$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200104.roa File: AS200104.roa (raw, json) Hash identifier: AIy43wP/CM0yB9M5a9hOvx8X76mbZMzAdGwtOt0D8DQ= Subject key identifier: 09:E9:AF:71:DB:31:01:1C:22:DA:AF:3F:AF:F7:49:86:BF:A9:6D:29 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4C90470E857198EACE3C2B876AC64C975D86823C Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200104.roa Signing time: Sat 30 May 2026 19:04:07 +0000 ROA not before: Sat 30 May 2026 18:59:07 +0000 ROA not after: Sat 29 May 2027 19:04:07 +0000 asID: 200104 IP address blocks: 2a0f:6283:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 17:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:90:47:0e:85:71:98:ea:ce:3c:2b:87:6a:c6:4c:97:5d:86:82:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 30 18:59:07 2026 GMT Not After : May 29 19:04:07 2027 GMT Subject: CN=09E9AF71DB31011C22DAAF3FAFF74986BFA96D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:69:49:f0:33:2b:7c:ab:7a:31:42:cd:7e:77: 5a:2e:29:de:1c:e2:6f:fb:3a:23:5c:f9:52:45:df: 50:70:c8:ee:45:e1:3f:74:16:cf:1f:6a:09:a9:86: 2f:59:4c:0a:b3:45:6e:7d:9f:01:0d:d1:61:f1:e7: 23:f5:f8:97:9f:30:a4:50:69:13:9b:00:a7:db:5a: 4d:45:f6:c8:9d:f0:b6:f7:33:8a:f0:54:82:96:48: 16:88:75:69:44:96:4f:05:dd:98:b2:8a:e0:a0:0b: 98:42:98:8d:dd:3c:fa:ec:cf:45:24:6f:1b:4a:c5: b6:b2:9d:61:84:f5:52:79:17:d1:32:62:36:20:c6: 7f:7f:bc:69:13:a9:e5:5f:c1:bf:00:b1:1b:31:aa: 9e:a6:d5:71:64:9b:ac:0d:ca:17:1b:c9:d6:15:75: ae:e4:90:f5:f2:0f:c9:42:a0:43:f7:b1:c0:6f:2c: 38:ff:d1:52:d3:ec:14:63:d7:d7:db:e6:7b:38:17: 68:25:8a:df:99:ab:7a:24:7d:a8:83:98:4c:7c:7b: ac:b8:0e:87:a4:c3:bc:91:ab:2d:c9:75:86:64:d4: c1:60:08:56:89:2e:5e:f7:c2:a7:1f:07:e8:a7:30: a9:92:b0:3c:41:6e:e1:93:92:29:59:6a:70:12:2b: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E9:AF:71:DB:31:01:1C:22:DA:AF:3F:AF:F7:49:86:BF:A9:6D:29 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200104.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:b000::/36 Signature Algorithm: sha256WithRSAEncryption 41:a3:a6:ef:95:87:6c:7e:71:96:2c:da:55:74:d1:40:73:af: d0:17:f8:7a:2c:9e:5c:4a:c5:57:ac:4a:da:c4:46:31:48:1e: 3b:59:56:aa:47:16:7d:6e:06:cf:c5:cd:bc:7e:7c:13:f9:ee: be:f0:e8:39:8a:c0:8b:bd:9b:af:cc:c6:1c:cb:1c:90:28:01: 67:b3:d0:07:5c:78:9d:d6:20:14:11:b5:7c:a4:06:2c:ec:0b: ec:fe:d6:70:a6:12:5c:99:10:d0:d3:04:c5:91:f4:ee:7e:85: 2f:a3:bb:35:c0:e2:22:86:d1:a9:13:36:3b:6b:27:8b:6b:92: 32:7d:66:7b:1d:0e:6a:45:05:0b:91:76:db:fd:60:c6:96:87: 18:79:97:c8:89:08:5b:55:b3:47:0e:8c:f1:a2:d0:c8:ae:5b: 17:ff:5c:66:f5:7d:df:40:83:e4:12:20:bc:ad:9c:4d:eb:7d: ce:61:20:79:8f:95:ff:d6:dd:a1:ab:35:96:7b:90:31:36:0f: d0:2a:1b:27:68:48:c0:68:93:7c:b0:6e:91:54:60:0a:33:95: 81:98:fc:d3:69:c3:c5:5d:5d:42:19:eb:ac:0a:f3:c1:1c:2b: 3f:68:b5:6d:84:2f:35:64:f6:2f:fa:6c:5e:86:74:20:37:da: 80:5b:fa:ea -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUTJBHDoVxmOrOPCuHasZMl12GgjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MzAxODU5MDdaFw0yNzA1MjkxOTA0MDdaMDMxMTAvBgNV BAMTKDA5RTlBRjcxREIzMTAxMUMyMkRBQUYzRkFGRjc0OTg2QkZBOTZEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiaUnwMyt8q3oxQs1+d1ouKd4c 4m/7OiNc+VJF31BwyO5F4T90Fs8fagmphi9ZTAqzRW59nwEN0WHx5yP1+JefMKRQ aRObAKfbWk1F9sid8Lb3M4rwVIKWSBaIdWlElk8F3ZiyiuCgC5hCmI3dPPrsz0Uk bxtKxbaynWGE9VJ5F9EyYjYgxn9/vGkTqeVfwb8AsRsxqp6m1XFkm6wNyhcbydYV da7kkPXyD8lCoEP3scBvLDj/0VLT7BRj19fb5ns4F2glit+Zq3okfaiDmEx8e6y4 Doekw7yRqy3JdYZk1MFgCFaJLl73wqcfB+inMKmSsDxBbuGTkilZanASK7FVAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUCemvcdsxARwi2q8/r/dJhr+pbSkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDAxMDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KDsDANBgkqhkiG9w0BAQsFAAOCAQEAQaOm75WHbH5xlizaVXTRQHOv0Bf4eiye XErFV6xK2sRGMUgeO1lWqkcWfW4Gz8XNvH58E/nuvvDoOYrAi72br8zGHMsckCgB Z7PQB1x4ndYgFBG1fKQGLOwL7P7WcKYSXJkQ0NMExZH07n6FL6O7NcDiIobRqRM2 O2sni2uSMn1mex0OakUFC5F22/1gxpaHGHmXyIkIW1WzRw6M8aLQyK5bF/9cZvV9 30CD5BIgvK2cTet9zmEgeY+V/9bdoas1lnuQMTYP0CobJ2hIwGiTfLBukVRgCjOV gZj802nDxV1dQhnrrArzwRwrP2i1bYQvNWT2L/psXoZ0IDfagFv66g== -----END CERTIFICATE-----Generated at Sat Jun 13 09:03:38 2026 by rpki-client