$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214323.roa File: AS214323.roa (raw, json) Hash identifier: TeXevcooWdazL9p0FGkFQtfSSTGdOIjo+zTA44TXgTU= Subject key identifier: 08:76:63:5E:AC:D4:58:11:AD:6C:70:E8:16:2B:4D:69:42:0F:B1:05 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 489DEBC4D3EE6B0DDE56435C4BFEA54ED30ED2B0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214323.roa Signing time: Sun 28 Jun 2026 18:55:37 +0000 ROA not before: Sun 28 Jun 2026 18:50:37 +0000 ROA not after: Sun 27 Jun 2027 18:55:37 +0000 asID: 214323 IP address blocks: 2a0a:6044:7900::/40 maxlen: 40 2a0a:6044:7900::/48 maxlen: 48 2a0a:6044:7901::/48 maxlen: 48 2a0a:6044:7902::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9d:eb:c4:d3:ee:6b:0d:de:56:43:5c:4b:fe:a5:4e:d3:0e:d2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:37 2026 GMT Not After : Jun 27 18:55:37 2027 GMT Subject: CN=0876635EACD45811AD6C70E8162B4D69420FB105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:8e:fe:ea:55:4a:10:6d:dd:5a:9e:03:e3: 7f:99:e5:08:ae:a4:cd:58:70:77:c5:f7:c4:e3:f4: f7:23:05:7c:35:70:fa:e2:5a:d9:16:4b:27:db:8a: 85:45:b1:9d:36:a5:79:de:7c:93:6f:f2:1e:fd:89: 64:73:ea:22:1a:5f:99:a5:66:8d:d0:cd:23:e8:fd: 0b:b2:08:13:2f:4a:f7:30:0e:41:34:c9:2b:02:41: de:3c:dc:69:aa:df:70:a6:4c:1c:e7:06:e3:ee:34: 0f:42:0a:4c:bf:9d:35:2c:5c:ef:57:9e:7f:83:e0: 6e:88:7c:3d:e1:f8:5f:13:6b:79:8d:fd:58:46:84: 6b:f7:e3:02:fc:7f:f5:4e:bf:51:e9:2b:7e:b5:9d: 1b:9a:25:c6:6c:d5:10:f2:74:2f:f9:25:00:5d:b9: 83:c7:ac:d4:59:d0:78:2c:37:08:bd:0d:16:e7:67: 5d:1a:94:96:b8:1a:13:8e:23:d4:b5:e0:f8:54:b1: 10:a1:68:eb:34:56:e3:99:90:55:cf:76:ce:9e:55: 8c:f4:f4:28:25:fb:7a:1b:31:9d:65:43:93:96:6c: 32:b2:59:01:ac:3b:cf:ad:5a:a0:16:ad:6a:53:ee: 4c:c1:c2:43:16:f2:93:63:07:e9:11:9e:90:b7:cc: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:76:63:5E:AC:D4:58:11:AD:6C:70:E8:16:2B:4D:69:42:0F:B1:05 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214323.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7900::/40 Signature Algorithm: sha256WithRSAEncryption 4b:de:50:5b:4e:3d:fb:9a:01:bd:a1:1a:46:8b:f3:18:7e:9a: 80:60:ad:78:7d:26:07:8c:e7:aa:35:e3:de:fb:0b:a0:d2:fb: 90:0e:a2:a1:01:23:4e:90:20:96:04:26:49:10:7c:61:df:9d: a2:ef:3c:98:ab:c0:0e:c8:d1:10:a9:96:e5:63:fa:86:8f:75: cf:40:85:d3:74:51:2c:34:95:aa:74:f6:cf:1e:64:c0:d4:79: 55:c9:53:b0:38:0f:8b:dc:b4:a2:89:e1:44:9c:cd:49:09:dd: f5:89:cd:36:50:87:98:28:27:4b:07:e9:15:5f:e0:10:66:a3: db:80:9a:25:6b:c9:4a:01:11:b3:05:d5:39:5d:e2:4d:24:df: 33:4e:67:a7:58:f3:f4:5f:f6:ea:34:02:87:09:65:ba:33:a8: cd:f7:4d:dc:9f:27:a3:a9:b9:af:f3:c5:7a:40:15:67:51:36: be:16:57:e4:6c:4e:02:48:a1:34:6a:f2:88:b5:64:de:d2:12: 27:ee:60:47:e8:d8:5f:fb:c2:8a:ce:60:40:cc:4a:37:bd:25: ea:58:21:6d:71:ad:3d:12:6f:f3:7a:7d:73:ee:9c:94:9e:d4: 92:81:4b:3e:4c:b4:d0:64:27:0b:dc:c4:e5:83:4a:c6:6c:34: 5a:68:8d:0c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUSJ3rxNPuaw3eVkNcS/6lTtMO0rAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwMzdaFw0yNzA2MjcxODU1MzdaMDMxMTAvBgNV BAMTKDA4NzY2MzVFQUNENDU4MTFBRDZDNzBFODE2MkI0RDY5NDIwRkIxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBE47+6lVKEG3dWp4D43+Z5Qiu pM1YcHfF98Tj9PcjBXw1cPriWtkWSyfbioVFsZ02pXnefJNv8h79iWRz6iIaX5ml Zo3QzSPo/QuyCBMvSvcwDkE0ySsCQd483Gmq33CmTBznBuPuNA9CCky/nTUsXO9X nn+D4G6IfD3h+F8Ta3mN/VhGhGv34wL8f/VOv1HpK361nRuaJcZs1RDydC/5JQBd uYPHrNRZ0HgsNwi9DRbnZ10alJa4GhOOI9S14PhUsRChaOs0VuOZkFXPds6eVYz0 9Cgl+3obMZ1lQ5OWbDKyWQGsO8+tWqAWrWpT7kzBwkMW8pNjB+kRnpC3zLSHAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUCHZjXqzUWBGtbHDoFitNaUIPsQUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQzMjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEeTANBgkqhkiG9w0BAQsFAAOCAQEAS95QW049+5oBvaEaRovzGH6agGCteH0m B4znqjXj3vsLoNL7kA6ioQEjTpAglgQmSRB8Yd+dou88mKvADsjREKmW5WP6ho91 z0CF03RRLDSVqnT2zx5kwNR5VclTsDgPi9y0oonhRJzNSQnd9YnNNlCHmCgnSwfp FV/gEGaj24CaJWvJSgERswXVOV3iTSTfM05np1jz9F/26jQChwllujOozfdN3J8n o6m5r/PFekAVZ1E2vhZX5GxOAkihNGryiLVk3tISJ+5gR+jYX/vCis5gQMxKN70l 6lghbXGtPRJv83p9c+6clJ7UkoFLPky00GQnC9zE5YNKxmw0WmiNDA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:39 2026 by rpki-client