$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS204490.roa File: AS204490.roa (raw, json) Hash identifier: beKk53ozFhRw2IRd7iBiJ//biLUf5WpVPvegwZbxmfo= Subject key identifier: 48:83:9E:E0:A5:71:C5:20:D6:97:91:5C:E0:C9:A0:89:07:31:5A:B5 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 05932B45B1AEB6D9915E6D8243C6B5FD982B838B Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS204490.roa Signing time: Tue 28 Apr 2026 13:18:19 +0000 ROA not before: Tue 28 Apr 2026 13:13:19 +0000 ROA not after: Tue 27 Apr 2027 13:18:19 +0000 asID: 204490 IP address blocks: 2a0f:6284:53::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:93:2b:45:b1:ae:b6:d9:91:5e:6d:82:43:c6:b5:fd:98:2b:83:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Apr 28 13:13:19 2026 GMT Not After : Apr 27 13:18:19 2027 GMT Subject: CN=48839EE0A571C520D697915CE0C9A08907315AB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:7f:cb:c2:36:3a:89:70:49:d4:8d:f6:04: 9e:90:5b:2f:4d:6d:8a:b0:0f:f0:6f:78:3a:cc:61: b5:af:d6:19:8b:c6:a8:71:99:d9:f0:6f:93:ce:06: e5:ec:28:f1:19:77:c1:67:28:00:a5:0e:81:07:1d: 09:3d:1e:7c:b1:32:64:d2:e3:84:7d:b5:64:b7:99: e0:a7:d8:c6:df:50:b4:82:96:53:ed:ef:46:a4:46: ee:ee:be:46:8c:7d:90:22:64:e7:a4:34:a0:04:49: fb:a1:d7:92:69:4c:00:19:53:07:a7:7f:95:ac:03: dc:8f:3f:fa:a3:79:c2:9e:61:3c:19:62:0d:95:1e: c2:18:d4:ac:66:0c:01:7e:92:7b:dc:71:20:25:09: ee:e5:5c:cc:9b:8c:84:36:88:24:ed:61:ed:24:04: 6d:58:c4:62:f9:60:ad:31:ab:3b:8e:8e:aa:9d:b0: 69:cd:78:0f:e2:6b:7d:5d:e9:99:92:33:73:54:e6: d1:9e:d6:6a:8c:f0:5d:ce:c8:0a:a6:02:8d:3c:04: 52:71:d8:1e:b5:dd:a7:ad:f1:47:33:39:c4:51:dd: c4:00:ae:83:e6:78:14:d5:35:55:6a:55:b4:1c:3f: 31:e8:dc:f9:09:0b:6a:f2:82:be:2c:8c:c3:d6:75: 23:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:83:9E:E0:A5:71:C5:20:D6:97:91:5C:E0:C9:A0:89:07:31:5A:B5 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS204490.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:53::/48 Signature Algorithm: sha256WithRSAEncryption 5f:8c:69:d1:d8:34:c8:a5:81:dd:c2:53:30:f7:2c:a2:32:70: 5f:82:6a:dd:53:b7:75:ce:62:f2:f4:92:1f:0c:e3:e3:df:e9: ce:85:45:a4:87:be:dc:17:3f:76:66:fd:1b:19:35:b8:7e:f2: 8e:c4:5f:fb:2b:de:4c:42:7e:85:50:79:68:a3:54:52:9c:2c: f2:c2:cb:6a:c1:7e:8c:26:3a:7d:64:57:4c:1f:48:7a:dc:7c: a1:f2:70:88:06:e1:57:c4:a5:cd:c9:5b:3f:ee:84:b0:a6:7f: 66:50:b6:48:78:bd:fa:66:f5:c5:d4:9f:48:16:90:1f:cd:5a: cb:27:e1:7b:08:17:b0:5f:88:71:68:e9:0a:9f:36:1c:64:a4: 79:6d:d4:f8:84:31:36:1e:28:9e:6f:ea:e7:cb:46:97:55:f8: 7f:4b:50:31:53:cc:42:7c:05:f9:38:37:29:3d:88:ab:0c:b3: c2:f9:f0:28:1a:7a:14:11:de:88:2f:1d:01:e2:9b:27:64:fd: 81:22:ce:95:46:56:27:59:f5:7e:03:0b:13:61:5f:c0:72:8f: 0f:1b:00:99:5d:13:89:2f:64:d7:af:f2:83:2b:10:ab:9d:41: 40:9a:a2:21:f2:62:7a:b1:c8:cf:25:30:20:07:7e:85:b2:9e: 3c:e2:32:da -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUBZMrRbGuttmRXm2CQ8a1/Zgrg4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA0MjgxMzEzMTlaFw0yNzA0MjcxMzE4MTlaMDMxMTAvBgNV BAMTKDQ4ODM5RUUwQTU3MUM1MjBENjk3OTE1Q0UwQzlBMDg5MDczMTVBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSX/LwjY6iXBJ1I32BJ6QWy9N bYqwD/BveDrMYbWv1hmLxqhxmdnwb5POBuXsKPEZd8FnKAClDoEHHQk9HnyxMmTS 44R9tWS3meCn2MbfULSCllPt70akRu7uvkaMfZAiZOekNKAESfuh15JpTAAZUwen f5WsA9yPP/qjecKeYTwZYg2VHsIY1KxmDAF+knvccSAlCe7lXMybjIQ2iCTtYe0k BG1YxGL5YK0xqzuOjqqdsGnNeA/ia31d6ZmSM3NU5tGe1mqM8F3OyAqmAo08BFJx 2B613aet8UczOcRR3cQAroPmeBTVNVVqVbQcPzHo3PkJC2rygr4sjMPWdSOzAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUSIOe4KVxxSDWl5Fc4MmgiQcxWrUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDQ0OTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAFMwDQYJKoZIhvcNAQELBQADggEBAF+MadHYNMilgd3CUzD3LKIycF+Cat1T t3XOYvL0kh8M4+Pf6c6FRaSHvtwXP3Zm/RsZNbh+8o7EX/sr3kxCfoVQeWijVFKc LPLCy2rBfowmOn1kV0wfSHrcfKHycIgG4VfEpc3JWz/uhLCmf2ZQtkh4vfpm9cXU n0gWkB/NWssn4XsIF7BfiHFo6QqfNhxkpHlt1PiEMTYeKJ5v6ufLRpdV+H9LUDFT zEJ8Bfk4Nyk9iKsMs8L58CgaehQR3ogvHQHimydk/YEizpVGVidZ9X4DCxNhX8By jw8bAJldE4kvZNev8oMrEKudQUCaoiHyYnqxyM8lMCAHfoWynjziMto= -----END CERTIFICATE-----Generated at Tue May 12 23:59:33 2026 by rpki-client