$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS61967.roa File: AS61967.roa (raw, json) Hash identifier: YLfDf0+waa53PhOepbWoSG7S1oVxFVMVO72v+v0tcAw= Subject key identifier: 04:03:59:B7:FC:7B:5C:B3:2D:FE:A0:5F:B2:A8:A4:51:DB:1B:0A:FB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2A5444AB94BFD4A59E4CBB18D20DF813ED4C8EDE Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS61967.roa Signing time: Mon 15 Jun 2026 18:49:19 +0000 ROA not before: Mon 15 Jun 2026 18:44:19 +0000 ROA not after: Mon 14 Jun 2027 18:49:19 +0000 asID: 61967 IP address blocks: 2a0f:6284:4311::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Jun 2026 13:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:54:44:ab:94:bf:d4:a5:9e:4c:bb:18:d2:0d:f8:13:ed:4c:8e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 15 18:44:19 2026 GMT Not After : Jun 14 18:49:19 2027 GMT Subject: CN=040359B7FC7B5CB32DFEA05FB2A8A451DB1B0AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:0c:aa:5e:95:5b:9a:7b:fe:49:18:42:b7: 93:f0:02:06:00:95:92:03:0c:7c:3d:4b:34:24:2c: 6d:c8:1b:a5:a3:e6:f7:a2:42:59:0b:0d:d2:47:e2: 05:71:36:18:61:01:9a:8d:bc:ba:e0:0f:62:5c:2d: e3:d6:2a:c9:fe:fa:f4:6f:0c:1e:a0:fb:62:e8:3a: 99:34:1b:c5:37:ce:ee:91:62:52:dc:9f:ca:cc:f2: 34:9c:b3:c6:fd:4d:c1:2a:d4:76:cc:93:88:24:ea: cd:54:d0:a1:8a:41:01:f0:50:89:5d:a6:b0:9d:68: 5e:cd:d3:3b:5f:a1:79:10:87:a0:a1:8d:f6:e7:fb: 51:c2:c8:b0:0b:2a:19:e1:e2:7a:9a:bf:be:1d:ac: 60:bb:6d:a2:c0:f0:9f:6c:c7:4b:ac:48:fb:b6:f3: e5:d8:03:98:66:90:6f:70:4d:3e:e2:5d:77:57:10: f0:7b:9f:73:35:e7:3b:15:a0:4b:62:c5:47:53:30: 91:a8:95:91:c2:0e:7a:b8:a8:c0:c4:dd:9c:3d:85: c3:8a:65:9c:46:7d:7b:f4:06:0a:8c:1f:cd:c8:a3: 36:7d:f2:f7:ce:f8:3f:24:bf:e1:19:50:4e:62:5d: b6:6f:42:6c:ca:50:b6:c2:d9:cc:3a:c6:7e:55:20: 20:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:03:59:B7:FC:7B:5C:B3:2D:FE:A0:5F:B2:A8:A4:51:DB:1B:0A:FB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS61967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4311::/48 Signature Algorithm: sha256WithRSAEncryption 1f:1d:5d:e4:99:6b:ae:b0:f3:12:5c:9f:dc:32:2a:92:81:ef: 30:5a:a6:57:16:61:f2:11:4a:3b:08:41:c7:cd:2d:06:27:8f: d8:14:36:1b:48:e3:f6:48:75:a2:4c:ef:68:04:7a:f1:17:3b: d4:c3:f6:95:be:6d:d4:c2:a7:e9:dd:dc:16:49:bb:80:a4:d2: e9:4a:17:69:05:3a:f6:e2:e5:e4:ae:16:67:f9:43:a8:77:d8: 02:ac:66:92:ce:09:4a:38:ee:07:88:6d:66:57:9d:91:03:8c: 05:f0:94:3d:59:6e:be:86:9d:0b:a8:bd:1b:8f:26:7d:ba:f0: 96:44:22:94:bd:3b:7b:04:b7:56:23:9e:fb:e2:b8:fa:33:f0: 26:d2:bc:ee:e1:8a:b3:de:f5:2f:c3:28:2d:05:41:a5:ce:4c: 94:32:c6:fc:42:f2:05:52:fc:99:6e:7a:4c:9d:51:3f:d8:17: 9c:e5:31:11:e2:06:6c:ad:62:70:a6:6a:5c:74:39:73:b4:09: 5f:2b:5d:27:8d:33:20:32:f6:bb:99:33:e9:fd:51:07:f9:e2: 56:30:54:30:1a:74:54:71:82:15:28:70:a6:1c:f8:65:e0:6b: a4:74:79:41:26:77:96:59:51:9c:c4:eb:bf:df:99:92:c8:8b: 56:14:6c:99 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUKlREq5S/1KWeTLsY0g34E+1Mjt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MTUxODQ0MTlaFw0yNzA2MTQxODQ5MTlaMDMxMTAvBgNV BAMTKDA0MDM1OUI3RkM3QjVDQjMyREZFQTA1RkIyQThBNDUxREIxQjBBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSsAyqXpVbmnv+SRhCt5PwAgYA lZIDDHw9SzQkLG3IG6Wj5veiQlkLDdJH4gVxNhhhAZqNvLrgD2JcLePWKsn++vRv DB6g+2LoOpk0G8U3zu6RYlLcn8rM8jScs8b9TcEq1HbMk4gk6s1U0KGKQQHwUIld prCdaF7N0ztfoXkQh6Chjfbn+1HCyLALKhnh4nqav74drGC7baLA8J9sx0usSPu2 8+XYA5hmkG9wTT7iXXdXEPB7n3M15zsVoEtixUdTMJGolZHCDnq4qMDE3Zw9hcOK ZZxGfXv0BgqMH83IozZ98vfO+D8kv+EZUE5iXbZvQmzKULbC2cw6xn5VICAJAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUBANZt/x7XLMt/qBfsqikUdsbCvswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM2MTk2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoP YoRDETANBgkqhkiG9w0BAQsFAAOCAQEAHx1d5JlrrrDzElyf3DIqkoHvMFqmVxZh 8hFKOwhBx80tBieP2BQ2G0jj9kh1okzvaAR68Rc71MP2lb5t1MKn6d3cFkm7gKTS 6UoXaQU69uLl5K4WZ/lDqHfYAqxmks4JSjjuB4htZledkQOMBfCUPVluvoadC6i9 G48mfbrwlkQilL07ewS3ViOe++K4+jPwJtK87uGKs971L8MoLQVBpc5MlDLG/ELy BVL8mW56TJ1RP9gXnOUxEeIGbK1icKZqXHQ5c7QJXytdJ40zIDL2u5kz6f1RB/ni VjBUMBp0VHGCFShwphz4ZeBrpHR5QSZ3lllRnMTrv9+ZksiLVhRsmQ== -----END CERTIFICATE-----Generated at Wed Jun 24 05:26:35 2026 by rpki-client