$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS199682.roa File: AS199682.roa (raw, json) Hash identifier: uSFCkUTBXzg2/VbvRnWZLPtBOJfuOmVkprL3xd4zFw0= Subject key identifier: 67:1D:D5:7E:9C:D1:40:35:0F:C4:EE:A6:E5:C8:17:1C:DE:CF:D6:0C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 443F3368837855F54BEEFF48AAC255938C0328C1 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS199682.roa Signing time: Tue 09 Jun 2026 07:14:30 +0000 ROA not before: Tue 09 Jun 2026 07:09:30 +0000 ROA not after: Tue 08 Jun 2027 07:14:30 +0000 asID: 199682 IP address blocks: 2a0a:6044:7800::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3f:33:68:83:78:55:f5:4b:ee:ff:48:aa:c2:55:93:8c:03:28:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 9 07:09:30 2026 GMT Not After : Jun 8 07:14:30 2027 GMT Subject: CN=671DD57E9CD140350FC4EEA6E5C8171CDECFD60C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:22:7e:76:75:62:88:1d:2f:10:86:e1:10: 89:55:70:68:a9:ea:07:85:8d:02:e9:cc:01:0a:a1: 80:91:e6:6b:37:c5:86:92:d4:4d:9d:d8:68:73:52: 06:e1:5f:8b:99:a4:54:28:84:f5:52:9f:50:70:c6: fe:f7:7b:66:57:72:2c:96:ed:57:59:1c:bc:dd:4b: 3d:b0:06:26:14:ee:f8:b6:38:d5:29:a3:dd:b6:2a: 78:4f:60:94:35:8c:8a:53:31:c8:83:38:51:21:a9: 4f:9e:a1:01:8f:3c:de:59:91:ea:80:96:ce:c3:8c: cb:a3:eb:62:d4:39:24:c0:36:ac:5d:5e:89:ff:3e: 30:e1:a5:62:69:17:ef:0d:0d:28:40:d5:32:98:c9: df:a0:cb:e4:74:45:7e:92:b1:51:01:5b:92:ec:e9: 6c:f6:41:c0:55:36:8e:e0:e9:c5:36:26:da:cf:49: e3:78:1e:e8:12:1d:6c:ea:fc:e2:ba:44:5d:ea:25: b5:70:9d:c9:2d:0a:e6:f2:5b:da:54:da:25:d6:2a: 34:0f:29:f4:83:73:d3:28:e8:49:54:4d:54:31:71: 5f:21:fb:db:93:bf:9c:3f:98:26:75:10:44:9b:31: a1:0c:b0:d1:6d:94:93:b7:0e:0b:9b:9c:73:79:0f: e5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1D:D5:7E:9C:D1:40:35:0F:C4:EE:A6:E5:C8:17:1C:DE:CF:D6:0C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS199682.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7800::/40 Signature Algorithm: sha256WithRSAEncryption 50:ca:40:28:35:12:30:10:95:62:93:76:41:16:64:9c:6c:44: 78:a2:3d:54:45:13:95:1f:47:b9:f8:d0:a7:4a:cf:d4:d6:92: b4:20:29:e9:7b:36:e8:e5:73:56:4f:07:85:71:24:fc:dd:ee: c5:10:17:d3:e9:f7:78:80:be:97:15:dc:02:45:e4:01:65:97: 93:62:51:86:42:36:6e:86:04:40:6d:64:95:ce:44:c3:a8:a8: 08:6c:d0:46:9a:72:97:bd:56:2f:a1:73:e1:95:c2:e5:0b:cf: 49:8b:51:aa:34:7c:65:7a:f3:91:e8:77:38:94:4b:10:b1:7d: 5c:9b:e7:5b:f7:08:37:f8:fc:3c:cb:2e:64:b7:75:3b:a9:66: 36:1e:c3:b0:14:76:26:96:55:52:cb:1e:fb:a5:92:03:87:16: 2f:17:e0:6b:6b:a1:f9:43:91:d8:77:9d:1f:97:5d:1a:e4:ad: f4:68:df:8d:e9:f0:c9:72:99:da:5f:b0:f8:86:cc:d4:3e:fe: 61:0b:1d:fa:48:73:d3:ac:19:19:b5:1a:ca:e3:43:10:f6:4b: f6:32:25:7b:64:94:b4:89:91:08:96:34:7d:dc:4e:37:41:cc: 0e:7c:d2:42:e6:1b:68:05:f9:96:cd:a4:7d:41:47:c0:af:4d: d2:7d:cb:da -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIURD8zaIN4VfVL7v9IqsJVk4wDKMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDkwNzA5MzBaFw0yNzA2MDgwNzE0MzBaMDMxMTAvBgNV BAMTKDY3MURENTdFOUNEMTQwMzUwRkM0RUVBNkU1QzgxNzFDREVDRkQ2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoeCJ+dnViiB0vEIbhEIlVcGip 6geFjQLpzAEKoYCR5ms3xYaS1E2d2GhzUgbhX4uZpFQohPVSn1Bwxv73e2ZXciyW 7VdZHLzdSz2wBiYU7vi2ONUpo922KnhPYJQ1jIpTMciDOFEhqU+eoQGPPN5ZkeqA ls7DjMuj62LUOSTANqxdXon/PjDhpWJpF+8NDShA1TKYyd+gy+R0RX6SsVEBW5Ls 6Wz2QcBVNo7g6cU2JtrPSeN4HugSHWzq/OK6RF3qJbVwncktCubyW9pU2iXWKjQP KfSDc9Mo6ElUTVQxcV8h+9uTv5w/mCZ1EESbMaEMsNFtlJO3DgubnHN5D+XDAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUZx3VfpzRQDUPxO6m5cgXHN7P1gwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTk2ODIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEeDANBgkqhkiG9w0BAQsFAAOCAQEAUMpAKDUSMBCVYpN2QRZknGxEeKI9VEUT lR9HufjQp0rP1NaStCAp6Xs26OVzVk8HhXEk/N3uxRAX0+n3eIC+lxXcAkXkAWWX k2JRhkI2boYEQG1klc5Ew6ioCGzQRppyl71WL6Fz4ZXC5QvPSYtRqjR8ZXrzkeh3 OJRLELF9XJvnW/cIN/j8PMsuZLd1O6lmNh7DsBR2JpZVUsse+6WSA4cWLxfga2uh +UOR2HedH5ddGuSt9GjfjenwyXKZ2l+w+IbM1D7+YQsd+khz06wZGbUayuNDEPZL 9jIle2SUtImRCJY0fdxON0HMDnzSQuYbaAX5ls2kfUFHwK9N0n3L2g== -----END CERTIFICATE-----Generated at Wed Jun 17 08:24:34 2026 by rpki-client