$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS206987.roa File: AS206987.roa (raw, json) Hash identifier: nNQSoddnu4GzjKNGsB46krVIM+LXpJ11WdKb2QCPdL0= Subject key identifier: 44:4A:1B:3F:29:EF:62:F7:25:FF:EF:22:F8:D9:C4:6C:F2:65:35:F5 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5C27B9579CC5BBA0545ADA8C506890054E8E7A21 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS206987.roa Signing time: Sat 11 Jul 2026 06:00:05 +0000 ROA not before: Sat 11 Jul 2026 05:55:05 +0000 ROA not after: Sat 10 Jul 2027 06:00:05 +0000 asID: 206987 IP address blocks: 2a0f:6284:4212::/48 maxlen: 48 2a0f:6284:4216::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:27:b9:57:9c:c5:bb:a0:54:5a:da:8c:50:68:90:05:4e:8e:7a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 11 05:55:05 2026 GMT Not After : Jul 10 06:00:05 2027 GMT Subject: CN=444A1B3F29EF62F725FFEF22F8D9C46CF26535F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:28:62:8c:a2:6f:a9:23:31:4f:1e:ab:56:aa: 47:dd:13:a2:13:7f:77:47:e6:d2:ae:32:b0:4c:a1: 9e:8d:75:f1:d8:63:7a:db:c3:2b:90:5d:be:9c:a0: 99:16:47:dd:d9:20:d9:f3:ae:3e:3f:eb:22:0d:c1: f3:4c:49:0e:95:b8:bb:ac:07:76:d0:6e:b4:16:a7: a2:99:97:31:08:f5:f6:32:a8:85:fe:bb:44:68:66: 4a:41:87:f9:fa:7c:8b:8c:87:8d:59:54:0a:da:1a: 4a:e0:f2:1c:84:03:e9:39:c7:6a:e4:57:96:44:7d: 86:5a:97:c1:2a:b5:12:04:d5:56:0d:0d:79:c4:fc: d0:5f:3b:3a:5d:59:7d:42:87:21:22:c0:5a:33:18: 0e:94:2a:3f:75:25:79:e1:06:5f:69:91:38:d5:33: 1d:0f:6f:af:58:bd:c4:11:9c:ff:66:6c:c1:9b:e0: e8:c8:0f:7d:3a:7b:d5:4a:42:a9:e9:33:ae:1a:3e: c4:0c:7b:35:30:2a:b3:b8:e3:b9:51:ca:e3:57:0c: b8:8b:90:45:43:af:98:15:93:c5:ec:4a:a1:93:ae: 27:94:b4:55:93:31:4a:8e:0c:0e:4c:a6:fa:0f:93: 66:1b:7e:6d:90:81:98:b6:45:6f:68:cd:f4:78:c0: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4A:1B:3F:29:EF:62:F7:25:FF:EF:22:F8:D9:C4:6C:F2:65:35:F5 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS206987.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4212::/48 2a0f:6284:4216::/48 Signature Algorithm: sha256WithRSAEncryption 63:82:78:da:95:0e:43:cb:5c:97:09:b9:5e:88:72:35:71:be: 8c:f5:9a:57:b2:ef:8a:9f:43:36:79:10:83:c1:96:1c:be:9f: 66:63:5b:46:64:70:3c:71:f1:10:37:51:e7:0b:81:62:69:46: e6:97:3d:b8:c4:54:d7:13:b1:f0:6d:55:22:0c:b2:43:b7:e7: d4:87:a3:f7:bf:9b:10:c0:dc:b1:80:3d:cd:1c:70:0f:58:a5: b4:d1:ff:7e:9a:17:61:96:08:42:c3:09:c6:19:3a:2e:46:4b: c8:04:fd:25:0e:7e:b9:93:03:9d:31:6e:5b:16:2c:10:fc:25: af:f7:0e:4b:ff:73:46:15:8c:0f:c2:60:af:12:a5:be:c3:73: 07:b9:1b:de:35:96:36:4c:bf:eb:b1:48:f7:07:ec:06:a1:cb: 44:cf:18:ab:e4:a8:7f:eb:8b:af:23:c4:50:d0:52:e6:2f:3a: cf:7e:f4:59:91:1d:d8:2f:02:3f:45:9a:84:42:bb:03:d4:15: 51:ee:7b:02:f3:fe:9b:36:b1:33:28:82:84:e1:e8:62:2e:7c: ae:83:ad:e3:15:ed:b4:62:ae:b1:89:58:43:b8:06:22:63:04: c5:16:55:d0:e1:b9:26:e2:29:55:bf:ae:96:ce:4b:eb:c1:a3: 3d:b5:64:15 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUXCe5V5zFu6BUWtqMUGiQBU6OeiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTEwNTU1MDVaFw0yNzA3MTAwNjAwMDVaMDMxMTAvBgNV BAMTKDQ0NEExQjNGMjlFRjYyRjcyNUZGRUYyMkY4RDlDNDZDRjI2NTM1RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeKGKMom+pIzFPHqtWqkfdE6IT f3dH5tKuMrBMoZ6NdfHYY3rbwyuQXb6coJkWR93ZINnzrj4/6yINwfNMSQ6VuLus B3bQbrQWp6KZlzEI9fYyqIX+u0RoZkpBh/n6fIuMh41ZVAraGkrg8hyEA+k5x2rk V5ZEfYZal8EqtRIE1VYNDXnE/NBfOzpdWX1ChyEiwFozGA6UKj91JXnhBl9pkTjV Mx0Pb69YvcQRnP9mbMGb4OjID306e9VKQqnpM64aPsQMezUwKrO447lRyuNXDLiL kEVDr5gVk8XsSqGTrieUtFWTMUqODA5MpvoPk2Ybfm2QgZi2RW9ozfR4wOX7AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUREobPynvYvcl/+8i+NnEbPJlNfUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDY5ODcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KEQhIDBwAqD2KEQhYwDQYJKoZIhvcNAQELBQADggEBAGOCeNqVDkPLXJcJuV6I cjVxvoz1mley74qfQzZ5EIPBlhy+n2ZjW0ZkcDxx8RA3UecLgWJpRuaXPbjEVNcT sfBtVSIMskO359SHo/e/mxDA3LGAPc0ccA9YpbTR/36aF2GWCELDCcYZOi5GS8gE /SUOfrmTA50xblsWLBD8Ja/3Dkv/c0YVjA/CYK8Spb7Dcwe5G941ljZMv+uxSPcH 7Aahy0TPGKvkqH/ri68jxFDQUuYvOs9+9FmRHdgvAj9FmoRCuwPUFVHuewLz/ps2 sTMogoTh6GIufK6DreMV7bRirrGJWEO4BiJjBMUWVdDhuSbiKVW/rpbOS+vBoz21 ZBU= -----END CERTIFICATE-----Generated at Thu Jul 23 23:49:19 2026 by rpki-client