$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200766.roa File: AS200766.roa (raw, json) Hash identifier: 3ZjcSzyuCfeiplXUIS+XrCB7ZuswbbhCOmeR78oLgYQ= Subject key identifier: 90:2C:9E:E2:FF:43:03:B7:42:EF:18:30:A0:27:C5:AB:38:6B:CE:7E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4297248C2B6CEE76C14059FD02B6E5164D097111 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200766.roa Signing time: Wed 22 Jul 2026 22:46:52 +0000 ROA not before: Wed 22 Jul 2026 22:41:52 +0000 ROA not after: Wed 21 Jul 2027 22:46:52 +0000 asID: 200766 IP address blocks: 2a0f:6280:1140::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:97:24:8c:2b:6c:ee:76:c1:40:59:fd:02:b6:e5:16:4d:09:71:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 22 22:41:52 2026 GMT Not After : Jul 21 22:46:52 2027 GMT Subject: CN=902C9EE2FF4303B742EF1830A027C5AB386BCE7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:56:45:12:cc:82:e2:5b:7b:e9:94:c9:1c: 17:cb:7f:ba:57:3c:32:62:de:a9:d6:48:95:5c:b4: df:8b:bc:e2:75:52:2e:45:0e:54:57:7c:f4:3a:0a: cf:9e:63:8a:8f:ae:19:37:16:62:e2:91:0e:80:fa: 24:3a:e7:66:85:e5:88:36:15:c6:71:7a:3c:ec:8d: a6:a9:9c:3a:c4:fe:c7:31:19:d6:58:61:a2:ae:7f: 85:91:7d:ec:a8:a7:2e:80:d7:9a:2c:d8:dc:81:a0: a3:22:3c:6f:c3:b7:fc:b7:62:de:96:8d:bc:1a:e1: f4:8e:32:57:0e:3a:02:0a:a6:c1:bc:ce:18:74:09: 1f:06:dd:2a:d2:bb:67:b3:15:65:6d:06:0c:cd:4b: 54:44:0b:af:58:c3:fe:de:64:d7:e9:39:7a:6e:31: 9c:66:b8:26:12:3a:ed:69:0a:53:fa:7a:01:ac:07: 68:dd:be:fc:53:93:5b:f9:ca:3d:eb:74:f3:bb:72: 3a:36:5f:a3:ed:e8:d3:12:75:b4:50:0f:a0:27:00: 5e:8a:98:ce:04:3c:75:d7:3d:29:06:f5:ae:0d:90: fc:1e:bf:fe:11:9d:4c:78:ca:7f:12:8a:9f:c6:69: 11:8a:ce:f6:21:ce:c8:8d:15:03:2d:76:23:fc:ff: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2C:9E:E2:FF:43:03:B7:42:EF:18:30:A0:27:C5:AB:38:6B:CE:7E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200766.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1140::/44 Signature Algorithm: sha256WithRSAEncryption 04:d3:ed:27:c4:2e:44:a7:86:46:70:bf:75:31:4e:48:10:f3: 48:2d:08:16:52:4e:f5:71:26:e4:06:4a:ff:a3:0d:e6:e1:a9: 70:02:7c:a9:40:c9:6a:aa:c9:4b:b5:7b:3f:e7:e6:a2:80:b0: 9a:a3:31:dd:09:27:2e:19:40:c8:0b:c5:7f:a5:b8:8d:e9:60: 57:14:15:f5:02:e0:81:5b:19:f1:e1:2d:14:5d:c2:85:e7:0d: 56:f1:3b:21:bc:57:99:9d:9e:b7:47:39:cd:4b:94:8f:07:a5: 87:3f:4e:b5:8c:c4:9c:f6:93:2a:f2:ac:bd:e8:7c:3e:bc:51: d9:0e:e8:0d:66:e7:a4:49:f8:73:12:d8:f0:6b:fb:4f:37:e7: 17:9d:62:72:74:28:75:84:ec:21:d0:86:95:57:40:a0:16:75: 53:14:e0:ce:e3:5b:24:73:b7:74:a6:da:aa:2a:a3:2a:67:c3: fb:86:28:21:30:5e:3a:b0:6c:32:cb:e9:ac:6a:51:cf:a4:33: 0d:ad:c3:8c:db:a3:10:b2:f6:cd:25:ca:8a:65:e5:cf:5e:c5: 2b:6a:52:7c:ba:3e:a2:05:5a:49:f2:fc:fe:1e:06:d4:0f:08: 1f:e4:69:3f:c8:e3:2d:db:eb:2d:1a:b7:69:70:c3:0b:68:13: 7a:64:35:d6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUQpckjCts7nbBQFn9ArblFk0JcREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjIyMjQxNTJaFw0yNzA3MjEyMjQ2NTJaMDMxMTAvBgNV BAMTKDkwMkM5RUUyRkY0MzAzQjc0MkVGMTgzMEEwMjdDNUFCMzg2QkNFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7FZFEsyC4lt76ZTJHBfLf7pX PDJi3qnWSJVctN+LvOJ1Ui5FDlRXfPQ6Cs+eY4qPrhk3FmLikQ6A+iQ652aF5Yg2 FcZxejzsjaapnDrE/scxGdZYYaKuf4WRfeyopy6A15os2NyBoKMiPG/Dt/y3Yt6W jbwa4fSOMlcOOgIKpsG8zhh0CR8G3SrSu2ezFWVtBgzNS1REC69Yw/7eZNfpOXpu MZxmuCYSOu1pClP6egGsB2jdvvxTk1v5yj3rdPO7cjo2X6Pt6NMSdbRQD6AnAF6K mM4EPHXXPSkG9a4NkPwev/4RnUx4yn8Sip/GaRGKzvYhzsiNFQMtdiP8/9AtAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUkCye4v9DA7dC7xgwoCfFqzhrzn4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDA3NjYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KAEUAwDQYJKoZIhvcNAQELBQADggEBAATT7SfELkSnhkZwv3UxTkgQ80gtCBZS TvVxJuQGSv+jDebhqXACfKlAyWqqyUu1ez/n5qKAsJqjMd0JJy4ZQMgLxX+luI3p YFcUFfUC4IFbGfHhLRRdwoXnDVbxOyG8V5mdnrdHOc1LlI8HpYc/TrWMxJz2kyry rL3ofD68UdkO6A1m56RJ+HMS2PBr+0835xedYnJ0KHWE7CHQhpVXQKAWdVMU4M7j WyRzt3Sm2qoqoypnw/uGKCEwXjqwbDLL6axqUc+kMw2tw4zboxCy9s0lyopl5c9e xStqUny6PqIFWkny/P4eBtQPCB/kaT/I4y3b6y0at2lwwwtoE3pkNdY= -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:30 2026 by rpki-client