$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214501.roa File: AS214501.roa (raw, json) Hash identifier: 7kjSrCMDxSI2Aou0IEHVu+KHD4iJSYweHygg8gGQQvE= Subject key identifier: E3:53:CA:0F:58:F9:2C:38:F9:86:F7:84:4B:99:78:A0:2C:09:70:BD Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4D55EC415E6B8D16BDB704F12B2AAD5D8497EDD3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214501.roa Signing time: Sun 28 Jun 2026 18:55:28 +0000 ROA not before: Sun 28 Jun 2026 18:50:28 +0000 ROA not after: Sun 27 Jun 2027 18:55:28 +0000 asID: 214501 IP address blocks: 2a0a:6044:6a00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:55:ec:41:5e:6b:8d:16:bd:b7:04:f1:2b:2a:ad:5d:84:97:ed:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:28 2026 GMT Not After : Jun 27 18:55:28 2027 GMT Subject: CN=E353CA0F58F92C38F986F7844B9978A02C0970BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:68:77:23:7d:41:0f:93:05:39:a0:e4:c7: 8c:c3:19:94:07:23:a1:67:e2:2e:d9:41:df:23:81: fc:c6:20:40:fa:8e:d9:4f:2f:10:80:c6:18:46:bf: 95:c8:1e:09:3c:3f:e1:94:bc:b0:f8:ea:e1:32:27: 4a:72:39:27:4f:bc:d3:dd:a4:6a:bf:dc:41:be:0e: 90:8c:c9:a2:b3:f3:b0:dd:f3:d4:91:28:92:b8:3b: b7:81:c0:6f:74:6f:14:7d:82:bc:df:ac:b6:b9:b9: 8a:05:d1:7b:ae:05:a0:af:4f:8d:80:f8:96:68:90: 63:ed:63:10:0e:3d:0a:8a:9c:46:0c:6c:d2:96:32: 53:7d:61:8a:06:43:66:e8:c9:a7:3e:f4:50:0d:55: bf:a7:f6:b1:a9:f8:69:c8:c5:e7:d5:7f:8b:5b:08: dd:06:ff:69:e8:21:35:9a:d4:c9:ea:94:37:bb:4f: 20:89:d3:ce:1d:fb:59:69:5f:8a:a3:0a:ba:62:94: dd:a0:16:0c:10:b0:89:56:46:69:5d:5c:7e:d6:9f: 35:7e:d1:6d:ee:6c:cd:f9:ca:11:d7:13:4e:f4:4c: 7b:49:a4:8b:91:f5:46:49:e8:7d:a1:91:3c:5d:16: f1:7b:dd:ca:b7:b2:b9:f7:24:56:80:b5:15:f2:da: d7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:53:CA:0F:58:F9:2C:38:F9:86:F7:84:4B:99:78:A0:2C:09:70:BD X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214501.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6a00::/40 Signature Algorithm: sha256WithRSAEncryption 1d:e2:b4:22:29:1e:48:58:94:6c:38:7a:ee:2d:d2:1a:6f:25: eb:b0:dc:5d:13:c2:d8:d3:55:23:ad:8e:60:06:ad:ba:8a:ce: 21:77:aa:9e:c2:e3:e0:35:54:3a:dd:6b:5e:f9:b8:ed:21:93: 41:74:50:91:52:8c:60:27:1b:5f:93:ff:da:2b:26:fe:ae:86: 3a:b5:41:35:c7:76:fd:cd:86:6c:67:34:e5:04:0a:cf:a7:f6: 88:31:ae:c4:b7:c0:45:c3:03:ee:80:40:bf:fa:2f:40:4e:7e: 41:19:fc:80:ce:5a:cb:db:69:4d:a6:2a:c9:d6:4d:73:2d:72: ae:97:44:bd:42:8b:a1:6c:1d:48:96:66:43:dd:2a:51:26:c8: f9:c2:b1:cf:49:0b:26:80:dc:48:f8:2c:4f:a2:e8:10:5b:55: ea:1d:a7:64:65:c3:c1:50:b4:5f:86:a0:b4:9e:ff:6d:52:17: 41:09:b0:70:df:ff:ff:1c:6c:82:64:f6:74:1f:ed:e7:2d:23: 62:bd:db:eb:eb:1f:7d:c5:4c:5e:87:ed:a4:d1:d4:88:90:5d: c1:43:8a:30:b8:1f:c9:33:47:59:8e:6b:c1:8b:3d:07:b4:d6: 76:80:8d:ab:89:2a:01:25:b9:09:a9:bd:e1:21:23:55:51:68: 9e:3c:11:ae -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUTVXsQV5rjRa9twTxKyqtXYSX7dMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwMjhaFw0yNzA2MjcxODU1MjhaMDMxMTAvBgNV BAMTKEUzNTNDQTBGNThGOTJDMzhGOTg2Rjc4NDRCOTk3OEEwMkMwOTcwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1mh3I31BD5MFOaDkx4zDGZQH I6Fn4i7ZQd8jgfzGIED6jtlPLxCAxhhGv5XIHgk8P+GUvLD46uEyJ0pyOSdPvNPd pGq/3EG+DpCMyaKz87Dd89SRKJK4O7eBwG90bxR9grzfrLa5uYoF0XuuBaCvT42A +JZokGPtYxAOPQqKnEYMbNKWMlN9YYoGQ2boyac+9FANVb+n9rGp+GnIxefVf4tb CN0G/2noITWa1MnqlDe7TyCJ084d+1lpX4qjCrpilN2gFgwQsIlWRmldXH7WnzV+ 0W3ubM35yhHXE070THtJpIuR9UZJ6H2hkTxdFvF73cq3srn3JFaAtRXy2tedAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU41PKD1j5LDj5hveES5l4oCwJcL0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ1MDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEajANBgkqhkiG9w0BAQsFAAOCAQEAHeK0IikeSFiUbDh67i3SGm8l67DcXRPC 2NNVI62OYAatuorOIXeqnsLj4DVUOt1rXvm47SGTQXRQkVKMYCcbX5P/2ism/q6G OrVBNcd2/c2GbGc05QQKz6f2iDGuxLfARcMD7oBAv/ovQE5+QRn8gM5ay9tpTaYq ydZNcy1yrpdEvUKLoWwdSJZmQ90qUSbI+cKxz0kLJoDcSPgsT6LoEFtV6h2nZGXD wVC0X4agtJ7/bVIXQQmwcN///xxsgmT2dB/t5y0jYr3b6+sffcVMXoftpNHUiJBd wUOKMLgfyTNHWY5rwYs9B7TWdoCNq4kqASW5Cam94SEjVVFonjwRrg== -----END CERTIFICATE-----Generated at Fri Jul 10 16:09:26 2026 by rpki-client