$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS57110.roa File: AS57110.roa (raw, json) Hash identifier: 2iI2UDAV8CNmTDEm1v4nzc8JAWPkCGmgzMaSbcoVHs4= Subject key identifier: 57:AE:8A:DC:32:B4:D7:86:DC:D1:47:5C:7C:96:91:66:23:36:0E:1C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4F23AF4771BC4FD8B199AA7940537DEDF886C8CF Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS57110.roa Signing time: Fri 17 Jul 2026 13:49:17 +0000 ROA not before: Fri 17 Jul 2026 13:44:17 +0000 ROA not after: Fri 16 Jul 2027 13:49:17 +0000 asID: 57110 IP address blocks: 2a06:1284::/48 maxlen: 48 2a06:1284:100::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:23:af:47:71:bc:4f:d8:b1:99:aa:79:40:53:7d:ed:f8:86:c8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 17 13:44:17 2026 GMT Not After : Jul 16 13:49:17 2027 GMT Subject: CN=57AE8ADC32B4D786DCD1475C7C96916623360E1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9b:8a:4c:8d:a7:dd:70:e5:44:42:8d:e3:cb: 16:a6:7f:c0:bc:9b:bf:2e:67:a4:21:80:0f:ed:5a: 88:fd:89:b0:b0:e3:85:12:37:8a:26:e5:f9:03:80: 26:f8:e9:b7:a9:5a:3a:1d:99:d1:42:a0:d8:c7:88: be:e5:5e:a8:fc:ea:69:b9:4a:0a:34:1c:83:d0:f0: 88:84:d0:e1:a6:55:ee:30:70:06:9a:8b:54:86:f0: bf:a9:6b:70:99:3b:40:2d:1b:d0:5d:a3:cb:87:48: 93:4f:33:39:05:1a:ce:76:f1:ba:38:b2:76:57:ec: 06:56:da:ac:6d:59:12:5d:e0:e6:3b:42:70:f3:c7: f6:ca:5d:4d:2f:db:b9:ef:0b:97:5e:69:89:e0:7d: 2a:db:38:20:89:23:06:1c:b4:78:7e:57:09:ad:ce: c2:22:e5:6f:30:27:ff:07:41:d4:16:ba:44:5c:14: 36:02:7a:ce:13:ad:f9:dc:ec:77:3e:f3:43:b4:d4: b2:27:91:93:70:b8:b1:9f:99:fb:6f:e0:c7:95:af: 50:21:01:53:09:71:4f:3e:b8:bb:22:3d:ca:fa:1d: 78:0a:99:de:e1:ec:ce:24:9d:21:00:82:89:d1:a4: 95:96:c7:b8:b9:c9:b2:ac:aa:cb:02:09:d4:21:a3: 73:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AE:8A:DC:32:B4:D7:86:DC:D1:47:5C:7C:96:91:66:23:36:0E:1C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS57110.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1284::/48 2a06:1284:100::/40 Signature Algorithm: sha256WithRSAEncryption 72:53:5e:45:1b:69:1a:05:31:3d:59:8d:af:6c:d5:f6:b7:fc: 9e:48:74:39:72:f1:dc:58:df:7e:ac:12:9d:86:f3:a1:35:52: 26:97:ea:cf:cb:97:6f:4b:4f:23:41:bb:d7:3e:e8:a7:05:ff: 6b:25:94:ce:88:01:04:ef:8e:fe:a8:e9:0b:8a:33:bc:0e:4c: ff:1a:26:4d:d5:96:02:be:e1:44:76:08:43:78:f1:39:e2:1f: 6b:78:14:8c:12:af:d4:bc:8e:8d:f3:d2:a4:2d:a8:ce:2b:a2: dd:53:c6:83:65:b9:a7:89:1a:46:2e:46:6e:d5:4f:f1:a0:75: a0:78:48:ef:eb:f6:b2:c2:3e:a0:94:4a:15:32:3b:40:f4:b1: c0:4a:ae:4d:96:1d:1e:6f:70:05:c3:ad:dc:78:0f:f3:0d:00: 86:86:a2:aa:b6:0d:b7:8a:f4:21:e3:e3:4c:0a:47:e0:10:20: b3:bb:2a:07:62:6a:f4:76:2e:ab:f9:8b:a3:af:a6:b1:62:55: 03:78:96:74:f3:33:ed:f1:49:90:af:6a:9e:72:85:30:14:ef: c4:13:e2:71:64:9f:51:f5:11:6d:85:68:bb:28:e7:45:13:03: 57:61:51:2c:01:6c:8a:8e:f3:34:56:98:25:9b:d6:59:09:25: d8:1f:f4:df -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUTyOvR3G8T9ixmap5QFN97fiGyM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTcxMzQ0MTdaFw0yNzA3MTYxMzQ5MTdaMDMxMTAvBgNV BAMTKDU3QUU4QURDMzJCNEQ3ODZEQ0QxNDc1QzdDOTY5MTY2MjMzNjBFMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpm4pMjafdcOVEQo3jyxamf8C8 m78uZ6QhgA/tWoj9ibCw44USN4om5fkDgCb46bepWjodmdFCoNjHiL7lXqj86mm5 Sgo0HIPQ8IiE0OGmVe4wcAaai1SG8L+pa3CZO0AtG9Bdo8uHSJNPMzkFGs528bo4 snZX7AZW2qxtWRJd4OY7QnDzx/bKXU0v27nvC5deaYngfSrbOCCJIwYctHh+Vwmt zsIi5W8wJ/8HQdQWukRcFDYCes4Trfnc7Hc+80O01LInkZNwuLGfmftv4MeVr1Ah AVMJcU8+uLsiPcr6HXgKmd7h7M4knSEAgonRpJWWx7i5ybKsqssCCdQho3NbAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUV66K3DK014bc0UdcfJaRZiM2DhwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM1NzExMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQbMBkwFwQCAAIwEQMHACoG EoQAAAMGACoGEoQBMA0GCSqGSIb3DQEBCwUAA4IBAQByU15FG2kaBTE9WY2vbNX2 t/yeSHQ5cvHcWN9+rBKdhvOhNVIml+rPy5dvS08jQbvXPuinBf9rJZTOiAEE747+ qOkLijO8Dkz/GiZN1ZYCvuFEdghDePE54h9reBSMEq/UvI6N89KkLajOK6LdU8aD ZbmniRpGLkZu1U/xoHWgeEjv6/aywj6glEoVMjtA9LHASq5Nlh0eb3AFw63ceA/z DQCGhqKqtg23ivQh4+NMCkfgECCzuyoHYmr0di6r+Yujr6axYlUDeJZ08zPt8UmQ r2qecoUwFO/EE+JxZJ9R9RFthWi7KOdFEwNXYVEsAWyKjvM0Vpglm9ZZCSXYH/Tf -----END CERTIFICATE-----Generated at Thu Jul 23 23:49:42 2026 by rpki-client