$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS197963.roa File: AS197963.roa (raw, json) Hash identifier: L30ZP9HrrMKHM7gqFKbO9VBAOAnSegDrJLsCymKU/I8= Subject key identifier: 4C:6D:58:4B:85:1C:46:3F:18:C8:48:0B:3F:0C:A8:5E:A9:76:A4:C7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 733252D235B1518EB2431CFF28C87B522BA1EB47 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS197963.roa Signing time: Wed 09 Sep 2026 06:00:19 +0000 ROA not before: Wed 09 Sep 2026 05:55:19 +0000 ROA not after: Wed 08 Sep 2027 06:00:19 +0000 asID: 197963 IP address blocks: 2a0f:6284:500::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:32:52:d2:35:b1:51:8e:b2:43:1c:ff:28:c8:7b:52:2b:a1:eb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 9 05:55:19 2026 GMT Not After : Sep 8 06:00:19 2027 GMT Subject: CN=4C6D584B851C463F18C8480B3F0CA85EA976A4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:25:d6:0f:4a:3d:14:53:93:21:82:5d:06: 4e:bf:e9:69:32:89:2d:0d:b7:8b:38:8f:f2:60:13: a1:66:bf:f3:73:46:5c:5a:12:71:9e:29:5d:82:d1: f8:50:ca:21:45:75:b8:9b:cf:c9:66:26:44:5f:6b: be:eb:7b:67:bc:72:cd:c4:04:1b:91:f3:99:09:51: 46:15:ff:c1:df:07:e6:1a:de:a2:41:17:c1:5e:bd: d8:0d:cf:5d:3d:ee:71:76:0e:dc:12:d4:2e:50:0b: 36:7b:51:d0:40:ad:7c:b8:7c:af:80:1d:55:a2:a7: 50:7a:67:ab:da:8d:11:27:d6:87:fb:92:ff:ea:9e: 37:1a:b3:37:21:51:8e:8a:8e:94:b4:ef:90:6d:90: ac:9a:48:c9:f2:17:20:4f:19:86:1d:af:15:77:40: 4d:9b:96:f5:d3:d8:6d:3f:3b:bb:25:47:8f:cc:cf: 8b:a5:c0:8d:40:4f:e2:81:5c:ac:fe:08:6d:a1:0a: 34:4b:32:69:6e:80:bf:76:13:0d:48:cc:03:10:65: 38:c7:0c:7c:e7:b5:4d:0c:79:68:a7:63:9b:ec:70: 00:a1:e2:57:08:49:07:66:04:5e:0f:ad:bb:e2:ec: ed:48:95:bf:fc:05:c5:4f:6f:14:e5:0b:0c:ba:c3: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6D:58:4B:85:1C:46:3F:18:C8:48:0B:3F:0C:A8:5E:A9:76:A4:C7 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS197963.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:500::/40 Signature Algorithm: sha256WithRSAEncryption 19:03:e5:d0:74:af:4d:53:0d:58:66:4a:60:2f:e2:5c:33:6b: b9:24:93:c8:d7:63:24:f7:15:fc:42:33:ca:f6:cb:b9:45:36: 5a:35:37:85:1b:59:5b:04:94:4f:2a:25:41:cc:d9:7b:e7:52: fd:f0:96:15:99:cc:05:8a:f7:93:95:39:0d:f4:3d:13:96:ec: 41:48:4a:ea:13:2d:39:38:87:c6:ec:91:5e:9d:2a:b6:0d:8b: e6:23:12:4c:23:63:b6:b6:37:1c:35:d0:59:89:32:46:dd:34: c3:54:ae:35:fc:c6:b9:7d:2f:1d:f0:e6:ae:e1:b5:c3:2b:c8: a1:d0:8d:a0:ee:c3:d0:8e:bc:08:c9:3c:6b:3d:41:6b:be:4a: 22:d8:e9:8a:a4:a2:5d:cd:6c:fb:8e:6d:92:d3:09:e6:2f:98: 5e:d9:9f:e7:89:5f:e5:21:c4:b3:9d:42:24:a3:34:b8:ad:45: 4e:b0:d4:04:ec:fa:9a:1d:30:8b:58:e7:ee:9b:05:38:6e:04: f4:a8:78:b1:3c:af:ed:a7:db:26:d6:a3:f4:d2:6c:5a:ce:e1: 3e:ff:62:ab:e5:40:5a:80:53:4d:3c:1f:ce:67:f6:1c:81:61: ce:e9:00:6b:3f:77:0f:62:5e:68:87:06:2e:cb:1a:56:a9:48: 24:c4:d6:ad -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUczJS0jWxUY6yQxz/KMh7Uiuh60cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MDkwNTU1MTlaFw0yNzA5MDgwNjAwMTlaMDMxMTAvBgNV BAMTKDRDNkQ1ODRCODUxQzQ2M0YxOEM4NDgwQjNGMENBODVFQTk3NkE0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOyXWD0o9FFOTIYJdBk6/6Wky iS0Nt4s4j/JgE6Fmv/NzRlxaEnGeKV2C0fhQyiFFdbibz8lmJkRfa77re2e8cs3E BBuR85kJUUYV/8HfB+Ya3qJBF8FevdgNz1097nF2DtwS1C5QCzZ7UdBArXy4fK+A HVWip1B6Z6vajREn1of7kv/qnjcaszchUY6KjpS075BtkKyaSMnyFyBPGYYdrxV3 QE2blvXT2G0/O7slR4/Mz4ulwI1AT+KBXKz+CG2hCjRLMmlugL92Ew1IzAMQZTjH DHzntU0MeWinY5vscACh4lcISQdmBF4Prbvi7O1Ilb/8BcVPbxTlCwy6w3ZjAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUTG1YS4UcRj8YyEgLPwyoXql2pMcwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTc5NjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KEBTANBgkqhkiG9w0BAQsFAAOCAQEAGQPl0HSvTVMNWGZKYC/iXDNruSSTyNdj JPcV/EIzyvbLuUU2WjU3hRtZWwSUTyolQczZe+dS/fCWFZnMBYr3k5U5DfQ9E5bs QUhK6hMtOTiHxuyRXp0qtg2L5iMSTCNjtrY3HDXQWYkyRt00w1SuNfzGuX0vHfDm ruG1wyvIodCNoO7D0I68CMk8az1Ba75KItjpiqSiXc1s+45tktMJ5i+YXtmf54lf 5SHEs51CJKM0uK1FTrDUBOz6mh0wi1jn7psFOG4E9Kh4sTyv7afbJtaj9NJsWs7h Pv9iq+VAWoBTTTwfzmf2HIFhzukAaz93D2JeaIcGLssaVqlIJMTWrQ== -----END CERTIFICATE-----Generated at Sun Sep 20 17:58:53 2026 by rpki-client