$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219207.roa File: AS219207.roa (raw, json) Hash identifier: B8bw3oUUks98dasd/sgp7byUVJH2FmV8bZA39h8xcdc= Subject key identifier: 74:B4:3C:D3:ED:79:CE:4F:7D:21:26:6A:9A:F1:E9:D6:BE:A9:3B:30 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 13027D46256290335608BC66F2AD22F690F34DE5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219207.roa Signing time: Sat 17 Oct 2026 10:15:53 +0000 ROA not before: Sat 17 Oct 2026 10:10:53 +0000 ROA not after: Sat 16 Oct 2027 10:15:53 +0000 asID: 219207 IP address blocks: 2a0f:6280:7000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:02:7d:46:25:62:90:33:56:08:bc:66:f2:ad:22:f6:90:f3:4d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 17 10:10:53 2026 GMT Not After : Oct 16 10:15:53 2027 GMT Subject: CN=74B43CD3ED79CE4F7D21266A9AF1E9D6BEA93B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:78:9f:b8:b0:e0:6c:d3:f7:23:28:9e:f2:32: 12:54:f3:53:c7:0c:9c:83:30:78:37:c2:58:3d:c6: 5b:b3:01:7f:cd:a6:86:c3:f2:6a:dd:b5:76:92:fb: b6:cd:7f:e8:62:5e:b8:45:50:2f:53:9f:4e:08:53: 72:16:31:e9:16:cb:24:c1:49:7b:5a:15:af:d4:ef: 0c:6e:52:1c:e4:15:27:71:af:ef:1b:aa:6a:e7:0e: a2:79:e1:ee:c4:2e:92:2f:c5:2c:87:74:b3:42:b5: 4d:4d:3a:4e:85:d1:69:11:24:a0:01:7f:ad:dc:ee: 89:1a:70:ff:cf:84:28:1b:bc:06:79:98:e0:21:32: 05:50:02:6a:38:ee:98:64:6c:b6:93:5a:86:75:c4: d5:48:89:32:0e:47:13:ca:a5:0e:07:9a:f3:4e:fe: 66:c2:af:61:34:cc:24:bb:bc:29:22:bd:30:0c:d3: 38:71:74:2c:36:92:bd:04:06:ab:10:92:d1:d1:24: 15:61:20:19:f7:e4:5f:11:31:d8:47:5c:a5:6a:9b: e7:8e:08:70:1e:1b:39:5c:89:91:d5:ab:1e:34:68: 00:54:29:ef:cc:4d:d2:ed:50:2d:a6:ee:cd:68:fc: c7:22:ec:dc:d5:0c:d3:fa:10:c8:8e:ce:2e:60:87: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B4:3C:D3:ED:79:CE:4F:7D:21:26:6A:9A:F1:E9:D6:BE:A9:3B:30 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219207.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:7000::/36 Signature Algorithm: sha256WithRSAEncryption 0f:24:87:f1:79:4b:10:33:cd:bc:e9:93:b7:3c:8c:72:ab:59: 18:6a:6f:87:9f:e4:1c:13:24:ee:f0:ca:bd:6e:af:bb:7f:4d: a9:21:af:9d:77:13:7a:1b:b0:91:0b:5c:ce:d4:46:a9:65:ae: 70:75:07:c8:a0:2b:e2:b8:b6:f3:de:b2:0e:19:b1:25:cc:b4: 13:22:0e:8e:fd:2c:26:80:81:b8:ec:b7:b1:fc:a5:6d:1a:3c: 56:b9:61:76:5c:0f:c2:ca:60:9e:2a:13:1f:dd:2b:9e:74:60: 77:57:a2:26:ee:6b:b3:e5:68:f4:fd:17:49:fc:a6:26:02:00: 1f:2e:e0:03:73:a4:d6:de:b5:4a:99:33:d5:f7:3e:39:0c:44: 0f:e0:ee:33:c1:ba:16:17:d1:10:a8:7f:54:9e:d2:7d:6a:cf: 4f:1c:4b:4e:ea:fa:cd:40:4e:88:66:9f:e1:e6:16:d5:19:74: c7:c6:d5:2a:51:7f:bc:da:5e:ba:81:9e:c2:10:8e:5c:02:6c: 8b:9d:45:11:52:39:cd:ed:cc:b1:d4:82:d6:fe:64:55:37:4a: 44:29:a7:37:ea:40:b1:d7:82:85:25:d5:a7:60:5e:4b:f9:34: e2:c4:8e:d3:e5:b7:ab:ec:ce:1a:e9:f1:2e:5c:03:1d:96:a8: b9:63:0a:83 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUEwJ9RiVikDNWCLxm8q0i9pDzTeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMTcxMDEwNTNaFw0yNzEwMTYxMDE1NTNaMDMxMTAvBgNV BAMTKDc0QjQzQ0QzRUQ3OUNFNEY3RDIxMjY2QTlBRjFFOUQ2QkVBOTNCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3eJ+4sOBs0/cjKJ7yMhJU81PH DJyDMHg3wlg9xluzAX/NpobD8mrdtXaS+7bNf+hiXrhFUC9Tn04IU3IWMekWyyTB SXtaFa/U7wxuUhzkFSdxr+8bqmrnDqJ54e7ELpIvxSyHdLNCtU1NOk6F0WkRJKAB f63c7okacP/PhCgbvAZ5mOAhMgVQAmo47phkbLaTWoZ1xNVIiTIORxPKpQ4HmvNO /mbCr2E0zCS7vCkivTAM0zhxdCw2kr0EBqsQktHRJBVhIBn35F8RMdhHXKVqm+eO CHAeGzlciZHVqx40aABUKe/MTdLtUC2m7s1o/Mci7NzVDNP6EMiOzi5ghzVnAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUdLQ80+15zk99ISZqmvHp1r6pOzAwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyMDcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KAcDANBgkqhkiG9w0BAQsFAAOCAQEADySH8XlLEDPNvOmTtzyMcqtZGGpvh5/k HBMk7vDKvW6vu39NqSGvnXcTehuwkQtcztRGqWWucHUHyKAr4ri2896yDhmxJcy0 EyIOjv0sJoCBuOy3sfylbRo8VrlhdlwPwspgnioTH90rnnRgd1eiJu5rs+Vo9P0X SfymJgIAHy7gA3Ok1t61Spkz1fc+OQxED+DuM8G6FhfREKh/VJ7SfWrPTxxLTur6 zUBOiGaf4eYW1Rl0x8bVKlF/vNpeuoGewhCOXAJsi51FEVI5ze3MsdSC1v5kVTdK RCmnN+pAsdeChSXVp2BeS/k04sSO0+W3q+zOGunxLlwDHZaouWMKgw== -----END CERTIFICATE-----Generated at Thu Oct 22 18:22:14 2026 by rpki-client