$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214344.roa File: AS214344.roa (raw, json) Hash identifier: 7/7VZNMUV1MoJz1cU/wmMDFajodv724H97EW6VJIZR8= Subject key identifier: F9:90:28:4B:9C:01:23:17:95:72:5E:04:8A:05:CB:10:82:F1:94:26 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 028A801BD66B30CD848F45BAD3F52DFD928F32F1 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214344.roa Signing time: Thu 01 Oct 2026 03:33:06 +0000 ROA not before: Thu 01 Oct 2026 03:28:06 +0000 ROA not after: Thu 30 Sep 2027 03:33:06 +0000 asID: 214344 IP address blocks: 2a0f:6280:1060::/48 maxlen: 48 2a0f:6280:1061::/48 maxlen: 48 2a0f:6280:1062::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 09:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8a:80:1b:d6:6b:30:cd:84:8f:45:ba:d3:f5:2d:fd:92:8f:32:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 1 03:28:06 2026 GMT Not After : Sep 30 03:33:06 2027 GMT Subject: CN=F990284B9C01231795725E048A05CB1082F19426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:a2:ee:ec:91:37:10:e9:fa:76:fa:89:d9: 57:d9:54:f1:de:c5:82:bc:95:95:de:63:49:29:44: 03:72:eb:ce:0f:6b:63:5c:66:7b:d7:4c:22:2e:0c: 15:b0:e8:4b:ea:39:1a:22:5c:22:cf:ca:cd:09:58: 4a:2d:d6:38:b1:5b:d3:db:c3:53:2c:2e:bd:41:63: 7b:53:5f:43:a1:62:1a:f1:6b:41:d5:db:7e:52:d9: 7f:70:64:be:af:9d:b9:41:30:ba:c6:c8:c1:55:be: 99:46:3d:32:c0:c0:fd:7d:d2:c6:45:e6:b9:ab:b2: 23:87:9d:c0:9e:9e:05:a5:8e:51:88:60:ff:ec:eb: ae:00:f2:1d:4f:07:6f:d6:4b:60:d5:5a:b3:23:4f: 54:f9:99:9f:2d:4c:70:3f:1d:05:3f:33:64:e7:cd: 98:12:14:bd:36:7a:57:c0:91:2c:22:4a:a2:aa:e7: b3:d8:85:8e:27:1c:b1:eb:0e:79:e3:9f:a4:c0:0b: c3:2c:c8:8c:e4:40:6a:af:60:0f:ec:42:2d:64:20: 11:ef:03:db:de:ea:63:73:c7:21:9b:0d:7e:0b:45: 8d:6f:ae:d0:04:7e:20:8c:13:b1:6a:ec:66:82:78: 35:ce:05:b4:49:6a:72:f0:20:38:73:81:fe:c4:a5: 4a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:90:28:4B:9C:01:23:17:95:72:5E:04:8A:05:CB:10:82:F1:94:26 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214344.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1060::-2a0f:6280:1062:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 59:20:61:e0:cb:78:32:ec:43:ca:4a:4e:35:55:5e:11:e5:fb: 5d:72:ea:a2:9d:33:0a:d8:a9:80:73:b4:0b:18:bf:24:24:b2: 73:08:c9:e9:28:29:c3:73:0a:6f:a9:a2:fa:ac:7d:d0:40:a0: 43:e2:0f:95:73:91:10:6d:ef:08:41:37:2f:28:f5:3b:b2:5b: 19:71:3d:8f:06:89:b6:5e:a0:84:e2:ad:33:ac:bd:e2:d1:66: 53:b9:0d:95:1f:3a:6a:db:1d:28:5b:af:6a:c1:01:af:fa:cf: 30:e2:21:7e:62:9e:00:51:c5:4b:98:ba:55:e0:f9:a8:79:60: f0:2d:73:10:1f:5b:7b:68:9d:83:16:a9:e9:02:3e:ef:a0:2e: f1:45:75:4b:ba:0b:4a:ff:3c:c2:02:5d:79:48:9e:7e:6e:70: ab:e8:0c:06:0f:be:ab:1d:7f:0d:d5:48:bc:22:5e:d4:2d:4c: ab:e8:83:d6:bd:8a:7f:80:63:f4:3a:a8:34:e5:19:0d:ba:45: ed:fb:9f:29:3f:9c:33:12:2b:6c:a8:9c:13:3b:0d:23:8c:92: 26:a4:9e:79:d2:31:dd:fd:2f:87:67:b4:58:72:30:8c:5b:bc: 36:6b:f9:d5:97:ef:c5:ef:40:e2:83:36:28:fa:18:0a:95:c0: 55:c8:68:07 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUAoqAG9ZrMM2Ej0W60/Ut/ZKPMvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMDEwMzI4MDZaFw0yNzA5MzAwMzMzMDZaMDMxMTAvBgNV BAMTKEY5OTAyODRCOUMwMTIzMTc5NTcyNUUwNDhBMDVDQjEwODJGMTk0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWx6Lu7JE3EOn6dvqJ2VfZVPHe xYK8lZXeY0kpRANy684Pa2NcZnvXTCIuDBWw6EvqORoiXCLPys0JWEot1jixW9Pb w1MsLr1BY3tTX0OhYhrxa0HV235S2X9wZL6vnblBMLrGyMFVvplGPTLAwP190sZF 5rmrsiOHncCengWljlGIYP/s664A8h1PB2/WS2DVWrMjT1T5mZ8tTHA/HQU/M2Tn zZgSFL02elfAkSwiSqKq57PYhY4nHLHrDnnjn6TAC8MsyIzkQGqvYA/sQi1kIBHv A9ve6mNzxyGbDX4LRY1vrtAEfiCME7Fq7GaCeDXOBbRJanLwIDhzgf7EpUqTAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU+ZAoS5wBIxeVcl4EigXLEILxlCYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQzNDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgACMBQwEgMH BSoPYoAQYAMHACoPYoAQYjANBgkqhkiG9w0BAQsFAAOCAQEAWSBh4Mt4MuxDykpO NVVeEeX7XXLqop0zCtipgHO0Cxi/JCSycwjJ6Sgpw3MKb6mi+qx90ECgQ+IPlXOR EG3vCEE3Lyj1O7JbGXE9jwaJtl6ghOKtM6y94tFmU7kNlR86atsdKFuvasEBr/rP MOIhfmKeAFHFS5i6VeD5qHlg8C1zEB9be2idgxap6QI+76Au8UV1S7oLSv88wgJd eUiefm5wq+gMBg++qx1/DdVIvCJe1C1Mq+iD1r2Kf4Bj9DqoNOUZDbpF7fufKT+c MxIrbKicEzsNI4ySJqSeedIx3f0vh2e0WHIwjFu8Nmv51Zfvxe9A4oM2KPoYCpXA VchoBw== -----END CERTIFICATE-----Generated at Mon Oct 12 03:13:02 2026 by rpki-client