$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219299.roa File: AS219299.roa (raw, json) Hash identifier: 1O1G2WxFiOSeM8ygviRc1fKuG0gmUkbznanMvud6pH4= Subject key identifier: B9:B5:F6:9A:EE:20:C3:00:DD:BA:31:13:9B:75:28:F7:3B:25:DE:05 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3434C65A5A79CC8A048FA7EB5124AC0CA2A73439 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219299.roa Signing time: Sat 08 Aug 2026 15:53:31 +0000 ROA not before: Sat 08 Aug 2026 15:48:31 +0000 ROA not after: Sat 07 Aug 2027 15:53:31 +0000 asID: 219299 IP address blocks: 2a0f:6280:6000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 13:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:34:c6:5a:5a:79:cc:8a:04:8f:a7:eb:51:24:ac:0c:a2:a7:34:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 8 15:48:31 2026 GMT Not After : Aug 7 15:53:31 2027 GMT Subject: CN=B9B5F69AEE20C300DDBA31139B7528F73B25DE05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:71:52:11:18:8d:7a:00:be:dd:2f:23:b8: e0:0d:ea:69:d0:0c:c5:13:81:a4:c1:0c:3c:ac:78: b5:b0:7b:03:94:04:1d:ad:fa:fe:fa:cb:18:99:b0: bc:c3:44:b3:78:6a:63:44:3f:c1:09:ef:7d:2c:8a: dd:4b:b0:50:49:9e:98:60:87:26:fe:fb:d4:68:67: c3:5e:98:57:09:72:2e:b2:a6:1c:97:17:18:0d:64: 9e:d0:33:01:c2:f0:a6:78:a9:3c:f4:d1:3a:a6:a3: 60:08:42:5d:6b:ef:29:37:0c:ae:4c:e8:35:d0:4d: 17:93:d9:95:56:af:64:d5:8d:e2:8e:99:18:22:e2: 74:47:65:46:56:7d:6e:aa:bd:07:b7:f8:c6:71:12: 5e:38:71:5c:dd:6a:d9:56:bf:32:2c:da:a2:de:c5: 69:37:8a:52:a6:2a:84:ef:46:e3:24:8d:d8:f4:da: f8:af:47:d4:0b:ff:2a:30:85:cb:0b:a7:e0:c8:66: fc:e0:b2:74:af:b8:2a:04:00:95:29:27:0d:95:7d: 53:db:59:ca:d5:c7:7b:7f:2c:ae:26:7d:e5:b5:4c: 77:62:71:2f:a0:ee:83:ac:ba:a5:09:79:ba:1e:c5: 29:12:a5:c1:c6:ca:4a:e5:8a:97:4e:bc:46:ba:02: ed:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:F6:9A:EE:20:C3:00:DD:BA:31:13:9B:75:28:F7:3B:25:DE:05 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:6000::/36 Signature Algorithm: sha256WithRSAEncryption 8f:e2:a2:aa:fd:e4:5c:14:4e:8a:57:17:d2:73:4d:0b:c1:12: 39:73:79:6a:dc:0d:2f:b0:b6:6b:6f:0f:0e:c8:ae:5e:0a:4f: 9c:d6:92:c6:ed:c3:71:17:5d:20:c9:61:14:00:11:f7:55:ef: 07:5e:2b:7b:36:c2:f2:ec:b5:07:a3:7c:74:db:b6:0b:dd:13: 60:5b:ad:8f:2e:60:93:73:f1:96:b0:32:35:5a:d6:11:07:c3: e4:91:af:aa:d2:d3:37:ca:98:91:cb:7f:7e:20:7f:79:fb:4d: a8:f0:9d:d0:c3:1d:a3:da:9f:b3:c7:50:ac:65:f5:4d:6f:72: 26:ac:99:5b:d2:a9:d7:9c:be:6b:be:c2:db:5f:79:17:19:0f: c1:ff:b3:dc:f8:00:66:6f:67:10:7e:71:1d:cf:6f:be:31:c0: 49:b0:4b:b0:2b:28:45:bf:24:99:29:36:b8:be:5d:6c:7b:b3: f2:9e:83:41:79:7e:69:a9:e5:8a:ae:dc:9e:b9:3f:3b:70:6f: 36:bd:a3:72:a7:73:59:1c:71:88:5f:21:d1:d9:19:24:91:03: 84:07:72:8e:77:8a:8a:53:52:5b:3c:8a:81:89:a2:20:1e:88: f0:a2:b2:aa:82:af:d4:c3:4c:e9:c2:81:0c:21:44:cb:b0:b0: a6:5a:e2:22 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUNDTGWlp5zIoEj6frUSSsDKKnNDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MDgxNTQ4MzFaFw0yNzA4MDcxNTUzMzFaMDMxMTAvBgNV BAMTKEI5QjVGNjlBRUUyMEMzMDBEREJBMzExMzlCNzUyOEY3M0IyNURFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpHFSERiNegC+3S8juOAN6mnQ DMUTgaTBDDyseLWwewOUBB2t+v76yxiZsLzDRLN4amNEP8EJ730sit1LsFBJnphg hyb++9RoZ8NemFcJci6yphyXFxgNZJ7QMwHC8KZ4qTz00Tqmo2AIQl1r7yk3DK5M 6DXQTReT2ZVWr2TVjeKOmRgi4nRHZUZWfW6qvQe3+MZxEl44cVzdatlWvzIs2qLe xWk3ilKmKoTvRuMkjdj02vivR9QL/yowhcsLp+DIZvzgsnSvuCoEAJUpJw2VfVPb WcrVx3t/LK4mfeW1THdicS+g7oOsuqUJeboexSkSpcHGykrlipdOvEa6Au3dAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUubX2mu4gwwDdujETm3Uo9zsl3gUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyOTkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KAYDANBgkqhkiG9w0BAQsFAAOCAQEAj+Kiqv3kXBROilcX0nNNC8ESOXN5atwN L7C2a28PDsiuXgpPnNaSxu3DcRddIMlhFAAR91XvB14rezbC8uy1B6N8dNu2C90T YFutjy5gk3PxlrAyNVrWEQfD5JGvqtLTN8qYkct/fiB/eftNqPCd0MMdo9qfs8dQ rGX1TW9yJqyZW9Kp15y+a77C2195FxkPwf+z3PgAZm9nEH5xHc9vvjHASbBLsCso Rb8kmSk2uL5dbHuz8p6DQXl+aanliq7cnrk/O3BvNr2jcqdzWRxxiF8h0dkZJJED hAdyjneKilNSWzyKgYmiIB6I8KKyqoKv1MNM6cKBDCFEy7CwplriIg== -----END CERTIFICATE-----Generated at Wed Aug 26 00:32:18 2026 by rpki-client