$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS57060.roa File: AS57060.roa (raw, json) Hash identifier: /bUtz1l2hELyP86BySYETqVB3Rx6YsH5GoOXAUmlqVw= Subject key identifier: 36:C1:7E:C2:B8:95:C5:62:AE:62:D4:88:4D:9C:A6:9F:7D:F4:3C:BC Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0CCC3F07FFBEE65164BAD279801701763887DCAD Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS57060.roa Signing time: Sun 28 Jun 2026 18:55:43 +0000 ROA not before: Sun 28 Jun 2026 18:50:43 +0000 ROA not after: Sun 27 Jun 2027 18:55:43 +0000 asID: 57060 IP address blocks: 2a0f:6284:6::/48 maxlen: 48 2a0f:6284:8100::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cc:3f:07:ff:be:e6:51:64:ba:d2:79:80:17:01:76:38:87:dc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:43 2026 GMT Not After : Jun 27 18:55:43 2027 GMT Subject: CN=36C17EC2B895C562AE62D4884D9CA69F7DF43CBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fb:bc:a1:69:51:9b:be:7f:a5:ee:ea:94:88: 2f:83:41:a4:b2:06:ff:b7:5e:e3:32:ca:84:39:e1: 06:d3:ca:ab:c0:56:f7:da:38:31:7d:04:fe:96:84: 5d:f2:de:47:5c:9d:4b:38:b5:2b:ec:8a:64:fa:b2: aa:4c:92:6f:fa:35:35:4c:05:76:d2:73:27:af:15: 8b:e9:a5:ef:ea:df:45:19:13:69:f9:8a:a0:3a:60: 37:af:72:81:c2:ff:74:ab:b8:2e:2d:d7:d9:fc:ec: 65:08:2f:8c:f0:fe:ca:90:99:ed:5e:0c:4e:3b:df: 0e:45:b5:52:6f:11:d1:2a:8f:55:84:44:26:20:b6: 5d:ca:18:aa:53:0e:9e:a0:ed:38:64:da:26:43:a6: 40:91:08:12:71:08:4c:23:80:25:f2:53:cb:a8:30: 69:36:e7:83:4b:e6:47:f6:65:54:3d:bd:a7:5e:44: ea:e3:ef:3a:ac:03:0b:80:19:5f:82:15:57:fb:04: 0e:24:57:15:95:50:39:2f:20:97:9a:b9:ac:f4:56: 7d:f6:68:31:24:96:99:2e:ab:4a:6e:74:59:75:a5: 23:88:35:8a:78:4d:80:fa:d2:7a:02:f4:ef:f9:5e: c4:b0:3d:8e:64:e3:33:81:70:b5:5f:c9:cf:90:7e: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C1:7E:C2:B8:95:C5:62:AE:62:D4:88:4D:9C:A6:9F:7D:F4:3C:BC X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS57060.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:6::/48 2a0f:6284:8100::/40 Signature Algorithm: sha256WithRSAEncryption 58:93:96:7c:7c:7a:21:84:1c:c4:24:50:4e:f0:10:55:ed:5c: d9:42:0c:50:de:d1:8e:5f:67:82:88:64:1e:63:64:98:08:55: 86:ce:af:d2:7d:50:34:0a:83:f7:6c:b5:e4:21:9e:15:64:5a: 88:2d:65:fb:69:7d:7f:43:71:bb:2e:ca:88:87:e1:9b:d7:cd: a8:d0:f0:2e:a6:0f:ae:c9:b3:c5:7e:83:0e:3e:6e:51:35:6d: 23:b0:19:c8:14:46:83:d5:7d:52:63:dc:f5:68:c1:38:23:ce: df:d8:5f:eb:51:ec:74:8c:31:e9:3e:57:25:ae:e5:b4:8a:8a: 97:fd:e1:19:16:31:0f:72:a1:1d:a2:23:12:dc:9a:22:ea:26: 5b:b0:25:8a:b1:9b:d1:0c:31:fe:49:65:e1:d8:12:ae:df:4a: 89:d4:8f:4c:ec:29:ad:99:ff:e3:ed:e9:3e:ab:1a:07:7d:38: 4b:46:aa:75:66:89:3b:0e:91:a2:41:8d:ce:77:57:eb:4f:7a: c2:df:26:b9:48:ae:15:2a:10:0f:60:16:c0:f0:73:93:fc:95: 52:e1:1b:9c:53:07:eb:a7:aa:1a:fc:16:de:08:9c:e4:9f:72: 60:4a:22:e0:f7:0b:c0:df:9e:f4:fe:96:eb:a8:1d:01:f3:0c: 8c:29:5a:ac -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUDMw/B/++5lFkutJ5gBcBdjiH3K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwNDNaFw0yNzA2MjcxODU1NDNaMDMxMTAvBgNV BAMTKDM2QzE3RUMyQjg5NUM1NjJBRTYyRDQ4ODREOUNBNjlGN0RGNDNDQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+7yhaVGbvn+l7uqUiC+DQaSy Bv+3XuMyyoQ54QbTyqvAVvfaODF9BP6WhF3y3kdcnUs4tSvsimT6sqpMkm/6NTVM BXbScyevFYvppe/q30UZE2n5iqA6YDevcoHC/3SruC4t19n87GUIL4zw/sqQme1e DE473w5FtVJvEdEqj1WERCYgtl3KGKpTDp6g7Thk2iZDpkCRCBJxCEwjgCXyU8uo MGk254NL5kf2ZVQ9vadeROrj7zqsAwuAGV+CFVf7BA4kVxWVUDkvIJeauaz0Vn32 aDEklpkuq0pudFl1pSOINYp4TYD60noC9O/5XsSwPY5k4zOBcLVfyc+QfsmPAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUNsF+wriVxWKuYtSITZymn330PLwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM1NzA2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQbMBkwFwQCAAIwEQMHACoP YoQABgMGACoPYoSBMA0GCSqGSIb3DQEBCwUAA4IBAQBYk5Z8fHohhBzEJFBO8BBV 7VzZQgxQ3tGOX2eCiGQeY2SYCFWGzq/SfVA0CoP3bLXkIZ4VZFqILWX7aX1/Q3G7 LsqIh+Gb182o0PAupg+uybPFfoMOPm5RNW0jsBnIFEaD1X1SY9z1aME4I87f2F/r Uex0jDHpPlclruW0ioqX/eEZFjEPcqEdoiMS3Joi6iZbsCWKsZvRDDH+SWXh2BKu 30qJ1I9M7Cmtmf/j7ek+qxoHfThLRqp1Zok7DpGiQY3Od1frT3rC3ya5SK4VKhAP YBbA8HOT/JVS4RucUwfrp6oa/BbeCJzkn3JgSiLg9wvA3570/pbrqB0B8wyMKVqs -----END CERTIFICATE-----Generated at Thu Jul 23 23:50:37 2026 by rpki-client