$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214768.roa File: AS214768.roa (raw, json) Hash identifier: KKNwf3QiPUMG8e3FFQVNS2/6XaYyNB55KHdRgGtpHbI= Subject key identifier: 79:B6:B6:2A:6B:02:B1:58:60:53:A7:92:FA:A2:27:D0:2E:4F:41:E6 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 046B8E7ED9695FB76793CCE93631FBBFC6644E67 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214768.roa Signing time: Tue 11 Aug 2026 12:52:00 +0000 ROA not before: Tue 11 Aug 2026 12:47:00 +0000 ROA not after: Tue 10 Aug 2027 12:52:00 +0000 asID: 214768 IP address blocks: 2a0a:6044:7b00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6b:8e:7e:d9:69:5f:b7:67:93:cc:e9:36:31:fb:bf:c6:64:4e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 11 12:47:00 2026 GMT Not After : Aug 10 12:52:00 2027 GMT Subject: CN=79B6B62A6B02B1586053A792FAA227D02E4F41E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:96:3b:ff:80:46:07:59:1c:a9:45:94:e5:14: 90:0f:1e:24:e6:40:b6:2e:6a:b6:d0:94:62:f9:28: f4:c1:83:99:ee:f2:8f:3b:cf:c5:c1:7f:67:bb:1c: 40:0e:3d:65:9a:d8:c8:27:9f:86:9c:40:da:76:b7: ce:f3:22:58:ea:29:02:3e:42:33:1c:31:0f:b5:b9: d9:69:e3:e6:c8:a3:73:8b:c8:62:99:ad:ff:7a:fa: a1:7e:b1:dd:67:75:1e:6b:55:ee:0d:0a:df:62:7f: 96:98:1a:18:88:19:c8:b3:4f:5a:1d:c5:7e:f4:fd: 17:ab:66:44:49:42:0f:17:a3:c2:e2:25:ee:00:f3: ea:f8:9f:b4:0b:21:aa:71:68:9e:45:0b:7b:62:56: 2c:a1:10:bd:2b:e6:05:e5:40:9c:79:31:fd:79:e3: 97:e1:70:a6:88:7b:c8:48:4e:23:13:85:85:1a:7f: 02:04:61:54:9e:e2:f6:bc:a1:78:d5:da:a7:f3:4e: ae:86:74:dd:82:76:ed:d1:cb:21:93:45:c2:2c:b9: 66:fd:02:da:95:8a:e9:cb:32:9c:32:a4:72:f5:2b: f0:d8:07:7a:75:1b:53:47:53:4d:67:ba:3c:43:56: 8e:76:89:dd:87:e0:5f:96:6f:85:04:58:91:cb:69: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B6:B6:2A:6B:02:B1:58:60:53:A7:92:FA:A2:27:D0:2E:4F:41:E6 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214768.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7b00::/40 Signature Algorithm: sha256WithRSAEncryption 3f:93:c0:2b:30:b3:fc:98:02:bb:d1:f8:54:5a:07:9b:0b:29: cf:37:d3:03:f4:cf:7b:70:b1:74:1e:d1:86:24:a4:1f:f5:12: fd:14:bd:5f:ba:87:29:e3:41:1e:c8:57:37:c7:55:76:e0:ca: 29:dd:d8:29:07:e1:42:cd:02:62:59:3d:6c:43:03:46:f7:db: ee:55:3f:ea:f2:d2:aa:94:ec:96:e2:bc:e1:97:4a:35:be:b8: ce:7a:56:41:1f:eb:fa:9b:30:99:9c:9d:11:52:4e:39:d1:45: 8c:33:34:22:d3:cf:20:04:69:81:27:9c:36:57:c3:65:16:c1: 96:5f:4f:97:09:7a:a0:13:89:3c:eb:d1:8a:9b:d1:ef:22:e1: 5c:13:fb:42:ae:21:5e:b0:6c:39:3e:ec:44:e4:d4:68:36:12: 4c:e8:68:88:e4:28:a5:88:7d:66:9e:9a:bb:99:4a:e5:62:f0: 2e:45:2d:65:ff:02:0b:57:9d:2f:43:f3:9d:7f:d3:45:16:6c: 01:56:67:5f:54:10:33:36:51:a6:07:8b:4c:50:18:9b:ba:ee: 29:b1:0e:21:be:12:eb:4c:96:ea:40:f8:d7:ff:07:d7:91:76: 58:a9:78:7d:b9:84:63:c5:3d:b7:2e:36:ec:50:14:3a:bc:bc: fb:98:6d:5e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUBGuOftlpX7dnk8zpNjH7v8ZkTmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTExMjQ3MDBaFw0yNzA4MTAxMjUyMDBaMDMxMTAvBgNV BAMTKDc5QjZCNjJBNkIwMkIxNTg2MDUzQTc5MkZBQTIyN0QwMkU0RjQxRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCljv/gEYHWRypRZTlFJAPHiTm QLYuarbQlGL5KPTBg5nu8o87z8XBf2e7HEAOPWWa2Mgnn4acQNp2t87zIljqKQI+ QjMcMQ+1udlp4+bIo3OLyGKZrf96+qF+sd1ndR5rVe4NCt9if5aYGhiIGcizT1od xX70/RerZkRJQg8Xo8LiJe4A8+r4n7QLIapxaJ5FC3tiViyhEL0r5gXlQJx5Mf15 45fhcKaIe8hITiMThYUafwIEYVSe4va8oXjV2qfzTq6GdN2Cdu3RyyGTRcIsuWb9 AtqViunLMpwypHL1K/DYB3p1G1NHU01nujxDVo52id2H4F+Wb4UEWJHLaRjzAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUeba2KmsCsVhgU6eS+qIn0C5PQeYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ3Njgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEezANBgkqhkiG9w0BAQsFAAOCAQEAP5PAKzCz/JgCu9H4VFoHmwspzzfTA/TP e3CxdB7RhiSkH/US/RS9X7qHKeNBHshXN8dVduDKKd3YKQfhQs0CYlk9bEMDRvfb 7lU/6vLSqpTsluK84ZdKNb64znpWQR/r+pswmZydEVJOOdFFjDM0ItPPIARpgSec NlfDZRbBll9Plwl6oBOJPOvRipvR7yLhXBP7Qq4hXrBsOT7sROTUaDYSTOhoiOQo pYh9Zp6au5lK5WLwLkUtZf8CC1edL0PznX/TRRZsAVZnX1QQMzZRpgeLTFAYm7ru KbEOIb4S60yW6kD41/8H15F2WKl4fbmEY8U9ty427FAUOry8+5htXg== -----END CERTIFICATE-----Generated at Fri Sep 4 23:20:07 2026 by rpki-client