$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213982.roa File: AS213982.roa (raw, json) Hash identifier: EXubg1vmI7CsDWaBOrY4Hy7Q2ouCdpHlivTxiX9D/GI= Subject key identifier: 97:5B:E6:35:1F:A9:AD:8F:24:97:98:09:46:B1:A4:F9:09:06:2B:46 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 355002D726FC0C82263F422C63E96C8560AC0E79 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213982.roa Signing time: Sun 28 Jun 2026 18:56:07 +0000 ROA not before: Sun 28 Jun 2026 18:51:07 +0000 ROA not after: Sun 27 Jun 2027 18:56:07 +0000 asID: 213982 IP address blocks: 2a0a:6044:acd0::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:50:02:d7:26:fc:0c:82:26:3f:42:2c:63:e9:6c:85:60:ac:0e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:51:07 2026 GMT Not After : Jun 27 18:56:07 2027 GMT Subject: CN=975BE6351FA9AD8F2497980946B1A4F909062B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:51:bc:31:4d:10:0e:0d:42:34:b9:b0:09: 33:a8:4e:09:66:0d:17:5c:16:e1:ef:b2:80:80:7d: a9:ad:15:13:f5:fa:26:1a:69:3a:66:05:c4:7d:3c: b7:ed:6b:b9:86:a3:40:30:bb:59:5b:3e:ba:ae:b7: 5c:ed:2b:18:b4:b5:b3:7e:90:5c:56:15:c4:dd:d4: 07:5c:b4:c6:fd:b1:70:d1:f7:51:d3:3f:05:c5:88: b2:5b:16:f3:f6:5e:da:67:ea:07:22:28:26:87:30: 59:c6:95:21:a4:68:04:6c:ed:0e:3d:3b:dd:84:26: cf:45:14:d8:31:1c:44:5b:7e:1f:4f:14:51:c2:9b: ce:62:80:d2:6e:5a:95:b7:97:7a:0b:3a:d0:5b:9a: 0d:57:a9:be:05:7c:97:ab:c8:95:5b:4e:c8:e6:2e: ad:59:fc:f2:1d:d8:07:22:73:df:49:d8:9e:b8:63: 01:05:03:a3:17:91:9d:e6:e4:68:64:28:83:f6:2c: 53:03:d9:f5:2b:c5:61:e3:bb:5b:84:41:a6:5b:93: 87:0e:16:ef:4d:66:65:fd:76:26:d3:ad:dd:0e:c2: e4:f0:d7:8a:54:a2:57:3d:41:6b:62:71:f7:ff:a8: 6f:6e:e0:0a:ed:4a:82:00:42:b7:80:70:d9:62:d8: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5B:E6:35:1F:A9:AD:8F:24:97:98:09:46:B1:A4:F9:09:06:2B:46 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213982.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:acd0::/44 Signature Algorithm: sha256WithRSAEncryption 59:2a:17:94:c5:ad:73:d1:c3:e7:31:fe:d3:8d:16:18:71:46: df:bd:a2:d3:f9:e1:e6:a5:10:02:58:ac:d6:81:3f:4f:4f:47: 77:83:2d:3e:00:a5:90:f8:0d:36:44:d8:ef:dc:4a:55:a9:0c: b2:06:34:97:c6:81:f2:2a:30:66:43:1d:25:ec:da:49:ed:a9: 1b:e0:a3:23:51:ed:b9:fe:ab:b8:2f:f1:ac:d9:23:97:f2:1d: 25:67:26:cc:cf:19:65:b7:1e:13:6f:3b:57:7e:7e:27:21:07: 3f:88:a8:97:e4:e2:66:04:ca:77:d6:c5:18:99:cf:90:bf:1e: 88:88:e3:86:4a:cf:6e:42:f9:5e:2b:a9:23:eb:6e:a4:e8:4c: 0f:f5:6b:52:6c:23:8b:56:09:05:ef:da:db:b3:8b:cf:40:55: eb:03:e8:47:11:d9:f3:cc:41:4e:04:79:57:84:b5:28:03:53: 07:ae:04:63:74:f6:1a:82:1b:01:db:65:80:6c:45:ce:48:25: 98:76:61:8f:53:84:25:2d:6e:2c:9b:75:a3:70:c9:8e:5c:40: ac:e5:4b:e7:3b:c2:66:38:d3:ad:45:b7:41:e0:d4:07:06:82: f8:81:ff:8d:4b:05:7d:2d:6d:36:8e:49:e6:12:6d:69:2c:dc: ac:de:bc:98 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUNVAC1yb8DIImP0IsY+lshWCsDnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUxMDdaFw0yNzA2MjcxODU2MDdaMDMxMTAvBgNV BAMTKDk3NUJFNjM1MUZBOUFEOEYyNDk3OTgwOTQ2QjFBNEY5MDkwNjJCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGFG8MU0QDg1CNLmwCTOoTglm DRdcFuHvsoCAfamtFRP1+iYaaTpmBcR9PLfta7mGo0Awu1lbPrqut1ztKxi0tbN+ kFxWFcTd1AdctMb9sXDR91HTPwXFiLJbFvP2Xtpn6gciKCaHMFnGlSGkaARs7Q49 O92EJs9FFNgxHERbfh9PFFHCm85igNJuWpW3l3oLOtBbmg1Xqb4FfJeryJVbTsjm Lq1Z/PId2Acic99J2J64YwEFA6MXkZ3m5GhkKIP2LFMD2fUrxWHju1uEQaZbk4cO Fu9NZmX9dibTrd0OwuTw14pUolc9QWticff/qG9u4ArtSoIAQreAcNli2GhJAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUl1vmNR+prY8kl5gJRrGk+QkGK0YwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM5ODIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq CmBErNAwDQYJKoZIhvcNAQELBQADggEBAFkqF5TFrXPRw+cx/tONFhhxRt+9otP5 4ealEAJYrNaBP09PR3eDLT4ApZD4DTZE2O/cSlWpDLIGNJfGgfIqMGZDHSXs2knt qRvgoyNR7bn+q7gv8azZI5fyHSVnJszPGWW3HhNvO1d+fichBz+IqJfk4mYEynfW xRiZz5C/HoiI44ZKz25C+V4rqSPrbqToTA/1a1JsI4tWCQXv2tuzi89AVesD6EcR 2fPMQU4EeVeEtSgDUweuBGN09hqCGwHbZYBsRc5IJZh2YY9ThCUtbiybdaNwyY5c QKzlS+c7wmY4061Ft0Hg1AcGgviB/41LBX0tbTaOSeYSbWks3KzevJg= -----END CERTIFICATE-----Generated at Fri Jul 10 16:09:28 2026 by rpki-client