$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS201398.roa File: AS201398.roa (raw, json) Hash identifier: yGsYAJukuDiurX682xWAON7YC3WAqFC2P7Z5f9FuN0Q= Subject key identifier: 1B:08:1B:17:74:55:69:FD:41:C0:E7:FC:BE:6A:3D:9D:3F:F2:62:57 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 05CB5FDDE89E742FDF5D1F469D09B41032C28EC1 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS201398.roa Signing time: Thu 19 Mar 2026 08:00:39 +0000 ROA not before: Thu 19 Mar 2026 07:55:39 +0000 ROA not after: Thu 18 Mar 2027 08:00:39 +0000 asID: 201398 IP address blocks: 2a0f:6282:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:cb:5f:dd:e8:9e:74:2f:df:5d:1f:46:9d:09:b4:10:32:c2:8e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 19 07:55:39 2026 GMT Not After : Mar 18 08:00:39 2027 GMT Subject: CN=1B081B17745569FD41C0E7FCBE6A3D9D3FF26257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:e6:38:9e:06:c6:cc:f1:20:63:31:96:48: 45:b9:1a:bb:3e:8d:00:e6:fd:5c:40:6c:c4:8b:fe: 13:25:39:86:73:16:e9:88:81:5e:20:0d:d5:82:23: 79:93:e7:aa:1c:20:92:7f:3a:8a:c3:38:b8:45:45: 89:c4:89:84:6f:6b:1c:45:d0:27:5d:82:b6:73:f1: 08:56:ac:f3:c4:e3:11:16:84:8a:b0:24:dd:11:5b: b5:53:d9:2e:c2:8f:25:41:c2:07:84:3a:39:f3:ec: e8:c7:f6:27:a8:29:88:b1:f7:e5:dd:f1:0b:94:b6: c6:83:01:c3:09:aa:05:52:14:a7:42:06:71:57:43: dc:58:aa:fe:0a:9d:0e:55:f1:16:5c:aa:d2:6e:84: 3d:8d:9b:b4:ef:2b:95:23:15:cf:61:f3:dc:40:ab: 83:b3:71:39:ba:ae:76:85:95:a1:fd:6e:43:7a:3c: 8b:fd:3e:05:6d:5e:2e:d2:81:8d:a1:56:46:f7:d1: 11:89:8f:ac:a0:39:d8:38:e0:a7:e6:5c:04:0e:ed: e1:11:19:48:a9:10:3f:ea:74:f4:99:26:12:f5:04: da:77:c0:60:81:6a:33:92:0e:ab:98:29:80:4b:6c: 8e:7d:e0:e0:a4:3c:6c:c0:59:6a:59:5a:ee:e3:07: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:08:1B:17:74:55:69:FD:41:C0:E7:FC:BE:6A:3D:9D:3F:F2:62:57 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS201398.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:4000::/34 Signature Algorithm: sha256WithRSAEncryption 3f:fe:67:c5:cd:1a:5c:7e:93:8b:d7:14:f1:16:c5:55:97:a9: a0:12:14:be:f9:c5:44:42:ae:9d:08:05:6f:29:42:28:0a:7f: e2:bf:79:ae:1a:e7:2f:de:ae:82:d0:8a:2d:22:aa:7c:e6:1c: 25:1b:ec:14:64:fb:b3:15:c0:00:0b:dc:6c:f4:7b:04:52:cc: d0:f8:f0:05:1f:4a:aa:4a:a6:ae:66:0d:17:5d:42:54:c1:be: fc:65:b1:ed:54:de:42:cb:48:f5:06:96:0d:a3:5d:fa:0a:b1: 7a:6e:15:2f:50:21:c3:b9:bc:5a:fd:d3:4b:b0:89:c2:f8:ca: 58:e6:e4:c6:d3:23:9f:a3:3d:e9:e3:40:41:62:f4:67:cf:1b: 55:61:56:97:8f:65:5f:04:e6:f3:6f:94:13:b9:68:fb:b8:bc: 60:31:dc:e0:c5:8c:f7:22:fa:6d:b9:bc:31:8f:a5:e9:41:15: 5e:bb:74:0f:90:7e:43:5f:35:b3:d2:6e:f3:c2:52:d1:74:cf: 35:33:86:34:8d:31:0d:4e:ff:5e:14:d0:75:8b:54:77:b9:99: a9:1d:24:79:09:2b:00:f1:2a:83:8e:dd:c0:35:75:05:39:a9: 50:35:7b:5f:db:cc:63:b0:68:a3:bb:c8:88:98:16:e3:cd:55: 26:52:0d:95 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUBctf3eiedC/fXR9GnQm0EDLCjsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMTkwNzU1MzlaFw0yNzAzMTgwODAwMzlaMDMxMTAvBgNV BAMTKDFCMDgxQjE3NzQ1NTY5RkQ0MUMwRTdGQ0JFNkEzRDlEM0ZGMjYyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJeY4ngbGzPEgYzGWSEW5Grs+ jQDm/VxAbMSL/hMlOYZzFumIgV4gDdWCI3mT56ocIJJ/OorDOLhFRYnEiYRvaxxF 0CddgrZz8QhWrPPE4xEWhIqwJN0RW7VT2S7CjyVBwgeEOjnz7OjH9ieoKYix9+Xd 8QuUtsaDAcMJqgVSFKdCBnFXQ9xYqv4KnQ5V8RZcqtJuhD2Nm7TvK5UjFc9h89xA q4OzcTm6rnaFlaH9bkN6PIv9PgVtXi7SgY2hVkb30RGJj6ygOdg44KfmXAQO7eER GUipED/qdPSZJhL1BNp3wGCBajOSDquYKYBLbI594OCkPGzAWWpZWu7jB8JzAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUGwgbF3RVaf1BwOf8vmo9nT/yYlcwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDEzOTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYq D2KCQDANBgkqhkiG9w0BAQsFAAOCAQEAP/5nxc0aXH6Ti9cU8RbFVZepoBIUvvnF REKunQgFbylCKAp/4r95rhrnL96ugtCKLSKqfOYcJRvsFGT7sxXAAAvcbPR7BFLM 0PjwBR9KqkqmrmYNF11CVMG+/GWx7VTeQstI9QaWDaNd+gqxem4VL1Ahw7m8Wv3T S7CJwvjKWObkxtMjn6M96eNAQWL0Z88bVWFWl49lXwTm82+UE7lo+7i8YDHc4MWM 9yL6bbm8MY+l6UEVXrt0D5B+Q181s9Ju88JS0XTPNTOGNI0xDU7/XhTQdYtUd7mZ qR0keQkrAPEqg47dwDV1BTmpUDV7X9vMY7Boo7vIiJgW481VJlINlQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:11:47 2026 by rpki-client