$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS202224.roa File: AS202224.roa (raw, json) Hash identifier: EVCRMlQkKKq5KrK/WZjlX7P1CfHijeoUJKkOLKJXFS8= Subject key identifier: A9:2E:7A:69:63:09:33:6E:1B:38:4B:31:05:1B:F9:64:69:09:90:FC Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 7A76BC7A547DA36EF62F0B543D23C6A580B76D40 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS202224.roa Signing time: Thu 04 Jun 2026 16:51:49 +0000 ROA not before: Thu 04 Jun 2026 16:46:49 +0000 ROA not after: Thu 03 Jun 2027 16:51:49 +0000 asID: 202224 IP address blocks: 2a0a:6044:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:76:bc:7a:54:7d:a3:6e:f6:2f:0b:54:3d:23:c6:a5:80:b7:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 4 16:46:49 2026 GMT Not After : Jun 3 16:51:49 2027 GMT Subject: CN=A92E7A696309336E1B384B31051BF964690990FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:be:92:fe:8b:ef:2c:46:97:41:27:cf:df: 3e:09:3a:8b:55:08:40:2a:de:87:1e:05:00:c5:45: 3e:42:30:46:4b:2d:9b:f4:f5:1c:1e:e4:ad:42:e5: 7b:47:aa:bd:d6:35:f8:0b:da:6a:5d:0d:f0:ce:8f: 69:e3:4b:2e:49:6f:65:4b:18:20:57:37:f6:88:49: fb:91:fb:9a:02:44:e7:65:0b:e1:9b:28:96:4c:a4: af:e2:e7:1e:74:ce:3f:69:d3:c4:9e:3e:83:3d:27: 7f:5b:62:28:0e:8d:25:67:10:70:b1:19:29:a5:18: ad:4f:72:46:79:9e:40:0c:5c:10:37:70:60:05:b6: e1:eb:e1:e6:46:ea:0a:60:46:cc:cb:1c:97:3c:1a: f9:05:11:c1:d1:e0:61:b8:e9:00:5e:33:8e:a2:d3: e3:85:5a:d1:52:32:e7:8d:ae:34:36:f4:28:25:69: c5:69:0f:db:82:c6:68:ab:e8:19:6e:54:b0:21:80: b1:8a:b4:75:88:79:58:6d:30:58:8c:75:1e:c3:ee: b3:5a:16:0c:c3:54:07:86:1c:b8:54:2e:73:df:49: 09:09:3f:22:57:13:2c:7d:e3:61:34:22:b9:55:04: fd:3e:d4:23:da:84:59:1c:23:df:95:48:2b:38:14: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2E:7A:69:63:09:33:6E:1B:38:4B:31:05:1B:F9:64:69:09:90:FC X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS202224.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7000::/40 Signature Algorithm: sha256WithRSAEncryption 75:3d:44:5d:37:b1:dd:ce:2d:d3:1c:03:60:8c:b3:35:2d:40: 07:eb:dd:63:5e:5e:c9:66:c7:f5:41:87:5d:95:fa:59:4d:95: 4b:d1:6f:0b:6d:70:f4:45:dc:5b:d3:03:48:4a:df:e2:6c:76: 9e:82:47:9e:0e:ce:b2:1c:13:53:ff:ac:3a:a4:92:ad:d3:f6: a0:fb:fa:41:f3:1c:d7:85:81:90:38:4c:91:69:aa:8b:a5:f7: e7:c7:29:5a:5a:f2:13:93:1b:d8:74:50:2f:1a:67:69:4c:f3: 73:64:49:99:07:eb:11:86:84:38:55:2b:8e:0d:be:c1:1a:c8: 95:fe:a6:2d:79:43:26:d4:00:cb:4e:c6:94:90:48:4f:06:7e: 27:4c:8a:72:9f:d0:1a:27:ea:37:07:32:9e:86:c8:53:ca:17: c6:d0:c6:a4:75:59:db:e6:2e:14:af:d6:9c:e5:a3:5c:bf:39: 51:70:c1:a4:66:a9:ac:8b:05:4e:9a:f1:46:22:01:95:73:59: 06:ef:da:ad:1d:de:c3:07:23:b9:e4:38:de:de:05:81:9e:73: 28:e2:3e:14:e6:92:fb:1c:fe:66:05:78:72:40:72:1a:37:ed: da:70:5f:7d:cf:01:52:0d:d5:08:52:2c:9b:14:82:db:df:3b: 4e:37:35:1f -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUena8elR9o272LwtUPSPGpYC3bUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDQxNjQ2NDlaFw0yNzA2MDMxNjUxNDlaMDMxMTAvBgNV BAMTKEE5MkU3QTY5NjMwOTMzNkUxQjM4NEIzMTA1MUJGOTY0NjkwOTkwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBb6S/ovvLEaXQSfP3z4JOotV CEAq3oceBQDFRT5CMEZLLZv09Rwe5K1C5XtHqr3WNfgL2mpdDfDOj2njSy5Jb2VL GCBXN/aISfuR+5oCROdlC+GbKJZMpK/i5x50zj9p08SePoM9J39bYigOjSVnEHCx GSmlGK1PckZ5nkAMXBA3cGAFtuHr4eZG6gpgRszLHJc8GvkFEcHR4GG46QBeM46i 0+OFWtFSMueNrjQ29CglacVpD9uCxmir6BluVLAhgLGKtHWIeVhtMFiMdR7D7rNa FgzDVAeGHLhULnPfSQkJPyJXEyx942E0IrlVBP0+1CPahFkcI9+VSCs4FHS/AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUqS56aWMJM24bOEsxBRv5ZGkJkPwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDIyMjQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEcDANBgkqhkiG9w0BAQsFAAOCAQEAdT1EXTex3c4t0xwDYIyzNS1AB+vdY15e yWbH9UGHXZX6WU2VS9FvC21w9EXcW9MDSErf4mx2noJHng7OshwTU/+sOqSSrdP2 oPv6QfMc14WBkDhMkWmqi6X358cpWlryE5Mb2HRQLxpnaUzzc2RJmQfrEYaEOFUr jg2+wRrIlf6mLXlDJtQAy07GlJBITwZ+J0yKcp/QGifqNwcynobIU8oXxtDGpHVZ 2+YuFK/WnOWjXL85UXDBpGaprIsFTprxRiIBlXNZBu/arR3ewwcjueQ43t4FgZ5z KOI+FOaS+xz+ZgV4ckByGjft2nBffc8BUg3VCFIsmxSC2987Tjc1Hw== -----END CERTIFICATE-----Generated at Wed Jun 17 08:27:32 2026 by rpki-client