$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS209737.roa File: AS209737.roa (raw, json) Hash identifier: ipjrj2O0a2RgpsjERLfNt0Wy+8ndWMpOuW474S7LF1k= Subject key identifier: C1:8E:36:5A:3E:9D:5D:86:2A:D2:A4:F8:4A:3B:B4:B2:F9:8D:39:E0 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 562FA35D3554280C8C936BBD745CA9166244FEFA Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209737.roa Signing time: Sun 08 Nov 2026 21:44:31 +0000 ROA not before: Sun 08 Nov 2026 21:39:31 +0000 ROA not after: Sun 07 Nov 2027 21:44:31 +0000 asID: 209737 IP address blocks: 2a05:dfc3:fd30::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 22:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2f:a3:5d:35:54:28:0c:8c:93:6b:bd:74:5c:a9:16:62:44:fe:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 8 21:39:31 2026 GMT Not After : Nov 7 21:44:31 2027 GMT Subject: CN=C18E365A3E9D5D862AD2A4F84A3BB4B2F98D39E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:01:e2:20:3f:4a:07:70:24:4a:33:a0:24:2e: c5:b6:8e:75:98:82:a8:89:d2:fa:3f:8c:9d:c6:e0: 8b:eb:5a:03:c5:a6:32:28:bd:41:ec:c6:63:10:89: 31:36:a0:49:98:f2:7a:f7:c8:48:03:74:77:1d:7e: 48:82:d6:2e:ff:34:81:4f:d5:17:34:fc:26:a7:1d: 96:c1:c3:cf:a9:5b:45:3f:7e:01:b8:72:61:28:da: 09:11:2b:52:68:98:ea:39:f1:84:a9:20:3d:4e:f5: ff:e2:ba:33:23:d3:df:46:ec:87:16:76:e7:ce:97: b5:5a:e0:cd:12:2c:e8:d3:a6:0b:b4:0f:61:8d:6a: 35:3c:cd:f2:a9:2d:3a:ec:5e:25:93:ee:1c:0d:51: 98:24:4f:b1:4c:3c:b6:6a:c4:fc:69:96:16:20:0f: 1e:af:f1:1a:70:71:ac:b5:52:76:47:de:98:8f:ab: c0:0f:f3:12:57:fc:9b:40:ec:25:e5:82:25:67:fb: 12:ca:b5:2e:d6:ce:aa:6b:d5:3c:80:a3:b7:4e:b6: d6:87:56:42:c5:e5:42:a6:9e:38:27:81:db:48:fb: fc:43:97:2e:26:f5:dc:2d:31:e5:ff:ea:a3:c2:32: dd:3c:70:d8:c0:e7:e7:00:0f:8b:99:d1:ef:13:63: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8E:36:5A:3E:9D:5D:86:2A:D2:A4:F8:4A:3B:B4:B2:F9:8D:39:E0 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd30::/44 Signature Algorithm: sha256WithRSAEncryption 82:1d:de:b6:b1:ad:12:76:32:7c:21:57:23:02:df:81:3d:32: d4:48:29:6c:84:f7:32:61:b4:e7:45:45:4d:bf:36:92:55:b1: bd:ab:f5:94:0f:a6:37:75:62:fd:7f:c8:b0:7f:57:7f:cb:b6: 3f:3e:30:f8:d2:ae:9d:b9:2b:87:d9:c9:d7:70:c4:92:50:b5: e6:14:30:46:b8:26:63:86:25:b3:c7:fe:c6:3d:2a:de:78:3d: d2:8e:37:cf:c7:43:77:16:dc:39:cb:2a:86:16:fc:10:fe:ed: a8:20:ee:8d:3f:a6:6b:d3:ec:91:29:d6:ef:28:6a:e8:a3:1b: 00:f4:e1:39:5e:5e:75:e6:cb:d6:9f:e9:c8:f7:6f:30:cd:32: 2c:43:38:97:0b:fa:e1:4b:d6:b6:3e:83:7b:98:f2:1b:2e:41: 01:bd:03:69:90:aa:33:52:20:80:b5:87:f7:76:62:1e:6d:90: 4b:4f:f4:e2:f1:5c:76:25:e0:1d:0e:f5:06:cf:f0:c4:36:f3: 4a:93:be:07:6c:a4:b2:4a:d6:3f:29:5b:ff:a1:3c:b2:a5:44: 56:3e:e6:91:40:9a:e5:d3:60:cc:44:d9:a6:45:be:88:9f:50: b8:e8:5d:e6:98:d6:77:b7:e4:29:4c:ef:c2:43:f3:22:7b:ed: 71:e8:13:19 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUVi+jXTVUKAyMk2u9dFypFmJE/vowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjExMDgyMTM5MzFaFw0yNzExMDcyMTQ0MzFaMDMxMTAvBgNV BAMTKEMxOEUzNjVBM0U5RDVEODYyQUQyQTRGODRBM0JCNEIyRjk4RDM5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPAeIgP0oHcCRKM6AkLsW2jnWY gqiJ0vo/jJ3G4IvrWgPFpjIovUHsxmMQiTE2oEmY8nr3yEgDdHcdfkiC1i7/NIFP 1Rc0/CanHZbBw8+pW0U/fgG4cmEo2gkRK1JomOo58YSpID1O9f/iujMj099G7IcW dufOl7Va4M0SLOjTpgu0D2GNajU8zfKpLTrsXiWT7hwNUZgkT7FMPLZqxPxplhYg Dx6v8Rpwcay1UnZH3piPq8AP8xJX/JtA7CXlgiVn+xLKtS7Wzqpr1TyAo7dOttaH VkLF5UKmnjgngdtI+/xDly4m9dwtMeX/6qPCMt08cNjA5+cAD4uZ0e8TY4mfAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUwY42Wj6dXYYq0qT4Sju0svmNOeAwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDk3Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq Bd/D/TAwDQYJKoZIhvcNAQELBQADggEBAIId3raxrRJ2MnwhVyMC34E9MtRIKWyE 9zJhtOdFRU2/NpJVsb2r9ZQPpjd1Yv1/yLB/V3/Ltj8+MPjSrp25K4fZyddwxJJQ teYUMEa4JmOGJbPH/sY9Kt54PdKON8/HQ3cW3DnLKoYW/BD+7agg7o0/pmvT7JEp 1u8oauijGwD04TleXnXmy9af6cj3bzDNMixDOJcL+uFL1rY+g3uY8hsuQQG9A2mQ qjNSIIC1h/d2Yh5tkEtP9OLxXHYl4B0O9QbP8MQ280qTvgdspLJK1j8pW/+hPLKl RFY+5pFAmuXTYMxE2aZFvoifULjoXeaY1ne35ClM78JD8yJ77XHoExk= -----END CERTIFICATE-----Generated at Tue Nov 10 08:45:15 2026 by rpki-client