$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS44324.roa File: AS44324.roa (raw, json) Hash identifier: MSJcUpY05uKB+ETO1fOM3YNjtkjn9+dRTavF4o93FtI= Subject key identifier: 48:57:4C:35:EE:33:DB:87:96:2B:50:7F:AA:07:AB:6B:62:99:78:61 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4065B2DE028C4044CD9869302A3DC0C0D5F4BEC4 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS44324.roa Signing time: Mon 13 Jul 2026 10:17:03 +0000 ROA not before: Mon 13 Jul 2026 10:12:03 +0000 ROA not after: Mon 12 Jul 2027 10:17:03 +0000 asID: 44324 IP address blocks: 2a0f:6280:1400::/40 maxlen: 48 2a0f:6284:4c00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:65:b2:de:02:8c:40:44:cd:98:69:30:2a:3d:c0:c0:d5:f4:be:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 13 10:12:03 2026 GMT Not After : Jul 12 10:17:03 2027 GMT Subject: CN=48574C35EE33DB87962B507FAA07AB6B62997861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fe:c0:89:90:e0:fc:d1:a8:0a:6b:d7:fc:f7: 5b:c8:03:a9:14:ec:2a:32:a1:ab:74:ec:5c:c9:da: 80:a0:2d:01:a6:f6:04:b7:ed:94:8a:f2:26:e0:5c: f9:91:1b:b2:7e:6e:ed:cf:4d:5b:69:01:92:cb:55: 96:85:ba:ed:75:5a:db:5c:01:f3:30:bf:9a:e2:df: 84:d8:07:f8:d3:73:b0:8d:b9:77:20:78:b1:f3:78: 18:1a:aa:70:c5:4e:d4:e1:85:30:90:1d:33:c7:09: c2:75:6a:f5:dc:62:c6:bf:ab:d8:dc:fa:cd:98:0d: 67:d5:49:95:39:a3:57:df:81:3f:58:a9:5a:6d:26: c9:28:a3:a4:30:96:8c:e3:4f:fe:4f:5c:e6:30:81: e2:28:73:85:bd:27:d0:40:6d:25:db:a9:69:28:94: 85:d8:aa:2f:63:d2:f6:18:0f:d4:e6:da:9b:5e:73: 90:d4:22:b5:16:7c:ad:b6:26:df:c9:b5:72:f8:40: 76:62:41:07:cf:a3:26:0e:5f:2f:fb:61:bc:d3:78: 9a:b1:9f:80:86:c6:0c:d5:72:80:b5:8f:59:e6:26: d5:10:2b:cb:00:ab:69:0a:49:ac:be:57:17:3e:b2: a1:23:4d:46:48:61:ed:f6:82:72:8b:bb:50:52:cb: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:57:4C:35:EE:33:DB:87:96:2B:50:7F:AA:07:AB:6B:62:99:78:61 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS44324.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1400::/40 2a0f:6284:4c00::/40 Signature Algorithm: sha256WithRSAEncryption 4d:a0:6a:cb:ca:f7:ce:54:dc:53:a8:f2:6e:72:46:c6:50:f5: 0f:7f:3a:49:28:36:52:76:ae:d3:8f:d0:e8:c1:a7:74:c2:46: 18:42:c9:55:a5:6f:d9:02:89:68:b5:0c:3c:10:5a:52:7a:c4: 68:0b:b7:48:a0:f8:e5:5c:b7:24:fc:d4:58:d4:09:ff:40:8c: 98:96:d6:53:48:5a:3b:e5:3a:35:b7:45:26:a4:aa:b2:2d:ad: fc:f4:75:95:8a:44:34:60:e8:f6:3f:81:dd:78:ad:ab:44:aa: bf:df:80:3a:a3:96:54:e9:09:42:9e:70:4b:10:af:5d:19:d0: 47:41:b4:29:e7:6c:23:51:20:03:e9:b3:d3:01:11:92:0e:58: 3c:98:a2:7b:67:b4:81:25:b8:24:6d:22:ba:6b:0b:b5:5d:49: a7:7c:31:d7:11:fb:14:08:0f:f4:6d:d9:4b:7a:7e:c6:79:96: 36:4c:79:4e:d8:dd:ea:bd:be:18:e7:ce:f4:73:ef:49:c4:c2: 81:9d:bb:c5:9f:c7:ef:c2:40:14:89:7e:d5:1a:88:48:c7:df: 6f:ae:3f:53:9b:20:cc:b9:cc:a0:a1:d4:1d:20:f1:ba:99:1d: 5a:ec:84:03:85:1a:de:39:74:f7:3e:8c:aa:f4:64:6b:74:57: 91:d3:81:05 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUQGWy3gKMQETNmGkwKj3AwNX0vsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTMxMDEyMDNaFw0yNzA3MTIxMDE3MDNaMDMxMTAvBgNV BAMTKDQ4NTc0QzM1RUUzM0RCODc5NjJCNTA3RkFBMDdBQjZCNjI5OTc4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu/sCJkOD80agKa9f891vIA6kU 7Coyoat07FzJ2oCgLQGm9gS37ZSK8ibgXPmRG7J+bu3PTVtpAZLLVZaFuu11Wttc AfMwv5ri34TYB/jTc7CNuXcgeLHzeBgaqnDFTtThhTCQHTPHCcJ1avXcYsa/q9jc +s2YDWfVSZU5o1ffgT9YqVptJskoo6QwlozjT/5PXOYwgeIoc4W9J9BAbSXbqWko lIXYqi9j0vYYD9Tm2ptec5DUIrUWfK22Jt/JtXL4QHZiQQfPoyYOXy/7YbzTeJqx n4CGxgzVcoC1j1nmJtUQK8sAq2kKSay+Vxc+sqEjTUZIYe32gnKLu1BSy9KjAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUSFdMNe4z24eWK1B/qgera2KZeGEwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0NDMyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMGACoP YoAUAwYAKg9ihEwwDQYJKoZIhvcNAQELBQADggEBAE2gasvK985U3FOo8m5yRsZQ 9Q9/OkkoNlJ2rtOP0OjBp3TCRhhCyVWlb9kCiWi1DDwQWlJ6xGgLt0ig+OVctyT8 1FjUCf9AjJiW1lNIWjvlOjW3RSakqrItrfz0dZWKRDRg6PY/gd14ratEqr/fgDqj llTpCUKecEsQr10Z0EdBtCnnbCNRIAPps9MBEZIOWDyYontntIEluCRtIrprC7Vd Sad8MdcR+xQID/Rt2Ut6fsZ5ljZMeU7Y3eq9vhjnzvRz70nEwoGdu8Wfx+/CQBSJ ftUaiEjH32+uP1ObIMy5zKCh1B0g8bqZHVrshAOFGt45dPc+jKr0ZGt0V5HTgQU= -----END CERTIFICATE-----Generated at Thu Jul 23 21:17:09 2026 by rpki-client