$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS211585.roa File: AS211585.roa (raw, json) Hash identifier: 3b7cTqFVhvriyo6NJa3KiARXLN2YY/2SeguG+8CaVL0= Subject key identifier: 1D:6E:03:68:49:51:4A:EB:C4:0E:2C:9C:0C:56:5F:A3:1B:86:D1:EA Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6BD84379C90C54B7E1C7DEE182A29A525C6FEE47 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS211585.roa Signing time: Fri 28 Aug 2026 11:53:04 +0000 ROA not before: Fri 28 Aug 2026 11:48:04 +0000 ROA not after: Fri 27 Aug 2027 11:53:04 +0000 asID: 211585 IP address blocks: 2a0f:6282:2100::/44 maxlen: 44 2a0f:6282:210a::/48 maxlen: 48 2a0f:6282:210b::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 14:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d8:43:79:c9:0c:54:b7:e1:c7:de:e1:82:a2:9a:52:5c:6f:ee:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 28 11:48:04 2026 GMT Not After : Aug 27 11:53:04 2027 GMT Subject: CN=1D6E036849514AEBC40E2C9C0C565FA31B86D1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:33:8d:83:50:2c:73:7e:b0:5b:33:8e:4a: c1:dc:7d:f3:72:e2:76:c4:41:db:62:7f:f5:f6:66: ff:46:69:26:0d:a2:15:ac:ef:0b:36:be:ab:5b:7e: 7a:27:d5:91:69:ff:2d:ce:70:18:77:44:17:ec:70: 55:9b:7f:c0:a4:1e:06:7a:e2:04:5e:17:d7:1f:cd: b2:4f:d9:ee:9a:ee:d7:1b:9b:ab:04:01:7a:f8:76: 19:a2:9c:1e:73:9c:34:c4:c0:20:40:0f:51:11:c5: 4d:89:2c:38:c3:15:ec:4d:c1:3e:79:79:a6:46:61: 2a:7a:51:b3:35:51:88:ec:52:5a:cc:8d:36:0b:a1: f3:31:63:d5:0a:ea:91:21:28:79:81:e0:bf:c8:6a: 88:f6:c6:d7:b5:4f:79:73:85:9f:86:31:92:1d:da: 63:cb:d4:e2:bc:fe:72:a4:46:30:5f:bf:66:45:72: 7f:15:68:f6:56:29:88:b7:6d:2c:32:58:97:88:88: 6a:58:1d:71:13:e5:b9:a1:0c:f5:43:a3:4e:d0:0a: 1a:0c:f4:72:90:73:57:62:c1:cf:12:8f:66:4b:66: df:80:35:9d:7b:cc:fc:85:2f:c2:56:9f:a4:77:61: de:8d:ac:9f:aa:4a:7e:c4:73:f8:c1:c9:9a:67:d3: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6E:03:68:49:51:4A:EB:C4:0E:2C:9C:0C:56:5F:A3:1B:86:D1:EA X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS211585.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:2100::/44 Signature Algorithm: sha256WithRSAEncryption 32:21:bf:56:5c:ac:28:96:8b:ba:f1:cb:55:69:03:84:1d:8f: 89:c2:53:94:eb:c4:a4:4c:84:ba:02:61:a4:08:ef:eb:04:35: 9e:ce:bc:f3:61:2a:9a:81:a4:24:20:ca:5f:0b:44:15:19:f6: 76:7e:b0:39:52:09:5e:b8:bb:fa:04:39:0c:b7:06:57:79:df: bc:0a:86:b0:3b:4a:d5:1c:f9:b2:61:9e:a8:b6:fb:16:15:6e: dd:16:d2:34:4b:aa:61:8c:9f:e6:4c:f8:f9:43:35:02:2a:99: 49:7e:6e:73:9b:3c:3f:73:1b:ec:a9:13:a7:4b:30:02:7c:7c: 78:56:71:da:e0:8e:c9:1a:7e:8d:a5:a7:d5:b3:30:b3:40:eb: cf:04:3d:0a:dd:30:d4:0b:a6:8d:da:5a:b3:dc:a7:2c:1a:94: 8c:3e:10:86:09:f7:8a:b7:01:67:18:71:a3:fa:6a:fd:9c:24: a8:71:3d:85:87:a3:27:d9:6f:57:d1:d9:a2:b7:83:41:8a:a2: eb:fe:6a:d5:75:15:b0:7e:2b:fb:dc:c6:7d:db:f2:12:6b:10: 53:eb:62:bf:63:44:d8:1d:fa:5b:18:c4:78:fe:09:73:b0:6a: f1:c5:07:f1:71:26:bc:ea:47:65:2c:e2:d2:b8:df:f1:6c:ee: 63:2e:68:ce -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUa9hDeckMVLfhx97hgqKaUlxv7kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MjgxMTQ4MDRaFw0yNzA4MjcxMTUzMDRaMDMxMTAvBgNV BAMTKDFENkUwMzY4NDk1MTRBRUJDNDBFMkM5QzBDNTY1RkEzMUI4NkQxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBTONg1Asc36wWzOOSsHcffNy 4nbEQdtif/X2Zv9GaSYNohWs7ws2vqtbfnon1ZFp/y3OcBh3RBfscFWbf8CkHgZ6 4gReF9cfzbJP2e6a7tcbm6sEAXr4dhminB5znDTEwCBAD1ERxU2JLDjDFexNwT55 eaZGYSp6UbM1UYjsUlrMjTYLofMxY9UK6pEhKHmB4L/Iaoj2xte1T3lzhZ+GMZId 2mPL1OK8/nKkRjBfv2ZFcn8VaPZWKYi3bSwyWJeIiGpYHXET5bmhDPVDo07QChoM 9HKQc1diwc8Sj2ZLZt+ANZ17zPyFL8JWn6R3Yd6NrJ+qSn7Ec/jByZpn0/+tAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUHW4DaElRSuvEDiycDFZfoxuG0eowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTE1ODUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KCIQAwDQYJKoZIhvcNAQELBQADggEBADIhv1ZcrCiWi7rxy1VpA4Qdj4nCU5Tr xKRMhLoCYaQI7+sENZ7OvPNhKpqBpCQgyl8LRBUZ9nZ+sDlSCV64u/oEOQy3Bld5 37wKhrA7StUc+bJhnqi2+xYVbt0W0jRLqmGMn+ZM+PlDNQIqmUl+bnObPD9zG+yp E6dLMAJ8fHhWcdrgjskafo2lp9WzMLNA688EPQrdMNQLpo3aWrPcpywalIw+EIYJ 94q3AWcYcaP6av2cJKhxPYWHoyfZb1fR2aK3g0GKouv+atV1FbB+K/vcxn3b8hJr EFPrYr9jRNgd+lsYxHj+CXOwavHFB/FxJrzqR2Us4tK43/Fs7mMuaM4= -----END CERTIFICATE-----Generated at Thu Sep 10 06:02:14 2026 by rpki-client