$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS44324.roa File: AS44324.roa (raw, json) Hash identifier: OAK69I5eRylq4LsdhDqIhv2hUOPeeVoYZR/4lO1kWOk= Subject key identifier: 85:82:28:33:6E:FE:2C:2C:EE:9F:1A:8F:64:05:08:61:33:D9:25:03 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 126AB09E0A2A3119E0A43F7A2E376F8A79240FE6 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS44324.roa Signing time: Sun 11 Oct 2026 06:44:36 +0000 ROA not before: Sun 11 Oct 2026 06:39:36 +0000 ROA not after: Sun 10 Oct 2027 06:44:36 +0000 asID: 44324 IP address blocks: 2a0f:6284:4c00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6a:b0:9e:0a:2a:31:19:e0:a4:3f:7a:2e:37:6f:8a:79:24:0f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 11 06:39:36 2026 GMT Not After : Oct 10 06:44:36 2027 GMT Subject: CN=858228336EFE2C2CEE9F1A8F6405086133D92503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:c8:10:b2:67:23:2d:ab:39:9f:a6:1e:38: d4:3b:05:81:3d:08:b1:fa:0a:42:9a:d0:3c:a1:e6: 04:cb:5e:ef:c9:2d:7b:66:b3:9c:bd:88:33:5a:62: c8:dc:5b:e9:e3:1b:64:f1:12:45:f3:f8:c6:22:9a: 9f:44:65:dc:16:08:83:25:42:e8:66:30:82:75:b6: 9a:2c:13:eb:ab:e0:fa:90:0c:13:ed:3f:98:e9:36: ac:68:60:5c:42:26:db:2c:28:83:fd:b2:cf:b7:e9: 68:14:e2:09:17:bd:44:24:9d:0c:e6:28:23:20:f6: 79:2e:01:65:78:a8:7f:14:47:40:8e:a4:ca:e3:44: 8a:c1:37:e8:ff:dd:ee:7c:97:16:33:33:65:c9:95: 63:a8:cb:d6:c7:0f:b3:cf:fd:42:04:db:8f:42:bc: 8d:7f:80:06:4b:fe:60:36:7e:e3:88:7d:9a:74:a2: 2f:f6:16:32:3e:21:7b:2e:3f:d6:53:93:7a:bb:d5: da:9c:db:89:6c:44:6a:a2:31:27:ba:52:f0:58:d6: 2e:78:ae:0d:36:14:5b:3c:c7:5a:67:84:76:a1:3d: ac:1f:6e:b6:70:54:26:79:30:11:52:87:54:2c:65: 56:62:ce:71:38:c7:45:86:c6:ad:7d:26:eb:60:46: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:82:28:33:6E:FE:2C:2C:EE:9F:1A:8F:64:05:08:61:33:D9:25:03 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS44324.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4c00::/40 Signature Algorithm: sha256WithRSAEncryption 77:7f:62:04:e8:db:c2:47:59:65:25:aa:3e:1d:4c:52:ce:ae: 76:0f:30:e7:f3:6a:03:f1:51:58:63:8b:16:c1:c3:63:c7:8a: e4:60:d1:8d:27:1c:77:cf:f6:73:00:de:54:15:a5:0e:44:b8: 05:98:bb:12:fa:72:bb:85:35:6e:ca:93:75:15:d0:4d:6e:e4: 0e:c4:62:f7:32:30:34:3e:c9:1a:d6:85:56:44:b5:b1:ae:9f: da:bd:a9:70:8d:f9:f6:85:c6:c7:96:ed:74:91:94:1d:bd:43: 6b:c3:91:ff:47:5a:31:6a:e7:a2:6d:8d:81:64:83:33:e2:3c: 6d:9f:9d:e0:77:99:2c:e9:db:fa:5c:08:53:0f:1b:30:06:b1: f2:c9:33:38:c1:6c:d8:1b:74:3f:35:c3:09:b3:33:28:a7:87: 8c:6b:5a:58:17:1f:68:10:cf:6b:4b:65:71:7d:41:da:29:28: c7:09:30:eb:db:00:d8:13:02:43:c3:3b:e6:81:81:fb:66:78: 2f:a5:93:f1:33:0b:01:4e:61:18:d5:33:60:d1:af:72:1d:61: b3:a2:16:75:3e:3a:af:45:bc:e2:07:74:04:e9:e7:8a:b0:6d: 62:93:dd:dc:df:92:f2:eb:cf:9a:73:b0:24:23:78:07:5c:40: 33:3b:a4:25 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUEmqwngoqMRngpD96LjdvinkkD+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMTEwNjM5MzZaFw0yNzEwMTAwNjQ0MzZaMDMxMTAvBgNV BAMTKDg1ODIyODMzNkVGRTJDMkNFRTlGMUE4RjY0MDUwODYxMzNEOTI1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqLcgQsmcjLas5n6YeONQ7BYE9 CLH6CkKa0Dyh5gTLXu/JLXtms5y9iDNaYsjcW+njG2TxEkXz+MYimp9EZdwWCIMl QuhmMIJ1tposE+ur4PqQDBPtP5jpNqxoYFxCJtssKIP9ss+36WgU4gkXvUQknQzm KCMg9nkuAWV4qH8UR0COpMrjRIrBN+j/3e58lxYzM2XJlWOoy9bHD7PP/UIE249C vI1/gAZL/mA2fuOIfZp0oi/2FjI+IXsuP9ZTk3q71dqc24lsRGqiMSe6UvBY1i54 rg02FFs8x1pnhHahPawfbrZwVCZ5MBFSh1QsZVZiznE4x0WGxq19JutgRnKzAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUhYIoM27+LCzunxqPZAUIYTPZJQMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0NDMyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoP YoRMMA0GCSqGSIb3DQEBCwUAA4IBAQB3f2IE6NvCR1llJao+HUxSzq52DzDn82oD 8VFYY4sWwcNjx4rkYNGNJxx3z/ZzAN5UFaUORLgFmLsS+nK7hTVuypN1FdBNbuQO xGL3MjA0Pska1oVWRLWxrp/avalwjfn2hcbHlu10kZQdvUNrw5H/R1oxaueibY2B ZIMz4jxtn53gd5ks6dv6XAhTDxswBrHyyTM4wWzYG3Q/NcMJszMop4eMa1pYFx9o EM9rS2VxfUHaKSjHCTDr2wDYEwJDwzvmgYH7ZngvpZPxMwsBTmEY1TNg0a9yHWGz ohZ1PjqvRbziB3QE6eeKsG1ik93c35Ly68+ac7AkI3gHXEAzO6Ql -----END CERTIFICATE-----Generated at Thu Nov 5 17:06:45 2026 by rpki-client