$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS206000.roa File: AS206000.roa (raw, json) Hash identifier: LNIoUXzHCgifpyktxIMVCBRwlMTyTwgxIGY/iilNqK8= Subject key identifier: 55:45:59:25:21:30:50:C3:BA:6B:04:03:FC:4A:D1:3D:7A:E9:77:83 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 30E13142000ACEF3B775E2D5646E11B1153C6798 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS206000.roa Signing time: Tue 15 Sep 2026 21:09:13 +0000 ROA not before: Tue 15 Sep 2026 21:04:13 +0000 ROA not after: Tue 14 Sep 2027 21:09:13 +0000 asID: 206000 IP address blocks: 2a0f:6280:1009::/48 maxlen: 48 2a0f:6284:4::/48 maxlen: 48 2a0f:6284:900::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e1:31:42:00:0a:ce:f3:b7:75:e2:d5:64:6e:11:b1:15:3c:67:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 15 21:04:13 2026 GMT Not After : Sep 14 21:09:13 2027 GMT Subject: CN=55455925213050C3BA6B0403FC4AD13D7AE97783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:70:2a:4e:0b:59:db:ac:1a:1e:92:64:59: 14:d3:7b:79:d7:90:ea:14:9e:04:ad:81:11:24:0a: 2e:bd:a7:16:14:6a:6f:1a:ed:0a:89:f1:cb:25:5e: fe:01:7e:a6:1e:0c:d1:a3:6e:0c:f8:dc:b9:57:fc: 7c:a7:46:1e:ff:ce:c9:4c:79:c2:77:87:85:3a:db: 77:c6:b4:5b:c3:bb:56:db:76:51:c4:e1:d2:7d:9c: 10:ef:75:7e:01:9f:d4:3f:3c:b1:03:d3:1f:88:28: a2:f4:c7:11:4f:81:6d:f5:f6:ac:c6:2b:5d:a1:b2: d8:c3:18:26:47:57:02:9e:17:6e:9d:1e:8d:03:35: ee:45:e5:0b:73:0e:b9:ca:92:47:1a:33:15:4a:36: 14:bc:37:66:b0:8a:92:20:ac:f3:d6:c3:1b:20:b3: 31:a6:72:65:5e:44:dc:b4:52:34:0c:5b:b9:5c:fe: 20:25:df:6d:52:77:2e:0a:7b:cd:ef:2d:2f:fa:ac: 51:54:c6:5d:a2:76:e2:3b:c1:60:19:68:0a:de:ab: a9:7e:3e:4d:c5:f8:52:49:80:52:c8:6f:6c:7d:fe: 70:5c:09:06:e8:5c:7a:ef:ef:5d:d6:c1:49:9a:a8: e4:43:0b:1a:54:70:4a:aa:dc:da:36:67:92:88:6e: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:45:59:25:21:30:50:C3:BA:6B:04:03:FC:4A:D1:3D:7A:E9:77:83 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS206000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1009::/48 2a0f:6284:4::/48 2a0f:6284:900::/40 Signature Algorithm: sha256WithRSAEncryption 2e:e5:fb:2c:60:2c:1b:01:4d:56:16:28:fc:8d:1a:6f:f8:55: 90:44:ac:a2:24:d5:71:79:13:87:23:c5:e6:69:ca:6c:85:46: fc:8d:51:0b:c9:26:29:b5:c6:e9:e0:60:dd:fe:c2:cf:59:a9: 53:c9:2e:d2:20:33:95:3e:df:82:67:50:4c:bd:82:08:40:21: 3e:2d:ae:99:67:b9:39:8f:a5:5a:31:22:d2:a0:b1:f1:a4:fb: 40:e1:16:23:5f:51:0a:81:ff:85:00:d2:ff:9b:46:92:92:42: 6b:eb:66:a3:4b:32:c9:02:64:c3:8e:cf:27:19:9a:c5:b0:ac: 66:5e:a8:b5:e2:9c:44:07:aa:bf:bb:db:68:f3:af:6e:db:19: 94:b5:a1:ac:e1:27:10:eb:c3:92:14:e8:b6:3f:c1:2c:ce:4d: 4c:00:e3:09:1e:8d:8b:50:9b:3c:96:3e:d1:94:c2:ff:83:9c: 16:9e:60:18:28:de:0d:2d:2c:c7:3d:e2:49:7a:00:74:59:b9: 45:67:7d:3f:c2:fe:da:ab:42:73:c2:f5:b2:01:c8:a8:69:68: 46:14:39:f3:f4:27:f5:64:5c:43:f0:e9:cd:94:ad:9c:59:05: f3:3b:e6:ef:fe:3a:47:02:51:1b:79:73:18:b9:24:49:7b:bb: 68:9a:0a:5e -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUMOExQgAKzvO3deLVZG4RsRU8Z5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTUyMTA0MTNaFw0yNzA5MTQyMTA5MTNaMDMxMTAvBgNV BAMTKDU1NDU1OTI1MjEzMDUwQzNCQTZCMDQwM0ZDNEFEMTNEN0FFOTc3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zHAqTgtZ26waHpJkWRTTe3nX kOoUngStgREkCi69pxYUam8a7QqJ8cslXv4BfqYeDNGjbgz43LlX/HynRh7/zslM ecJ3h4U623fGtFvDu1bbdlHE4dJ9nBDvdX4Bn9Q/PLED0x+IKKL0xxFPgW319qzG K12hstjDGCZHVwKeF26dHo0DNe5F5QtzDrnKkkcaMxVKNhS8N2awipIgrPPWwxsg szGmcmVeRNy0UjQMW7lc/iAl321Sdy4Ke83vLS/6rFFUxl2iduI7wWAZaAreq6l+ Pk3F+FJJgFLIb2x9/nBcCQboXHrv713WwUmaqORDCxpUcEqq3No2Z5KIbrXvAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUVUVZJSEwUMO6awQD/ErRPXrpd4MwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDYwMDAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgACMBoDBwAq D2KAEAkDBwAqD2KEAAQDBgAqD2KECTANBgkqhkiG9w0BAQsFAAOCAQEALuX7LGAs GwFNVhYo/I0ab/hVkESsoiTVcXkThyPF5mnKbIVG/I1RC8kmKbXG6eBg3f7Cz1mp U8ku0iAzlT7fgmdQTL2CCEAhPi2umWe5OY+lWjEi0qCx8aT7QOEWI19RCoH/hQDS /5tGkpJCa+tmo0syyQJkw47PJxmaxbCsZl6oteKcRAeqv7vbaPOvbtsZlLWhrOEn EOvDkhTotj/BLM5NTADjCR6Ni1CbPJY+0ZTC/4OcFp5gGCjeDS0sxz3iSXoAdFm5 RWd9P8L+2qtCc8L1sgHIqGloRhQ58/Qn9WRcQ/DpzZStnFkF8zvm7/46RwJRG3lz GLkkSXu7aJoKXg== -----END CERTIFICATE-----Generated at Sun Sep 20 19:55:23 2026 by rpki-client