$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207252.roa File: AS207252.roa (raw, json) Hash identifier: ub7oTb005/k1YGFdljvdUv7Tk1oHMuN/ujOeNUVX0aw= Subject key identifier: 97:66:5B:2E:F8:2C:AF:81:BD:56:50:76:4E:49:24:FC:0A:6E:6E:DA Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 34D1812759E4DBBF4764912173C45D848FB60B Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207252.roa Signing time: Tue 21 Jul 2026 20:44:17 +0000 ROA not before: Tue 21 Jul 2026 20:39:17 +0000 ROA not after: Tue 20 Jul 2027 20:44:17 +0000 asID: 207252 IP address blocks: 2a0f:6280:7800::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d1:81:27:59:e4:db:bf:47:64:91:21:73:c4:5d:84:8f:b6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 21 20:39:17 2026 GMT Not After : Jul 20 20:44:17 2027 GMT Subject: CN=97665B2EF82CAF81BD5650764E4924FC0A6E6EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:6a:d1:e8:6c:40:71:c1:24:2e:6f:9a:9a: 16:47:2d:dd:bc:8b:ce:01:aa:54:6f:bd:12:f6:9a: b5:79:c3:fc:3d:5d:41:b0:00:54:e4:1f:a5:62:57: 51:79:db:76:6a:bc:a6:89:57:74:57:b3:cb:c0:f1: 27:ed:d1:61:58:6c:5f:2c:52:29:15:43:ea:84:ce: 97:10:47:f4:1a:02:69:f9:f2:87:26:7c:51:a5:ac: 56:c5:35:a6:a0:13:24:f4:ed:c5:21:03:aa:3a:5c: db:1a:71:8c:2a:83:c3:8a:1d:df:d6:1e:f0:fa:18: 59:c4:64:7c:17:90:5e:2b:3f:15:a4:07:ff:6f:7f: 57:e2:f9:aa:28:7f:7e:d3:96:70:fc:61:32:89:98: f0:97:51:dd:24:68:30:32:6a:36:73:e5:75:46:22: 7c:99:f9:22:84:99:4a:9f:9b:6a:66:85:16:ac:31: d9:c7:52:43:99:2b:48:9c:75:20:3d:6b:bb:4e:15: e4:cc:49:f7:83:d3:1d:f8:b0:ec:79:d0:28:f6:dd: a2:55:c0:30:40:37:fb:d9:71:2f:07:36:58:fb:89: e4:f5:aa:23:da:3b:46:66:02:23:69:9a:bc:86:2a: 96:86:e6:2a:c4:f3:a9:05:ed:bc:c5:9d:33:84:81: 9c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:66:5B:2E:F8:2C:AF:81:BD:56:50:76:4E:49:24:FC:0A:6E:6E:DA X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207252.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:7800::/40 Signature Algorithm: sha256WithRSAEncryption 88:a2:7a:51:a6:80:cc:6f:16:48:c0:b6:50:6a:09:62:fa:69: b3:b2:79:c6:c6:5f:94:dd:08:a2:4c:84:9a:4e:c7:4e:68:e3: f6:a6:6d:88:57:bc:65:3e:88:cb:d8:cd:b9:3c:01:c2:0b:d5: 59:7d:12:2d:ab:e7:74:78:a2:6d:09:b7:54:95:c6:25:c4:e1: d7:8a:ed:3f:7a:85:6a:ec:08:27:3c:f2:a3:b5:72:e5:23:ed: 3d:7a:5c:73:1e:6f:39:28:8b:a1:f5:02:9c:63:77:c7:30:ff: d9:91:20:ec:12:f6:a0:32:48:23:c1:f6:53:e8:e3:c5:35:bd: a4:de:ab:f0:9b:ec:d4:4c:6f:b6:95:5e:1e:3a:b2:76:5b:0e: b1:38:19:7e:87:a3:e0:2d:cd:e4:d5:60:34:ed:6d:06:47:c6: 0d:5f:5f:58:80:32:58:82:4a:9f:d5:43:c7:16:5e:16:fa:7e: 91:f2:66:fa:80:9e:29:97:2f:5e:f9:45:65:f7:7f:42:05:d7: ba:14:1a:72:5c:8f:97:bf:3a:b4:f4:c1:cb:af:a9:c7:39:c2: 15:35:50:55:6d:32:9a:db:1c:91:dc:53:c1:0e:d0:87:5f:41: 40:67:11:70:5a:5e:3a:c8:62:eb:34:9e:6d:91:52:28:63:78: 3d:45:3f:8a -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgITNNGBJ1nk279HZJEhc8RdhI+2CzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDM0NGNDE4OTg5MzZDQjlDNTczREIxRUFBQjk0QzZFNjY5 OTUxRkQ3MB4XDTI2MDcyMTIwMzkxN1oXDTI3MDcyMDIwNDQxN1owMzExMC8GA1UE AxMoOTc2NjVCMkVGODJDQUY4MUJENTY1MDc2NEU0OTI0RkMwQTZFNkVEQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALryatHobEBxwSQub5qaFkct3byL zgGqVG+9EvaatXnD/D1dQbAAVOQfpWJXUXnbdmq8polXdFezy8DxJ+3RYVhsXyxS KRVD6oTOlxBH9BoCafnyhyZ8UaWsVsU1pqATJPTtxSEDqjpc2xpxjCqDw4od39Ye 8PoYWcRkfBeQXis/FaQH/29/V+L5qih/ftOWcPxhMomY8JdR3SRoMDJqNnPldUYi fJn5IoSZSp+bamaFFqwx2cdSQ5krSJx1ID1ru04V5MxJ94PTHfiw7HnQKPbdolXA MEA3+9lxLwc2WPuJ5PWqI9o7RmYCI2mavIYqlobmKsTzqQXtvMWdM4SBnJUCAwEA AaOCAd4wggHaMB0GA1UdDgQWBBSXZlsu+Cyvgb1WUHZOSST8Cm5u2jAfBgNVHSME GDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0f BF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3Mi5uZXQvcmVwby9IWUVIT1NU LzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2OTk1MUZENy5jcmww gZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1Yzkx YmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2OTk1MUZE Ny5jZXIwTwYIKwYBBQUHAQsEQzBBMD8GCCsGAQUFBzALhjNyc3luYzovL2tyaWxs LjQ3MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9BUzIwNzI1Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoP YoB4MA0GCSqGSIb3DQEBCwUAA4IBAQCIonpRpoDMbxZIwLZQagli+mmzsnnGxl+U 3QiiTISaTsdOaOP2pm2IV7xlPojL2M25PAHCC9VZfRItq+d0eKJtCbdUlcYlxOHX iu0/eoVq7AgnPPKjtXLlI+09elxzHm85KIuh9QKcY3fHMP/ZkSDsEvagMkgjwfZT 6OPFNb2k3qvwm+zUTG+2lV4eOrJ2Ww6xOBl+h6PgLc3k1WA07W0GR8YNX19YgDJY gkqf1UPHFl4W+n6R8mb6gJ4ply9e+UVl939CBde6FBpyXI+Xvzq09MHLr6nHOcIV NVBVbTKa2xyR3FPBDtCHX0FAZxFwWl46yGLrNJ5tkVIoY3g9RT+K -----END CERTIFICATE-----Generated at Thu Jul 23 21:17:08 2026 by rpki-client