$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213880.roa File: AS213880.roa (raw, json) Hash identifier: ZQQlb4d4YsPlFDUQKEmPiayHI7FqwydippQ1jrDqHbQ= Subject key identifier: 62:E4:EB:B9:49:4F:DD:A2:17:9E:F9:48:A2:85:E2:B2:70:C2:19:6B Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0D87FA6428C38E5FD1D495D7AD3CBD89C71BDEB7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213880.roa Signing time: Sun 28 Jun 2026 18:55:54 +0000 ROA not before: Sun 28 Jun 2026 18:50:54 +0000 ROA not after: Sun 27 Jun 2027 18:55:54 +0000 asID: 213880 IP address blocks: 2a0a:6044:6b00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:87:fa:64:28:c3:8e:5f:d1:d4:95:d7:ad:3c:bd:89:c7:1b:de:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:54 2026 GMT Not After : Jun 27 18:55:54 2027 GMT Subject: CN=62E4EBB9494FDDA2179EF948A285E2B270C2196B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:e9:34:cc:28:d1:f7:f3:c2:51:55:d2:03: 33:ca:85:06:42:60:6a:fc:14:d4:f6:da:9c:e5:4d: ab:71:62:f2:ec:23:ed:61:05:a9:ff:b4:a2:f2:62: a3:9e:5e:8e:b1:31:7d:f1:be:96:db:73:a4:20:55: 09:77:44:b5:86:03:ab:6e:7d:de:08:a9:de:ac:61: ab:78:42:70:ac:67:64:4f:4a:25:92:6c:95:c5:f0: 23:1a:13:ee:dd:f8:62:b7:65:9d:89:4a:87:97:a5: e2:03:18:a9:5f:a3:a7:7e:f8:bc:e5:83:b0:3c:5b: da:7e:69:52:26:a8:e9:54:5b:8f:13:37:f0:8f:f8: 83:62:e9:b8:7f:91:f5:03:b1:60:1c:6c:00:cc:a3: f4:dd:03:90:f5:9c:5a:c9:98:75:b4:ab:b1:52:6e: 14:df:42:6e:19:d8:1e:80:75:46:98:67:ca:69:c8: 2f:b6:ea:65:79:98:0a:59:45:1a:63:7e:95:a4:a5: 3a:d2:54:c9:98:cb:9e:12:cb:c5:06:44:eb:78:8b: 27:2d:0d:73:96:5f:a8:97:d1:9b:75:c2:bc:b7:39: 3e:4d:bb:55:9c:61:6f:b7:c8:20:d5:8a:e9:93:27: 1b:23:72:75:d5:58:5a:cd:6c:bc:5f:1f:74:9f:46: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E4:EB:B9:49:4F:DD:A2:17:9E:F9:48:A2:85:E2:B2:70:C2:19:6B X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213880.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6b00::/40 Signature Algorithm: sha256WithRSAEncryption 0e:5b:de:94:73:95:d4:d4:07:53:ff:06:6d:15:ce:7a:5b:70: 5c:ac:68:4e:17:d6:4c:6f:28:1c:5d:0f:8a:b3:b8:58:79:5d: 15:c6:c7:89:96:3b:f7:87:f1:a2:a5:db:e0:8c:df:27:78:ab: a2:a1:a5:e1:c4:a7:a1:5c:c8:11:2e:e8:e3:61:7c:8e:1e:5e: 29:82:12:06:1d:a4:52:2a:7d:15:c4:44:83:76:4e:a0:7c:ef: 24:a8:f7:b4:24:09:8d:42:d8:2c:e8:7b:db:02:ef:fe:9b:89: 33:31:96:1d:40:4b:16:79:16:3f:86:cf:60:86:7b:5d:a9:4d: 42:2c:11:3c:be:d0:d3:10:c8:f2:58:61:4c:89:ef:fc:9a:a9: 9e:27:f9:fb:90:c2:78:97:51:74:50:04:15:21:81:52:6b:d2: fa:35:a7:0e:d7:8e:da:6c:7b:26:d5:77:00:d2:5a:c6:1f:db: 74:fd:cf:56:2d:5a:4e:b3:96:cc:6c:b7:af:7c:bc:f9:01:76: f3:b0:61:6b:86:b8:95:3d:8f:98:3d:b5:ee:62:12:72:45:d5: 98:e4:7d:72:21:43:f0:65:f8:b4:5d:d3:58:24:7d:e1:ac:51: 3c:09:40:71:88:68:60:ed:ed:36:f8:fc:cf:03:5b:55:46:3c: 65:69:e0:ce -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUDYf6ZCjDjl/R1JXXrTy9iccb3rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwNTRaFw0yNzA2MjcxODU1NTRaMDMxMTAvBgNV BAMTKDYyRTRFQkI5NDk0RkREQTIxNzlFRjk0OEEyODVFMkIyNzBDMjE5NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnOk0zCjR9/PCUVXSAzPKhQZC YGr8FNT22pzlTatxYvLsI+1hBan/tKLyYqOeXo6xMX3xvpbbc6QgVQl3RLWGA6tu fd4Iqd6sYat4QnCsZ2RPSiWSbJXF8CMaE+7d+GK3ZZ2JSoeXpeIDGKlfo6d++Lzl g7A8W9p+aVImqOlUW48TN/CP+INi6bh/kfUDsWAcbADMo/TdA5D1nFrJmHW0q7FS bhTfQm4Z2B6AdUaYZ8ppyC+26mV5mApZRRpjfpWkpTrSVMmYy54Sy8UGROt4iyct DXOWX6iX0Zt1wry3OT5Nu1WcYW+3yCDViumTJxsjcnXVWFrNbLxfH3SfRtsHAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUYuTruUlP3aIXnvlIooXisnDCGWswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM4ODAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEazANBgkqhkiG9w0BAQsFAAOCAQEADlvelHOV1NQHU/8GbRXOeltwXKxoThfW TG8oHF0PirO4WHldFcbHiZY794fxoqXb4IzfJ3iroqGl4cSnoVzIES7o42F8jh5e KYISBh2kUip9FcREg3ZOoHzvJKj3tCQJjULYLOh72wLv/puJMzGWHUBLFnkWP4bP YIZ7XalNQiwRPL7Q0xDI8lhhTInv/Jqpnif5+5DCeJdRdFAEFSGBUmvS+jWnDteO 2mx7JtV3ANJaxh/bdP3PVi1aTrOWzGy3r3y8+QF287Bha4a4lT2PmD217mISckXV mOR9ciFD8GX4tF3TWCR94axRPAlAcYhoYO3tNvj8zwNbVUY8ZWngzg== -----END CERTIFICATE-----Generated at Fri Jul 10 16:09:57 2026 by rpki-client