$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS213864.roa File: AS213864.roa (raw, json) Hash identifier: L8HWnb5xnJOfDyOs2nHL6FmVTSgezq/VvahrFq6JYbs= Subject key identifier: 32:38:8D:37:1E:E1:E8:51:D4:57:8D:04:55:A2:4C:34:9D:6E:97:19 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4057FE387AD3FE3C62F8F0B32E5BE5DB9479FCB3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213864.roa Signing time: Fri 02 Oct 2026 11:17:27 +0000 ROA not before: Fri 02 Oct 2026 11:12:27 +0000 ROA not after: Fri 01 Oct 2027 11:17:27 +0000 asID: 213864 IP address blocks: 2a05:dfc2::/32 maxlen: 32 2a09:54c4::/32 maxlen: 32 2a0f:6285::/32 maxlen: 32 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 00:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:57:fe:38:7a:d3:fe:3c:62:f8:f0:b3:2e:5b:e5:db:94:79:fc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 2 11:12:27 2026 GMT Not After : Oct 1 11:17:27 2027 GMT Subject: CN=32388D371EE1E851D4578D0455A24C349D6E9719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:cf:1e:4a:c9:81:45:a3:b8:76:26:5c:b1: 83:c7:7e:a9:c2:bc:b9:8d:62:c6:ba:77:2d:b8:95: ce:e7:4b:aa:33:f3:80:6e:f7:c5:9e:15:af:38:35: 3f:91:b4:87:fa:92:63:21:52:1b:bf:19:fd:c5:c1: 1b:8f:ac:fa:1d:f3:64:28:11:0f:5c:d9:b3:41:4e: 43:40:68:26:28:61:ca:db:be:fb:26:43:36:ca:05: 3a:91:c5:6c:51:8a:d9:49:90:51:77:86:e1:27:f9: 9b:66:86:2d:49:f6:e0:e3:f6:1f:a7:b4:2b:db:9a: 56:e4:fb:8e:71:b8:3d:4a:3e:a5:a1:29:e7:42:d0: 39:a6:4a:b1:be:a7:0f:a2:c7:cd:a4:97:70:91:35: 49:27:85:bc:f5:bc:bd:0d:32:17:b2:96:b6:bf:3d: f1:7e:43:2c:7a:93:2f:03:dd:fb:2a:ce:12:1c:bf: a1:c0:8d:81:4c:8b:dc:22:fa:0f:56:45:2d:8c:68: 9a:0e:53:b7:f2:8f:a9:4b:ae:6c:96:c0:79:79:23: 53:2b:62:06:00:96:d8:2c:4c:75:29:5b:bb:fe:47: 77:9a:f5:83:84:07:d5:b5:32:f6:34:6f:43:9a:7d: 66:8f:c1:89:29:19:d0:f8:01:71:37:06:62:26:08: f8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:38:8D:37:1E:E1:E8:51:D4:57:8D:04:55:A2:4C:34:9D:6E:97:19 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213864.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc2::/32 2a09:54c4::/32 2a0f:6285::/32 Signature Algorithm: sha256WithRSAEncryption 6e:87:89:96:6f:4d:2a:8a:86:08:2a:c2:0d:15:88:9c:9f:5a: a7:1e:84:0b:4c:f0:40:20:e4:62:82:35:9c:b7:cc:dd:ef:50: f3:3a:f4:fa:40:61:32:21:c5:ec:3e:95:72:5e:06:12:59:b3: 35:64:11:d5:10:42:1c:bd:c3:b4:1f:1d:c1:a1:bb:65:c6:b9: 84:d3:0c:e6:55:fa:73:8d:6f:cc:cc:57:50:cf:58:7f:f5:c6: 25:65:30:71:8a:ba:3e:bf:86:31:74:37:8a:44:c6:5c:6a:e6: 01:cc:8f:b7:59:32:95:6e:37:ca:91:cf:a3:17:e7:cf:5c:70: 8d:58:17:2f:48:eb:db:20:7a:eb:41:b5:2e:5f:9e:41:b3:8e: c1:1f:e8:b0:56:0e:1b:bc:84:92:22:2f:5d:f2:c1:be:2e:a8: 89:a0:35:64:ba:90:13:03:11:1d:c1:81:71:16:27:2a:2e:e9: be:2a:e9:3c:38:08:e7:b4:dd:f2:66:ec:82:22:ca:8c:8f:64: 5c:70:43:24:d2:ff:14:b3:4e:4d:c0:09:9a:58:0f:06:88:3f: 5d:68:5d:ea:96:bf:8a:55:62:0a:0d:e9:0e:7c:9e:04:f0:49: c7:51:ca:40:77:1f:98:f5:a6:d4:e8:76:e6:28:03:79:cf:ac: 6c:f5:76:19 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUQFf+OHrT/jxi+PCzLlvl25R5/LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMDIxMTEyMjdaFw0yNzEwMDExMTE3MjdaMDMxMTAvBgNV BAMTKDMyMzg4RDM3MUVFMUU4NTFENDU3OEQwNDU1QTI0QzM0OUQ2RTk3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXA88eSsmBRaO4diZcsYPHfqnC vLmNYsa6dy24lc7nS6oz84Bu98WeFa84NT+RtIf6kmMhUhu/Gf3FwRuPrPod82Qo EQ9c2bNBTkNAaCYoYcrbvvsmQzbKBTqRxWxRitlJkFF3huEn+Ztmhi1J9uDj9h+n tCvbmlbk+45xuD1KPqWhKedC0DmmSrG+pw+ix82kl3CRNUknhbz1vL0NMheylra/ PfF+Qyx6ky8D3fsqzhIcv6HAjYFMi9wi+g9WRS2MaJoOU7fyj6lLrmyWwHl5I1Mr YgYAltgsTHUpW7v+R3ea9YOEB9W1MvY0b0OafWaPwYkpGdD4AXE3BmImCPjVAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUMjiNNx7h6FHUV40EVaJMNJ1ulxkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM4NjQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMBsEAgACMBUDBQAq Bd/CAwUAKglUxAMFACoPYoUwDQYJKoZIhvcNAQELBQADggEBAG6HiZZvTSqKhggq wg0ViJyfWqcehAtM8EAg5GKCNZy3zN3vUPM69PpAYTIhxew+lXJeBhJZszVkEdUQ Qhy9w7QfHcGhu2XGuYTTDOZV+nONb8zMV1DPWH/1xiVlMHGKuj6/hjF0N4pExlxq 5gHMj7dZMpVuN8qRz6MX589ccI1YFy9I69sgeutBtS5fnkGzjsEf6LBWDhu8hJIi L13ywb4uqImgNWS6kBMDER3BgXEWJyou6b4q6Tw4COe03fJm7IIiyoyPZFxwQyTS /xSzTk3ACZpYDwaIP11oXeqWv4pVYgoN6Q58ngTwScdRykB3H5j1ptToduYoA3nP rGz1dhk= -----END CERTIFICATE-----Generated at Tue Oct 20 12:21:44 2026 by rpki-client