$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214016.roa File: AS214016.roa (raw, json) Hash identifier: rKOGfw90eX6APl18czPvPhy/XybQHS6w5mUWH69IkZI= Subject key identifier: 18:7E:91:D3:67:2A:D6:01:3F:1F:DE:7C:BE:75:05:19:7E:02:AF:AB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 082D06BE797495A6BED1C16BABC216CE58863C5D Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214016.roa Signing time: Thu 24 Sep 2026 00:16:12 +0000 ROA not before: Thu 24 Sep 2026 00:11:12 +0000 ROA not after: Thu 23 Sep 2027 00:16:12 +0000 asID: 214016 IP address blocks: 2a0f:6283::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2d:06:be:79:74:95:a6:be:d1:c1:6b:ab:c2:16:ce:58:86:3c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 24 00:11:12 2026 GMT Not After : Sep 23 00:16:12 2027 GMT Subject: CN=187E91D3672AD6013F1FDE7CBE7505197E02AFAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:05:91:62:95:93:9b:cf:d9:36:44:cb:12:f2: 78:b1:69:5c:06:cf:77:69:8a:60:a8:95:58:0e:af: 48:6d:84:56:09:b9:9b:7b:6e:35:95:8c:07:e2:df: 9f:b9:58:99:a9:22:1c:68:a6:77:be:fa:ee:ab:bb: 79:bd:8b:50:a5:fb:7c:b8:2c:8d:d1:47:a2:c8:58: 70:52:32:33:82:7d:0e:81:0f:7f:c2:8c:f9:37:2d: 02:fd:80:22:4c:1e:9b:e4:0d:a5:33:f7:e4:a7:0a: ae:e1:f4:5d:2d:5b:11:1e:78:fe:c6:7e:0f:34:f2: 88:29:62:2e:08:90:bb:f3:a3:ed:fe:52:39:27:ee: 3a:5c:6b:17:4b:f2:d2:6b:9f:6d:f6:70:96:09:fc: 84:c3:28:d7:82:3d:e9:fe:2e:6c:12:00:c2:ad:71: 8c:da:c9:c9:e5:9f:3d:a3:d8:0d:f5:f9:c1:1b:b1: 9d:b5:3a:f3:0a:07:9f:2c:69:f7:10:7c:7b:6e:27: 37:8f:21:5f:0f:f5:f4:2d:21:82:67:ee:73:ff:0d: a8:a6:00:5c:25:07:d8:dd:eb:34:5d:f6:3e:8d:37: 0d:3f:f7:dd:51:23:da:48:68:dc:cd:a7:29:8d:47: 63:9c:a0:14:06:80:e2:3e:2b:11:63:66:40:12:c4: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7E:91:D3:67:2A:D6:01:3F:1F:DE:7C:BE:75:05:19:7E:02:AF:AB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214016.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283::/36 Signature Algorithm: sha256WithRSAEncryption 77:82:ab:0d:0a:f5:df:d9:80:13:40:38:69:5c:0c:75:43:4a: 4b:a2:29:1b:a6:69:29:b7:37:7d:7d:9c:ed:2a:a0:a1:64:f3: b5:5c:0e:13:7e:4e:25:cd:8e:54:c0:fe:69:a9:7b:58:9b:8f: 06:9c:69:41:fe:bb:8a:70:22:28:32:e4:20:47:af:8b:ce:13: 54:70:af:fd:da:a5:6a:25:20:08:fe:da:b0:82:41:b5:e8:5e: 45:f1:ec:61:5a:b2:92:5d:fd:da:4a:ac:b8:80:ea:3e:41:cc: 60:4a:c2:74:bf:5e:1c:22:21:1e:a0:56:79:46:87:4f:70:f8: 35:49:2c:d3:c8:df:96:b7:ca:25:07:be:e3:7d:40:9c:5a:71: 78:f4:4d:e8:82:cb:46:e9:bb:6f:32:78:3e:b5:93:2a:df:92: 97:68:ae:0b:91:44:eb:0f:bd:59:80:ba:9c:6e:37:5a:db:93: 14:11:35:48:a8:44:b3:29:e6:c9:78:af:df:f4:25:6d:25:c4: 98:5a:0b:53:82:eb:52:8b:8b:fa:64:6a:0b:af:43:be:d4:e1: bd:69:3e:2c:2d:3d:06:33:9f:87:31:a2:cc:f1:67:46:57:6f: 2e:2e:09:da:61:16:30:57:ff:e6:fe:8c:78:f0:27:a5:ec:b1: 50:9e:8b:a2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUCC0Gvnl0laa+0cFrq8IWzliGPF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MjQwMDExMTJaFw0yNzA5MjMwMDE2MTJaMDMxMTAvBgNV BAMTKDE4N0U5MUQzNjcyQUQ2MDEzRjFGREU3Q0JFNzUwNTE5N0UwMkFGQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgBZFilZObz9k2RMsS8nixaVwG z3dpimColVgOr0hthFYJuZt7bjWVjAfi35+5WJmpIhxopne++u6ru3m9i1Cl+3y4 LI3RR6LIWHBSMjOCfQ6BD3/CjPk3LQL9gCJMHpvkDaUz9+SnCq7h9F0tWxEeeP7G fg808ogpYi4IkLvzo+3+Ujkn7jpcaxdL8tJrn232cJYJ/ITDKNeCPen+LmwSAMKt cYzaycnlnz2j2A31+cEbsZ21OvMKB58safcQfHtuJzePIV8P9fQtIYJn7nP/Daim AFwlB9jd6zRd9j6NNw0/991RI9pIaNzNpymNR2OcoBQGgOI+KxFjZkASxMvFAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUGH6R02cq1gE/H958vnUFGX4Cr6swHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQwMTYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KDADANBgkqhkiG9w0BAQsFAAOCAQEAd4KrDQr139mAE0A4aVwMdUNKS6IpG6Zp Kbc3fX2c7SqgoWTztVwOE35OJc2OVMD+aal7WJuPBpxpQf67inAiKDLkIEevi84T VHCv/dqlaiUgCP7asIJBteheRfHsYVqykl392kqsuIDqPkHMYErCdL9eHCIhHqBW eUaHT3D4NUks08jflrfKJQe+431AnFpxePRN6ILLRum7bzJ4PrWTKt+Sl2iuC5FE 6w+9WYC6nG43WtuTFBE1SKhEsynmyXiv3/QlbSXEmFoLU4LrUouL+mRqC69DvtTh vWk+LC09BjOfhzGizPFnRldvLi4J2mEWMFf/5v6MePAnpeyxUJ6Log== -----END CERTIFICATE-----Generated at Tue Oct 20 11:37:07 2026 by rpki-client