$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS206098.roa File: AS206098.roa (raw, json) Hash identifier: aSR1Pg8o1iLWrnU4l61SPtvCSlo9yN4i/y3eNSgva9k= Subject key identifier: DE:16:49:DE:67:95:5A:FB:3E:69:B9:45:31:02:60:C5:35:86:57:BF Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 464FA2567B65FC6DED3346ACC34C84F9E313A0AE Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS206098.roa Signing time: Tue 15 Sep 2026 18:16:10 +0000 ROA not before: Tue 15 Sep 2026 18:11:10 +0000 ROA not after: Tue 14 Sep 2027 18:16:10 +0000 asID: 206098 IP address blocks: 2a0f:6280:1008::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4f:a2:56:7b:65:fc:6d:ed:33:46:ac:c3:4c:84:f9:e3:13:a0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 15 18:11:10 2026 GMT Not After : Sep 14 18:16:10 2027 GMT Subject: CN=DE1649DE67955AFB3E69B945310260C5358657BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:14:e4:8a:c8:6b:5e:e4:e6:3e:c9:7e:05: 08:8b:a9:a4:0e:de:89:98:f4:45:9a:0e:f6:3a:66: b5:3e:d3:a6:f9:21:e7:9a:f0:50:69:74:14:fa:f2: 27:78:9a:47:a3:7d:bb:0e:03:06:98:7b:2c:e6:0e: 7d:21:e8:16:4b:d7:ae:92:76:c6:26:b8:7b:8a:91: 63:b5:ef:dc:db:a8:94:08:1c:ae:3a:d1:76:1c:dc: c3:20:53:18:15:49:12:16:27:4e:d5:be:8b:fa:88: 0e:87:30:00:b1:31:57:01:de:82:66:fc:1a:7e:a1: bf:89:64:89:85:0c:4a:73:bf:3b:4c:29:4f:1f:03: 63:f5:76:e7:31:83:6b:ba:df:ab:36:9e:d9:d9:a2: 17:32:6a:41:c0:bb:90:c5:f8:da:46:f6:20:37:62: 28:a3:4f:af:46:f1:e9:fd:13:16:3f:19:87:7a:c4: 1c:91:0e:a7:d0:f4:d8:b9:fc:f2:82:44:41:77:64: f4:25:dd:2d:a4:62:f1:ea:48:f8:d8:9e:8a:12:d4: e6:60:f1:85:6d:58:9d:e5:21:ea:9a:a6:11:29:ff: 03:75:15:52:31:84:b0:ae:f9:dc:69:1d:2c:33:1c: 7e:3f:77:b3:27:e4:2b:2a:43:30:de:28:5f:94:6b: b4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:16:49:DE:67:95:5A:FB:3E:69:B9:45:31:02:60:C5:35:86:57:BF X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS206098.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1008::/48 Signature Algorithm: sha256WithRSAEncryption 7e:c8:8e:0f:ae:43:96:9e:98:0b:7d:9e:ed:a8:7f:40:de:1b: 1d:04:5c:13:58:99:5e:ce:61:9d:e2:7b:e2:64:d9:b7:98:46: 68:4c:13:59:fb:e0:f6:8e:98:aa:99:20:f3:61:9e:ed:30:65: d7:cb:de:1e:1a:ec:58:87:16:24:6c:a9:70:74:68:32:6e:3e: 77:80:ff:e4:e9:4f:cd:f3:7c:e7:75:a3:4b:51:91:1f:b5:cd: d6:6e:60:67:ac:88:65:23:e1:70:c3:4f:38:8d:c8:76:99:7f: d7:29:45:d7:28:59:f9:b4:0c:ea:22:40:f0:07:12:ca:4c:75: 3f:52:3b:90:90:1d:44:64:b3:61:70:17:a8:6a:f2:60:e2:99: a6:d6:9b:67:6d:32:62:ea:0a:52:c6:2b:61:5b:93:7c:dd:bf: ca:44:d6:14:0d:35:18:db:b7:92:73:05:b0:b0:4d:73:83:ea: cc:fb:07:41:53:87:4b:7e:85:74:49:2a:9b:4a:d0:64:d2:13: 7f:5e:b7:5d:b9:c4:e0:d5:43:3b:0e:c4:9d:1d:72:97:67:8c: 6d:4e:96:32:dd:e7:04:c1:2f:70:4f:84:60:30:7c:34:60:3f: 26:54:68:1b:05:7b:01:c0:71:11:49:16:2d:39:9b:b6:38:9d: 93:ad:e3:49 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIURk+iVntl/G3tM0asw0yE+eMToK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTUxODExMTBaFw0yNzA5MTQxODE2MTBaMDMxMTAvBgNV BAMTKERFMTY0OURFNjc5NTVBRkIzRTY5Qjk0NTMxMDI2MEM1MzU4NjU3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vRTkishrXuTmPsl+BQiLqaQO 3omY9EWaDvY6ZrU+06b5Ieea8FBpdBT68id4mkejfbsOAwaYeyzmDn0h6BZL166S dsYmuHuKkWO179zbqJQIHK460XYc3MMgUxgVSRIWJ07Vvov6iA6HMACxMVcB3oJm /Bp+ob+JZImFDEpzvztMKU8fA2P1ducxg2u636s2ntnZohcyakHAu5DF+NpG9iA3 YiijT69G8en9ExY/GYd6xByRDqfQ9Ni5/PKCREF3ZPQl3S2kYvHqSPjYnooS1OZg 8YVtWJ3lIeqaphEp/wN1FVIxhLCu+dxpHSwzHH4/d7Mn5CsqQzDeKF+Ua7STAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU3hZJ3meVWvs+ablFMQJgxTWGV78wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDYwOTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KAEAgwDQYJKoZIhvcNAQELBQADggEBAH7Ijg+uQ5aemAt9nu2of0DeGx0EXBNY mV7OYZ3ie+Jk2beYRmhME1n74PaOmKqZIPNhnu0wZdfL3h4a7FiHFiRsqXB0aDJu PneA/+TpT83zfOd1o0tRkR+1zdZuYGesiGUj4XDDTziNyHaZf9cpRdcoWfm0DOoi QPAHEspMdT9SO5CQHURks2FwF6hq8mDimabWm2dtMmLqClLGK2Fbk3zdv8pE1hQN NRjbt5JzBbCwTXOD6sz7B0FTh0t+hXRJKptK0GTSE39et125xODVQzsOxJ0dcpdn jG1OljLd5wTBL3BPhGAwfDRgPyZUaBsFewHAcRFJFi05m7Y4nZOt40k= -----END CERTIFICATE-----Generated at Mon Sep 21 04:09:47 2026 by rpki-client