$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214344.roa File: AS214344.roa (raw, json) Hash identifier: Znh3U8UMo/z7aYGnvPqXNQCTGbAEtBmxf4K3ya+xXyU= Subject key identifier: FF:47:1B:F8:DF:34:BD:AB:51:53:C5:62:A8:F6:74:48:90:FC:25:A0 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 719888D9317575477FD993DD1DF2AB37C990F5DE Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214344.roa Signing time: Sun 01 Feb 2026 00:45:34 +0000 ROA not before: Sun 01 Feb 2026 00:40:34 +0000 ROA not after: Sun 31 Jan 2027 00:45:34 +0000 asID: 214344 IP address blocks: 2a0f:6284:a::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:98:88:d9:31:75:75:47:7f:d9:93:dd:1d:f2:ab:37:c9:90:f5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 1 00:40:34 2026 GMT Not After : Jan 31 00:45:34 2027 GMT Subject: CN=FF471BF8DF34BDAB5153C562A8F6744890FC25A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:ad:6e:f5:56:9e:b5:2d:87:5b:ac:1c:8d: 03:3a:0a:5e:a5:cb:6a:40:4c:ba:cc:ac:64:62:33: 17:f6:75:fc:43:e4:fa:b2:9a:7a:87:1b:04:db:ad: 85:65:2b:88:f8:de:7c:03:30:aa:1d:2e:96:c2:36: 17:55:4d:45:98:0d:51:4b:f5:99:02:5c:bf:31:d7: c1:55:8b:14:e7:80:96:d7:62:7f:4f:36:6e:d5:de: c9:a4:ab:cb:f3:6f:91:c5:30:55:d6:e8:e2:3f:7e: 59:b9:6a:53:f9:d1:2b:04:1a:c0:81:4e:cc:f6:81: 17:19:a4:85:91:f2:e6:dd:67:d2:d3:45:c9:62:85: fe:7e:e9:d6:dd:fe:f4:cd:de:04:52:2f:eb:d3:0e: d1:cd:4a:c5:1d:0b:d3:11:8c:8a:0a:75:1e:dd:11: 20:1a:75:e6:b0:97:54:57:ef:12:b7:7a:2c:9c:7b: 0e:41:67:88:37:4e:a4:86:80:05:62:72:9d:8a:62: 53:31:ac:34:7d:0a:9f:c4:ab:fa:41:a1:d8:f2:9c: 13:65:f5:47:83:3f:cb:fc:e0:4c:7f:a1:76:1e:46: 79:a3:94:15:60:07:0a:f8:14:7b:e8:b5:60:2f:56: 10:d0:b4:d1:c4:f9:c4:52:d8:83:d9:c0:75:69:29: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:47:1B:F8:DF:34:BD:AB:51:53:C5:62:A8:F6:74:48:90:FC:25:A0 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214344.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:a::/48 Signature Algorithm: sha256WithRSAEncryption 7e:dd:28:66:a6:53:a9:04:b3:7c:30:aa:0a:a5:bd:46:e0:57: e0:e0:72:cd:bb:fe:78:4c:fb:ce:33:92:5e:ba:7d:14:b4:4b: 51:7b:8c:44:4e:ba:b9:46:43:af:8c:fc:63:00:6d:dd:2c:43: d8:9b:b0:a5:f7:52:3a:c3:62:64:b8:51:fb:35:da:f9:8b:39: 66:c8:c1:00:ff:f6:45:6f:8f:67:d7:08:63:a7:4e:98:5d:84: e9:49:fb:af:83:56:f0:cc:60:02:95:57:79:25:13:4f:68:34: 63:df:cf:59:6a:38:94:28:87:d0:cd:b0:99:c9:9d:e7:cc:99: 05:d7:37:6d:8a:d7:a7:a3:37:a4:b2:43:a6:9e:9a:87:97:97: be:49:fc:c1:10:0f:9e:31:bd:42:a5:5b:2d:e5:de:9e:ae:15: e6:8e:98:b4:94:70:14:41:a1:3b:e8:4d:97:23:e8:db:a0:d6: f3:69:20:07:e6:29:d2:d5:9c:1b:6d:73:62:8f:60:66:40:46: 85:e9:26:30:43:55:d5:a0:85:c9:93:46:ef:58:28:a6:53:03: b2:65:35:da:31:a0:6a:aa:ea:5b:4c:3f:61:44:2a:5f:0b:6e: 40:c1:9b:eb:29:e4:24:14:ff:69:4d:eb:d0:77:52:ab:b7:51: 2f:bd:31:2e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUcZiI2TF1dUd/2ZPdHfKrN8mQ9d4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMDEwMDQwMzRaFw0yNzAxMzEwMDQ1MzRaMDMxMTAvBgNV BAMTKEZGNDcxQkY4REYzNEJEQUI1MTUzQzU2MkE4RjY3NDQ4OTBGQzI1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCc61u9VaetS2HW6wcjQM6Cl6l y2pATLrMrGRiMxf2dfxD5PqymnqHGwTbrYVlK4j43nwDMKodLpbCNhdVTUWYDVFL 9ZkCXL8x18FVixTngJbXYn9PNm7V3smkq8vzb5HFMFXW6OI/flm5alP50SsEGsCB Tsz2gRcZpIWR8ubdZ9LTRclihf5+6dbd/vTN3gRSL+vTDtHNSsUdC9MRjIoKdR7d ESAadeawl1RX7xK3eiycew5BZ4g3TqSGgAVicp2KYlMxrDR9Cp/Eq/pBodjynBNl 9UeDP8v84Ex/oXYeRnmjlBVgBwr4FHvotWAvVhDQtNHE+cRS2IPZwHVpKaKZAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU/0cb+N80vatRU8ViqPZ0SJD8JaAwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQzNDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAAowDQYJKoZIhvcNAQELBQADggEBAH7dKGamU6kEs3wwqgqlvUbgV+Dgcs27 /nhM+84zkl66fRS0S1F7jEROurlGQ6+M/GMAbd0sQ9ibsKX3UjrDYmS4Ufs12vmL OWbIwQD/9kVvj2fXCGOnTphdhOlJ+6+DVvDMYAKVV3klE09oNGPfz1lqOJQoh9DN sJnJnefMmQXXN22K16ejN6SyQ6aemoeXl75J/MEQD54xvUKlWy3l3p6uFeaOmLSU cBRBoTvoTZcj6Nug1vNpIAfmKdLVnBttc2KPYGZARoXpJjBDVdWghcmTRu9YKKZT A7JlNdoxoGqq6ltMP2FEKl8LbkDBm+sp5CQU/2lN69B3Uqu3US+9MS4= -----END CERTIFICATE-----Generated at Mon Feb 23 06:29:16 2026 by rpki-client