$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS198138.roa File: AS198138.roa (raw, json) Hash identifier: KE3JEKiJ0sdvebHVYBeWJmeH0YlNa7Y5PULFc/ikJyI= Subject key identifier: 3C:04:12:B5:B9:77:1D:07:21:57:5C:60:DC:F4:A0:8B:31:4A:93:98 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 352EBC1DE0547B861BA1B875AA8EDE97DD316287 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS198138.roa Signing time: Sat 02 May 2026 16:18:19 +0000 ROA not before: Sat 02 May 2026 16:13:19 +0000 ROA not after: Sat 01 May 2027 16:18:19 +0000 asID: 198138 IP address blocks: 2a0f:6284:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2e:bc:1d:e0:54:7b:86:1b:a1:b8:75:aa:8e:de:97:dd:31:62:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 2 16:13:19 2026 GMT Not After : May 1 16:18:19 2027 GMT Subject: CN=3C0412B5B9771D0721575C60DCF4A08B314A9398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:17:56:64:87:ce:d7:43:d2:cd:7f:f0:e7: e5:24:28:7a:13:ad:9e:73:1b:a7:0e:94:fd:34:3e: 3a:81:2a:7a:db:ee:f4:5c:72:85:e9:d3:0c:fe:04: 24:a8:81:27:73:b3:52:54:a2:42:cd:6d:0c:cb:65: 51:e2:ad:1f:8b:c4:b4:6d:46:88:f6:1d:89:38:d5: ed:7d:bd:de:cf:1d:d5:1b:dc:76:3b:72:2a:d8:07: eb:6b:98:b5:99:a6:60:fc:27:d6:85:59:d7:4d:56: 88:40:06:0e:b0:93:5f:7e:6c:21:fc:da:65:ce:df: d0:18:ee:86:29:45:10:76:ab:7f:7e:cb:c4:cb:dd: 75:47:7e:49:23:c1:ee:bb:32:5e:4e:68:62:7c:8b: fa:d7:fa:e1:62:55:0a:89:06:80:c2:87:6d:ec:fd: 47:a5:fe:e3:6c:6f:22:88:7f:2d:c3:47:ca:e3:c6: 3c:de:dd:83:71:d1:57:b2:d0:f4:6c:5e:a6:8c:6b: 80:fe:32:c8:79:b0:50:58:d2:70:e2:89:f4:26:07: 0b:33:63:20:5d:60:fb:e7:bb:21:e0:9b:04:84:1b: f3:74:ec:95:51:dc:43:c6:99:93:b5:b6:53:df:07: 04:c1:53:b8:fb:c0:a2:67:16:18:a1:7d:23:3e:ca: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:04:12:B5:B9:77:1D:07:21:57:5C:60:DC:F4:A0:8B:31:4A:93:98 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS198138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:7000::/36 Signature Algorithm: sha256WithRSAEncryption 5f:66:6a:01:dc:a2:56:06:bb:f0:f2:29:af:f2:18:ac:8a:a0: 1c:e7:66:b2:3e:2e:44:06:72:ec:3c:03:28:29:43:e0:a4:ba: 20:ad:a0:67:e6:b5:bd:df:69:47:13:ce:b3:ec:e7:15:e4:23: c7:e3:ab:3b:b0:b4:72:33:ec:4d:22:43:ea:83:0c:4c:5d:bf: 4c:71:66:07:e6:bf:21:ea:d3:3b:93:93:e1:48:dc:b2:ef:0c: 1a:5f:d7:d4:c4:3b:ff:38:04:00:88:7c:ad:4e:21:9e:b9:7b: 9c:1e:b4:8c:2e:dc:b9:dd:7b:70:fe:1a:f6:9b:78:e2:33:f7: 61:81:ee:b6:e3:1a:08:a4:a1:60:cc:19:5c:d1:87:a5:f8:39: 52:df:98:c5:12:a7:39:0d:f0:3a:35:df:bd:0d:0c:1b:0a:a8: 47:c5:2d:bd:ec:db:a4:7c:30:81:0c:bb:10:13:95:32:c8:5a: d7:ec:ef:64:05:2d:ac:2a:8a:ca:b7:b4:da:9c:76:e1:0b:22: b3:5b:a7:0c:da:95:93:b3:fe:38:4f:a1:71:3d:38:f2:f0:ee: ce:37:e2:ca:1a:7f:ee:84:aa:bb:c6:dd:2d:5e:46:aa:ec:b2: 7c:36:c8:66:c9:e7:3d:ee:e5:b8:02:2f:22:bd:4b:5f:9b:54: 90:de:67:7c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUNS68HeBUe4Ybobh1qo7el90xYocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MDIxNjEzMTlaFw0yNzA1MDExNjE4MTlaMDMxMTAvBgNV BAMTKDNDMDQxMkI1Qjk3NzFEMDcyMTU3NUM2MERDRjRBMDhCMzE0QTkzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrhdWZIfO10PSzX/w5+UkKHoT rZ5zG6cOlP00PjqBKnrb7vRccoXp0wz+BCSogSdzs1JUokLNbQzLZVHirR+LxLRt Roj2HYk41e19vd7PHdUb3HY7cirYB+trmLWZpmD8J9aFWddNVohABg6wk19+bCH8 2mXO39AY7oYpRRB2q39+y8TL3XVHfkkjwe67Ml5OaGJ8i/rX+uFiVQqJBoDCh23s /Uel/uNsbyKIfy3DR8rjxjze3YNx0Vey0PRsXqaMa4D+Msh5sFBY0nDiifQmBwsz YyBdYPvnuyHgmwSEG/N07JVR3EPGmZO1tlPfBwTBU7j7wKJnFhihfSM+ymb9AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUPAQStbl3HQchV1xg3PSgizFKk5gwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTgxMzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KEcDANBgkqhkiG9w0BAQsFAAOCAQEAX2ZqAdyiVga78PIpr/IYrIqgHOdmsj4u RAZy7DwDKClD4KS6IK2gZ+a1vd9pRxPOs+znFeQjx+OrO7C0cjPsTSJD6oMMTF2/ THFmB+a/IerTO5OT4Ujcsu8MGl/X1MQ7/zgEAIh8rU4hnrl7nB60jC7cud17cP4a 9pt44jP3YYHutuMaCKShYMwZXNGHpfg5Ut+YxRKnOQ3wOjXfvQ0MGwqoR8Utvezb pHwwgQy7EBOVMsha1+zvZAUtrCqKyre02px24Qsis1unDNqVk7P+OE+hcT048vDu zjfiyhp/7oSqu8bdLV5GquyyfDbIZsnnPe7luAIvIr1LX5tUkN5nfA== -----END CERTIFICATE-----Generated at Tue May 12 21:54:09 2026 by rpki-client