$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS0.roa File: AS0.roa (raw, json) Hash identifier: nlqS0Nrxy+nbjgsyCo1+KCHKRdz9ROa4OlZjAamnu3k= Subject key identifier: 2E:8D:5F:4D:0E:46:69:AB:7E:82:48:5E:1A:73:0F:46:DB:05:5F:AE Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5E4B3C889CA9708D2427CC71506961B3909E2DC0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa Signing time: Mon 27 Jul 2026 06:00:02 +0000 ROA not before: Mon 27 Jul 2026 05:55:02 +0000 ROA not after: Mon 26 Jul 2027 06:00:02 +0000 asID: 0 IP address blocks: 2a0a:6044:a800::/40 maxlen: 48 2a0f:6282:210c::/48 maxlen: 48 2a0f:6283:1104::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4b:3c:88:9c:a9:70:8d:24:27:cc:71:50:69:61:b3:90:9e:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 27 05:55:02 2026 GMT Not After : Jul 26 06:00:02 2027 GMT Subject: CN=2E8D5F4D0E4669AB7E82485E1A730F46DB055FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a1:67:12:3f:32:18:0c:9a:53:de:15:3c:65: 5e:9a:3c:f0:ba:72:7e:48:55:45:4d:c2:61:5a:09: ea:25:19:4e:b5:2b:94:38:9b:dc:61:76:53:a6:86: 87:c6:a5:db:7f:a6:1e:29:3b:a0:b9:32:21:4d:be: d3:75:ed:25:c4:8e:ba:af:92:3a:bb:2e:82:02:b4: ab:3b:1c:5a:fc:8f:41:18:1b:cc:4c:3f:cb:12:05: f4:33:52:59:c5:8c:e9:6a:85:87:3c:27:b2:d3:c5: 35:03:dd:6c:da:d0:a0:6c:0f:94:8b:92:7f:40:f0: 89:57:6a:00:d1:a6:92:c5:67:9f:17:d8:05:20:48: 49:21:52:0f:99:b2:eb:60:5d:9a:31:95:97:d5:41: 92:72:be:09:c7:dc:8a:83:db:ef:0a:77:fa:21:56: ca:13:e0:33:d1:55:3b:a7:f8:22:58:d0:db:49:ab: 38:75:f4:19:1f:d6:23:9c:a0:db:cd:92:6f:5f:f3: 52:fb:8a:8b:45:92:7a:37:31:7f:4a:ac:5c:b2:76: b2:0c:6c:31:6a:45:0a:68:7e:e1:13:f2:26:d3:69: 42:f4:21:a6:f0:a8:32:8e:85:51:b9:ec:95:9d:35: fd:d6:d6:c6:20:d9:b3:11:6b:da:57:bd:f8:22:7e: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:5F:4D:0E:46:69:AB:7E:82:48:5E:1A:73:0F:46:DB:05:5F:AE X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a800::/40 2a0f:6282:210c::/48 2a0f:6283:1104::/48 Signature Algorithm: sha256WithRSAEncryption 0c:4d:28:b9:f1:91:ca:3f:de:07:75:24:80:09:34:11:df:14: e7:01:47:83:a9:e0:87:be:92:ae:e4:9d:89:85:8c:77:e2:70: 83:e1:66:37:27:0c:fe:1c:ea:f6:56:f4:90:72:fa:75:44:e8: dc:bc:d8:02:fd:79:a9:4e:ee:d5:b5:ac:ed:50:86:13:7b:ba: 7c:6e:67:60:d7:d2:b7:19:d4:b5:4e:85:09:b7:e6:5a:36:a8: ba:cd:54:d1:4c:54:92:f8:28:35:a4:ae:c9:c9:9e:ef:8f:12: 84:50:09:16:b1:ed:cf:d5:1b:3a:dd:94:c5:80:8c:c1:6f:cc: 9d:ae:3b:f4:77:92:4d:69:ea:89:3d:4c:0c:ad:6e:85:a3:ba: 2a:fc:69:95:6c:40:dc:ce:42:67:9f:3d:b5:24:da:9c:54:42: 04:4e:1d:7b:d5:d8:34:63:d8:3d:32:df:22:54:d3:f4:ae:f5: 2c:b6:04:64:91:f3:63:77:63:a8:bc:d7:3a:96:f6:60:3d:41: 46:1a:48:bd:d2:83:e2:9c:95:b3:9c:02:68:a8:8f:86:8a:5c: eb:c7:55:e1:90:ce:20:71:6f:5c:e1:84:88:db:00:30:46:4c: 2c:56:24:65:5d:20:b1:5f:3a:92:ea:cd:af:12:25:3b:cc:8b: 42:37:72:b1 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUXks8iJypcI0kJ8xxUGlhs5CeLcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjcwNTU1MDJaFw0yNzA3MjYwNjAwMDJaMDMxMTAvBgNV BAMTKDJFOEQ1RjREMEU0NjY5QUI3RTgyNDg1RTFBNzMwRjQ2REIwNTVGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnoWcSPzIYDJpT3hU8ZV6aPPC6 cn5IVUVNwmFaCeolGU61K5Q4m9xhdlOmhofGpdt/ph4pO6C5MiFNvtN17SXEjrqv kjq7LoICtKs7HFr8j0EYG8xMP8sSBfQzUlnFjOlqhYc8J7LTxTUD3Wza0KBsD5SL kn9A8IlXagDRppLFZ58X2AUgSEkhUg+ZsutgXZoxlZfVQZJyvgnH3IqD2+8Kd/oh VsoT4DPRVTun+CJY0NtJqzh19Bkf1iOcoNvNkm9f81L7iotFkno3MX9KrFyydrIM bDFqRQpofuET8ibTaUL0IabwqDKOhVG57JWdNf3W1sYg2bMRa9pXvfgifqAfAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQULo1fTQ5Gaat+gkheGnMPRtsFX64wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyMEoGCCsGAQUFBwELBD4wPDA6BggrBgEFBQcwC4YucnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwYAKgpgRKgD BwAqD2KCIQwDBwAqD2KDEQQwDQYJKoZIhvcNAQELBQADggEBAAxNKLnxkco/3gd1 JIAJNBHfFOcBR4Op4Ie+kq7knYmFjHficIPhZjcnDP4c6vZW9JBy+nVE6Ny82AL9 ealO7tW1rO1QhhN7unxuZ2DX0rcZ1LVOhQm35lo2qLrNVNFMVJL4KDWkrsnJnu+P EoRQCRax7c/VGzrdlMWAjMFvzJ2uO/R3kk1p6ok9TAytboWjuir8aZVsQNzOQmef PbUk2pxUQgROHXvV2DRj2D0y3yJU0/Su9Sy2BGSR82N3Y6i81zqW9mA9QUYaSL3S g+KclbOcAmioj4aKXOvHVeGQziBxb1zhhIjbADBGTCxWJGVdILFfOpLqza8SJTvM i0I3crE= -----END CERTIFICATE-----Generated at Tue Jul 28 17:00:16 2026 by rpki-client