$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214989.roa File: AS214989.roa (raw, json) Hash identifier: r/S9lP7BDjv3zWXOIhaKbSmoMpHSLQMNnMkKAT/fW/Q= Subject key identifier: 91:5B:B0:7C:97:A9:0E:6C:20:FB:67:E3:CF:DD:B6:D9:CC:9C:03:1B Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5F0F24D51398F0CBB8BBBE380694B855D267DC49 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214989.roa Signing time: Sun 18 Oct 2026 03:12:51 +0000 ROA not before: Sun 18 Oct 2026 03:07:51 +0000 ROA not after: Sun 17 Oct 2027 03:12:51 +0000 asID: 214989 IP address blocks: 2a0f:6284:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 15:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0f:24:d5:13:98:f0:cb:b8:bb:be:38:06:94:b8:55:d2:67:dc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 18 03:07:51 2026 GMT Not After : Oct 17 03:12:51 2027 GMT Subject: CN=915BB07C97A90E6C20FB67E3CFDDB6D9CC9C031B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:72:66:5a:d7:28:f2:bf:e1:4a:e0:2e:e2: c0:de:41:67:20:0c:07:26:a4:31:e4:72:3a:30:10: ea:ea:7d:d0:50:d5:09:82:1f:1a:e6:b8:ea:c9:de: 2e:7f:7e:f9:a1:75:b8:95:fa:06:e0:b5:15:45:ab: da:3f:f1:c3:38:f2:05:ee:e4:9f:d5:0e:0c:cd:e0: 1b:bc:69:4b:e3:cd:e1:81:3d:8c:3d:76:91:d1:dd: 76:db:fb:ef:14:6a:fa:b6:c8:c0:8c:5a:70:96:5b: d9:74:ac:fb:e2:6e:f9:3f:43:56:e3:bb:0d:74:f5: 4c:02:29:04:38:12:9d:aa:02:72:2e:89:c4:b7:09: 9a:31:80:26:11:c6:7a:0e:78:12:12:52:90:7f:04: 52:52:f1:e7:05:1b:cd:ae:8d:9d:7a:41:93:49:8d: a4:44:ac:26:ef:8a:d0:51:5e:21:b8:19:72:f5:0f: a0:6d:28:f6:43:62:5b:ee:e6:8f:f0:85:51:41:f1: 9d:46:0e:2d:f0:bc:4a:cf:7c:79:a9:1b:fe:21:b4: 39:3d:4b:6c:3c:a2:a7:bd:07:0e:0d:b6:65:1e:17: 12:ee:9b:3a:21:db:8d:85:2b:25:d8:ab:c2:ad:f2: f0:0d:66:fd:8e:6f:33:3c:70:7f:14:82:a2:83:23: 5b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5B:B0:7C:97:A9:0E:6C:20:FB:67:E3:CF:DD:B6:D9:CC:9C:03:1B X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214989.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:6000::/36 Signature Algorithm: sha256WithRSAEncryption 60:5e:e8:f5:6b:0f:c4:0b:a8:d8:a7:38:11:ef:98:9a:d0:5a: 94:31:62:98:b3:02:7f:1f:c1:55:1b:e7:55:5e:d4:72:83:45: 46:1c:e5:c6:1d:31:a3:5d:a3:b6:d2:11:60:c8:62:61:d0:80: 11:81:7c:ee:1d:09:5a:ff:47:d2:87:e4:e8:14:d9:29:24:2c: f0:64:5f:be:5c:a7:45:56:c6:bf:50:d9:00:ca:70:20:fb:32: 0e:54:b7:e6:86:5d:ac:35:27:f4:d1:9d:96:c4:d1:00:ba:f8: 53:a8:28:c1:96:54:01:60:0c:07:b3:39:bb:40:f4:67:ae:43: 19:47:54:6b:13:4d:89:83:3d:3c:1c:eb:80:f9:74:27:3d:5d: 23:ca:78:4e:bd:02:d1:f2:89:e8:08:79:b5:3b:b2:14:74:1a: 34:d2:1c:e2:a0:9b:e2:55:7e:5b:9e:e4:d8:05:0b:74:cc:08: 59:9b:9f:6a:4e:0d:aa:ea:7e:b7:3b:39:16:b7:f7:86:0d:4a: ea:7b:21:35:47:e7:ef:ba:99:a4:e1:0d:00:1f:d3:22:fc:d0: c5:2d:28:1c:ee:69:61:68:58:60:41:18:55:a0:18:29:ac:ce: 11:43:19:95:05:95:c1:98:66:2f:32:00:89:67:68:a9:05:91: 67:85:87:b5 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUXw8k1ROY8Mu4u744BpS4VdJn3EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMTgwMzA3NTFaFw0yNzEwMTcwMzEyNTFaMDMxMTAvBgNV BAMTKDkxNUJCMDdDOTdBOTBFNkMyMEZCNjdFM0NGRERCNkQ5Q0M5QzAzMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTDXJmWtco8r/hSuAu4sDeQWcg DAcmpDHkcjowEOrqfdBQ1QmCHxrmuOrJ3i5/fvmhdbiV+gbgtRVFq9o/8cM48gXu 5J/VDgzN4Bu8aUvjzeGBPYw9dpHR3Xbb++8Uavq2yMCMWnCWW9l0rPvibvk/Q1bj uw109UwCKQQ4Ep2qAnIuicS3CZoxgCYRxnoOeBISUpB/BFJS8ecFG82ujZ16QZNJ jaRErCbvitBRXiG4GXL1D6BtKPZDYlvu5o/whVFB8Z1GDi3wvErPfHmpG/4htDk9 S2w8oqe9Bw4NtmUeFxLumzoh242FKyXYq8Kt8vANZv2ObzM8cH8UgqKDI1ujAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUkVuwfJepDmwg+2fjz9222cycAxswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ5ODkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KEYDANBgkqhkiG9w0BAQsFAAOCAQEAYF7o9WsPxAuo2Kc4Ee+YmtBalDFimLMC fx/BVRvnVV7UcoNFRhzlxh0xo12jttIRYMhiYdCAEYF87h0JWv9H0ofk6BTZKSQs 8GRfvlynRVbGv1DZAMpwIPsyDlS35oZdrDUn9NGdlsTRALr4U6gowZZUAWAMB7M5 u0D0Z65DGUdUaxNNiYM9PBzrgPl0Jz1dI8p4Tr0C0fKJ6Ah5tTuyFHQaNNIc4qCb 4lV+W57k2AULdMwIWZufak4Nqup+tzs5Frf3hg1K6nshNUfn77qZpOENAB/TIvzQ xS0oHO5pYWhYYEEYVaAYKazOEUMZlQWVwZhmLzIAiWdoqQWRZ4WHtQ== -----END CERTIFICATE-----Generated at Thu Oct 22 21:27:05 2026 by rpki-client