$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212895.roa File: AS212895.roa (raw, json) Hash identifier: vKV2shDvmtvgEt2EbxzqkjZEEz5MhQxCm1HE5NqV7rM= Subject key identifier: 80:78:8D:65:E1:B6:E4:1B:B8:E3:67:C4:CA:0E:A0:AB:07:D9:AE:C2 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1F4718C89940E0037EB6BC7DCD2E5A0D8CDD4714 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212895.roa Signing time: Sun 28 Jun 2026 18:56:08 +0000 ROA not before: Sun 28 Jun 2026 18:51:08 +0000 ROA not after: Sun 27 Jun 2027 18:56:08 +0000 asID: 212895 IP address blocks: 2a0f:6280:1100::/44 maxlen: 48 2a0f:6284:d::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:47:18:c8:99:40:e0:03:7e:b6:bc:7d:cd:2e:5a:0d:8c:dd:47:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:51:08 2026 GMT Not After : Jun 27 18:56:08 2027 GMT Subject: CN=80788D65E1B6E41BB8E367C4CA0EA0AB07D9AEC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:d4:99:cd:46:43:5f:e6:90:56:60:34:00: 6b:54:3b:70:5b:9a:8a:0d:b0:86:65:22:4f:71:da: 2d:68:c3:d7:63:64:e4:8f:79:7e:8d:7b:97:1f:0e: ca:9e:2b:fc:ec:00:08:d2:ff:2d:00:9d:9f:dc:85: 38:4c:e3:2a:a5:66:76:27:aa:c6:ac:d4:6d:40:9f: 25:c7:b7:7f:01:d5:ec:d9:59:22:18:32:09:ce:77: 17:ee:ce:9f:bb:3b:eb:c8:c5:7c:2a:be:af:7d:be: a5:dd:74:b3:8b:46:e0:bb:29:36:51:d1:30:f1:f4: e8:55:b1:d5:72:7e:17:ac:74:91:fb:2b:01:ff:e4: 3b:b3:20:c8:f3:db:f5:65:a0:b2:ac:6f:a7:b3:85: f5:10:95:5c:f2:f5:e8:a7:a2:47:c6:6f:f1:9e:21: 3b:c2:44:e7:fe:44:f2:07:59:e4:5f:4b:ef:c5:9e: fd:3f:d8:15:1b:c6:10:21:33:3c:4e:78:d9:68:17: 09:85:6e:bf:0b:49:b3:82:e2:00:95:3f:a7:f9:8f: 52:63:a9:b1:f8:cb:6f:5e:da:ab:98:94:2d:f8:88: 8c:31:d3:0a:3c:45:39:01:38:4d:f1:8a:73:68:a4: 96:7f:bc:f6:81:30:72:01:6f:5b:ab:9c:1e:b0:89: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:78:8D:65:E1:B6:E4:1B:B8:E3:67:C4:CA:0E:A0:AB:07:D9:AE:C2 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1100::/44 2a0f:6284:d::/48 Signature Algorithm: sha256WithRSAEncryption 31:ce:2e:d4:67:a1:cb:c1:80:49:44:a5:2e:52:12:35:eb:df: ab:28:ee:51:69:00:85:ae:08:63:ea:df:ed:38:13:48:62:d4: 89:af:de:fc:96:3c:ec:32:63:7c:8e:66:4e:e9:9e:7a:71:44: 0f:59:75:43:ac:8a:2e:07:d1:f7:2e:8f:3f:19:c0:3b:29:40: 82:53:39:28:84:b4:61:82:21:2b:f5:80:c2:6a:44:d0:6e:7a: 9f:c7:20:9f:cb:01:7f:b7:b6:27:76:6e:0e:0c:b4:36:96:fc: b8:44:ed:08:8e:5d:32:85:21:c5:0f:ad:79:00:48:21:a4:2f: 21:a4:c9:2a:f7:32:81:62:0c:a8:ed:67:68:5e:66:2d:1c:f6: b2:25:1c:60:a4:6a:dc:6d:5b:1c:ab:8d:e9:bd:18:68:6c:fb: d1:a2:67:c6:a4:c0:ba:40:47:27:e1:7a:63:20:05:b5:94:37: 04:a6:44:a7:de:c7:63:e0:c5:cc:f0:21:22:54:66:32:04:0d: 93:ae:45:ee:f9:f9:6d:12:35:5d:ad:3d:da:5c:f9:88:f3:9d: 96:8c:5d:fb:4b:39:26:f4:87:15:f8:24:39:01:f2:e1:51:ac: 9f:e7:0b:41:4f:61:8d:6c:46:00:f0:f6:0e:72:b1:0e:42:58: 70:67:b4:27 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUH0cYyJlA4AN+trx9zS5aDYzdRxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUxMDhaFw0yNzA2MjcxODU2MDhaMDMxMTAvBgNV BAMTKDgwNzg4RDY1RTFCNkU0MUJCOEUzNjdDNENBMEVBMEFCMDdEOUFFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjtSZzUZDX+aQVmA0AGtUO3Bb mooNsIZlIk9x2i1ow9djZOSPeX6Ne5cfDsqeK/zsAAjS/y0AnZ/chThM4yqlZnYn qsas1G1AnyXHt38B1ezZWSIYMgnOdxfuzp+7O+vIxXwqvq99vqXddLOLRuC7KTZR 0TDx9OhVsdVyfhesdJH7KwH/5DuzIMjz2/VloLKsb6ezhfUQlVzy9einokfGb/Ge ITvCROf+RPIHWeRfS+/Fnv0/2BUbxhAhMzxOeNloFwmFbr8LSbOC4gCVP6f5j1Jj qbH4y29e2quYlC34iIwx0wo8RTkBOE3xinNopJZ/vPaBMHIBb1urnB6wiUEfAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUgHiNZeG25Bu442fEyg6gqwfZrsIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTI4OTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwQq D2KAEQADBwAqD2KEAA0wDQYJKoZIhvcNAQELBQADggEBADHOLtRnocvBgElEpS5S EjXr36so7lFpAIWuCGPq3+04E0hi1Imv3vyWPOwyY3yOZk7pnnpxRA9ZdUOsii4H 0fcujz8ZwDspQIJTOSiEtGGCISv1gMJqRNBuep/HIJ/LAX+3tid2bg4MtDaW/LhE 7QiOXTKFIcUPrXkASCGkLyGkySr3MoFiDKjtZ2heZi0c9rIlHGCkatxtWxyrjem9 GGhs+9GiZ8akwLpARyfhemMgBbWUNwSmRKfex2PgxczwISJUZjIEDZOuRe75+W0S NV2tPdpc+YjznZaMXftLOSb0hxX4JDkB8uFRrJ/nC0FPYY1sRgDw9g5ysQ5CWHBn tCc= -----END CERTIFICATE-----Generated at Fri Jul 10 16:11:00 2026 by rpki-client