$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214344.roa File: AS214344.roa (raw, json) Hash identifier: 4LyiWlwjebPZoc9PNOU4WFYHZ2eNnXJYJPmqicJXGac= Subject key identifier: 28:99:FA:AA:B8:A1:4D:CF:E4:24:4D:09:45:23:26:EB:52:F5:66:5A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3020207337A7EE7A7FAE8ECE8A214549F6FA0301 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214344.roa Signing time: Thu 20 Aug 2026 10:16:08 +0000 ROA not before: Thu 20 Aug 2026 10:11:08 +0000 ROA not after: Thu 19 Aug 2027 10:16:08 +0000 asID: 214344 IP address blocks: 2a0f:6280:1002::/48 maxlen: 48 2a0f:6280:1120::/48 maxlen: 48 2a0f:6280:1121::/48 maxlen: 48 2a0f:6280:112f::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:20:20:73:37:a7:ee:7a:7f:ae:8e:ce:8a:21:45:49:f6:fa:03:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 20 10:11:08 2026 GMT Not After : Aug 19 10:16:08 2027 GMT Subject: CN=2899FAAAB8A14DCFE4244D09452326EB52F5665A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:22:23:9d:ee:6d:0e:4a:43:44:3e:1b:95: 9d:21:90:df:ca:4e:f9:e8:31:43:0d:77:4f:d4:e1: 30:8e:cd:72:e7:42:06:eb:a5:be:80:14:5a:82:8e: 36:80:0a:fb:84:bb:92:cf:75:69:3b:24:cf:87:af: 5f:08:f8:fb:bb:39:19:dd:02:7b:91:4e:85:75:d9: 96:d4:40:70:a2:0d:74:a5:ae:cd:e4:d2:24:32:2d: 06:9f:b4:64:0b:d8:f7:ed:11:bc:10:1b:c6:90:80: 1e:41:d2:e6:09:3f:0e:02:5f:6f:f0:23:1a:ee:45: 2c:1c:34:5d:f6:56:27:d3:82:fa:32:64:52:7c:3d: 48:1c:7f:45:ab:0c:b6:a9:af:47:97:f0:c3:df:78: 6f:d6:6d:76:45:15:fd:98:90:71:08:5f:2e:00:17: 2f:96:e2:76:cc:dd:03:35:4b:ca:e3:8c:62:06:68: 34:ca:dd:5d:cd:25:10:f0:45:27:8b:87:25:6c:1e: 79:4d:76:30:42:5c:81:6f:9a:44:9d:96:e9:30:85: aa:0f:bd:96:b2:f9:36:73:31:2b:0b:61:a3:08:60: c2:64:07:87:1f:36:15:68:4b:c5:54:13:36:b6:77: 5c:57:17:a9:ee:46:75:70:18:bb:44:fd:89:9d:24: b0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:99:FA:AA:B8:A1:4D:CF:E4:24:4D:09:45:23:26:EB:52:F5:66:5A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214344.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1002::/48 2a0f:6280:1120::/47 2a0f:6280:112f::/48 Signature Algorithm: sha256WithRSAEncryption 02:fa:84:15:1b:0d:44:c2:f5:97:e4:50:6e:88:bc:86:d3:d3: 0a:37:3e:24:18:26:e6:7a:27:52:27:a6:2c:39:e5:14:8d:c7: ef:df:6a:1b:dd:ea:66:c7:90:89:1d:e3:65:5d:32:e8:cd:01: 8e:ae:b5:c0:0c:c1:cc:bc:52:11:d0:ef:99:fc:dc:fe:3d:fc: 30:dd:6b:b1:07:dc:6f:fe:79:47:8a:6c:9c:bc:dd:3c:4a:6f: 1a:47:d1:08:f1:28:c2:aa:f7:ba:80:ae:af:e1:53:c4:7d:7a: 32:ad:21:e9:98:eb:18:66:0b:5c:d9:a7:02:f2:94:49:7b:6b: ac:84:70:e0:8d:f5:f9:df:9a:c4:fe:9c:01:83:92:b6:d8:cf: e9:b9:32:3e:e9:27:59:48:7b:98:f3:7d:a2:fd:55:97:7e:65: 14:0a:9b:24:15:cd:58:de:7b:e8:9a:d2:86:95:83:a8:ba:b0: d9:4f:78:1f:f1:fa:fe:8e:d1:d7:6d:db:92:22:52:61:c6:7b: bc:a2:2d:52:cd:9a:21:aa:e0:c3:f4:0b:5d:e7:ca:bd:3d:9a: 02:f8:da:ae:a0:dc:14:d0:c2:e7:3d:cf:a1:5e:a7:17:53:ec: 63:63:de:6e:2b:76:0a:70:f1:62:8a:cb:99:b5:73:68:df:21: 71:6d:7e:8e -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUMCAgczen7np/ro7OiiFFSfb6AwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MjAxMDExMDhaFw0yNzA4MTkxMDE2MDhaMDMxMTAvBgNV BAMTKDI4OTlGQUFBQjhBMTREQ0ZFNDI0NEQwOTQ1MjMyNkVCNTJGNTY2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JSIjne5tDkpDRD4blZ0hkN/K TvnoMUMNd0/U4TCOzXLnQgbrpb6AFFqCjjaACvuEu5LPdWk7JM+Hr18I+Pu7ORnd AnuRToV12ZbUQHCiDXSlrs3k0iQyLQaftGQL2PftEbwQG8aQgB5B0uYJPw4CX2/w IxruRSwcNF32VifTgvoyZFJ8PUgcf0WrDLapr0eX8MPfeG/WbXZFFf2YkHEIXy4A Fy+W4nbM3QM1S8rjjGIGaDTK3V3NJRDwRSeLhyVsHnlNdjBCXIFvmkSdlukwhaoP vZay+TZzMSsLYaMIYMJkB4cfNhVoS8VUEza2d1xXF6nuRnVwGLtE/YmdJLAjAgMB AAGjggHxMIIB7TAdBgNVHQ4EFgQUKJn6qrihTc/kJE0JRSMm61L1ZlowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQzNDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMCEEAgACMBsDBwAq D2KAEAIDBwEqD2KAESADBwAqD2KAES8wDQYJKoZIhvcNAQELBQADggEBAAL6hBUb DUTC9ZfkUG6IvIbT0wo3PiQYJuZ6J1Inpiw55RSNx+/fahvd6mbHkIkd42VdMujN AY6utcAMwcy8UhHQ75n83P49/DDda7EH3G/+eUeKbJy83TxKbxpH0QjxKMKq97qA rq/hU8R9ejKtIemY6xhmC1zZpwLylEl7a6yEcOCN9fnfmsT+nAGDkrbYz+m5Mj7p J1lIe5jzfaL9VZd+ZRQKmyQVzVjee+ia0oaVg6i6sNlPeB/x+v6O0ddt25IiUmHG e7yiLVLNmiGq4MP0C13nyr09mgL42q6g3BTQwuc9z6FepxdT7GNj3m4rdgpw8WKK y5m1c2jfIXFtfo4= -----END CERTIFICATE-----Generated at Wed Aug 26 07:55:15 2026 by rpki-client