$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS61138.roa File: AS61138.roa (raw, json) Hash identifier: 9wHcgPVw6UiYf0gElzejKhvDmK4ZJa2z89cGh47Jy10= Subject key identifier: C4:52:7F:B3:7F:96:AD:F4:0B:3D:5A:43:23:A1:DE:83:8F:98:02:B4 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 691F270182AF31D24BF5DDFD46B56E2797C45888 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS61138.roa Signing time: Fri 11 Sep 2026 08:40:29 +0000 ROA not before: Fri 11 Sep 2026 08:35:29 +0000 ROA not after: Fri 10 Sep 2027 08:40:29 +0000 asID: 61138 IP address blocks: 2a09:54c5:1100::/48 maxlen: 48 2a0f:6284:4214::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1f:27:01:82:af:31:d2:4b:f5:dd:fd:46:b5:6e:27:97:c4:58:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 11 08:35:29 2026 GMT Not After : Sep 10 08:40:29 2027 GMT Subject: CN=C4527FB37F96ADF40B3D5A4323A1DE838F9802B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:c4:52:e6:87:87:23:b3:3d:7b:92:c7:0b: 07:f4:09:0c:d3:8a:81:ba:6f:1f:f1:05:15:0b:7c: 86:a1:c4:3f:19:5b:cf:b7:6f:49:49:83:db:04:4d: 1f:4b:96:39:e0:62:9a:16:d0:06:db:ac:f9:e7:cd: 12:29:9a:c1:07:e0:8f:5e:7a:58:6e:a5:92:41:cb: 5c:3a:15:49:f0:d2:80:ac:e8:d2:d6:79:4d:45:36: f5:d6:48:c1:da:6e:5e:71:39:a9:1f:f1:12:3b:31: 87:b7:4f:19:a5:f8:2a:92:9d:a3:46:7d:91:1a:0f: db:e7:97:0e:6c:5d:0d:a8:d0:71:1e:26:e5:f5:6f: 47:84:de:07:40:41:4d:b5:d2:aa:5f:84:5a:ee:16: 5d:24:56:c0:43:f5:4e:96:31:cd:ca:15:71:95:95: 18:cb:40:b7:c8:a5:d4:38:eb:dd:f2:61:3e:cf:e1: c6:d7:57:bd:20:ba:cf:43:10:79:32:ad:38:2e:f8: 90:0c:a2:8c:0f:f6:9c:6b:59:0d:65:74:e9:6a:00: 26:35:f1:26:c3:9f:b1:37:02:9a:ed:1e:5e:0b:13: 4c:6b:c1:1b:7b:7e:7b:cd:a5:5e:64:b3:99:02:73: a5:c0:97:4e:5c:a6:8e:70:53:1c:2a:f7:9a:6c:f9: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:52:7F:B3:7F:96:AD:F4:0B:3D:5A:43:23:A1:DE:83:8F:98:02:B4 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS61138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c5:1100::/48 2a0f:6284:4214::/48 Signature Algorithm: sha256WithRSAEncryption 44:4b:9f:45:5d:9a:a2:9b:3b:89:5f:2c:ba:ac:4f:8f:a7:00: fd:dd:0b:ee:69:e7:f8:4a:63:28:3e:62:c1:45:9c:f0:da:48: c0:f1:67:28:3d:ae:c7:d0:49:29:bd:ff:32:72:63:f8:21:e0: 03:0f:c7:fc:ca:71:7e:8e:e7:2a:07:c6:2a:cc:1c:e1:67:73: 26:a6:39:ca:a4:ad:4c:7c:a8:0f:7d:ea:eb:84:8c:1a:27:dc: c2:98:a1:a3:01:c1:7d:0d:78:20:5d:06:72:1e:0e:51:da:c3: 8e:c0:97:39:b8:82:b6:fc:12:08:d1:3a:dc:fb:89:2d:45:cd: bb:f5:2f:5f:43:96:8d:00:61:55:04:6d:3e:9c:02:75:3b:a3: 75:c9:2d:6c:09:e5:aa:71:94:3a:eb:77:85:b3:e0:3e:b8:70: fd:90:cc:3a:04:9d:30:df:b5:2a:91:b4:c2:64:43:5e:07:78: 61:16:bf:9e:26:5d:74:ef:7b:65:ad:82:b7:32:0b:01:27:19: 0e:a1:54:3d:3f:8c:59:62:e5:48:ce:83:e9:b6:2d:78:07:63: a1:57:7b:c6:60:0f:2d:1d:26:5f:2c:2c:88:20:cb:eb:2c:a9: 58:d7:2e:19:52:a9:34:21:f2:f8:ed:39:be:d7:83:ea:59:13: c4:e8:78:8f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUaR8nAYKvMdJL9d39RrVuJ5fEWIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTEwODM1MjlaFw0yNzA5MTAwODQwMjlaMDMxMTAvBgNV BAMTKEM0NTI3RkIzN0Y5NkFERjQwQjNENUE0MzIzQTFERTgzOEY5ODAyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ3sRS5oeHI7M9e5LHCwf0CQzT ioG6bx/xBRULfIahxD8ZW8+3b0lJg9sETR9LljngYpoW0AbbrPnnzRIpmsEH4I9e elhupZJBy1w6FUnw0oCs6NLWeU1FNvXWSMHabl5xOakf8RI7MYe3Txml+CqSnaNG fZEaD9vnlw5sXQ2o0HEeJuX1b0eE3gdAQU210qpfhFruFl0kVsBD9U6WMc3KFXGV lRjLQLfIpdQ4693yYT7P4cbXV70gus9DEHkyrTgu+JAMoowP9pxrWQ1ldOlqACY1 8SbDn7E3AprtHl4LE0xrwRt7fnvNpV5ks5kCc6XAl05cpo5wUxwq95ps+e45AgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUxFJ/s3+WrfQLPVpDI6Heg4+YArQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM2MTEzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoJ VMURAAMHACoPYoRCFDANBgkqhkiG9w0BAQsFAAOCAQEAREufRV2aops7iV8suqxP j6cA/d0L7mnn+EpjKD5iwUWc8NpIwPFnKD2ux9BJKb3/MnJj+CHgAw/H/Mpxfo7n KgfGKswc4WdzJqY5yqStTHyoD33q64SMGifcwpihowHBfQ14IF0Gch4OUdrDjsCX ObiCtvwSCNE63PuJLUXNu/UvX0OWjQBhVQRtPpwCdTujdcktbAnlqnGUOut3hbPg Prhw/ZDMOgSdMN+1KpG0wmRDXgd4YRa/niZddO97Za2CtzILAScZDqFUPT+MWWLl SM6D6bYteAdjoVd7xmAPLR0mXywsiCDL6yypWNcuGVKpNCHy+O05vteD6lkTxOh4 jw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:32:37 2026 by rpki-client