$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS198979.roa File: AS198979.roa (raw, json) Hash identifier: dopNZolvmgdeQvuCghZtyskdrI5xtV7dcbOb0Mos1oI= Subject key identifier: 6B:5A:73:95:32:73:31:59:82:F3:8B:E0:01:DE:B8:7B:EF:4D:DB:E5 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6E607D9217CC5AD3BC7419EE5DB0B3DB2FE31244 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS198979.roa Signing time: Thu 10 Sep 2026 22:38:59 +0000 ROA not before: Thu 10 Sep 2026 22:33:59 +0000 ROA not after: Thu 09 Sep 2027 22:38:59 +0000 asID: 198979 IP address blocks: 2a06:1281:20::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:60:7d:92:17:cc:5a:d3:bc:74:19:ee:5d:b0:b3:db:2f:e3:12:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 10 22:33:59 2026 GMT Not After : Sep 9 22:38:59 2027 GMT Subject: CN=6B5A73953273315982F38BE001DEB87BEF4DDBE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:51:41:83:03:a3:f2:7c:bb:b8:49:19:16:aa: 1a:30:7c:18:3b:48:ca:a6:85:07:47:9a:00:b8:72: 5d:3c:08:71:e3:33:5a:f2:6e:bd:02:8a:79:6f:5e: c9:3d:93:9a:2d:e3:80:7c:b2:1c:5a:88:cf:74:29: 0e:fd:3c:f3:be:f2:50:10:e0:ef:ba:a1:11:14:69: 55:7b:b3:47:14:a0:1f:d7:a0:bb:e0:af:4c:11:e1: d1:da:41:cb:52:ed:2b:64:59:5a:06:fd:57:23:53: 7f:29:df:d3:fb:17:38:f8:aa:00:99:e2:80:9c:67: ef:34:5b:a6:00:66:dc:4a:eb:b8:2d:cc:b6:e7:44: e8:af:61:65:bf:ab:93:e5:50:49:3d:e8:23:87:5b: f7:89:61:49:df:53:19:b2:70:b7:6d:28:95:ea:64: f7:10:7f:65:5a:63:a5:06:b1:1f:47:8b:4c:0e:ab: f8:b8:6e:5b:8c:d5:7b:1d:44:1d:be:c8:83:a9:a6: 2d:0a:ba:ad:3f:03:2a:74:ed:64:4d:9c:ea:58:83: f8:2b:e3:44:dd:e2:f3:6c:48:df:43:52:71:7e:17: 6b:b1:2c:ba:61:ef:74:e5:e9:9e:03:fe:84:e8:b4: b0:9d:9b:57:47:b1:01:a6:c8:e9:da:f6:d4:91:54: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5A:73:95:32:73:31:59:82:F3:8B:E0:01:DE:B8:7B:EF:4D:DB:E5 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS198979.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:20::/44 Signature Algorithm: sha256WithRSAEncryption 0d:11:7c:55:27:99:f9:90:e9:ad:e5:43:de:3e:7a:d2:d2:36: fb:3c:2b:fb:4e:2d:13:8c:4a:52:01:b1:52:50:73:15:76:7b: 4c:75:47:a3:29:3b:c1:41:c4:32:02:be:1e:c1:07:ea:44:cf: 69:08:42:95:a8:2a:58:8c:87:32:55:b7:3c:2e:06:be:ca:c0: 57:81:e9:79:6e:1d:5b:ad:dc:65:6b:c2:ca:7a:e7:08:d7:31: 2d:aa:85:8e:f9:eb:3b:2d:f1:22:20:b2:e0:e2:9a:55:70:d9: 0f:82:38:33:ba:80:89:8a:94:ca:2c:51:41:8d:7d:5e:b2:1f: 35:a2:ee:92:cd:de:48:d1:ec:a9:74:cc:1a:1e:11:78:28:2e: a4:4b:45:00:bc:98:79:c0:e4:98:bc:e8:4b:b7:64:12:eb:4b: 55:75:97:8a:09:ac:76:5c:45:12:22:2e:86:e9:0f:d3:9a:aa: 3c:bb:b4:d5:ed:5a:b3:97:89:19:12:4e:74:b3:64:3b:f3:87: a1:34:dd:4b:61:10:c8:d0:dc:f1:1e:67:86:d9:89:a1:96:45: bb:67:ac:da:e2:8a:81:b9:d3:0e:e5:80:58:b4:da:44:4b:16: 84:0e:00:3d:9b:81:e2:d9:ed:60:10:86:38:9e:24:81:48:80: eb:f7:9c:64 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUbmB9khfMWtO8dBnuXbCz2y/jEkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTAyMjMzNTlaFw0yNzA5MDkyMjM4NTlaMDMxMTAvBgNV BAMTKDZCNUE3Mzk1MzI3MzMxNTk4MkYzOEJFMDAxREVCODdCRUY0RERCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeUUGDA6PyfLu4SRkWqhowfBg7 SMqmhQdHmgC4cl08CHHjM1rybr0CinlvXsk9k5ot44B8shxaiM90KQ79PPO+8lAQ 4O+6oREUaVV7s0cUoB/XoLvgr0wR4dHaQctS7StkWVoG/VcjU38p39P7Fzj4qgCZ 4oCcZ+80W6YAZtxK67gtzLbnROivYWW/q5PlUEk96COHW/eJYUnfUxmycLdtKJXq ZPcQf2VaY6UGsR9Hi0wOq/i4bluM1XsdRB2+yIOppi0Kuq0/Ayp07WRNnOpYg/gr 40Td4vNsSN9DUnF+F2uxLLph73Tl6Z4D/oTotLCdm1dHsQGmyOna9tSRVPfTAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUa1pzlTJzMVmC84vgAd64e+9N2+UwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTg5Nzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq BhKBACAwDQYJKoZIhvcNAQELBQADggEBAA0RfFUnmfmQ6a3lQ94+etLSNvs8K/tO LROMSlIBsVJQcxV2e0x1R6MpO8FBxDICvh7BB+pEz2kIQpWoKliMhzJVtzwuBr7K wFeB6XluHVut3GVrwsp65wjXMS2qhY756zst8SIgsuDimlVw2Q+CODO6gImKlMos UUGNfV6yHzWi7pLN3kjR7Kl0zBoeEXgoLqRLRQC8mHnA5Ji86Eu3ZBLrS1V1l4oJ rHZcRRIiLobpD9Oaqjy7tNXtWrOXiRkSTnSzZDvzh6E03UthEMjQ3PEeZ4bZiaGW RbtnrNriioG50w7lgFi02kRLFoQOAD2bgeLZ7WAQhjieJIFIgOv3nGQ= -----END CERTIFICATE-----Generated at Mon Sep 21 04:09:46 2026 by rpki-client