$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209866.roa File: AS209866.roa (raw, json) Hash identifier: srWahBDMw7wepcKLzBW7VqTQ7Ii4R738r16n3FdmOw4= Subject key identifier: 05:4A:0C:09:5A:1F:4A:74:03:E9:58:C6:80:3F:25:06:44:C2:3C:DD Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2D34B15D8F37A7E6CE7A2AB92214294A2886363E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209866.roa Signing time: Wed 10 Jun 2026 11:03:59 +0000 ROA not before: Wed 10 Jun 2026 10:58:59 +0000 ROA not after: Wed 09 Jun 2027 11:03:59 +0000 asID: 209866 IP address blocks: 2a0f:6282:2000::/40 maxlen: 48 2a0f:6282:2000::/48 maxlen: 48 2a0f:6282:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 17:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:34:b1:5d:8f:37:a7:e6:ce:7a:2a:b9:22:14:29:4a:28:86:36:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 10 10:58:59 2026 GMT Not After : Jun 9 11:03:59 2027 GMT Subject: CN=054A0C095A1F4A7403E958C6803F250644C23CDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:fc:16:e4:a8:b9:68:aa:13:86:e7:8c:82: b6:7c:ca:7a:f5:cf:35:5a:b8:77:b4:2a:d3:14:c8: 11:36:ff:39:5a:f3:68:a4:f3:f8:fb:97:92:aa:46: 7e:fa:dd:ad:7f:21:14:ef:d5:a7:e0:aa:d0:f7:25: 41:6e:13:84:23:bb:cb:a8:8f:7a:bf:22:40:17:93: b5:2a:4e:cf:a5:19:45:b8:62:d9:5e:1a:66:e1:96: 8b:81:c9:30:41:57:d7:33:81:f3:42:3d:22:aa:8d: 6a:d7:d2:5d:96:46:d9:c0:fe:50:45:b4:f9:17:2c: ca:de:c0:d4:80:10:60:41:8f:9c:a4:b6:69:32:1b: 1b:d4:72:e2:d6:42:4b:50:06:ac:ab:9a:ee:96:95: 1b:27:03:e6:33:e1:42:09:1b:f7:8d:65:39:99:95: 7a:70:a2:9a:c0:89:fc:d8:53:00:6f:fb:2e:be:6c: 92:66:5a:6b:9e:99:bc:91:65:c0:28:19:77:65:9e: 77:65:5b:7b:1a:75:ef:e6:04:4d:98:af:89:0a:16: d1:ca:cb:b4:94:ac:51:89:33:4a:3b:09:b9:53:2c: 92:d1:4f:f7:73:92:dd:e3:7a:52:c3:99:3c:0a:39: 07:f6:d5:d3:3f:64:cb:80:26:dc:88:e4:f5:fe:3a: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4A:0C:09:5A:1F:4A:74:03:E9:58:C6:80:3F:25:06:44:C2:3C:DD X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:2000::/40 Signature Algorithm: sha256WithRSAEncryption 2c:ac:8b:3d:50:b7:99:6d:8b:b8:70:26:c5:9a:06:bc:d1:f1: 64:39:46:04:45:7f:c0:ce:93:d0:73:18:8b:b1:fd:31:7b:db: 85:3e:22:27:0c:24:33:32:43:35:56:79:cc:39:17:d6:5d:a9: e2:d1:07:8f:39:3b:99:01:20:f7:f5:2a:b0:6b:74:6d:06:a4: b4:9e:76:3e:61:f7:84:08:e8:e8:e0:cd:ed:f0:fa:d5:d0:bb: 36:01:c1:0e:1b:11:b2:4a:e8:f2:7c:51:ff:63:f7:d0:f0:91: ad:6e:59:ce:cd:0e:c8:b7:57:80:cf:55:3e:1e:39:60:dd:77: 2a:75:d8:5e:98:0f:88:22:8d:40:f2:d8:1b:d4:22:18:d7:88: 3e:87:fc:b1:b4:ba:5c:7e:94:b8:84:54:ce:dc:0a:08:cb:63: 3f:26:f6:b8:79:f2:34:4b:d1:eb:8d:2f:5e:cd:8b:b9:85:be: 3d:12:96:08:fa:1d:ea:ca:5b:35:f4:07:80:6f:b3:9a:9c:df: 73:68:e6:85:0d:f9:80:aa:c7:07:57:ba:b6:f7:29:5c:58:9e: 2f:e8:e7:3b:3d:c0:cc:f4:a5:07:40:eb:5b:55:4c:fb:5a:bb: 70:c0:9b:b2:f4:a4:76:60:76:26:30:25:a8:55:4a:e2:65:26: 37:07:c9:fb -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIULTSxXY83p+bOeiq5IhQpSiiGNj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MTAxMDU4NTlaFw0yNzA2MDkxMTAzNTlaMDMxMTAvBgNV BAMTKDA1NEEwQzA5NUExRjRBNzQwM0U5NThDNjgwM0YyNTA2NDRDMjNDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxuvwW5Ki5aKoThueMgrZ8ynr1 zzVauHe0KtMUyBE2/zla82ik8/j7l5KqRn763a1/IRTv1afgqtD3JUFuE4Qju8uo j3q/IkAXk7UqTs+lGUW4YtleGmbhlouByTBBV9czgfNCPSKqjWrX0l2WRtnA/lBF tPkXLMrewNSAEGBBj5yktmkyGxvUcuLWQktQBqyrmu6WlRsnA+Yz4UIJG/eNZTmZ lXpwoprAifzYUwBv+y6+bJJmWmuembyRZcAoGXdlnndlW3sade/mBE2Yr4kKFtHK y7SUrFGJM0o7CblTLJLRT/dzkt3jelLDmTwKOQf21dM/ZMuAJtyI5PX+OrdzAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUBUoMCVofSnQD6VjGgD8lBkTCPN0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDk4NjYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KCIDANBgkqhkiG9w0BAQsFAAOCAQEALKyLPVC3mW2LuHAmxZoGvNHxZDlGBEV/ wM6T0HMYi7H9MXvbhT4iJwwkMzJDNVZ5zDkX1l2p4tEHjzk7mQEg9/UqsGt0bQak tJ52PmH3hAjo6ODN7fD61dC7NgHBDhsRskro8nxR/2P30PCRrW5Zzs0OyLdXgM9V Ph45YN13KnXYXpgPiCKNQPLYG9QiGNeIPof8sbS6XH6UuIRUztwKCMtjPyb2uHny NEvR640vXs2LuYW+PRKWCPod6spbNfQHgG+zmpzfc2jmhQ35gKrHB1e6tvcpXFie L+jnOz3AzPSlB0DrW1VM+1q7cMCbsvSkdmB2JjAlqFVK4mUmNwfJ+w== -----END CERTIFICATE-----Generated at Sat Jun 13 10:52:23 2026 by rpki-client