$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS219268.roa File: AS219268.roa (raw, json) Hash identifier: tEjYmq9q1CUlKh99yFrJubaWn4yA95bWJQ7YuQJ2CGA= Subject key identifier: 81:EA:6B:A9:5C:E7:44:89:3D:ED:C0:35:4C:DD:61:0B:9F:0E:1C:06 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 28EF199C44DF9118318AC5E49100518500F4157A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219268.roa Signing time: Fri 10 Jul 2026 11:41:15 +0000 ROA not before: Fri 10 Jul 2026 11:36:15 +0000 ROA not after: Fri 09 Jul 2027 11:41:15 +0000 asID: 219268 IP address blocks: 2a0f:6280:61a1::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ef:19:9c:44:df:91:18:31:8a:c5:e4:91:00:51:85:00:f4:15:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 10 11:36:15 2026 GMT Not After : Jul 9 11:41:15 2027 GMT Subject: CN=81EA6BA95CE744893DEDC0354CDD610B9F0E1C06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fc:7b:21:f5:cb:c1:59:9d:9c:1d:15:bd:14: 65:87:a0:be:d1:2e:ab:fe:3b:df:61:3e:02:f4:29: d5:4b:40:76:ad:48:9f:ef:42:2e:d5:26:d8:bd:06: d0:ba:45:66:e5:d9:95:90:7b:6b:c7:eb:68:35:d7: 83:b9:c2:21:14:1f:cd:c8:9c:9a:38:71:5e:50:7b: 05:c8:cf:74:f6:c8:b5:2d:6a:df:9e:44:15:50:2e: 16:d3:47:f7:cb:8f:00:1c:a0:ff:1a:0c:be:bd:26: 7d:9b:72:76:3c:98:11:a9:97:f1:fd:42:c2:a9:fa: 81:45:8d:93:97:ca:e2:31:15:4b:3e:d6:60:5b:06: 54:12:de:92:91:85:e0:95:8f:1b:e5:09:60:7c:c8: 90:d1:17:91:fc:f7:b3:ec:3f:95:c8:cb:13:09:bb: b8:2d:7f:5c:1f:c9:ec:df:da:fe:4c:71:a5:aa:3d: 0d:35:07:e4:a7:71:53:07:21:c9:2c:49:4c:4a:4a: 96:2c:57:b8:19:5e:46:09:e4:6b:3c:57:16:b6:a5: d2:85:bb:2d:cb:a4:ac:0b:c8:84:0e:b3:1f:63:e5: 3f:7a:35:60:c7:e1:95:d8:bb:8f:8d:6d:54:e0:21: 03:b4:81:65:65:d2:34:99:e4:bc:95:3e:c1:75:e5: 35:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EA:6B:A9:5C:E7:44:89:3D:ED:C0:35:4C:DD:61:0B:9F:0E:1C:06 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219268.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:61a1::/48 Signature Algorithm: sha256WithRSAEncryption 10:81:fa:c7:60:fe:a4:b5:75:97:a0:d5:2a:43:f3:9c:5f:ec: f9:84:87:87:01:9d:e8:1f:28:5e:e7:f1:89:cb:b6:b5:ad:39: 30:0c:04:50:1f:56:c6:32:8b:7c:60:6a:84:39:12:9a:df:8e: 70:eb:1d:de:18:37:e0:af:97:0b:3d:57:07:18:1f:27:cf:99: c2:b4:e7:a4:e2:dd:02:43:9c:55:ab:ab:33:3d:b0:e1:05:21: c2:03:2f:59:ac:7d:4f:c4:43:b5:78:55:76:71:90:49:f9:2b: 9b:ab:54:63:d7:b6:6b:a6:61:13:4f:eb:3b:a7:4a:e7:3d:01: 86:f8:d9:72:1d:c4:9a:a3:6e:bd:ad:e2:8a:9a:27:37:93:d2: 10:d1:ad:47:70:fd:ce:a7:33:45:a1:d2:f2:75:cb:84:d4:e6: 3d:17:f6:31:1d:24:41:9a:aa:fa:61:a4:c8:19:91:7b:96:56: d9:83:d4:9a:62:df:6f:9f:fb:54:93:04:38:25:85:22:0e:bb: 8c:5f:f5:85:ee:63:ac:b6:2e:8a:e5:2b:d5:9a:44:a5:a5:92: 0c:5e:b8:b8:15:0a:d4:c4:ef:c4:1a:e5:d7:35:f1:aa:91:e3: 42:3d:b0:cd:09:1b:e9:8e:d5:e2:49:e4:eb:f6:e1:60:07:77: 22:7f:51:c3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUKO8ZnETfkRgxisXkkQBRhQD0FXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTAxMTM2MTVaFw0yNzA3MDkxMTQxMTVaMDMxMTAvBgNV BAMTKDgxRUE2QkE5NUNFNzQ0ODkzREVEQzAzNTRDREQ2MTBCOUYwRTFDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/Hsh9cvBWZ2cHRW9FGWHoL7R Lqv+O99hPgL0KdVLQHatSJ/vQi7VJti9BtC6RWbl2ZWQe2vH62g114O5wiEUH83I nJo4cV5QewXIz3T2yLUtat+eRBVQLhbTR/fLjwAcoP8aDL69Jn2bcnY8mBGpl/H9 QsKp+oFFjZOXyuIxFUs+1mBbBlQS3pKRheCVjxvlCWB8yJDRF5H897PsP5XIyxMJ u7gtf1wfyezf2v5McaWqPQ01B+SncVMHIcksSUxKSpYsV7gZXkYJ5Gs8Vxa2pdKF uy3LpKwLyIQOsx9j5T96NWDH4ZXYu4+NbVTgIQO0gWVl0jSZ5LyVPsF15TUJAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUgeprqVznRIk97cA1TN1hC58OHAYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyNjgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KAYaEwDQYJKoZIhvcNAQELBQADggEBABCB+sdg/qS1dZeg1SpD85xf7PmEh4cB negfKF7n8YnLtrWtOTAMBFAfVsYyi3xgaoQ5EprfjnDrHd4YN+Cvlws9VwcYHyfP mcK056Ti3QJDnFWrqzM9sOEFIcIDL1msfU/EQ7V4VXZxkEn5K5urVGPXtmumYRNP 6zunSuc9AYb42XIdxJqjbr2t4oqaJzeT0hDRrUdw/c6nM0Wh0vJ1y4TU5j0X9jEd JEGaqvphpMgZkXuWVtmD1Jpi32+f+1STBDglhSIOu4xf9YXuY6y2LorlK9WaRKWl kgxeuLgVCtTE78Qa5dc18aqR40I9sM0JG+mO1eJJ5Ov24WAHdyJ/UcM= -----END CERTIFICATE-----Generated at Fri Jul 10 16:10:25 2026 by rpki-client