$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: xhwRVybUcrgPWFNigdIBcsyz5zIy4w4k0Xw9ifvKinE= Subject key identifier: D7:A4:14:B2:C3:31:9D:35:CA:38:B8:72:72:9C:58:B6:79:E1:48:AE Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4C8A15D33F1A083505FA13280653A232E62E4768 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa Signing time: Mon 11 May 2026 14:39:19 +0000 ROA not before: Mon 11 May 2026 14:34:19 +0000 ROA not after: Mon 10 May 2027 14:39:19 +0000 asID: 40676 IP address blocks: 2a0f:6282:b000::/36 maxlen: 36 2a0f:6284:9000::/36 maxlen: 36 2a0f:6284:c000::/36 maxlen: 36 2a0f:6287:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8a:15:d3:3f:1a:08:35:05:fa:13:28:06:53:a2:32:e6:2e:47:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 11 14:34:19 2026 GMT Not After : May 10 14:39:19 2027 GMT Subject: CN=D7A414B2C3319D35CA38B872729C58B679E148AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:c0:3f:7e:07:c9:11:43:60:7f:0b:b6:29: c8:86:6c:63:7f:a3:6f:4e:20:74:f4:28:45:7e:36: a4:0f:08:cd:6a:a6:d7:2a:0d:87:0a:81:99:fc:39: f1:77:ae:d6:b8:1e:66:77:dd:06:c7:46:53:d0:5b: bc:8a:8f:c6:90:12:bf:c8:b1:1b:94:ca:44:a7:a6: 2e:e3:21:d8:98:54:c4:29:3a:1a:eb:2f:25:5d:4a: 44:97:66:5d:4e:51:8a:2c:f5:86:99:24:5f:0b:3f: 43:ac:b0:8c:74:12:a8:37:05:97:6e:5c:be:c4:59: 1c:15:ab:d1:69:3f:e7:c3:1d:38:fd:bc:f0:e4:6f: 79:30:02:04:a1:a5:0d:79:81:12:84:44:38:89:5f: e6:6a:7f:bb:42:34:e2:90:dc:ed:b0:06:ef:74:08: 62:3e:f9:3c:c7:b2:09:8e:ff:c2:3f:4b:d7:be:0f: 26:d3:7f:54:34:83:a7:e8:f5:9b:86:7e:37:c5:9e: 8b:83:0c:c3:07:d4:25:1a:19:92:b9:7e:a2:b9:02: a9:6a:e0:c1:f5:9a:9c:3a:e8:29:75:48:71:78:46: e6:b5:36:32:f7:24:e2:44:c8:45:9b:f5:8e:8e:ed: 6d:10:d5:21:3a:e4:a9:a8:d3:29:af:5d:e8:08:9c: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A4:14:B2:C3:31:9D:35:CA:38:B8:72:72:9C:58:B6:79:E1:48:AE X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:b000::/36 2a0f:6284:9000::/36 2a0f:6284:c000::/36 2a0f:6287:3000::/36 Signature Algorithm: sha256WithRSAEncryption 52:11:82:d0:0a:3b:ca:0e:43:52:ce:be:1b:62:ac:45:a6:79: 20:0d:76:ff:1d:e7:81:80:02:34:cf:41:92:16:e6:f4:a4:67: 04:53:c7:9f:08:06:05:56:62:0c:b7:4a:c4:a6:17:8e:52:de: 9f:03:07:a1:6b:e3:aa:e4:c8:bf:57:ca:b1:fd:c9:a9:42:5c: bc:b2:9d:d8:57:fd:e7:4c:d9:e5:56:47:92:37:aa:02:83:93: f1:2e:cb:75:8f:64:e4:7e:4c:25:5d:78:16:6d:25:48:c2:ef: e2:35:e6:88:c6:0e:f7:95:60:9f:bd:6d:82:df:82:e5:df:cf: 6e:5a:4d:25:4b:0a:7e:13:30:ca:05:d5:6e:76:43:46:6a:fc: c7:46:f9:82:a8:58:f0:1d:24:e9:c3:8a:46:9a:df:60:99:ad: e4:d0:f0:d9:ec:d4:da:8b:38:34:7d:37:f7:1c:c5:68:c6:80: 70:0b:b5:b6:14:e7:88:10:b0:05:f7:ac:d3:f9:69:fa:55:b0: e9:2d:9d:a4:93:79:8e:44:27:5e:1e:85:a0:60:e2:14:76:7e: 4a:42:b0:07:c5:30:b5:d2:62:79:7b:b9:4d:ab:3c:9f:ed:2e: fb:40:1b:6c:e7:93:b2:b6:c3:9c:6a:7f:11:f1:9f:a6:2d:df: 89:29:ed:51 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUTIoV0z8aCDUF+hMoBlOiMuYuR2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MTExNDM0MTlaFw0yNzA1MTAxNDM5MTlaMDMxMTAvBgNV BAMTKEQ3QTQxNEIyQzMzMTlEMzVDQTM4Qjg3MjcyOUM1OEI2NzlFMTQ4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzsA/fgfJEUNgfwu2KciGbGN/ o29OIHT0KEV+NqQPCM1qptcqDYcKgZn8OfF3rta4HmZ33QbHRlPQW7yKj8aQEr/I sRuUykSnpi7jIdiYVMQpOhrrLyVdSkSXZl1OUYos9YaZJF8LP0OssIx0Eqg3BZdu XL7EWRwVq9FpP+fDHTj9vPDkb3kwAgShpQ15gRKERDiJX+Zqf7tCNOKQ3O2wBu90 CGI++TzHsgmO/8I/S9e+DybTf1Q0g6fo9ZuGfjfFnouDDMMH1CUaGZK5fqK5Aqlq 4MH1mpw66Cl1SHF4Rua1NjL3JOJEyEWb9Y6O7W0Q1SE65Kmo0ymvXegInCI/AgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQU16QUssMxnTXKOLhycpxYtnnhSK4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0MDY3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAIwIAMGBCoP YoKwAwYEKg9ihJADBgQqD2KEwAMGBCoPYocwMA0GCSqGSIb3DQEBCwUAA4IBAQBS EYLQCjvKDkNSzr4bYqxFpnkgDXb/HeeBgAI0z0GSFub0pGcEU8efCAYFVmIMt0rE pheOUt6fAweha+Oq5Mi/V8qx/cmpQly8sp3YV/3nTNnlVkeSN6oCg5PxLst1j2Tk fkwlXXgWbSVIwu/iNeaIxg73lWCfvW2C34Ll389uWk0lSwp+EzDKBdVudkNGavzH RvmCqFjwHSTpw4pGmt9gma3k0PDZ7NTaizg0fTf3HMVoxoBwC7W2FOeIELAF96zT +Wn6VbDpLZ2kk3mORCdeHoWgYOIUdn5KQrAHxTC10mJ5e7lNqzyf7S77QBts55Oy tsOcan8R8Z+mLd+JKe1R -----END CERTIFICATE-----Generated at Wed May 13 00:14:48 2026 by rpki-client