$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214223.roa File: AS214223.roa (raw, json) Hash identifier: 7fVRrF69gGjvluWaqw6HHLxnIYHHBJZ2euGXn+oa0H8= Subject key identifier: 06:82:06:4C:50:D7:2D:A1:B7:3D:DA:A8:2B:DF:7C:AB:91:79:4C:58 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 19D89509A393BE45EE62731A24C58CCA61C5E7B9 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214223.roa Signing time: Sun 12 Jul 2026 06:00:02 +0000 ROA not before: Sun 12 Jul 2026 05:55:02 +0000 ROA not after: Sun 11 Jul 2027 06:00:02 +0000 asID: 214223 IP address blocks: 2a05:dfc3:fa00::/40 maxlen: 48 2a0a:6044:6400::/40 maxlen: 40 2a0a:6044:aa10::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d8:95:09:a3:93:be:45:ee:62:73:1a:24:c5:8c:ca:61:c5:e7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 12 05:55:02 2026 GMT Not After : Jul 11 06:00:02 2027 GMT Subject: CN=0682064C50D72DA1B73DDAA82BDF7CAB91794C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:26:b1:b5:91:af:75:a2:c5:49:0a:f1:d3:37: cc:0f:b0:2f:77:6b:55:5f:73:61:ab:62:88:96:25: 36:d6:7a:3b:a3:06:9c:fb:ef:bf:6f:75:70:01:35: da:41:3d:a7:7c:18:44:63:14:c1:e0:b3:69:0f:e1: 43:2e:a9:0a:98:c4:ef:0f:00:4c:39:c0:8e:d9:04: 4b:cf:ef:a2:6b:f2:eb:ae:39:6d:bc:a0:5b:7d:1f: 6d:b7:19:93:35:3b:ea:cf:73:3b:aa:42:71:31:f3: 5c:83:f0:67:4d:86:73:34:e5:51:c3:63:7e:8c:b2: 20:60:84:ee:3a:cf:32:b0:ca:22:4c:1d:1f:40:62: 96:50:dc:ab:f5:c1:4b:5d:d8:88:58:9a:b3:41:d5: 77:76:57:1b:9c:83:01:eb:31:53:cf:8f:0f:2c:24: 79:49:18:44:77:18:49:ac:ad:0e:a0:61:96:8e:b7: 93:a6:a6:13:36:89:30:26:a2:57:3a:ef:d1:cd:cf: 70:52:b1:28:7a:47:23:ed:e7:c9:74:71:8d:d6:a2: dc:aa:39:d1:7f:13:c4:57:78:f3:7c:e8:a5:5b:fc: 3b:34:30:8f:1d:e3:a7:6d:3a:b9:74:8e:39:16:94: b7:11:89:98:0a:68:b0:a1:46:d5:f7:3a:b3:c6:98: 8c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:82:06:4C:50:D7:2D:A1:B7:3D:DA:A8:2B:DF:7C:AB:91:79:4C:58 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214223.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fa00::/40 2a0a:6044:6400::/40 2a0a:6044:aa10::/48 Signature Algorithm: sha256WithRSAEncryption 75:82:82:e3:f2:03:50:da:02:20:a8:6a:ee:5b:d2:e6:64:ca: a3:19:b5:64:8b:11:2f:b2:e1:8f:c6:08:e6:05:db:72:4b:52: 31:b2:82:fa:fd:db:49:4c:c4:1a:04:af:46:a3:6f:48:99:b1: e4:6f:e6:90:24:4e:8d:f6:01:55:7a:26:de:2b:14:14:7d:fb: 83:be:a1:bb:e5:88:de:4f:e1:59:8d:72:ab:4d:88:d6:26:10: fa:96:e3:89:8a:97:3a:bf:35:d3:31:5a:65:c1:e5:58:e5:07: c7:ac:36:a7:b0:26:42:e9:8e:3a:38:a8:a8:b2:5a:26:24:78: a3:2b:3a:22:4b:81:69:2f:27:84:3b:da:fc:65:d4:76:d7:61: 1b:ae:ce:4d:c6:d8:c1:c5:ee:52:2a:25:b9:dd:cd:c7:9d:7b: 6d:d3:c8:40:67:6f:f1:cf:45:5f:18:a7:95:c3:d7:73:54:0a: 08:7e:a7:ec:41:4b:cf:5e:87:37:d9:b9:72:eb:25:3d:38:4c: 50:16:48:97:19:2d:bb:46:88:e2:fb:18:a1:68:c5:a7:36:02: f0:9b:87:f7:d4:04:bd:3e:28:29:cd:90:5b:bc:19:c2:47:90: 2e:8f:5f:ed:6e:89:6a:31:7c:a4:bc:d7:9c:a1:c7:c1:dd:0e: 72:54:e1:70 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUGdiVCaOTvkXuYnMaJMWMymHF57kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTIwNTU1MDJaFw0yNzA3MTEwNjAwMDJaMDMxMTAvBgNV BAMTKDA2ODIwNjRDNTBENzJEQTFCNzNEREFBODJCREY3Q0FCOTE3OTRDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTJrG1ka91osVJCvHTN8wPsC93 a1Vfc2GrYoiWJTbWejujBpz7779vdXABNdpBPad8GERjFMHgs2kP4UMuqQqYxO8P AEw5wI7ZBEvP76Jr8uuuOW28oFt9H223GZM1O+rPczuqQnEx81yD8GdNhnM05VHD Y36MsiBghO46zzKwyiJMHR9AYpZQ3Kv1wUtd2IhYmrNB1Xd2VxucgwHrMVPPjw8s JHlJGER3GEmsrQ6gYZaOt5OmphM2iTAmolc679HNz3BSsSh6RyPt58l0cY3Wotyq OdF/E8RXePN86KVb/Ds0MI8d46dtOrl0jjkWlLcRiZgKaLChRtX3OrPGmIwdAgMB AAGjggHvMIIB6zAdBgNVHQ4EFgQUBoIGTFDXLaG3PdqoK998q5F5TFgwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQyMjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwMgYIKwYBBQUHAQcBAf8EIzAhMB8EAgACMBkDBgAq Bd/D+gMGACoKYERkAwcAKgpgRKoQMA0GCSqGSIb3DQEBCwUAA4IBAQB1goLj8gNQ 2gIgqGruW9LmZMqjGbVkixEvsuGPxgjmBdtyS1IxsoL6/dtJTMQaBK9Go29ImbHk b+aQJE6N9gFVeibeKxQUffuDvqG75YjeT+FZjXKrTYjWJhD6luOJipc6vzXTMVpl weVY5QfHrDansCZC6Y46OKioslomJHijKzoiS4FpLyeEO9r8ZdR212Ebrs5NxtjB xe5SKiW53c3HnXtt08hAZ2/xz0VfGKeVw9dzVAoIfqfsQUvPXoc32bly6yU9OExQ FkiXGS27Roji+xihaMWnNgLwm4f31AS9PigpzZBbvBnCR5Auj1/tbolqMXykvNec ocfB3Q5yVOFw -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:38 2026 by rpki-client