$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219271.roa File: AS219271.roa (raw, json) Hash identifier: R9iF5Giqn06McJaI634lMeYG+P0qeOeuoTmccQPGhaE= Subject key identifier: 3E:AF:F7:2D:A2:07:23:77:EE:A3:7D:6A:A2:5E:5E:46:C7:AA:E4:BA Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: E1F9E6D58415C4680EF2228D075D4024BBFC82 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219271.roa Signing time: Sun 16 Aug 2026 09:33:00 +0000 ROA not before: Sun 16 Aug 2026 09:28:00 +0000 ROA not after: Sun 15 Aug 2027 09:33:00 +0000 asID: 219271 IP address blocks: 2a0f:6280:b000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 12:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e1:f9:e6:d5:84:15:c4:68:0e:f2:22:8d:07:5d:40:24:bb:fc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 16 09:28:00 2026 GMT Not After : Aug 15 09:33:00 2027 GMT Subject: CN=3EAFF72DA2072377EEA37D6AA25E5E46C7AAE4BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:05:12:83:6a:42:d7:57:01:a8:44:67:b6: a6:ca:91:53:a1:93:bc:13:1f:f8:4d:5b:aa:97:de: f8:c6:ef:34:5a:6a:7f:b5:93:c3:ba:40:c3:2e:3b: 16:0a:8d:a6:be:bd:53:ac:7c:18:47:1d:73:ec:23: 14:42:64:98:6a:29:42:b9:30:39:33:63:0e:a1:15: 37:ed:09:be:0f:65:ed:62:37:c4:30:f8:c8:8d:14: fa:e8:06:2c:6c:e6:43:01:54:04:bf:d7:b6:db:86: 07:29:58:44:dd:2e:38:b8:a8:1d:41:fd:b9:fe:7f: c3:be:92:89:31:c7:9d:fa:67:90:80:eb:18:18:5e: 14:0c:47:27:ee:50:c3:b4:4c:0a:0f:28:31:6b:0f: d5:60:2e:34:c1:45:f1:19:7e:9f:3c:2e:0f:52:46: ca:c7:37:61:ac:4d:5c:d0:dd:24:0c:d2:71:21:ba: 23:62:f4:e1:e3:f6:d6:87:86:b5:93:3c:ea:8f:7b: 38:04:64:d2:ae:8c:8b:1a:97:e8:e7:2b:5e:3d:36: d3:a1:2a:25:a7:27:15:ac:fd:e3:f0:c8:a8:57:83: b1:20:f4:5e:da:19:92:30:92:bb:12:e9:07:87:2d: 78:19:e6:d2:bf:b8:12:29:0e:fe:34:20:7a:16:36: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AF:F7:2D:A2:07:23:77:EE:A3:7D:6A:A2:5E:5E:46:C7:AA:E4:BA X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219271.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:b000::/36 Signature Algorithm: sha256WithRSAEncryption 54:3f:61:ea:2b:45:58:b7:00:2f:83:55:fe:58:57:0a:19:a7: 16:b5:e3:39:27:b6:c5:fb:64:c6:e9:15:d5:ca:48:13:84:ef: 99:55:3a:d4:0b:9d:58:90:c6:84:2c:66:e4:b2:91:c7:22:42: 19:9f:c1:54:0e:c2:da:23:74:a4:c3:dc:1b:c4:3b:e3:be:68: 1a:b1:47:46:88:fb:f9:53:52:97:e5:73:1b:3f:49:d6:21:8e: 85:5d:a8:b9:ea:7c:70:33:a5:64:dc:65:11:73:6f:b1:76:6a: df:8e:ce:af:bb:c4:e5:e8:0d:a1:1a:fd:28:1b:02:60:a2:bb: 98:f3:90:55:48:de:e8:d9:6f:83:c4:85:47:5c:ad:41:71:1d: 15:10:ef:cc:3a:19:a7:24:55:2e:24:65:b8:a1:ec:37:f9:83: bd:04:d4:a1:74:5d:74:6a:63:4b:eb:59:da:c2:48:3f:8e:05: d0:b3:7a:bb:d5:29:9b:61:d1:ab:43:a7:6a:3c:47:cd:1c:ad: ee:84:7a:58:62:63:97:9a:1a:6b:f1:4d:62:3a:a0:fe:65:94: 37:67:b1:05:40:a3:f4:09:e0:97:33:ed:25:e3:2b:85:88:27: e5:26:30:3e:e4:dc:ab:84:d3:8b:e6:b2:19:ce:02:ae:dc:f3: 64:16:95:b1 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUAOH55tWEFcRoDvIijQddQCS7/IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTYwOTI4MDBaFw0yNzA4MTUwOTMzMDBaMDMxMTAvBgNV BAMTKDNFQUZGNzJEQTIwNzIzNzdFRUEzN0Q2QUEyNUU1RTQ2QzdBQUU0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFgUSg2pC11cBqERntqbKkVOh k7wTH/hNW6qX3vjG7zRaan+1k8O6QMMuOxYKjaa+vVOsfBhHHXPsIxRCZJhqKUK5 MDkzYw6hFTftCb4PZe1iN8Qw+MiNFProBixs5kMBVAS/17bbhgcpWETdLji4qB1B /bn+f8O+kokxx536Z5CA6xgYXhQMRyfuUMO0TAoPKDFrD9VgLjTBRfEZfp88Lg9S RsrHN2GsTVzQ3SQM0nEhuiNi9OHj9taHhrWTPOqPezgEZNKujIsal+jnK149NtOh KiWnJxWs/ePwyKhXg7Eg9F7aGZIwkrsS6QeHLXgZ5tK/uBIpDv40IHoWNoerAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUPq/3LaIHI3fuo31qol5eRseq5LowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyNzEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KAsDANBgkqhkiG9w0BAQsFAAOCAQEAVD9h6itFWLcAL4NV/lhXChmnFrXjOSe2 xftkxukV1cpIE4TvmVU61AudWJDGhCxm5LKRxyJCGZ/BVA7C2iN0pMPcG8Q7475o GrFHRoj7+VNSl+VzGz9J1iGOhV2ouep8cDOlZNxlEXNvsXZq347Or7vE5egNoRr9 KBsCYKK7mPOQVUje6Nlvg8SFR1ytQXEdFRDvzDoZpyRVLiRluKHsN/mDvQTUoXRd dGpjS+tZ2sJIP44F0LN6u9Upm2HRq0OnajxHzRyt7oR6WGJjl5oaa/FNYjqg/mWU N2exBUCj9AnglzPtJeMrhYgn5SYwPuTcq4TTi+ayGc4CrtzzZBaVsQ== -----END CERTIFICATE-----Generated at Wed Aug 26 17:22:31 2026 by rpki-client