$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS61138.roa File: AS61138.roa (raw, json) Hash identifier: t9oHJu2tM8+mJHn6HkLsuOO+HugV+uqNaxb+X5zVKg8= Subject key identifier: 50:B6:D2:3F:A0:3A:A4:55:96:8B:38:AF:BA:15:51:33:3E:7F:E3:66 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 764E200D1FE272AF2DC8192AF7DFD3C8CC6C027D Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS61138.roa Signing time: Sun 28 Jun 2026 18:55:59 +0000 ROA not before: Sun 28 Jun 2026 18:50:59 +0000 ROA not after: Sun 27 Jun 2027 18:55:59 +0000 asID: 61138 IP address blocks: 2a09:54c5:1100::/48 maxlen: 48 2a0f:6284:4214::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4e:20:0d:1f:e2:72:af:2d:c8:19:2a:f7:df:d3:c8:cc:6c:02:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:59 2026 GMT Not After : Jun 27 18:55:59 2027 GMT Subject: CN=50B6D23FA03AA455968B38AFBA1551333E7FE366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:98:0f:90:51:c2:a2:5e:5e:88:49:91:43: e6:bd:85:2e:ff:3a:f1:f0:2b:ee:53:6c:cd:4b:17: ef:e4:2f:43:fb:1e:0c:4f:e2:ff:61:40:09:c5:88: e7:b2:24:be:84:f2:73:7a:cb:ee:95:61:b5:e9:15: 2d:67:65:34:e3:9a:fb:cd:20:91:c8:5b:f2:02:5f: cd:34:3f:6b:d4:64:78:c1:74:08:b2:19:ad:9c:7f: 27:94:71:5e:c6:61:66:14:8b:16:26:1c:5f:b7:91: 4e:36:f0:19:00:44:a3:88:2f:22:c8:b6:de:f6:31: b0:04:0f:6c:d7:cd:0c:1e:bd:52:7f:3b:67:21:d6: cb:a0:5c:12:d1:95:b5:a9:95:de:ce:ca:e2:5f:e2: 4b:e7:00:fc:09:6c:cf:5a:37:4c:47:44:e9:22:bb: 79:c6:ad:c1:95:bc:50:30:f6:1b:49:e0:16:48:b8: a3:44:0b:b6:dd:61:e9:b8:ba:c0:ea:9d:36:c0:bf: e4:ff:b2:9b:40:f9:c3:7c:2e:10:46:e7:40:5b:2a: f9:5e:34:66:6a:58:3e:9f:d0:09:37:14:60:c9:5e: 40:a3:66:be:21:0c:6b:a1:51:b3:04:ef:5f:ee:19: 4f:f6:d5:6e:5f:ae:0d:f9:08:4f:4e:41:b4:8c:d5: ef:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B6:D2:3F:A0:3A:A4:55:96:8B:38:AF:BA:15:51:33:3E:7F:E3:66 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS61138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c5:1100::/48 2a0f:6284:4214::/48 Signature Algorithm: sha256WithRSAEncryption 05:a2:e9:39:de:cb:46:d4:3f:e3:fe:7c:1b:7c:80:a3:cd:04: bf:a4:a1:59:b0:f7:3e:90:c9:1b:af:37:30:b2:e7:14:4e:83: c8:fe:4f:8f:8d:87:eb:0d:67:fd:0e:6b:92:a7:cf:0a:c3:60: 15:15:86:99:cb:e1:d0:c8:a3:2a:eb:7d:a1:fd:5f:ef:ca:6a: f8:a6:f4:fa:84:58:36:1d:8b:ac:22:36:a4:d9:80:30:c7:7f: 0a:92:30:4b:61:55:f7:96:38:4a:bb:5d:a7:f4:92:c9:ca:8c: 0f:27:80:7b:cc:6e:ed:6f:6b:19:f5:dc:9f:91:a0:57:8f:72: db:5b:96:90:d0:a2:c2:01:ab:96:22:43:e5:2a:09:77:06:f2: 25:d4:27:2f:a3:80:e4:56:a0:a7:26:7e:32:d6:e1:f9:75:9b: 6e:b2:77:be:5d:f2:98:d0:cf:d4:0a:6f:d7:7d:90:02:b1:bf: 69:92:97:c3:3b:38:1b:c2:47:05:d0:1e:24:52:c2:e4:7b:c3: 26:8e:7b:71:8e:5b:88:1e:8f:7f:e8:a1:74:c3:c4:fc:fa:f6: 4f:b5:66:ef:79:6d:3f:b3:47:e2:30:44:4d:37:de:05:d2:bb: 76:78:9e:b4:26:7f:7c:c5:1b:80:54:9b:15:9d:88:90:3b:9d: ea:79:f3:e1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdk4gDR/icq8tyBkq99/TyMxsAn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwNTlaFw0yNzA2MjcxODU1NTlaMDMxMTAvBgNV BAMTKDUwQjZEMjNGQTAzQUE0NTU5NjhCMzhBRkJBMTU1MTMzM0U3RkUzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKZgPkFHCol5eiEmRQ+a9hS7/ OvHwK+5TbM1LF+/kL0P7HgxP4v9hQAnFiOeyJL6E8nN6y+6VYbXpFS1nZTTjmvvN IJHIW/ICX800P2vUZHjBdAiyGa2cfyeUcV7GYWYUixYmHF+3kU428BkARKOILyLI tt72MbAED2zXzQwevVJ/O2ch1sugXBLRlbWpld7OyuJf4kvnAPwJbM9aN0xHROki u3nGrcGVvFAw9htJ4BZIuKNEC7bdYem4usDqnTbAv+T/sptA+cN8LhBG50BbKvle NGZqWD6f0Ak3FGDJXkCjZr4hDGuhUbME71/uGU/21W5frg35CE9OQbSM1e/TAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUULbSP6A6pFWWizivuhVRMz5/42YwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM2MTEzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoJ VMURAAMHACoPYoRCFDANBgkqhkiG9w0BAQsFAAOCAQEABaLpOd7LRtQ/4/58G3yA o80Ev6ShWbD3PpDJG683MLLnFE6DyP5Pj42H6w1n/Q5rkqfPCsNgFRWGmcvh0Mij Kut9of1f78pq+Kb0+oRYNh2LrCI2pNmAMMd/CpIwS2FV95Y4Srtdp/SSycqMDyeA e8xu7W9rGfXcn5GgV49y21uWkNCiwgGrliJD5SoJdwbyJdQnL6OA5FagpyZ+Mtbh +XWbbrJ3vl3ymNDP1Apv132QArG/aZKXwzs4G8JHBdAeJFLC5HvDJo57cY5biB6P f+ihdMPE/Pr2T7Vm73ltP7NH4jBETTfeBdK7dnietCZ/fMUbgFSbFZ2IkDud6nnz 4Q== -----END CERTIFICATE-----Generated at Fri Jul 10 16:02:00 2026 by rpki-client