$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS202294.roa File: AS202294.roa (raw, json) Hash identifier: vZzDzs06zjiRRcS0VfkKQpjaKJbO3wKVXgLEk9NBGcQ= Subject key identifier: DF:E4:AC:C1:3D:6D:CB:34:1D:AB:A8:B3:19:D9:4C:12:1A:44:F3:E8 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2EFC56F4E73FA3EFFF0875D21390705666A8D1BF Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS202294.roa Signing time: Tue 24 Feb 2026 08:00:40 +0000 ROA not before: Tue 24 Feb 2026 07:55:40 +0000 ROA not after: Tue 23 Feb 2027 08:00:40 +0000 asID: 202294 IP address blocks: 2a0f:6284:8::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 11:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:fc:56:f4:e7:3f:a3:ef:ff:08:75:d2:13:90:70:56:66:a8:d1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 24 07:55:40 2026 GMT Not After : Feb 23 08:00:40 2027 GMT Subject: CN=DFE4ACC13D6DCB341DABA8B319D94C121A44F3E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a7:bd:db:97:e5:4a:98:87:8f:72:01:7a:56: 08:5b:02:47:a9:34:fd:85:2a:0e:48:81:c7:a5:44: e0:8f:c9:e6:c6:85:a9:12:24:2f:ce:1a:91:b8:98: af:61:3d:13:6a:6e:e1:93:0b:8b:ae:a2:4f:13:d2: 48:91:cd:70:50:64:80:e2:e5:43:ea:e3:17:35:5c: 2b:d0:a9:fb:7e:93:83:44:f7:6c:1c:d0:23:2b:07: ef:ec:cc:33:22:ba:67:f6:e5:e0:d7:fc:c8:8f:6c: 04:78:4c:6c:bb:a3:03:86:35:46:b0:a0:0d:0a:6d: 52:48:d4:50:c0:0a:d1:e8:71:cf:ab:e3:29:78:ce: 2a:15:2e:9b:09:1d:51:ff:00:d4:26:81:5b:f8:6a: c4:17:b4:4f:93:a0:82:ad:50:83:6e:b7:28:19:f2: 7c:de:6a:ed:b3:80:ed:f4:7d:37:8c:f6:8d:36:90: f7:22:22:ee:a3:50:2b:c5:e3:82:e9:82:8f:7d:14: a6:67:3b:61:5d:4f:b6:da:ab:8a:5e:55:fe:a9:1c: 72:c2:ac:de:65:77:c5:f1:1f:7a:8e:eb:52:66:71: 5d:98:37:ac:07:1b:11:4e:71:0d:92:a5:b1:43:c3: bb:a5:05:4e:2c:ad:2a:39:58:34:44:1f:45:f6:6f: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E4:AC:C1:3D:6D:CB:34:1D:AB:A8:B3:19:D9:4C:12:1A:44:F3:E8 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS202294.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:8::/48 Signature Algorithm: sha256WithRSAEncryption 6e:b4:0d:bf:67:de:c8:89:2e:cf:4a:8f:55:27:e3:90:d0:78: cd:9e:6f:b1:52:11:34:a6:d1:27:e1:5f:8f:cb:06:fd:b7:d5: 61:65:75:0e:1d:4f:62:75:3d:69:df:e2:0d:a8:43:cd:9c:e6: cb:33:42:c6:63:f9:bf:ab:71:db:09:f8:c9:3d:15:6b:3c:d0: b0:2a:0c:34:66:f6:da:7e:b3:2e:70:6d:c9:08:f7:62:7f:e4: c8:6a:5f:10:9a:ae:a0:a4:68:88:28:1b:67:72:cf:3c:00:2c: d1:5d:bf:75:77:98:d0:99:46:1c:12:ba:ea:ba:c3:52:dd:5b: b6:22:1a:f3:6a:11:6d:3b:49:0e:99:2e:36:34:44:01:1e:a6: 92:2f:f7:15:f8:e3:24:4c:af:35:2d:33:b6:81:60:a4:c8:3e: 40:3a:5a:5d:66:fe:50:97:6e:64:3e:43:03:1c:a0:cc:af:75: 35:8f:39:2b:df:3c:a9:8d:c5:d5:82:fc:05:31:db:55:96:1a: 17:33:8d:70:41:97:e8:ec:2c:b7:ea:16:8a:99:71:13:71:f5: 8f:0d:37:2b:29:e8:f6:65:19:31:63:38:21:b2:14:3c:61:dc: 97:33:35:6e:18:cf:d8:92:79:fc:03:39:62:44:aa:11:5a:be: 52:0e:0e:cd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIULvxW9Oc/o+//CHXSE5BwVmao0b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMjQwNzU1NDBaFw0yNzAyMjMwODAwNDBaMDMxMTAvBgNV BAMTKERGRTRBQ0MxM0Q2RENCMzQxREFCQThCMzE5RDk0QzEyMUE0NEYzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMp73bl+VKmIePcgF6VghbAkep NP2FKg5IgcelROCPyebGhakSJC/OGpG4mK9hPRNqbuGTC4uuok8T0kiRzXBQZIDi 5UPq4xc1XCvQqft+k4NE92wc0CMrB+/szDMiumf25eDX/MiPbAR4TGy7owOGNUaw oA0KbVJI1FDACtHocc+r4yl4zioVLpsJHVH/ANQmgVv4asQXtE+ToIKtUINutygZ 8nzeau2zgO30fTeM9o02kPciIu6jUCvF44Lpgo99FKZnO2FdT7baq4peVf6pHHLC rN5ld8XxH3qO61JmcV2YN6wHGxFOcQ2SpbFDw7ulBU4srSo5WDREH0X2bw7bAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU3+SswT1tyzQdq6izGdlMEhpE8+gwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDIyOTQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAAgwDQYJKoZIhvcNAQELBQADggEBAG60Db9n3siJLs9Kj1Un45DQeM2eb7FS ETSm0SfhX4/LBv231WFldQ4dT2J1PWnf4g2oQ82c5sszQsZj+b+rcdsJ+Mk9FWs8 0LAqDDRm9tp+sy5wbckI92J/5MhqXxCarqCkaIgoG2dyzzwALNFdv3V3mNCZRhwS uuq6w1LdW7YiGvNqEW07SQ6ZLjY0RAEeppIv9xX44yRMrzUtM7aBYKTIPkA6Wl1m /lCXbmQ+QwMcoMyvdTWPOSvfPKmNxdWC/AUx21WWGhczjXBBl+jsLLfqFoqZcRNx 9Y8NNysp6PZlGTFjOCGyFDxh3JczNW4Yz9iSefwDOWJEqhFavlIODs0= -----END CERTIFICATE-----Generated at Mon Mar 2 19:35:47 2026 by rpki-client