$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS201445.roa File: AS201445.roa (raw, json) Hash identifier: HXHfnVBGAKn2zh0N4fPwV9ZpFe5tMEekUukll5DXsnk= Subject key identifier: 9D:E5:28:75:49:DC:CC:D4:0C:54:3F:EB:09:95:EF:6C:6C:F3:65:83 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3EA8799EF4CA1CBDB5731C4972B6097A066BA2E5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS201445.roa Signing time: Sun 18 Oct 2026 12:12:35 +0000 ROA not before: Sun 18 Oct 2026 12:07:35 +0000 ROA not after: Sun 17 Oct 2027 12:12:35 +0000 asID: 201445 IP address blocks: 2a0f:6284:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 14:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a8:79:9e:f4:ca:1c:bd:b5:73:1c:49:72:b6:09:7a:06:6b:a2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 18 12:07:35 2026 GMT Not After : Oct 17 12:12:35 2027 GMT Subject: CN=9DE5287549DCCCD40C543FEB0995EF6C6CF36583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:4a:a1:71:7b:10:f4:e1:dc:27:b0:8e:18: 92:7f:5e:46:cd:a1:18:72:47:36:33:76:58:19:7f: de:d2:88:a2:cc:20:56:d6:65:05:a9:52:d1:80:15: 7c:1b:e4:21:86:29:e1:a9:3d:ae:7b:4e:ee:66:ad: 05:d9:71:0e:36:e7:ab:0d:57:bf:b3:9a:cb:01:ae: 7c:c5:03:ca:27:c9:25:91:d2:60:e7:b8:02:6c:c3: d6:e9:38:7f:7d:fa:e5:55:69:10:96:fa:f5:f3:bc: c2:f6:6d:fd:33:82:da:1b:88:e4:68:e3:e1:fc:3c: 81:f3:38:0e:30:22:42:ed:e6:31:1e:54:7b:e2:0b: 9e:59:c6:01:8b:c4:0d:2b:16:78:6c:55:37:21:04: c0:be:4f:71:2f:66:57:2d:be:55:a4:8f:9d:94:a2: 70:5d:fa:be:cf:a0:b1:68:9c:1c:46:c9:53:c2:cd: 22:28:ee:ce:dc:2e:df:ef:9b:91:7b:c0:0b:a6:22: d4:d2:e6:5d:b9:89:52:ca:25:23:f7:82:7f:2b:cd: ff:98:a9:b8:6e:a8:a3:68:6c:40:47:02:bd:ec:23: f2:94:6a:8f:a7:93:64:71:2c:f5:e2:5e:f6:55:dd: 76:82:f1:b6:79:8b:28:89:b7:9d:55:b2:46:3b:56: 3f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E5:28:75:49:DC:CC:D4:0C:54:3F:EB:09:95:EF:6C:6C:F3:65:83 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS201445.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:3400::/40 Signature Algorithm: sha256WithRSAEncryption 6d:5b:7e:96:c7:ed:9f:46:87:36:28:aa:8c:87:e9:61:17:e6: 6a:f2:11:7e:f4:85:ae:a3:83:d3:22:a6:55:df:b3:2a:4c:bf: fb:68:c1:a6:37:fa:4b:0a:2b:d8:2f:a8:69:94:0a:4c:a7:19: af:30:b8:08:4d:d0:9b:97:78:c4:36:a8:b2:b9:6c:b7:28:6a: ec:e7:48:76:8b:92:ed:4a:c2:11:9f:9c:bf:f1:63:96:ba:6e: 29:d9:28:ab:07:97:b7:3c:02:ed:86:ad:9a:3e:e3:f7:d0:e4: b8:b5:56:6f:d1:aa:4b:d3:a6:b5:26:df:41:2f:0b:c9:6e:78: fa:e0:c3:7e:fd:ee:ad:14:34:3d:df:3a:2f:76:e8:03:19:82: 26:90:0e:87:25:75:95:08:ee:f8:8a:34:7d:18:d9:b9:72:d4: de:44:f3:c8:93:96:28:ec:09:24:ee:c0:8e:5c:2f:68:0a:a1: a3:91:97:c9:ad:ac:9d:0e:c1:13:be:38:d4:21:03:8d:8c:a4: 28:ed:c2:26:ae:b7:da:c2:2d:50:21:87:d6:7f:09:9d:a2:6b: 3f:bc:0d:41:0b:f6:bd:5e:ac:b2:d9:56:f2:d5:81:46:c1:5c: 1d:a1:c8:f5:8d:92:1b:14:6f:19:20:25:c0:b3:02:b5:80:8b: 2d:90:ae:32 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUPqh5nvTKHL21cxxJcrYJegZrouUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMTgxMjA3MzVaFw0yNzEwMTcxMjEyMzVaMDMxMTAvBgNV BAMTKDlERTUyODc1NDlEQ0NDRDQwQzU0M0ZFQjA5OTVFRjZDNkNGMzY1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcdEqhcXsQ9OHcJ7COGJJ/XkbN oRhyRzYzdlgZf97SiKLMIFbWZQWpUtGAFXwb5CGGKeGpPa57Tu5mrQXZcQ4256sN V7+zmssBrnzFA8onySWR0mDnuAJsw9bpOH99+uVVaRCW+vXzvML2bf0zgtobiORo 4+H8PIHzOA4wIkLt5jEeVHviC55ZxgGLxA0rFnhsVTchBMC+T3EvZlctvlWkj52U onBd+r7PoLFonBxGyVPCzSIo7s7cLt/vm5F7wAumItTS5l25iVLKJSP3gn8rzf+Y qbhuqKNobEBHAr3sI/KUao+nk2RxLPXiXvZV3XaC8bZ5iyiJt51VskY7Vj+xAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUneUodUnczNQMVD/rCZXvbGzzZYMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDE0NDUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KENDANBgkqhkiG9w0BAQsFAAOCAQEAbVt+lsftn0aHNiiqjIfpYRfmavIRfvSF rqOD0yKmVd+zKky/+2jBpjf6Swor2C+oaZQKTKcZrzC4CE3Qm5d4xDaosrlstyhq 7OdIdouS7UrCEZ+cv/FjlrpuKdkoqweXtzwC7Yatmj7j99DkuLVWb9GqS9OmtSbf QS8LyW54+uDDfv3urRQ0Pd86L3boAxmCJpAOhyV1lQju+Io0fRjZuXLU3kTzyJOW KOwJJO7AjlwvaAqho5GXya2snQ7BE7441CEDjYykKO3CJq632sItUCGH1n8JnaJr P7wNQQv2vV6sstlW8tWBRsFcHaHI9Y2SGxRvGSAlwLMCtYCLLZCuMg== -----END CERTIFICATE-----Generated at Sat Nov 7 23:11:30 2026 by rpki-client