$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214299.roa File: AS214299.roa (raw, json) Hash identifier: V0I4ghx3EC7ZvemRuPl51anYRuUhMlP8x+c4O5SCOYk= Subject key identifier: 61:84:D3:8C:A5:D3:1A:3C:63:A8:84:74:84:D8:91:C3:67:ED:2F:80 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 10C6B9054328993FC172F899BAD024AD311CD7C5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214299.roa Signing time: Wed 29 Jul 2026 09:21:24 +0000 ROA not before: Wed 29 Jul 2026 09:16:24 +0000 ROA not after: Wed 28 Jul 2027 09:21:24 +0000 asID: 214299 IP address blocks: 2a05:dfc3:fd40::/44 maxlen: 52 2a05:dfc3:fd40::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c6:b9:05:43:28:99:3f:c1:72:f8:99:ba:d0:24:ad:31:1c:d7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 29 09:16:24 2026 GMT Not After : Jul 28 09:21:24 2027 GMT Subject: CN=6184D38CA5D31A3C63A8847484D891C367ED2F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:aa:e7:c7:80:e7:9e:f6:13:71:4f:32:2a:4d: b8:ed:71:71:32:11:f9:a7:bf:dc:5b:6a:f4:27:de: b2:f7:a3:e2:ef:67:1a:26:64:bd:5c:10:fe:83:10: ca:da:09:8b:c9:95:a4:84:bd:0f:65:f5:74:7f:d8: cb:d4:d4:80:d1:4e:47:a5:f6:27:f6:80:54:ab:42: 7e:cd:2d:67:46:33:6a:76:0b:34:79:29:99:d3:87: 22:89:01:5f:47:b4:96:7f:70:d3:1f:5b:7d:e5:72: e6:2a:d0:72:9a:d9:62:a7:0a:88:8b:1a:0e:fe:09: df:b9:a9:73:54:49:da:65:e5:5d:76:88:74:f2:7f: b9:22:2b:fb:fb:91:87:73:42:93:dd:84:71:1e:d1: 55:85:e6:9c:93:02:46:fe:12:80:25:1e:4c:9b:95: 17:60:b8:56:a1:6f:f7:01:80:8e:ea:d5:ad:67:35: bc:4e:1e:3e:d1:9c:3f:7d:09:fc:25:5b:45:c8:3c: db:ed:41:69:1e:92:e1:cf:bb:89:e9:22:b0:66:a3: 68:8e:c6:ff:5f:0d:8a:1d:72:34:d4:a4:e4:cd:5f: e1:47:0b:13:7c:23:7f:68:e0:f8:01:fc:ff:09:55: 2f:12:87:3a:df:58:6e:08:b1:cb:09:ea:50:f2:a5: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:84:D3:8C:A5:D3:1A:3C:63:A8:84:74:84:D8:91:C3:67:ED:2F:80 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd40::/44 Signature Algorithm: sha256WithRSAEncryption 25:eb:97:d2:12:fd:b4:3b:6e:d6:91:73:5a:f7:5a:b0:b9:d5: 10:bd:52:3b:33:49:4b:a9:d1:9d:ec:45:c1:e6:5e:ee:27:f0: 6a:f2:55:69:6f:d9:d2:89:15:02:ac:ed:2d:fe:4a:a8:89:12: 16:fa:df:3c:06:38:0e:98:05:d2:0a:f5:dd:17:00:2d:bc:6e: 65:55:93:b1:02:7e:09:fe:77:3d:d1:8b:b0:8b:de:2a:15:20: 9a:19:15:3c:85:85:a2:a8:f9:4a:51:08:09:06:65:18:1b:03: e2:07:41:83:cc:84:e3:ef:40:f2:5e:f4:60:c8:45:47:3b:60: 82:4f:6d:a3:7d:c1:38:5c:7e:c8:f2:30:75:7f:f9:e3:8f:2b: a2:e5:2f:3e:0d:3b:12:e3:8f:dc:a7:57:3e:05:13:1b:e6:74: 6e:74:e3:10:60:06:3b:8f:7f:ca:62:7e:39:15:1e:24:47:06: 1f:d6:3b:0b:b1:64:fe:ed:ce:4b:b4:6f:65:85:80:3f:3b:e1: 0f:17:4a:99:73:d2:cc:19:ec:94:45:2d:85:c3:a0:be:67:5a: 23:21:85:94:1a:ab:fc:1b:0b:17:38:3b:da:dc:58:fe:b3:8d: cb:f2:48:1a:c5:18:3d:59:d2:c7:ac:6a:29:2d:6e:04:2e:8d: 8c:ef:a5:f1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUEMa5BUMomT/BcviZutAkrTEc18UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjkwOTE2MjRaFw0yNzA3MjgwOTIxMjRaMDMxMTAvBgNV BAMTKDYxODREMzhDQTVEMzFBM0M2M0E4ODQ3NDg0RDg5MUMzNjdFRDJGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqufHgOee9hNxTzIqTbjtcXEy Efmnv9xbavQn3rL3o+LvZxomZL1cEP6DEMraCYvJlaSEvQ9l9XR/2MvU1IDRTkel 9if2gFSrQn7NLWdGM2p2CzR5KZnThyKJAV9HtJZ/cNMfW33lcuYq0HKa2WKnCoiL Gg7+Cd+5qXNUSdpl5V12iHTyf7kiK/v7kYdzQpPdhHEe0VWF5pyTAkb+EoAlHkyb lRdguFahb/cBgI7q1a1nNbxOHj7RnD99CfwlW0XIPNvtQWkekuHPu4npIrBmo2iO xv9fDYodcjTUpOTNX+FHCxN8I39o4PgB/P8JVS8ShzrfWG4IscsJ6lDypat3AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUYYTTjKXTGjxjqIR0hNiRw2ftL4AwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQyOTkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq Bd/D/UAwDQYJKoZIhvcNAQELBQADggEBACXrl9IS/bQ7btaRc1r3WrC51RC9Ujsz SUup0Z3sRcHmXu4n8GryVWlv2dKJFQKs7S3+SqiJEhb63zwGOA6YBdIK9d0XAC28 bmVVk7ECfgn+dz3Ri7CL3ioVIJoZFTyFhaKo+UpRCAkGZRgbA+IHQYPMhOPvQPJe 9GDIRUc7YIJPbaN9wThcfsjyMHV/+eOPK6LlLz4NOxLjj9ynVz4FExvmdG504xBg BjuPf8pifjkVHiRHBh/WOwuxZP7tzku0b2WFgD874Q8XSplz0swZ7JRFLYXDoL5n WiMhhZQaq/wbCxc4O9rcWP6zjcvySBrFGD1Z0sesaiktbgQujYzvpfE= -----END CERTIFICATE-----Generated at Fri Sep 4 23:13:40 2026 by rpki-client