$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214723.roa File: AS214723.roa (raw, json) Hash identifier: qIZLTZ8Ru8WsFf/q1A1DDJMBTAtbl823ozWVTMrW+WY= Subject key identifier: B9:B5:97:19:0C:7E:7A:C5:A7:69:45:27:7B:DA:36:00:5B:7E:A3:DB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4D84FDE5DDCAF0B12F4C14BA3ECA1A1607089529 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214723.roa Signing time: Sun 28 Jun 2026 18:56:04 +0000 ROA not before: Sun 28 Jun 2026 18:51:04 +0000 ROA not after: Sun 27 Jun 2027 18:56:04 +0000 asID: 214723 IP address blocks: 2a0a:6044:ba00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:84:fd:e5:dd:ca:f0:b1:2f:4c:14:ba:3e:ca:1a:16:07:08:95:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:51:04 2026 GMT Not After : Jun 27 18:56:04 2027 GMT Subject: CN=B9B597190C7E7AC5A76945277BDA36005B7EA3DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:b9:6c:46:c9:9a:99:24:1f:ac:74:67:46: b7:40:a2:62:56:71:42:19:e9:ea:98:d9:f7:be:4a: 87:e5:0b:58:13:a2:20:69:3f:4b:3c:a5:d0:9b:c5: 66:ac:3e:12:99:c6:1b:da:61:71:aa:75:ee:3a:d1: f3:b9:4e:90:0d:d0:9d:ea:37:2f:e2:b2:79:7c:af: 06:65:63:0d:ff:45:e8:00:88:b3:13:8a:de:20:43: 98:e5:38:29:a3:cb:ca:f2:af:b9:b5:3b:6d:c8:6e: a9:1d:46:1b:70:9b:54:fb:68:f9:fa:c8:96:03:e2: 1c:bd:24:69:6a:69:6f:8a:54:5e:cd:00:c3:57:47: 13:de:19:62:aa:88:09:21:7b:39:8e:6c:7b:44:20: 16:d1:b8:9a:56:a6:52:6a:69:74:d5:07:78:99:2b: fd:be:32:91:5f:a6:0f:e5:e2:32:ff:7a:e3:6c:be: 3b:52:1d:39:51:c1:3b:96:4c:e6:a2:83:ff:55:65: d4:1c:fe:83:bb:a7:76:d7:18:65:77:64:73:dc:a7: 22:f8:28:57:09:b1:1a:cb:d9:17:d4:6c:e1:8d:c1: ce:24:a4:92:0d:fa:50:22:d9:c0:c9:db:3e:c2:85: 32:12:0f:76:30:c3:07:70:ce:f9:0e:e8:40:af:1f: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:97:19:0C:7E:7A:C5:A7:69:45:27:7B:DA:36:00:5B:7E:A3:DB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214723.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba00::/40 Signature Algorithm: sha256WithRSAEncryption 0c:76:37:d6:29:97:8c:71:f0:ce:12:3b:36:b8:18:bc:4d:71: 08:47:aa:df:fa:33:ca:df:de:5d:03:92:23:dd:85:02:d5:e8: ff:9a:b2:4d:62:a3:0c:08:80:d1:e2:95:19:f7:5e:7a:38:77: cc:81:4f:1e:79:77:25:d1:50:fa:e7:02:fa:49:8c:04:de:fc: 85:a0:22:94:41:d4:44:6f:ae:c0:3e:93:a3:db:f4:c6:7e:f4: 03:3d:bb:73:b2:1f:5b:97:13:eb:51:24:1b:d1:26:4b:1e:0a: 27:09:6f:85:8a:eb:e8:9e:d4:e6:d3:2f:ba:d1:21:10:0e:18: 5a:cd:81:cf:68:1a:6e:1a:65:6d:f3:5c:8f:50:5a:61:f7:dc: a8:cb:98:69:4b:98:92:d8:ce:05:a9:ff:e3:bb:77:fe:50:28: ef:9c:ed:7a:7e:12:7c:06:1f:2d:f7:f2:f5:a6:ce:4d:72:a3: 5d:89:e1:e3:38:78:b7:f5:2e:97:93:79:e1:2f:3e:f5:54:b1: 5d:7b:20:81:20:62:91:ef:28:f9:73:e5:27:1b:12:ec:04:cf: 3a:ba:05:29:3b:17:fd:b1:61:3a:ed:79:f4:ce:ca:29:49:7e: ca:44:48:7e:03:0b:70:8d:2a:45:3f:ca:aa:4e:8e:c6:9b:82: db:1e:f8:76 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUTYT95d3K8LEvTBS6PsoaFgcIlSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUxMDRaFw0yNzA2MjcxODU2MDRaMDMxMTAvBgNV BAMTKEI5QjU5NzE5MEM3RTdBQzVBNzY5NDUyNzdCREEzNjAwNUI3RUEzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCverlsRsmamSQfrHRnRrdAomJW cUIZ6eqY2fe+SoflC1gToiBpP0s8pdCbxWasPhKZxhvaYXGqde460fO5TpAN0J3q Ny/isnl8rwZlYw3/RegAiLMTit4gQ5jlOCmjy8ryr7m1O23IbqkdRhtwm1T7aPn6 yJYD4hy9JGlqaW+KVF7NAMNXRxPeGWKqiAkhezmObHtEIBbRuJpWplJqaXTVB3iZ K/2+MpFfpg/l4jL/euNsvjtSHTlRwTuWTOaig/9VZdQc/oO7p3bXGGV3ZHPcpyL4 KFcJsRrL2RfUbOGNwc4kpJIN+lAi2cDJ2z7ChTISD3YwwwdwzvkO6ECvHwNVAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUubWXGQx+esWnaUUne9o2AFt+o9swHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ3MjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEujANBgkqhkiG9w0BAQsFAAOCAQEADHY31imXjHHwzhI7NrgYvE1xCEeq3/oz yt/eXQOSI92FAtXo/5qyTWKjDAiA0eKVGfdeejh3zIFPHnl3JdFQ+ucC+kmMBN78 haAilEHURG+uwD6To9v0xn70Az27c7IfW5cT61EkG9EmSx4KJwlvhYrr6J7U5tMv utEhEA4YWs2Bz2gabhplbfNcj1BaYffcqMuYaUuYktjOBan/47t3/lAo75zten4S fAYfLffy9abOTXKjXYnh4zh4t/Uul5N54S8+9VSxXXsggSBike8o+XPlJxsS7ATP OroFKTsX/bFhOu159M7KKUl+ykRIfgMLcI0qRT/Kqk6OxpuC2x74dg== -----END CERTIFICATE-----Generated at Fri Jul 10 16:09:26 2026 by rpki-client