$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: CPju0A4+OXpqf1EJRWRZZELbtZz0MHe/y6Nsn0OK2+g= Subject key identifier: 60:13:E4:9C:36:51:38:9E:3E:91:FF:95:E8:77:65:C4:91:63:9E:15 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5CA005873709D047BE8F27FFF8F1C2AE8E29150F Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa Signing time: Tue 10 Mar 2026 16:02:07 +0000 ROA not before: Tue 10 Mar 2026 15:57:07 +0000 ROA not after: Tue 09 Mar 2027 16:02:07 +0000 asID: 40676 IP address blocks: 2a0f:6282:b000::/36 maxlen: 36 2a0f:6284:9000::/36 maxlen: 36 2a0f:6284:c000::/36 maxlen: 36 2a0f:6287:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a0:05:87:37:09:d0:47:be:8f:27:ff:f8:f1:c2:ae:8e:29:15:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 10 15:57:07 2026 GMT Not After : Mar 9 16:02:07 2027 GMT Subject: CN=6013E49C3651389E3E91FF95E87765C491639E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e2:6c:23:e2:77:4c:2f:51:dc:87:3d:13:1b: 72:e2:5a:27:10:51:65:1e:5c:48:5d:f1:f8:ac:7d: 65:85:a9:70:a2:a8:41:88:ef:ec:0f:7e:02:f1:de: a9:57:fd:8b:6c:78:ee:ce:e2:f2:f2:9a:43:d9:14: b5:0a:48:28:73:46:c7:7e:4b:5f:e8:5c:c6:d1:33: e7:43:98:6e:4f:bd:65:ba:8c:ed:b3:23:26:21:aa: 68:c6:87:85:1e:d6:8c:8d:6f:d4:10:82:9f:b1:38: d6:c0:f5:2e:d7:27:12:fe:6d:b7:b0:69:81:41:03: 2c:b1:27:1b:e5:1c:5b:34:f1:a9:1b:6d:57:8c:46: 74:26:ba:bb:c1:d8:6c:d4:e7:d3:c8:8b:0e:bb:37: 23:00:f2:8e:ea:39:23:97:c5:37:75:09:60:da:0e: 81:f6:06:b6:2e:29:7a:ae:e9:78:9b:1a:21:51:db: 88:70:81:75:4c:e6:8c:38:93:b9:95:e0:1b:3a:52: 56:1b:b4:70:ee:35:5d:c5:a0:98:3d:11:23:e7:2c: 78:fb:90:60:11:92:7e:eb:6e:b5:80:eb:2b:6f:48: 51:e3:9a:0a:2d:bb:6a:5d:46:36:6c:fd:d4:3a:28: 59:72:1b:14:e7:0f:69:ac:f7:8d:79:e1:e0:50:8f: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:13:E4:9C:36:51:38:9E:3E:91:FF:95:E8:77:65:C4:91:63:9E:15 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:b000::/36 2a0f:6284:9000::/36 2a0f:6284:c000::/36 2a0f:6287:3000::/36 Signature Algorithm: sha256WithRSAEncryption 0a:97:15:f6:53:4f:8b:55:17:f9:4e:b1:3c:b2:19:67:9c:7e: 55:f2:a7:56:b2:68:ec:98:d4:eb:c0:89:f5:ca:68:5c:bd:28: 47:5e:d0:eb:2e:38:d8:79:15:8f:61:37:1a:a1:1f:82:ed:a3: 50:6e:0b:ea:8d:91:ce:82:02:b9:4d:f1:62:3b:15:9f:0a:26: 60:33:c5:4a:16:2b:55:02:57:43:f6:d0:96:c3:a5:0b:a6:55: 87:6d:35:78:4e:b3:55:28:7d:61:02:86:74:dd:59:fe:13:95: 19:aa:fa:1e:c7:a1:a6:e9:76:2c:6d:6a:dc:64:1d:96:45:d5: 0c:5d:fa:a7:e5:2f:77:88:8b:e4:2b:ae:97:c1:a4:08:a4:44: 4f:c7:f7:e3:5b:ce:23:36:c3:81:d8:00:9a:0f:e3:24:8a:d5: 3a:f1:4b:cb:4d:e4:c2:71:57:7b:0a:51:42:b7:19:56:fa:ba: f3:de:84:29:f3:da:2c:64:65:86:20:02:1e:6b:61:7a:e2:94: f0:56:ca:93:d5:c9:24:32:8b:e0:1d:86:db:77:b8:30:e0:a4: e0:08:cf:8b:79:29:94:81:58:2e:81:fa:b8:cf:63:3a:c0:84: cd:0b:bb:8c:25:0e:3c:37:ad:00:9f:e5:be:cd:8e:3e:87:24: 68:70:31:53 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUXKAFhzcJ0Ee+jyf/+PHCro4pFQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMTAxNTU3MDdaFw0yNzAzMDkxNjAyMDdaMDMxMTAvBgNV BAMTKDYwMTNFNDlDMzY1MTM4OUUzRTkxRkY5NUU4Nzc2NUM0OTE2MzlFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr4mwj4ndML1Hchz0TG3LiWicQ UWUeXEhd8fisfWWFqXCiqEGI7+wPfgLx3qlX/YtseO7O4vLymkPZFLUKSChzRsd+ S1/oXMbRM+dDmG5PvWW6jO2zIyYhqmjGh4Ue1oyNb9QQgp+xONbA9S7XJxL+bbew aYFBAyyxJxvlHFs08akbbVeMRnQmurvB2GzU59PIiw67NyMA8o7qOSOXxTd1CWDa DoH2BrYuKXqu6XibGiFR24hwgXVM5ow4k7mV4Bs6UlYbtHDuNV3FoJg9ESPnLHj7 kGARkn7rbrWA6ytvSFHjmgotu2pdRjZs/dQ6KFlyGxTnD2ms94154eBQjzW1AgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUYBPknDZROJ4+kf+V6HdlxJFjnhUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0MDY3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAIwIAMGBCoP YoKwAwYEKg9ihJADBgQqD2KEwAMGBCoPYocwMA0GCSqGSIb3DQEBCwUAA4IBAQAK lxX2U0+LVRf5TrE8shlnnH5V8qdWsmjsmNTrwIn1ymhcvShHXtDrLjjYeRWPYTca oR+C7aNQbgvqjZHOggK5TfFiOxWfCiZgM8VKFitVAldD9tCWw6ULplWHbTV4TrNV KH1hAoZ03Vn+E5UZqvoex6Gm6XYsbWrcZB2WRdUMXfqn5S93iIvkK66XwaQIpERP x/fjW84jNsOB2ACaD+MkitU68UvLTeTCcVd7ClFCtxlW+rrz3oQp89osZGWGIAIe a2F64pTwVsqT1ckkMovgHYbbd7gw4KTgCM+LeSmUgVgugfq4z2M6wITNC7uMJQ48 N60An+W+zY4+hyRocDFT -----END CERTIFICATE-----Generated at Thu Mar 26 05:30:20 2026 by rpki-client