$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213864.roa File: AS213864.roa (raw, json) Hash identifier: iK2MTlgVe+W1MFL4UwjY0cSPwjfiCewfEni3WMp0p/Y= Subject key identifier: 3F:6C:C1:8F:B8:71:C4:E1:AA:FD:D1:46:CA:09:17:D2:E3:9D:83:3B Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 583547B6F515F7CBEAF7C9F1F0CE8C88ABE11FAF Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213864.roa Signing time: Sun 19 Jul 2026 03:39:49 +0000 ROA not before: Sun 19 Jul 2026 03:34:49 +0000 ROA not after: Sun 18 Jul 2027 03:39:49 +0000 asID: 213864 IP address blocks: 2a05:dfc2::/32 maxlen: 32 2a09:54c4::/32 maxlen: 32 2a0f:6280:2000::/36 maxlen: 48 2a0f:6283:9000::/36 maxlen: 36 2a0f:6283:a000::/36 maxlen: 36 2a0f:6284:5000::/36 maxlen: 48 2a0f:6285::/32 maxlen: 32 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:35:47:b6:f5:15:f7:cb:ea:f7:c9:f1:f0:ce:8c:88:ab:e1:1f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 19 03:34:49 2026 GMT Not After : Jul 18 03:39:49 2027 GMT Subject: CN=3F6CC18FB871C4E1AAFDD146CA0917D2E39D833B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:21:bc:bd:35:4e:51:14:7c:ca:e0:49:11: 63:2b:f3:89:2d:04:d4:c3:2a:10:ec:be:33:2a:43: 23:b6:a2:44:e8:b9:e4:ef:de:95:4f:ba:63:28:d2: 98:ae:ee:26:8a:df:97:52:1f:aa:d5:24:f8:95:d8: 25:6c:ad:24:33:7f:41:a6:52:0a:d2:50:88:75:bb: ce:a8:c3:b4:c9:07:35:51:48:97:1c:e0:50:8c:79: 76:7a:1f:7c:68:5d:ce:5d:d3:f1:74:28:8c:96:8a: 0b:c8:09:28:22:dd:52:fe:1f:f7:aa:ae:29:68:73: 1b:d0:04:5c:35:16:d8:6a:80:26:90:e9:ed:98:9e: fb:b1:b2:32:90:33:9a:f6:04:e3:bb:68:85:38:99: 58:2d:c8:d1:cc:8b:1f:c0:a7:d9:c6:6d:80:ac:14: 0b:f8:3b:82:dc:00:5c:39:cb:2f:41:66:85:b9:b2: 24:6e:ec:d6:93:78:86:0a:fe:e1:e1:54:31:49:9a: 55:87:26:f2:a4:a4:bf:56:08:85:2a:31:d2:22:57: dc:9b:ea:16:af:7d:88:97:b0:5a:13:f7:5e:0b:a6: e6:e8:47:dc:63:2d:79:5f:a0:0c:4c:73:41:a5:87: e1:08:fc:6c:af:22:0b:fe:0c:1e:dc:e4:fc:d8:a9: 5b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6C:C1:8F:B8:71:C4:E1:AA:FD:D1:46:CA:09:17:D2:E3:9D:83:3B X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213864.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc2::/32 2a09:54c4::/32 2a0f:6280:2000::/36 2a0f:6283:9000::-2a0f:6283:afff:ffff:ffff:ffff:ffff:ffff 2a0f:6284:5000::/36 2a0f:6285::/32 Signature Algorithm: sha256WithRSAEncryption 34:93:96:4b:18:84:5c:24:ee:72:7e:10:af:26:17:9d:e5:ca: c5:87:bc:12:97:ef:f3:9b:43:1a:cb:ba:b5:08:ce:50:bf:15: 62:5e:b9:ad:1f:22:2a:b4:10:23:5f:ed:8c:ea:ad:0f:14:39: 1b:eb:9c:6a:5b:d7:97:47:e0:05:ac:4b:a0:d9:f3:6b:7b:13: e9:ff:91:08:a3:c3:50:3f:8b:d7:1a:bc:38:a2:19:44:af:1c: e1:24:5e:c0:e5:74:a2:41:87:fd:71:84:95:a2:1d:d2:35:1d: d7:78:92:eb:3c:97:ff:33:14:9d:67:e5:1f:71:7e:28:00:e4: 13:d9:c3:24:ad:6b:6e:70:85:63:41:cd:bb:77:14:80:e2:11: da:4c:8a:2a:a2:66:3f:aa:b8:9d:74:c1:4e:c2:fe:83:75:4f: 0b:91:f5:d5:a6:96:f5:e5:e2:a8:d6:62:a1:03:aa:a4:c7:06: 1b:94:8f:56:7a:ab:cf:b2:36:d8:29:3c:87:84:23:d1:5e:7b: a5:81:84:ca:e0:80:e3:81:99:34:19:8e:68:1c:c0:1b:30:a3: 7d:17:80:e9:bb:72:58:0c:42:ab:07:55:3f:7f:6f:ca:11:6d: ed:7b:81:ab:08:1a:a5:e1:35:16:7c:22:5e:93:00:d5:0a:64: 46:aa:d8:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUWDVHtvUV98vq98nx8M6MiKvhH68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTkwMzM0NDlaFw0yNzA3MTgwMzM5NDlaMDMxMTAvBgNV BAMTKDNGNkNDMThGQjg3MUM0RTFBQUZERDE0NkNBMDkxN0QyRTM5RDgzM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nCG8vTVOURR8yuBJEWMr84kt BNTDKhDsvjMqQyO2okToueTv3pVPumMo0piu7iaK35dSH6rVJPiV2CVsrSQzf0Gm UgrSUIh1u86ow7TJBzVRSJcc4FCMeXZ6H3xoXc5d0/F0KIyWigvICSgi3VL+H/eq rilocxvQBFw1FthqgCaQ6e2YnvuxsjKQM5r2BOO7aIU4mVgtyNHMix/Ap9nGbYCs FAv4O4LcAFw5yy9BZoW5siRu7NaTeIYK/uHhVDFJmlWHJvKkpL9WCIUqMdIiV9yb 6havfYiXsFoT914LpuboR9xjLXlfoAxMc0Glh+EI/GyvIgv+DB7c5PzYqVsNAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUP2zBj7hxxOGq/dFGygkX0uOdgzswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM4NjQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwUAYIKwYBBQUHAQcBAf8EQTA/MD0EAgACMDcDBQAq Bd/CAwUAKglUxAMGBCoPYoAgMBADBgQqD2KDkAMGBCoPYoOgAwYEKg9ihFADBQAq D2KFMA0GCSqGSIb3DQEBCwUAA4IBAQA0k5ZLGIRcJO5yfhCvJhed5crFh7wSl+/z m0May7q1CM5QvxViXrmtHyIqtBAjX+2M6q0PFDkb65xqW9eXR+AFrEug2fNrexPp /5EIo8NQP4vXGrw4ohlErxzhJF7A5XSiQYf9cYSVoh3SNR3XeJLrPJf/MxSdZ+Uf cX4oAOQT2cMkrWtucIVjQc27dxSA4hHaTIoqomY/qriddMFOwv6DdU8LkfXVppb1 5eKo1mKhA6qkxwYblI9WeqvPsjbYKTyHhCPRXnulgYTK4IDjgZk0GY5oHMAbMKN9 F4Dpu3JYDEKrB1U/f2/KEW3te4GrCBql4TUWfCJekwDVCmRGqtiq -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:41 2026 by rpki-client