$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS213576.roa File: AS213576.roa (raw, json) Hash identifier: ezP/6/AA8nqHq0rAM4AfJ3hm9fJThvxBetNyF8nkVnI= Subject key identifier: 53:9F:FA:7A:64:38:B8:37:92:7C:27:A8:47:D5:C4:56:95:48:A5:36 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 05F2CA5048BAC0587BF7E8B1FE0C44C5C6AD7AF5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213576.roa Signing time: Sat 08 Aug 2026 14:51:59 +0000 ROA not before: Sat 08 Aug 2026 14:46:59 +0000 ROA not after: Sat 07 Aug 2027 14:51:59 +0000 asID: 213576 IP address blocks: 2a05:dfc3:fe00::/40 maxlen: 40 2a05:dfc3:fe00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f2:ca:50:48:ba:c0:58:7b:f7:e8:b1:fe:0c:44:c5:c6:ad:7a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 8 14:46:59 2026 GMT Not After : Aug 7 14:51:59 2027 GMT Subject: CN=539FFA7A6438B837927C27A847D5C4569548A536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:3c:30:9a:6b:3d:cc:4f:56:65:22:12:cc: 6b:e5:3c:03:b2:ba:50:d6:d8:17:04:bc:83:bd:14: 87:0b:56:29:20:bc:8c:c2:41:a4:27:da:77:af:3a: f5:4b:95:d8:bc:b0:16:db:09:93:51:3d:6a:11:8b: 21:1f:f9:89:52:28:f6:e6:13:74:0f:d4:d3:cf:22: 3d:77:23:d9:91:f9:51:39:7a:4d:79:db:0b:a1:01: 95:7c:10:26:26:72:8f:59:8c:86:f6:59:c7:9e:04: db:64:19:b3:12:1a:79:e9:aa:e9:42:4f:33:e0:fd: 4f:f3:06:05:2a:80:46:b3:1d:fd:72:57:9d:ef:c1: 5d:e4:ce:4e:0b:f1:27:e8:bc:77:e6:81:91:c5:dc: 6e:c7:79:21:15:a1:99:f8:82:1e:81:64:44:d5:86: bd:03:ba:3b:bb:29:ef:ef:c1:48:4d:80:42:a3:ce: 7c:9c:f2:ea:61:a2:41:ea:49:56:c2:7f:fe:64:3f: c4:60:2f:d0:74:90:70:00:c6:5d:6e:a4:38:c2:76: c2:47:2e:8c:55:50:94:c0:f0:97:4e:dc:36:20:eb: 8e:dd:37:0b:99:a4:65:91:61:ff:09:ce:a7:36:27: ac:60:14:3a:20:50:d6:cb:ae:17:2e:74:35:37:b7: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9F:FA:7A:64:38:B8:37:92:7C:27:A8:47:D5:C4:56:95:48:A5:36 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213576.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fe00::/40 Signature Algorithm: sha256WithRSAEncryption 34:a9:ec:b6:a9:58:97:3f:a7:62:52:2b:66:37:87:28:69:6e: 93:40:12:84:d0:f3:9c:d4:50:ee:4d:25:b6:41:05:e1:ca:a8: 92:1c:87:53:df:3a:d8:11:f0:a8:03:d6:44:07:9f:71:3e:2f: b8:5a:e1:51:49:46:d0:5c:f0:ea:ae:e0:16:c4:ff:e4:a9:66: ba:dd:d7:0c:d8:8a:54:13:89:e6:e1:a2:97:6f:b7:3c:b9:b7: 80:7d:a3:21:56:04:0a:c5:04:24:75:cd:51:5f:3a:89:7d:af: 52:0d:eb:b8:bf:11:ed:01:38:27:d6:a6:50:e5:a0:1f:00:fa: a4:f4:30:ee:46:a5:8c:47:75:23:71:5d:37:aa:9c:49:0d:8d: 8a:26:e0:aa:88:23:f0:26:3c:72:0f:d0:47:b8:e8:33:05:ad: 5b:ad:66:e7:11:ef:1f:44:74:27:71:49:66:54:de:b5:4b:e1: 8f:f5:49:96:ad:c2:38:0c:c2:88:9a:36:a7:61:49:90:15:34: 6b:c6:4d:f3:b9:19:11:4f:89:d3:a3:66:15:74:40:0c:c2:27: 92:a4:dc:85:4f:88:95:54:4e:1d:a1:a6:77:10:92:1f:63:40: 6a:f2:03:34:98:3f:69:81:96:d8:3c:ed:fa:ee:2b:4d:56:8e: 61:f9:e2:3a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUBfLKUEi6wFh79+ix/gxExcatevUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MDgxNDQ2NTlaFw0yNzA4MDcxNDUxNTlaMDMxMTAvBgNV BAMTKDUzOUZGQTdBNjQzOEI4Mzc5MjdDMjdBODQ3RDVDNDU2OTU0OEE1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3Dwwmms9zE9WZSISzGvlPAOy ulDW2BcEvIO9FIcLVikgvIzCQaQn2nevOvVLldi8sBbbCZNRPWoRiyEf+YlSKPbm E3QP1NPPIj13I9mR+VE5ek152wuhAZV8ECYmco9ZjIb2WceeBNtkGbMSGnnpqulC TzPg/U/zBgUqgEazHf1yV53vwV3kzk4L8SfovHfmgZHF3G7HeSEVoZn4gh6BZETV hr0Duju7Ke/vwUhNgEKjznyc8uphokHqSVbCf/5kP8RgL9B0kHAAxl1upDjCdsJH LoxVUJTA8JdO3DYg647dNwuZpGWRYf8Jzqc2J6xgFDogUNbLrhcudDU3t9iRAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUU5/6emQ4uDeSfCeoR9XEVpVIpTYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM1NzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq Bd/D/jANBgkqhkiG9w0BAQsFAAOCAQEANKnstqlYlz+nYlIrZjeHKGluk0AShNDz nNRQ7k0ltkEF4cqokhyHU9862BHwqAPWRAefcT4vuFrhUUlG0Fzw6q7gFsT/5Klm ut3XDNiKVBOJ5uGil2+3PLm3gH2jIVYECsUEJHXNUV86iX2vUg3ruL8R7QE4J9am UOWgHwD6pPQw7kaljEd1I3FdN6qcSQ2Niibgqogj8CY8cg/QR7joMwWtW61m5xHv H0R0J3FJZlTetUvhj/VJlq3COAzCiJo2p2FJkBU0a8ZN87kZEU+J06NmFXRADMIn kqTchU+IlVROHaGmdxCSH2NAavIDNJg/aYGW2Dzt+u4rTVaOYfniOg== -----END CERTIFICATE-----Generated at Wed Aug 26 07:55:15 2026 by rpki-client