$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS201269.roa File: AS201269.roa (raw, json) Hash identifier: Xf3/feQzvKOrGLrkcMu1U3YJH/j6QiNR89y0PuXTP/I= Subject key identifier: AA:F6:04:74:F9:21:08:13:88:7C:30:AD:11:6F:B4:34:C9:98:EF:55 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 644D3D8D1E52C30269C8A4F2DEA2187F337677E1 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS201269.roa Signing time: Thu 12 Mar 2026 17:50:19 +0000 ROA not before: Thu 12 Mar 2026 17:45:19 +0000 ROA not after: Thu 11 Mar 2027 17:50:19 +0000 asID: 201269 IP address blocks: 2a0f:6282:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4d:3d:8d:1e:52:c3:02:69:c8:a4:f2:de:a2:18:7f:33:76:77:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 12 17:45:19 2026 GMT Not After : Mar 11 17:50:19 2027 GMT Subject: CN=AAF60474F9210813887C30AD116FB434C998EF55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:56:b5:98:3f:45:c8:b2:0a:39:51:ae:b6:43: 28:eb:39:f9:00:6a:b1:f2:a2:7f:8d:00:ca:23:92: 27:1a:1e:59:e5:3e:fb:36:f5:8f:12:f3:05:0d:f3: cb:49:aa:42:23:64:e5:67:7a:33:dc:d1:c5:10:ea: 0a:e1:46:7d:b8:52:6b:e1:9e:2c:49:18:0a:1c:77: 45:1e:55:20:d7:a5:50:b5:ec:a3:bf:9c:72:95:60: f9:73:82:20:06:c4:d5:2e:d6:67:e9:fc:bf:c9:5d: 96:28:d8:18:cb:bd:3a:89:0e:9f:60:4c:5d:1a:f1: 20:9c:70:01:6f:f6:c0:e6:37:61:af:90:29:d2:cc: 89:3a:93:1b:ab:e4:af:c1:10:f1:bb:ca:09:6e:8e: 19:ee:84:aa:98:53:f9:47:2e:4f:9b:9e:dc:05:d7: 51:2a:01:e8:69:b1:2f:db:05:3c:38:f5:de:25:dc: 2b:94:d0:aa:6b:1f:ab:0d:ce:38:73:d9:c8:05:30: cc:2c:5b:0d:b7:1e:11:56:5a:71:47:ab:e0:e3:ff: 21:9c:76:01:f7:1a:41:35:ef:f9:cb:1c:6c:db:e1: 77:93:ba:4e:93:39:5d:0c:e2:ab:81:bc:8a:da:b6: be:00:b1:b8:6d:78:28:6c:93:c9:59:33:1f:1a:21: 8a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F6:04:74:F9:21:08:13:88:7C:30:AD:11:6F:B4:34:C9:98:EF:55 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS201269.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:1000::/36 Signature Algorithm: sha256WithRSAEncryption 3d:84:5b:04:93:3a:74:43:8c:30:fa:8f:05:2c:6b:5e:17:4f: 3a:1f:ad:40:14:a2:f1:99:0b:19:48:03:bf:1c:6d:f7:2e:50: dd:67:89:4b:2f:96:e4:bb:5d:29:23:94:e3:23:a2:b5:12:e9: b0:a9:65:0c:de:b0:76:3d:40:75:d9:5f:dc:a2:e8:f1:89:7f: 1c:d9:da:33:0a:9f:6d:f4:c7:b8:0a:47:51:77:9d:a9:25:cf: 58:21:37:6b:32:54:d5:30:74:37:79:24:d0:ce:f9:c1:1f:4d: 94:e8:54:d2:1c:f8:a5:57:d3:3c:3d:1e:8c:c5:6f:97:57:a4: 55:b9:b8:be:07:a9:56:a2:f0:6b:36:9f:c4:7a:8f:e1:51:b0: d6:f3:0a:00:ba:1a:e9:7e:ce:22:30:2d:c4:26:1a:e3:42:6a: d2:c0:e0:33:cf:03:38:c1:46:eb:9b:ea:ba:a1:93:f8:a6:14: cd:cb:20:8b:a4:04:4d:59:67:a4:c0:c2:f8:7a:74:48:81:0d: 32:6e:1a:65:a6:67:8a:fa:cb:c4:27:cb:e0:1f:de:0e:8d:c3: 12:9e:15:f1:bf:1e:ad:b5:29:86:35:86:4e:a3:aa:82:43:ed: c2:0d:7a:c4:8d:de:a7:ac:22:65:80:3a:c0:60:a9:c1:cb:0a: 42:53:76:47 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUZE09jR5SwwJpyKTy3qIYfzN2d+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMTIxNzQ1MTlaFw0yNzAzMTExNzUwMTlaMDMxMTAvBgNV BAMTKEFBRjYwNDc0RjkyMTA4MTM4ODdDMzBBRDExNkZCNDM0Qzk5OEVGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWVrWYP0XIsgo5Ua62QyjrOfkA arHyon+NAMojkicaHlnlPvs29Y8S8wUN88tJqkIjZOVnejPc0cUQ6grhRn24Umvh nixJGAocd0UeVSDXpVC17KO/nHKVYPlzgiAGxNUu1mfp/L/JXZYo2BjLvTqJDp9g TF0a8SCccAFv9sDmN2GvkCnSzIk6kxur5K/BEPG7yglujhnuhKqYU/lHLk+bntwF 11EqAehpsS/bBTw49d4l3CuU0KprH6sNzjhz2cgFMMwsWw23HhFWWnFHq+Dj/yGc dgH3GkE17/nLHGzb4XeTuk6TOV0M4quBvIratr4AsbhteChsk8lZMx8aIYpLAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUqvYEdPkhCBOIfDCtEW+0NMmY71UwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDEyNjkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KCEDANBgkqhkiG9w0BAQsFAAOCAQEAPYRbBJM6dEOMMPqPBSxrXhdPOh+tQBSi 8ZkLGUgDvxxt9y5Q3WeJSy+W5LtdKSOU4yOitRLpsKllDN6wdj1Addlf3KLo8Yl/ HNnaMwqfbfTHuApHUXedqSXPWCE3azJU1TB0N3kk0M75wR9NlOhU0hz4pVfTPD0e jMVvl1ekVbm4vgepVqLwazafxHqP4VGw1vMKALoa6X7OIjAtxCYa40Jq0sDgM88D OMFG65vquqGT+KYUzcsgi6QETVlnpMDC+Hp0SIENMm4aZaZnivrLxCfL4B/eDo3D Ep4V8b8erbUphjWGTqOqgkPtwg16xI3ep6wiZYA6wGCpwcsKQlN2Rw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:04:55 2026 by rpki-client