$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS200950.roa File: AS200950.roa (raw, json) Hash identifier: N0Jnu0YNo+jKk6ZijZiH7b0F4cC+KSQoMFbZ85a+fzg= Subject key identifier: B6:22:74:9A:3C:3A:56:60:98:67:EA:8D:FB:9B:0D:CE:7E:D6:73:4E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 739F0C2AB5844CA47C067EB3D003F53AD596FA3A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200950.roa Signing time: Tue 20 Oct 2026 06:00:19 +0000 ROA not before: Tue 20 Oct 2026 05:55:19 +0000 ROA not after: Tue 19 Oct 2027 06:00:19 +0000 asID: 200950 IP address blocks: 2a0f:6284:f00::/40 maxlen: 40 2a0f:6284:f00::/40 maxlen: 48 2a0f:6284:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 17:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9f:0c:2a:b5:84:4c:a4:7c:06:7e:b3:d0:03:f5:3a:d5:96:fa:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 20 05:55:19 2026 GMT Not After : Oct 19 06:00:19 2027 GMT Subject: CN=B622749A3C3A56609867EA8DFB9B0DCE7ED6734E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:93:16:d6:53:ac:41:a3:41:35:6d:c7:4f:b8: b0:0b:f6:ed:78:1b:3f:1a:27:f2:5b:f4:78:68:81: 57:d7:d5:00:ba:ee:52:da:06:4f:8c:cc:4b:83:69: a1:21:4a:8d:b6:dd:90:1c:f8:69:d9:8a:7a:ca:68: 17:3f:45:10:69:5a:b1:ab:be:17:5f:81:8b:b4:7c: 45:26:8e:90:a1:44:08:21:77:e7:7a:03:44:c2:ce: dc:73:37:17:a9:fa:a4:6e:fa:52:12:7f:41:f6:f8: 42:65:22:22:9c:82:22:7a:5e:b5:68:b6:68:c5:f7: 16:4e:6b:71:bc:5b:2a:fe:bc:e3:a4:59:3b:3a:34: 25:df:d3:4d:a2:a9:f1:d3:c3:21:d9:ec:35:9e:a7: 08:50:34:4d:91:c4:cc:6c:b2:6f:f4:a0:6a:93:9e: 9e:cc:b2:dd:ca:b8:c8:40:64:e9:3d:15:1c:ac:15: a0:0b:ea:41:71:69:37:10:52:a0:67:e6:d7:2c:58: 3a:1a:24:ef:22:8f:19:a4:55:29:d6:d9:18:4d:86: 1f:fe:81:80:c4:4b:a1:fd:46:d7:e0:19:1b:da:4f: c7:fb:2d:56:8b:da:05:01:cb:98:b9:a7:55:36:3a: 74:be:25:a9:da:7f:21:cc:18:c8:51:33:48:e6:0c: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:22:74:9A:3C:3A:56:60:98:67:EA:8D:FB:9B:0D:CE:7E:D6:73:4E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200950.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:f00::/40 2a0f:6284:1200::/40 Signature Algorithm: sha256WithRSAEncryption 8b:7e:10:47:66:63:cc:b8:c3:84:21:86:2b:94:dd:79:97:4b: 9d:7a:54:12:b0:d0:65:a6:17:70:4c:2b:68:88:41:e1:cf:0c: 05:57:27:eb:c2:73:4a:73:fd:fb:b5:83:7f:02:e0:d0:e8:41: f7:10:76:93:a8:33:4b:33:5c:4f:f0:3b:90:68:11:c2:40:48: e6:a9:bc:45:50:fd:f4:e6:44:54:d6:ab:aa:67:80:c7:6b:dc: 36:05:5c:3c:74:ba:c4:7e:d4:f6:55:93:15:ba:c6:79:83:56: 46:87:10:33:36:1f:4b:18:ff:85:f8:0b:8a:a4:4b:d9:8a:aa: b5:e9:34:2c:f6:67:88:00:84:b4:57:82:5e:9b:5c:12:2a:ad: d9:74:78:8f:1a:f4:39:89:69:0f:b5:e2:66:5b:ca:9b:1c:e8: 02:62:20:4a:cf:99:b3:44:1d:cd:97:6b:4b:5d:8f:70:4f:e8: cc:ab:d6:35:b4:5b:b7:fa:12:ef:1d:7b:39:a0:bf:c8:cf:ff: 45:66:a5:3f:cf:68:f1:22:03:a5:4d:f6:75:28:81:da:cd:c5: f6:21:16:75:56:c9:68:91:ff:60:ea:dd:42:4c:96:78:4e:18: 8b:c3:04:bc:b3:ed:bb:c9:7b:9f:8d:8e:f5:1b:c4:86:70:58: a6:4b:17:10 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUc58MKrWETKR8Bn6z0AP1OtWW+jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMjAwNTU1MTlaFw0yNzEwMTkwNjAwMTlaMDMxMTAvBgNV BAMTKEI2MjI3NDlBM0MzQTU2NjA5ODY3RUE4REZCOUIwRENFN0VENjczNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kxbWU6xBo0E1bcdPuLAL9u14 Gz8aJ/Jb9HhogVfX1QC67lLaBk+MzEuDaaEhSo223ZAc+GnZinrKaBc/RRBpWrGr vhdfgYu0fEUmjpChRAghd+d6A0TCztxzNxep+qRu+lISf0H2+EJlIiKcgiJ6XrVo tmjF9xZOa3G8Wyr+vOOkWTs6NCXf002iqfHTwyHZ7DWepwhQNE2RxMxssm/0oGqT np7Mst3KuMhAZOk9FRysFaAL6kFxaTcQUqBn5tcsWDoaJO8ijxmkVSnW2RhNhh/+ gYDES6H9RtfgGRvaT8f7LVaL2gUBy5i5p1U2OnS+JanafyHMGMhRM0jmDPUjAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUtiJ0mjw6VmCYZ+qN+5sNzn7Wc04wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDA5NTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAq D2KEDwMGACoPYoQSMA0GCSqGSIb3DQEBCwUAA4IBAQCLfhBHZmPMuMOEIYYrlN15 l0udelQSsNBlphdwTCtoiEHhzwwFVyfrwnNKc/37tYN/AuDQ6EH3EHaTqDNLM1xP 8DuQaBHCQEjmqbxFUP305kRU1quqZ4DHa9w2BVw8dLrEftT2VZMVusZ5g1ZGhxAz Nh9LGP+F+AuKpEvZiqq16TQs9meIAIS0V4Jem1wSKq3ZdHiPGvQ5iWkPteJmW8qb HOgCYiBKz5mzRB3Nl2tLXY9wT+jMq9Y1tFu3+hLvHXs5oL/Iz/9FZqU/z2jxIgOl TfZ1KIHazcX2IRZ1Vslokf9g6t1CTJZ4ThiLwwS8s+27yXufjY71G8SGcFimSxcQ -----END CERTIFICATE-----Generated at Sun Nov 15 09:48:07 2026 by rpki-client