$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213422.roa File: AS213422.roa (raw, json) Hash identifier: Nj4qxJpOApaZ9u3fYTwyOgaBevB1qxq+pn3lJaiVuPU= Subject key identifier: 7D:09:0A:BE:7F:5A:44:72:93:B2:FA:C2:8A:FA:4C:0D:A5:00:B0:7E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0585BAA56EE7085539BF6C7DF9C22A4BF9E81E5E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213422.roa Signing time: Sun 28 Jun 2026 18:56:47 +0000 ROA not before: Sun 28 Jun 2026 18:51:47 +0000 ROA not after: Sun 27 Jun 2027 18:56:47 +0000 asID: 213422 IP address blocks: 2a0f:6283:1400::/40 maxlen: 40 2a0f:6283:1400::/48 maxlen: 48 2a0f:6283:1401::/48 maxlen: 48 2a0f:6283:1402::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:85:ba:a5:6e:e7:08:55:39:bf:6c:7d:f9:c2:2a:4b:f9:e8:1e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:51:47 2026 GMT Not After : Jun 27 18:56:47 2027 GMT Subject: CN=7D090ABE7F5A447293B2FAC28AFA4C0DA500B07E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ae:8a:64:13:a4:a1:8a:b1:3a:94:31:47:2c: eb:ce:3d:82:df:7b:fd:62:73:66:ff:9e:e5:ea:10: 9b:8f:8b:b1:1c:a1:3d:12:bb:80:f1:97:f8:24:7b: 2c:cf:f6:c0:bf:42:3b:f8:74:2d:af:37:7e:82:34: 3c:b3:0a:f9:ca:e2:6b:45:48:f6:ce:a5:9a:7d:50: 41:aa:4e:46:2e:1c:78:da:5b:cf:64:22:f5:af:bb: 56:1a:e1:8f:f1:b3:79:e5:96:73:ac:74:f9:d7:d8: da:fa:a7:aa:da:0c:50:5c:f3:24:f6:50:49:71:b4: 3e:4b:d4:df:20:96:75:a7:64:df:51:95:c7:e3:4f: ce:d4:73:b8:3f:55:a4:76:0d:60:b2:9b:25:d0:43: cf:dc:21:6a:a4:49:30:2e:1a:d6:e8:eb:57:39:96: c4:d2:d3:2d:30:6f:00:2a:d0:d3:b5:08:c3:ed:c2: f1:0c:d1:ac:f6:e3:f4:42:56:36:29:07:74:33:1f: 96:15:32:05:84:b6:75:b8:ed:f0:cb:a1:d8:5c:1d: cd:4a:90:b4:07:50:86:32:de:30:ec:23:bb:a4:30: 65:fa:e4:28:06:ba:f9:2a:e2:82:47:e0:63:d1:2b: 9c:6f:08:03:cf:a5:be:dd:09:3f:00:9e:83:46:c2: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:09:0A:BE:7F:5A:44:72:93:B2:FA:C2:8A:FA:4C:0D:A5:00:B0:7E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213422.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:1400::/40 Signature Algorithm: sha256WithRSAEncryption 1e:26:d7:f3:9b:7e:e1:26:94:d1:50:a5:0a:93:0d:aa:c1:27: a0:c5:8d:42:ea:bc:a9:98:25:c7:d3:00:55:da:4b:58:3b:1a: 2d:b0:ec:82:da:79:a8:92:90:fd:6b:5b:c3:64:53:ff:0f:a2: b8:f4:c7:f9:aa:0c:e9:20:cb:98:d5:4a:ae:8c:6d:c6:e9:da: d9:f1:2a:41:70:7e:09:82:4a:4f:2c:40:11:6d:94:ab:a1:4f: cd:19:97:aa:cc:2a:30:0d:26:43:ed:7e:4a:3e:4c:e8:e7:f8: 26:98:fb:98:e5:07:27:44:4d:2f:09:90:11:8d:fe:50:88:42: f9:d9:47:98:11:b2:fa:ec:7a:f7:c2:db:87:43:86:ac:ac:74: 32:58:43:80:6b:66:56:64:9f:00:5e:0b:97:5d:11:6d:4b:f1: 93:47:35:41:f2:ba:dc:b4:9e:ca:11:74:00:cc:b6:f1:4d:e2: 43:55:26:e9:25:a7:10:a1:4b:3e:0f:ec:e8:fc:e1:2f:01:4f: ba:28:70:19:61:36:02:3c:65:1f:9f:11:d0:d2:0e:eb:6b:94: 82:67:9d:bf:14:38:8f:38:6e:48:6d:c2:e9:3a:ad:63:9e:d0: e4:33:a3:88:d1:46:c9:42:bb:55:83:9f:f6:6f:56:f0:31:b0: 81:f5:a3:62 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUBYW6pW7nCFU5v2x9+cIqS/noHl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUxNDdaFw0yNzA2MjcxODU2NDdaMDMxMTAvBgNV BAMTKDdEMDkwQUJFN0Y1QTQ0NzI5M0IyRkFDMjhBRkE0QzBEQTUwMEIwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtropkE6ShirE6lDFHLOvOPYLf e/1ic2b/nuXqEJuPi7EcoT0Su4Dxl/gkeyzP9sC/Qjv4dC2vN36CNDyzCvnK4mtF SPbOpZp9UEGqTkYuHHjaW89kIvWvu1Ya4Y/xs3nllnOsdPnX2Nr6p6raDFBc8yT2 UElxtD5L1N8glnWnZN9RlcfjT87Uc7g/VaR2DWCymyXQQ8/cIWqkSTAuGtbo61c5 lsTS0y0wbwAq0NO1CMPtwvEM0az24/RCVjYpB3QzH5YVMgWEtnW47fDLodhcHc1K kLQHUIYy3jDsI7ukMGX65CgGuvkq4oJH4GPRK5xvCAPPpb7dCT8AnoNGwjrxAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUfQkKvn9aRHKTsvrCivpMDaUAsH4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM0MjIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KDFDANBgkqhkiG9w0BAQsFAAOCAQEAHibX85t+4SaU0VClCpMNqsEnoMWNQuq8 qZglx9MAVdpLWDsaLbDsgtp5qJKQ/Wtbw2RT/w+iuPTH+aoM6SDLmNVKroxtxuna 2fEqQXB+CYJKTyxAEW2Uq6FPzRmXqswqMA0mQ+1+Sj5M6Of4Jpj7mOUHJ0RNLwmQ EY3+UIhC+dlHmBGy+ux698Lbh0OGrKx0MlhDgGtmVmSfAF4Ll10RbUvxk0c1QfK6 3LSeyhF0AMy28U3iQ1Um6SWnEKFLPg/s6PzhLwFPuihwGWE2AjxlH58R0NIO62uU gmedvxQ4jzhuSG3C6TqtY57Q5DOjiNFGyUK7VYOf9m9W8DGwgfWjYg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:41 2026 by rpki-client