$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214242.roa File: AS214242.roa (raw, json) Hash identifier: hY//b8ATHMAmNOJC44DSFfo69XNmTuiMtDhruzEAL1Y= Subject key identifier: D7:CB:BF:3B:10:74:7F:6A:C0:DB:DE:50:C2:B9:E8:CF:07:8F:C1:17 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1D130D96CE99A9AC0E8583CAB793D2AD7E2C45BB Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214242.roa Signing time: Fri 31 Jul 2026 21:51:58 +0000 ROA not before: Fri 31 Jul 2026 21:46:58 +0000 ROA not after: Fri 30 Jul 2027 21:51:58 +0000 asID: 214242 IP address blocks: 2a0a:6044:7700::/40 maxlen: 48 2a0f:6284:4900::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:13:0d:96:ce:99:a9:ac:0e:85:83:ca:b7:93:d2:ad:7e:2c:45:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 31 21:46:58 2026 GMT Not After : Jul 30 21:51:58 2027 GMT Subject: CN=D7CBBF3B10747F6AC0DBDE50C2B9E8CF078FC117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:b8:91:df:54:2d:ce:7d:9e:58:c1:57:f5: a2:7c:49:cf:9e:ae:fd:0f:f4:3a:a7:31:b4:c9:5a: 10:26:45:17:43:b5:9f:6c:52:a4:a3:91:11:bc:1d: f7:1f:8e:a0:9c:68:ce:d6:fe:e6:f9:4c:93:42:25: 45:76:4b:67:83:db:8c:e8:6c:a6:fc:89:f3:33:b9: 15:0d:c2:71:4e:5f:7f:4a:1b:d1:76:6e:3d:e9:16: f3:67:4a:5c:40:2e:71:15:ca:43:ac:2b:e3:dc:4b: 4f:03:e6:d9:2c:40:cc:7d:b6:12:db:89:5a:9d:03: 72:2e:2c:b5:2f:40:3c:d0:b0:2d:91:58:fe:e0:53: 42:e0:ec:6d:f4:01:e1:2f:55:8d:90:25:88:db:5c: 49:eb:ea:2a:ff:e5:fd:38:2a:00:3a:a4:01:82:20: a6:7d:ab:eb:02:89:7b:c8:c8:2d:42:05:47:84:b4: 4d:90:00:0d:63:a1:8b:4c:9a:bc:4b:f6:4e:a1:46: b7:72:ca:62:18:96:9a:60:c3:26:da:4c:53:7d:89: 4e:e0:40:95:b1:14:cc:54:cf:44:b0:ef:81:bc:53: 1a:d6:6d:a1:d7:c1:6b:f7:55:3c:d1:cb:26:7e:dd: 8b:66:d2:f3:5f:38:71:2d:f1:51:a7:a8:79:f9:ca: ba:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CB:BF:3B:10:74:7F:6A:C0:DB:DE:50:C2:B9:E8:CF:07:8F:C1:17 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7700::/40 2a0f:6284:4900::/40 Signature Algorithm: sha256WithRSAEncryption 5d:38:95:44:38:1e:9d:65:9c:04:22:e7:73:4a:49:a1:2a:dd: 48:13:39:93:50:cc:b8:ca:70:b3:7b:f0:a6:d8:6f:35:d3:b5: 45:0f:86:fc:5d:53:c0:2f:a3:bb:97:a3:9c:3f:d2:8b:61:74: 5a:39:df:3f:45:00:3f:32:a5:91:16:f8:25:d9:b6:80:4d:40: 06:5b:3b:6c:1c:ed:3e:76:f9:c5:4a:c6:dc:f3:46:14:28:23: 18:c6:74:26:39:9a:61:89:74:5a:5d:85:40:2a:ea:10:76:ff: d8:02:ce:0f:89:58:71:2d:50:39:dd:80:cc:d8:27:b0:86:29: 4e:4f:5f:92:50:46:62:6f:2f:b1:4d:c8:8c:0e:2b:24:2a:38: 8a:13:c6:eb:94:2d:54:87:59:66:a0:c3:b4:cb:2d:b0:3a:56: e8:f3:3b:48:f8:72:32:6f:2b:70:2d:a1:d0:97:49:1a:97:60: 31:b8:0f:a5:7a:37:87:1d:99:f1:b6:c4:8b:12:f0:5d:07:81: 19:6f:c5:71:fd:4a:3b:c8:40:eb:1e:c1:1a:2e:f4:32:d2:31: 14:e6:62:f3:3b:c8:9d:86:62:a1:a6:59:21:fd:2e:78:a4:b3: 4d:ce:b1:27:ea:12:db:57:01:70:10:2b:52:6c:97:20:ba:10: 51:3a:bd:7e -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUHRMNls6ZqawOhYPKt5PSrX4sRbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MzEyMTQ2NThaFw0yNzA3MzAyMTUxNThaMDMxMTAvBgNV BAMTKEQ3Q0JCRjNCMTA3NDdGNkFDMERCREU1MEMyQjlFOENGMDc4RkMxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBG7iR31Qtzn2eWMFX9aJ8Sc+e rv0P9DqnMbTJWhAmRRdDtZ9sUqSjkRG8HfcfjqCcaM7W/ub5TJNCJUV2S2eD24zo bKb8ifMzuRUNwnFOX39KG9F2bj3pFvNnSlxALnEVykOsK+PcS08D5tksQMx9thLb iVqdA3IuLLUvQDzQsC2RWP7gU0Lg7G30AeEvVY2QJYjbXEnr6ir/5f04KgA6pAGC IKZ9q+sCiXvIyC1CBUeEtE2QAA1joYtMmrxL9k6hRrdyymIYlppgwybaTFN9iU7g QJWxFMxUz0Sw74G8UxrWbaHXwWv3VTzRyyZ+3Ytm0vNfOHEt8VGnqHn5yrpNAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQU18u/OxB0f2rA295QwrnozwePwRcwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQyNDIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAq CmBEdwMGACoPYoRJMA0GCSqGSIb3DQEBCwUAA4IBAQBdOJVEOB6dZZwEIudzSkmh Kt1IEzmTUMy4ynCze/Cm2G8107VFD4b8XVPAL6O7l6OcP9KLYXRaOd8/RQA/MqWR Fvgl2baATUAGWztsHO0+dvnFSsbc80YUKCMYxnQmOZphiXRaXYVAKuoQdv/YAs4P iVhxLVA53YDM2CewhilOT1+SUEZiby+xTciMDiskKjiKE8brlC1Uh1lmoMO0yy2w Olbo8ztI+HIybytwLaHQl0kal2AxuA+lejeHHZnxtsSLEvBdB4EZb8Vx/Uo7yEDr HsEaLvQy0jEU5mLzO8idhmKhplkh/S54pLNNzrEn6hLbVwFwECtSbJcguhBROr1+ -----END CERTIFICATE-----Generated at Sat Sep 5 00:23:00 2026 by rpki-client