af:23:31:51:08:3f: 5a:58:c5:e4:85:50:73:f6:09:66:c0:1b:8e:75:9d:f0:3c:5b: 1e:40:be:6e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUON1+JGd4vGO82o2DYP7FOJzcWQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUxMTJaFw0yNzA2MjcxODU2MTJaMDMxMTAvBgNV BAMTKEUyMUMwRjMwQTE1OTIzMTc5QTE2M0Y0QTg2OUYxRTVDNEVERjdGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPeTbdjujY8zA50fOk3BTKgIJs hDaU/x2Gs5XoGyoXvJPQDU85VBsbymA7YScvXIFHapPKnv7Do76zHfIwlVsGklrR M3HU6iPL8S9bFleIbA9fRXofZvev4gn4Kr/DyQBKv9LcS1ClMCpWG3n84xjZwF4P SnOZP2qUS5tQLgctaoeRfu8qDF+sNjBhZGpUn/CPA+3Na7bt/54kFDaDpNH4vdlb 5IPlFi2YxXayrSn60Vq+28OHf8lyxLNgIBbfTfEhmNad5MJPf5QIZGcD9puJQvK+ zFMxKwqY/XIfyytGrSPVanrEPAPZ1iF6NqdY+UCR3tXWMnRKhWk5/1HeUOdXAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU4hwPMKFZIxeaFj9Khp8eXE7ff+0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM1NzI4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoP YoMRAzANBgkqhkiG9w0BAQsFAAOCAQEAapcQCXfPTLYua73JlBIExo4FJoaSxI39 bBwS9YSJxlrrGSukXi2qrVz5dkXOkOJTmt5ck4DpLXoKh6xhdBEeJd1tbhHjt/aW WtOQ5mOuSb2EBNdHzO+vvs/hNCp2ybWqVjFHoD1RenBKGeNIiGgBzQar+Qxm61+t hkBJk61X636W2wxKNSnQgD2fOQqH44vO0s/UZvUBnRhvO6EVFWwRz0CNi2KQiI0d AQ+g9QcwmxAapzTaaFFTIlO+5ETMO3+y72Ia8yXorT04P60a8HYrxA+sM2rktlYV iVnFLhxBfxNzdbgrryMxUQg/WljF5IVQc/YJZsAbjnWd8DxbHkC+bg== -----END CERTIFICATE-----Generated at Fri Jul 10 16:11:02 2026 by rpki-client