$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: YsuXz5EKfvy1arVEbIBOiXFSAHgN/jnwfpW50MiJI4I= Subject key identifier: 2A:F5:9B:2D:10:74:71:8D:86:FB:0E:79:A3:30:03:A8:AE:59:CB:7C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 44645D4BBBF02A12EB343D4F7ACB776EB7EC082E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS397423.roa Signing time: Wed 16 Sep 2026 18:44:43 +0000 ROA not before: Wed 16 Sep 2026 18:39:43 +0000 ROA not after: Wed 15 Sep 2027 18:44:43 +0000 asID: 397423 IP address blocks: 2a0f:6282:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:64:5d:4b:bb:f0:2a:12:eb:34:3d:4f:7a:cb:77:6e:b7:ec:08:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 16 18:39:43 2026 GMT Not After : Sep 15 18:44:43 2027 GMT Subject: CN=2AF59B2D1074718D86FB0E79A33003A8AE59CB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a7:e3:6a:58:bb:3f:28:f1:b8:fc:56:a6:77: 46:ee:23:63:80:e4:ce:9c:7a:5b:14:ab:2d:b7:87: ca:1c:7b:33:a7:1d:eb:0c:14:8f:c7:fe:06:cd:82: 47:8f:f1:d2:11:b7:f4:98:c7:f8:a0:32:01:e2:9a: 36:cf:e9:03:fd:e4:da:70:fd:6d:a4:24:28:11:06: c3:18:11:37:75:82:a1:15:f5:0b:48:73:f3:db:ac: 0d:90:08:f0:8c:9a:2c:eb:f3:ed:1c:15:75:f8:b4: 7a:ca:ea:22:07:9c:23:11:a4:cd:38:83:5d:b6:80: 1c:12:f5:d1:dc:42:f0:90:d2:ec:95:7f:b5:eb:ab: 98:aa:1d:c1:4e:1c:20:6e:b0:68:95:93:a5:b7:a4: 4b:a3:03:57:be:d5:14:4d:e0:ba:c8:5a:ce:fa:9f: ee:da:ee:0a:f6:7f:92:b9:ca:c8:fb:cb:2b:90:65: 1f:22:7b:1d:a7:5e:ff:a6:ba:6d:c0:e2:0c:44:da: ec:06:5d:1a:ad:28:5e:8c:88:7e:23:9f:7a:da:63: 62:ea:6d:ff:50:8b:28:c3:55:b2:20:f0:99:fd:93: 50:e1:3d:8d:77:7d:e1:14:59:27:e9:eb:97:fe:14: 08:55:0e:c9:00:ac:cd:f7:cd:9e:57:0d:82:88:9a: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F5:9B:2D:10:74:71:8D:86:FB:0E:79:A3:30:03:A8:AE:59:CB:7C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:4000::/36 Signature Algorithm: sha256WithRSAEncryption 83:ec:e3:54:c3:da:00:8c:ff:0c:28:b9:b8:72:0a:78:a2:b5: c6:92:84:4a:9b:24:27:bc:59:c2:7e:3a:04:36:3b:1d:e9:66: 34:f6:96:0f:3d:ff:ff:5a:6a:c9:5a:2c:1f:3c:f3:7e:2b:24: 0a:aa:29:c4:cf:53:42:77:46:4a:6a:8c:52:29:a8:b4:3d:73: c9:eb:d3:d2:2e:92:33:0e:fe:6f:5e:90:76:03:c6:76:85:88: aa:29:77:f4:e7:73:0c:91:a8:3f:46:60:6d:d7:bc:d5:a7:70: 80:de:7a:40:42:08:cc:84:13:df:38:83:17:85:6b:2f:8f:61: 66:e3:91:a2:d3:07:6a:36:7e:92:52:c7:28:89:8b:36:5c:bd: 6a:db:09:0d:60:7b:51:58:30:a9:43:34:db:09:fb:3a:72:f1: 6e:f4:55:e2:75:be:26:7b:3f:72:22:d0:56:4d:3b:59:00:96: b6:ff:7d:99:42:d5:4a:d0:e5:09:b6:4d:ae:1a:51:fb:00:d4: 2f:50:78:25:18:0d:ab:a2:e8:7c:8c:95:e9:c5:6f:ae:b6:13: e3:42:72:29:9f:9a:ba:22:6e:9c:93:53:db:01:8a:a2:15:69: 93:e3:84:ff:46:92:6d:ff:a7:32:94:80:d3:18:fa:a5:ed:c4: a2:87:7a:0a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIURGRdS7vwKhLrND1Pest3brfsCC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTYxODM5NDNaFw0yNzA5MTUxODQ0NDNaMDMxMTAvBgNV BAMTKDJBRjU5QjJEMTA3NDcxOEQ4NkZCMEU3OUEzMzAwM0E4QUU1OUNCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMp+NqWLs/KPG4/Famd0buI2OA 5M6celsUqy23h8ocezOnHesMFI/H/gbNgkeP8dIRt/SYx/igMgHimjbP6QP95Npw /W2kJCgRBsMYETd1gqEV9QtIc/PbrA2QCPCMmizr8+0cFXX4tHrK6iIHnCMRpM04 g122gBwS9dHcQvCQ0uyVf7Xrq5iqHcFOHCBusGiVk6W3pEujA1e+1RRN4LrIWs76 n+7a7gr2f5K5ysj7yyuQZR8iex2nXv+mum3A4gxE2uwGXRqtKF6MiH4jn3raY2Lq bf9QiyjDVbIg8Jn9k1DhPY13feEUWSfp65f+FAhVDskArM33zZ5XDYKImq2FAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUKvWbLRB0cY2G+w55ozADqK5Zy3wwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMzOTc0MjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KCQDANBgkqhkiG9w0BAQsFAAOCAQEAg+zjVMPaAIz/DCi5uHIKeKK1xpKESpsk J7xZwn46BDY7HelmNPaWDz3//1pqyVosHzzzfiskCqopxM9TQndGSmqMUimotD1z yevT0i6SMw7+b16QdgPGdoWIqil39OdzDJGoP0Zgbde81adwgN56QEIIzIQT3ziD F4VrL49hZuORotMHajZ+klLHKImLNly9atsJDWB7UVgwqUM02wn7OnLxbvRV4nW+ Jns/ciLQVk07WQCWtv99mULVStDlCbZNrhpR+wDUL1B4JRgNq6LofIyV6cVvrrYT 40JyKZ+auiJunJNT2wGKohVpk+OE/0aSbf+nMpSA0xj6pe3Eood6Cg== -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:03 2026 by rpki-client