$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS198679.roa File: AS198679.roa (raw, json) Hash identifier: +ccgfC8mY6YKS6vP7vnf7F/Lxcdoh32tcbRKcMUJvSM= Subject key identifier: 49:82:ED:7E:02:13:20:9E:B9:13:F9:D6:07:55:55:7E:03:73:58:EE Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4B2DAD20D03CA75E30E6E396050C5094125BED63 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS198679.roa Signing time: Tue 12 May 2026 12:03:15 +0000 ROA not before: Tue 12 May 2026 11:58:15 +0000 ROA not after: Tue 11 May 2027 12:03:15 +0000 asID: 198679 IP address blocks: 2a0f:6284:70::/44 maxlen: 44 2a0f:6284:70::/44 maxlen: 48 2a0f:6284:71::/48 maxlen: 48 2a0f:6284:72::/48 maxlen: 48 2a0f:6284:73::/48 maxlen: 48 2a0f:6284:74::/48 maxlen: 48 2a0f:6284:75::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2d:ad:20:d0:3c:a7:5e:30:e6:e3:96:05:0c:50:94:12:5b:ed:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 12 11:58:15 2026 GMT Not After : May 11 12:03:15 2027 GMT Subject: CN=4982ED7E0213209EB913F9D60755557E037358EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:52:3a:fe:6a:39:05:42:ff:9a:0d:46:f4:ee: 1f:b2:7d:94:89:b7:2a:3d:ce:40:b7:fd:53:15:b4: d8:18:0b:65:ec:a8:32:89:af:99:7c:33:9b:a2:4d: b6:c0:8e:e5:c3:37:82:42:41:4a:cd:0d:0a:25:c3: f4:c2:72:67:e4:8c:86:62:d9:d4:67:dc:63:2f:fe: f2:a3:d1:50:b5:e6:e0:75:c0:d2:a2:13:0d:bc:96: 56:37:b1:e6:aa:64:7b:26:d9:c4:73:f7:39:15:72: 65:67:c7:c2:64:38:bb:71:36:74:9b:55:55:17:54: f4:c0:e7:39:29:b8:d9:a3:dd:eb:f4:04:13:57:a9: 2c:6e:c2:f3:ee:d6:15:39:95:62:92:67:41:ed:32: 22:1d:00:02:0a:bf:35:2e:0a:20:64:0f:88:c1:a9: 8f:97:c2:ca:e2:27:d6:56:43:65:74:f6:f1:f1:f9: bd:6c:a6:4c:55:e8:fa:dd:2a:df:b8:3c:8e:e4:c5: b7:ff:c1:9e:78:3f:05:e6:d8:70:61:bf:1a:46:e3: 33:74:1a:78:85:77:88:c7:e8:b6:d4:8e:aa:10:1b: 34:49:0d:21:29:d9:2d:c6:5f:4a:6e:f1:28:c2:d7: 4e:2c:7a:2a:f9:01:7d:a6:f6:a2:02:b5:74:ab:dd: d0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:82:ED:7E:02:13:20:9E:B9:13:F9:D6:07:55:55:7E:03:73:58:EE X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS198679.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:70::/44 Signature Algorithm: sha256WithRSAEncryption 2c:54:25:98:a9:44:88:f7:09:ca:5a:51:b0:01:db:81:b6:0f: d5:b7:00:0b:f4:b3:a1:d3:68:38:47:0a:bc:5e:6a:31:90:17: 6f:a9:f0:a7:ec:37:dd:a7:53:fa:2d:e2:e7:6a:a1:82:12:1e: e7:02:67:1f:3a:b9:18:8b:a9:14:4e:32:2e:03:9a:d9:2d:9b: 07:d0:c5:2e:82:e1:4a:fc:42:7a:a8:94:07:dc:cc:e5:8e:37: 1c:81:88:ba:46:31:89:70:c4:0b:31:cc:bc:75:02:15:cf:79: 02:17:f7:bc:33:ca:27:b5:85:fe:49:01:3c:0e:4d:1b:58:b9: cb:ed:b4:cd:d2:9a:c8:ce:0d:a5:d8:4a:39:45:3b:81:fb:0e: dd:17:32:a7:27:3e:53:82:64:ba:84:b6:08:60:b2:2f:84:75: 52:39:ed:14:98:9d:fc:92:55:e7:6a:0d:99:8b:32:c9:ad:25: cf:c5:61:c2:d1:f6:34:c2:7a:89:1f:42:10:68:24:11:82:11: 47:42:83:5a:be:94:1e:02:23:a3:cc:54:ae:0d:b7:f3:05:17: 8e:54:b5:5a:33:c7:80:49:a6:03:ef:90:a5:5b:92:3d:77:a3: f4:ba:f1:d5:19:89:6d:a4:5a:fc:5f:1d:65:da:19:b1:f0:1f: 33:74:30:05 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUSy2tINA8p14w5uOWBQxQlBJb7WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MTIxMTU4MTVaFw0yNzA1MTExMjAzMTVaMDMxMTAvBgNV BAMTKDQ5ODJFRDdFMDIxMzIwOUVCOTEzRjlENjA3NTU1NTdFMDM3MzU4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPUjr+ajkFQv+aDUb07h+yfZSJ tyo9zkC3/VMVtNgYC2XsqDKJr5l8M5uiTbbAjuXDN4JCQUrNDQolw/TCcmfkjIZi 2dRn3GMv/vKj0VC15uB1wNKiEw28llY3seaqZHsm2cRz9zkVcmVnx8JkOLtxNnSb VVUXVPTA5zkpuNmj3ev0BBNXqSxuwvPu1hU5lWKSZ0HtMiIdAAIKvzUuCiBkD4jB qY+XwsriJ9ZWQ2V09vHx+b1spkxV6PrdKt+4PI7kxbf/wZ54PwXm2HBhvxpG4zN0 GniFd4jH6LbUjqoQGzRJDSEp2S3GX0pu8SjC104seir5AX2m9qICtXSr3dDrAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUSYLtfgITIJ65E/nWB1VVfgNzWO4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTg2Nzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KEAHAwDQYJKoZIhvcNAQELBQADggEBACxUJZipRIj3CcpaUbAB24G2D9W3AAv0 s6HTaDhHCrxeajGQF2+p8KfsN92nU/ot4udqoYISHucCZx86uRiLqRROMi4Dmtkt mwfQxS6C4Ur8QnqolAfczOWONxyBiLpGMYlwxAsxzLx1AhXPeQIX97wzyie1hf5J ATwOTRtYucvttM3SmsjODaXYSjlFO4H7Dt0XMqcnPlOCZLqEtghgsi+EdVI57RSY nfySVedqDZmLMsmtJc/FYcLR9jTCeokfQhBoJBGCEUdCg1q+lB4CI6PMVK4Nt/MF F45UtVozx4BJpgPvkKVbkj13o/S68dUZiW2kWvxfHWXaGbHwHzN0MAU= -----END CERTIFICATE-----Generated at Tue May 12 23:59:32 2026 by rpki-client