$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200472.roa File: AS200472.roa (raw, json) Hash identifier: xtl/KEQ1xmt3j2VGblHR/ByoJcOlsHevN4tsVvwlDjc= Subject key identifier: 02:51:27:58:7E:4D:90:1B:09:C4:6A:3F:81:76:4C:9A:9E:3C:A5:B6 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 57843E798913AF09538A1497EB7B26400ECB68BB Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200472.roa Signing time: Tue 14 Apr 2026 01:01:20 +0000 ROA not before: Tue 14 Apr 2026 00:56:20 +0000 ROA not after: Tue 13 Apr 2027 01:01:20 +0000 asID: 200472 IP address blocks: 2a0f:6282:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:84:3e:79:89:13:af:09:53:8a:14:97:eb:7b:26:40:0e:cb:68:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Apr 14 00:56:20 2026 GMT Not After : Apr 13 01:01:20 2027 GMT Subject: CN=025127587E4D901B09C46A3F81764C9A9E3CA5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:f8:32:fb:ab:a3:21:08:66:1b:94:3f:43: e9:fb:3d:b5:eb:ca:0c:9d:6e:e5:ac:bc:95:51:91: 16:9a:52:72:14:61:b4:44:48:da:9e:c7:30:ba:41: 22:6c:b8:df:67:b0:6c:1f:53:fd:3f:df:7e:5e:45: e3:1d:94:9e:de:fe:25:f9:bd:61:73:15:69:d1:95: ef:7a:b6:f9:48:a1:86:1e:c3:ea:3f:72:c8:d6:12: ff:81:75:0f:53:e3:03:a2:9f:b7:0c:e7:a6:f7:44: e6:83:fe:f1:08:04:3f:e0:fe:8e:4d:1a:ee:d3:ae: 17:18:a7:64:c0:4b:b1:32:2f:df:72:83:07:e1:b7: 59:54:7e:2c:81:f8:93:4d:32:e9:ab:d5:6a:70:c9: ee:d9:b2:b7:07:0f:b1:a8:8a:8c:be:b8:aa:7e:62: d1:d5:d9:9c:04:df:01:5b:17:fc:c9:41:25:56:fe: e8:d6:ab:1f:e6:eb:4a:56:05:42:61:e2:d9:5b:ca: ba:e2:d9:30:03:f6:fe:06:ee:8a:cd:f6:61:0e:9a: d7:94:3b:49:8e:5f:a1:e7:fb:97:c5:fb:19:80:1e: c8:3f:d8:6f:f0:95:b0:da:45:d9:31:e4:17:1e:94: 1e:64:5e:75:69:9f:a3:bf:80:fd:46:87:f4:ec:32: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:51:27:58:7E:4D:90:1B:09:C4:6A:3F:81:76:4C:9A:9E:3C:A5:B6 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200472.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:3000::/36 Signature Algorithm: sha256WithRSAEncryption 1e:1f:93:2b:40:d3:f8:bc:fb:2d:3c:cb:8c:36:93:d2:0b:36: f9:64:71:06:cd:12:e1:3e:6b:af:2c:ac:c4:10:e0:9c:28:04: fc:cc:ac:75:ac:57:6e:08:9d:50:5a:5b:3d:5d:4b:4f:b4:52: 0c:89:8d:68:fb:d9:1d:42:d3:6b:4c:16:66:7d:a0:d6:c4:2c: 06:0b:17:de:88:51:7a:ef:e9:6f:1a:87:d4:52:b1:5c:8e:c8: 10:50:b7:eb:dd:f3:ba:e7:81:df:4d:ae:9a:16:02:7e:33:c2: 7b:a0:8c:fb:0a:c9:96:c5:01:bf:49:a3:43:7a:ce:bf:95:c0: 2e:ee:44:31:8e:32:c3:5a:95:a8:1b:d4:0d:71:86:84:db:59: 4a:b7:58:fd:65:50:db:b6:cf:c3:79:5f:63:3d:ae:bb:4f:cf: 5b:96:2e:75:21:00:3f:29:fb:ec:31:7a:b3:20:c3:e2:45:6f: 86:06:96:40:71:a8:20:bd:82:63:0e:e8:d8:24:25:85:1e:2b: 39:a2:ca:bc:6e:85:37:35:13:b4:26:bf:e1:b5:b3:4e:91:d7: 9c:3f:a6:79:3a:e8:65:a9:b9:a6:eb:6f:a6:6b:ca:4f:55:74: 1d:24:a1:b8:c1:75:fd:dc:3e:8d:c5:60:31:01:49:91:3c:e0: 04:e4:00:e1 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUV4Q+eYkTrwlTihSX63smQA7LaLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA0MTQwMDU2MjBaFw0yNzA0MTMwMTAxMjBaMDMxMTAvBgNV BAMTKDAyNTEyNzU4N0U0RDkwMUIwOUM0NkEzRjgxNzY0QzlBOUUzQ0E1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxR/gy+6ujIQhmG5Q/Q+n7PbXr ygydbuWsvJVRkRaaUnIUYbRESNqexzC6QSJsuN9nsGwfU/0/335eReMdlJ7e/iX5 vWFzFWnRle96tvlIoYYew+o/csjWEv+BdQ9T4wOin7cM56b3ROaD/vEIBD/g/o5N Gu7TrhcYp2TAS7EyL99ygwfht1lUfiyB+JNNMumr1Wpwye7ZsrcHD7Goioy+uKp+ YtHV2ZwE3wFbF/zJQSVW/ujWqx/m60pWBUJh4tlbyrri2TAD9v4G7orN9mEOmteU O0mOX6Hn+5fF+xmAHsg/2G/wlbDaRdkx5BcelB5kXnVpn6O/gP1Gh/TsMovJAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUAlEnWH5NkBsJxGo/gXZMmp48pbYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDA0NzIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KCMDANBgkqhkiG9w0BAQsFAAOCAQEAHh+TK0DT+Lz7LTzLjDaT0gs2+WRxBs0S 4T5rryysxBDgnCgE/MysdaxXbgidUFpbPV1LT7RSDImNaPvZHULTa0wWZn2g1sQs BgsX3ohReu/pbxqH1FKxXI7IEFC3693zuueB302umhYCfjPCe6CM+wrJlsUBv0mj Q3rOv5XALu5EMY4yw1qVqBvUDXGGhNtZSrdY/WVQ27bPw3lfYz2uu0/PW5YudSEA Pyn77DF6syDD4kVvhgaWQHGoIL2CYw7o2CQlhR4rOaLKvG6FNzUTtCa/4bWzTpHX nD+meTroZam5putvpmvKT1V0HSShuMF1/dw+jcVgMQFJkTzgBOQA4Q== -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:58 2026 by rpki-client