$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: g1tode0QFezkRC3eumSVjjNyw1QfAZkdCi1eAlLy4xc= Subject key identifier: B7:81:08:02:2F:13:41:E9:E9:16:FE:AC:99:D5:B3:AD:59:24:1D:9B Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5F0129B45A3B2D8AE14B52507C189B4A3584B62A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa Signing time: Mon 31 Aug 2026 12:55:25 +0000 ROA not before: Mon 31 Aug 2026 12:50:25 +0000 ROA not after: Mon 30 Aug 2027 12:55:25 +0000 asID: 40676 IP address blocks: 2a0f:6284:9000::/36 maxlen: 48 2a0f:6284:c000::/36 maxlen: 36 2a0f:6287:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:01:29:b4:5a:3b:2d:8a:e1:4b:52:50:7c:18:9b:4a:35:84:b6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 31 12:50:25 2026 GMT Not After : Aug 30 12:55:25 2027 GMT Subject: CN=B78108022F1341E9E916FEAC99D5B3AD59241D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:37:0c:4c:7c:58:85:ad:8b:57:b9:7e:ff: a1:fe:52:1e:eb:3a:72:41:1c:29:aa:0c:b5:89:32: 25:e4:42:e5:10:77:cd:69:31:07:e0:2f:40:5f:1d: e2:9a:41:18:9e:5d:1f:c0:01:2f:b4:25:c3:bb:28: b5:35:2d:63:c7:21:28:47:7f:b5:da:b8:b7:cd:17: 33:22:0d:9a:4a:27:8d:9a:d6:aa:94:3f:dd:d6:3d: 5f:11:2a:50:28:7c:22:a5:68:67:05:fc:fd:7f:ef: bb:19:5f:25:40:c9:92:e2:49:71:5c:50:87:90:a9: 40:10:af:40:47:03:ae:50:ce:15:09:46:d8:f9:c0: 2d:88:cd:20:0d:73:c1:ce:e4:3b:a4:40:c1:b5:ac: 23:7d:b3:63:11:d0:3d:f0:f8:8a:b1:1f:20:35:94: 34:1a:91:56:32:ad:a6:a2:b0:83:b7:a7:c0:91:f9: be:98:5a:49:20:0f:55:97:c3:05:79:fd:14:70:cb: de:71:e9:a9:8a:22:b7:00:68:99:9a:9b:24:f5:11: 3f:e0:a1:59:21:32:3b:8e:de:c9:73:c6:e0:70:79: a2:65:25:d2:f3:b1:2e:6a:84:d4:f6:d5:10:79:c2: 75:8d:89:d6:09:b9:f7:91:f9:4a:51:11:8e:41:ee: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:81:08:02:2F:13:41:E9:E9:16:FE:AC:99:D5:B3:AD:59:24:1D:9B X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:9000::/36 2a0f:6284:c000::/36 2a0f:6287:3000::/36 Signature Algorithm: sha256WithRSAEncryption 89:a6:20:63:ae:e9:80:4e:96:96:d2:b1:85:82:ab:bc:de:8f: 47:30:1f:2f:71:2a:4c:9d:5f:ae:95:a7:29:59:4d:91:59:53: 41:b0:0e:07:58:c9:0a:d4:cb:40:01:0c:9f:b5:56:44:52:13: e9:9c:63:e1:8e:9e:fd:73:d1:d9:36:72:99:21:3b:4b:0f:68: d0:69:72:41:ab:ab:b2:ab:f2:b8:f8:f2:46:fa:af:62:29:bd: 02:39:32:d3:0a:7a:0e:96:06:f9:65:77:5f:77:60:56:7b:84: 77:02:33:8f:5a:04:aa:d5:99:f6:9e:fb:0c:ca:72:f0:03:7a: 02:f7:e3:77:59:e8:8a:40:3d:56:37:6b:e5:48:1c:2b:c2:36: 87:e0:44:99:9c:cd:51:b3:87:05:08:d6:5c:a5:01:51:77:e6: 40:f0:cf:a8:d9:1c:cd:0f:70:b7:76:8b:76:00:21:76:66:15: cd:09:c3:c2:c1:b6:42:0b:7e:3e:a4:9a:f4:bf:96:39:59:5a: a4:c4:a3:6c:93:97:eb:3c:18:94:15:46:29:0b:56:4f:33:c8: e9:6b:ab:f8:2f:df:6d:e7:b9:39:24:73:ac:c3:62:f3:43:fe: 95:ed:2b:0d:f2:cf:f4:a5:1a:ef:23:62:e0:ee:ef:c9:35:5e: ba:7e:7c:a7 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUXwEptFo7LYrhS1JQfBibSjWEtiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MzExMjUwMjVaFw0yNzA4MzAxMjU1MjVaMDMxMTAvBgNV BAMTKEI3ODEwODAyMkYxMzQxRTlFOTE2RkVBQzk5RDVCM0FENTkyNDFEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tTcMTHxYha2LV7l+/6H+Uh7r OnJBHCmqDLWJMiXkQuUQd81pMQfgL0BfHeKaQRieXR/AAS+0JcO7KLU1LWPHIShH f7XauLfNFzMiDZpKJ42a1qqUP93WPV8RKlAofCKlaGcF/P1/77sZXyVAyZLiSXFc UIeQqUAQr0BHA65QzhUJRtj5wC2IzSANc8HO5DukQMG1rCN9s2MR0D3w+IqxHyA1 lDQakVYyraaisIO3p8CR+b6YWkkgD1WXwwV5/RRwy95x6amKIrcAaJmamyT1ET/g oVkhMjuO3slzxuBweaJlJdLzsS5qhNT21RB5wnWNidYJufeR+UpREY5B7iQVAgMB AAGjggHtMIIB6TAdBgNVHQ4EFgQUt4EIAi8TQenpFv6smdWzrVkkHZswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0MDY3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAIwGAMGBCoP YoSQAwYEKg9ihMADBgQqD2KHMDANBgkqhkiG9w0BAQsFAAOCAQEAiaYgY67pgE6W ltKxhYKrvN6PRzAfL3EqTJ1frpWnKVlNkVlTQbAOB1jJCtTLQAEMn7VWRFIT6Zxj 4Y6e/XPR2TZymSE7Sw9o0GlyQaursqvyuPjyRvqvYim9Ajky0wp6DpYG+WV3X3dg VnuEdwIzj1oEqtWZ9p77DMpy8AN6Avfjd1noikA9Vjdr5UgcK8I2h+BEmZzNUbOH BQjWXKUBUXfmQPDPqNkczQ9wt3aLdgAhdmYVzQnDwsG2Qgt+PqSa9L+WOVlapMSj bJOX6zwYlBVGKQtWTzPI6Wur+C/fbee5OSRzrMNi80P+le0rDfLP9KUa7yNi4O7v yTVeun58pw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:54:48 2026 by rpki-client