$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS197761.roa File: AS197761.roa (raw, json) Hash identifier: eJAYsb1cfvrmm6tJPOItbdF+/IGYPthAZlLcgePiksQ= Subject key identifier: 28:91:45:7F:99:BD:03:93:13:FE:45:0E:EE:6C:B7:77:1B:64:15:7E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 32DB9DB42A6FC14536FB0BD026DF642C07931D8A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS197761.roa Signing time: Tue 21 Jul 2026 15:59:44 +0000 ROA not before: Tue 21 Jul 2026 15:54:44 +0000 ROA not after: Tue 20 Jul 2027 15:59:44 +0000 asID: 197761 IP address blocks: 2a0f:6284:53::/48 maxlen: 48 2a0f:6284:4219::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:db:9d:b4:2a:6f:c1:45:36:fb:0b:d0:26:df:64:2c:07:93:1d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 21 15:54:44 2026 GMT Not After : Jul 20 15:59:44 2027 GMT Subject: CN=2891457F99BD039313FE450EEE6CB7771B64157E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:cf:24:b1:43:0c:46:53:8b:5b:a2:5b:d7: c5:00:ba:3f:0d:2a:11:f8:dd:79:53:d1:80:73:f7: 77:44:ed:12:3e:eb:a0:d1:a6:51:59:de:f4:9b:16: a6:26:5e:a5:d9:18:ce:d1:11:ea:b5:08:d3:e5:28: e9:1f:8a:6a:61:fe:c8:11:60:d3:1c:7f:24:41:41: 3c:d6:23:f9:61:2f:99:05:31:7a:b7:9a:3e:15:4c: 9c:1c:22:c3:4a:93:cb:59:4f:fc:a1:57:b2:d0:6a: de:85:c0:56:25:9b:49:75:88:43:4d:88:10:97:74: 4b:f3:da:9b:ef:90:1d:89:9f:1e:23:43:5f:c4:3b: d8:26:ac:b1:e2:3e:4e:a3:9c:37:c6:5d:a4:6b:19: b2:15:24:e3:e7:08:d2:f5:fb:a3:2d:ac:dd:c1:b8: 0d:22:2a:4c:b0:25:c2:49:f3:78:ca:79:43:d3:97: ca:72:00:bb:ad:d1:da:e3:9b:a8:23:33:7f:e9:fb: d3:47:08:d3:0c:f7:e8:42:08:eb:df:64:64:78:88: f6:a3:89:c2:f1:fc:a4:7d:09:f9:5d:5f:4c:74:29: f2:52:e5:91:22:a8:ea:ad:ab:4e:ce:40:b1:c9:36: 90:93:a7:eb:25:35:b9:89:03:0c:f3:dc:6d:83:69: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:91:45:7F:99:BD:03:93:13:FE:45:0E:EE:6C:B7:77:1B:64:15:7E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS197761.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:53::/48 2a0f:6284:4219::/48 Signature Algorithm: sha256WithRSAEncryption 1a:d6:2b:f2:bb:b9:9d:d9:43:40:84:c8:4a:95:69:45:04:7e: 19:33:e1:b6:cb:0d:11:ec:07:ac:e3:01:0c:35:5e:c0:76:82: f4:8e:bc:fa:36:14:34:b5:ec:0e:90:b1:c9:34:06:30:43:d0: 2e:ee:a4:ee:71:fd:e9:d6:dd:ce:82:8a:7d:a6:b8:d4:62:03: fb:95:7e:3e:75:55:74:81:c7:0a:72:92:9e:24:31:6f:2e:fd: 23:ec:90:bd:58:a6:37:40:06:e0:7c:bd:cb:b0:4c:c5:e8:69: fd:6f:52:ad:87:ec:32:83:33:ea:6d:c6:d8:45:2e:e4:60:5d: 19:17:bc:a6:af:cb:04:f1:f4:f0:b0:37:d4:a5:0e:d7:d8:2c: 4c:a0:42:b2:df:43:8b:f0:0c:80:60:7b:09:61:b5:bd:16:58: 76:0f:1f:d5:5d:55:e4:40:d2:be:1e:a9:ae:00:13:b8:e0:aa: 0c:55:b3:a1:ff:f4:75:7d:1b:21:ac:a4:f0:bc:57:1c:a0:c3: d6:1a:e3:23:6c:dc:70:2a:ee:98:fe:59:96:7f:de:7c:b6:09: b5:36:c9:7d:63:4f:1a:a5:c2:9d:7b:2b:02:72:0d:6d:b3:79: 56:0c:0a:bf:36:93:40:2f:ed:ff:4d:46:32:5d:0a:cb:e2:96: ee:b3:8c:f5 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUMtudtCpvwUU2+wvQJt9kLAeTHYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjExNTU0NDRaFw0yNzA3MjAxNTU5NDRaMDMxMTAvBgNV BAMTKDI4OTE0NTdGOTlCRDAzOTMxM0ZFNDUwRUVFNkNCNzc3MUI2NDE1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPM8ksUMMRlOLW6Jb18UAuj8N KhH43XlT0YBz93dE7RI+66DRplFZ3vSbFqYmXqXZGM7REeq1CNPlKOkfimph/sgR YNMcfyRBQTzWI/lhL5kFMXq3mj4VTJwcIsNKk8tZT/yhV7LQat6FwFYlm0l1iENN iBCXdEvz2pvvkB2Jnx4jQ1/EO9gmrLHiPk6jnDfGXaRrGbIVJOPnCNL1+6MtrN3B uA0iKkywJcJJ83jKeUPTl8pyALut0drjm6gjM3/p+9NHCNMM9+hCCOvfZGR4iPaj icLx/KR9CfldX0x0KfJS5ZEiqOqtq07OQLHJNpCTp+slNbmJAwzz3G2DaY2zAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUKJFFf5m9A5MT/kUO7my3dxtkFX4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTc3NjEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KEAFMDBwAqD2KEQhkwDQYJKoZIhvcNAQELBQADggEBABrWK/K7uZ3ZQ0CEyEqV aUUEfhkz4bbLDRHsB6zjAQw1XsB2gvSOvPo2FDS17A6Qsck0BjBD0C7upO5x/enW 3c6Cin2muNRiA/uVfj51VXSBxwpykp4kMW8u/SPskL1YpjdABuB8vcuwTMXoaf1v Uq2H7DKDM+ptxthFLuRgXRkXvKavywTx9PCwN9SlDtfYLEygQrLfQ4vwDIBgewlh tb0WWHYPH9VdVeRA0r4eqa4AE7jgqgxVs6H/9HV9GyGspPC8Vxygw9Ya4yNs3HAq 7pj+WZZ/3ny2CbU2yX1jTxqlwp17KwJyDW2zeVYMCr82k0Av7f9NRjJdCsvilu6z jPU= -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:05 2026 by rpki-client