$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219412.roa File: AS219412.roa (raw, json) Hash identifier: 24U9F4yKnDJE3EkVA8wcqkVbTQGD+JzAhgnI7JXXZgY= Subject key identifier: B7:E3:56:B7:01:8F:BD:CE:04:A9:02:45:D6:B4:74:41:A3:92:3E:67 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4A839FB8D362864DB5F92CBB2F9264DCC90C10B9 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa Signing time: Mon 19 Oct 2026 06:00:22 +0000 ROA not before: Mon 19 Oct 2026 05:55:22 +0000 ROA not after: Mon 18 Oct 2027 06:00:22 +0000 asID: 219412 IP address blocks: 2a05:dfc3:f900::/40 maxlen: 48 2a0f:6284:52::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 08:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:83:9f:b8:d3:62:86:4d:b5:f9:2c:bb:2f:92:64:dc:c9:0c:10:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 19 05:55:22 2026 GMT Not After : Oct 18 06:00:22 2027 GMT Subject: CN=B7E356B7018FBDCE04A90245D6B47441A3923E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:18:c8:a4:03:6c:a7:f5:6c:db:53:72:f4: 47:70:59:80:a7:51:f8:0e:4e:76:8d:14:28:10:84: 4e:d7:52:41:1a:9b:b0:13:e0:49:48:b6:67:71:ab: c9:27:0d:9e:5c:74:ed:08:dc:41:43:10:2c:e0:30: 43:c1:1b:02:5f:6e:70:d8:74:ab:79:88:f1:40:98: 2e:3e:f2:7d:14:27:f1:aa:b8:2f:f9:cd:9e:ea:4e: 92:c3:21:97:55:ad:a6:22:3e:ca:c8:e9:5c:f8:a3: 8f:51:23:d8:74:44:1b:1a:2b:6b:26:a9:39:4c:ec: 1c:58:9b:19:cf:15:d8:b1:50:5c:9f:e9:0a:6b:93: 9f:51:83:c0:2c:3a:1f:d1:e8:4e:19:3e:b0:a9:49: 50:e0:37:d5:93:89:3c:fe:0c:cf:06:10:5e:ac:50: e9:da:1f:07:9c:16:5a:4a:e3:88:9c:a4:26:b2:ed: e7:02:f8:7c:04:f6:15:e1:22:50:0c:c7:44:b5:20: a4:16:d6:32:f0:04:73:fc:f6:ea:cc:27:6b:3f:1f: 4d:a3:cd:e7:09:ac:61:78:70:6f:ba:ae:1b:45:99: 70:7b:06:eb:92:65:3b:cb:80:09:62:c7:75:56:9d: 8e:8a:10:4f:05:b7:20:b3:13:f8:4b:e6:18:a2:14: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E3:56:B7:01:8F:BD:CE:04:A9:02:45:D6:B4:74:41:A3:92:3E:67 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f900::/40 2a0f:6284:52::/48 Signature Algorithm: sha256WithRSAEncryption 65:c0:da:86:a0:90:3d:23:e3:01:26:c5:7b:1d:c7:b9:3b:33: 57:90:a2:b7:da:c2:1c:cd:e2:0e:82:f4:53:8d:9c:f2:e3:92: 02:86:22:7c:6e:d8:62:4a:c4:ad:8e:2f:45:8c:70:c4:a3:c1: 0b:66:28:6b:cc:85:2d:0c:73:8a:04:57:af:5c:30:07:df:af: d1:99:3a:f9:79:59:e1:f0:e6:fc:ff:2b:c1:77:7a:ad:56:14: 05:14:e7:11:ee:e0:53:cf:bc:ec:6a:d9:1c:18:39:e7:0c:be: 04:fc:49:2a:ba:ce:d1:8a:00:c0:3e:03:f5:f6:1c:58:90:27: a8:1c:99:33:34:35:ae:fd:84:40:e3:fd:6c:f3:d2:92:cb:b0: 18:88:2d:97:fc:a1:ee:2c:36:3f:93:29:e7:4f:be:e4:0a:4a: 91:dd:27:ba:ed:86:3a:24:dc:19:f3:ab:2c:60:9b:9e:85:60: ef:c1:b1:8d:7b:de:0c:2d:99:63:ee:09:be:bb:a2:05:c3:db: 7d:92:a5:b4:c9:d2:7d:a6:c0:0c:30:16:87:77:bf:06:a7:92: ca:27:23:41:fa:6d:8c:73:5f:dd:df:ab:fd:0b:f3:ae:83:fa: c5:d9:e0:25:99:84:e0:eb:ff:02:34:00:8b:fc:d6:71:1a:4f: dc:aa:56:9e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUSoOfuNNihk21+Sy7L5Jk3MkMELkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMTkwNTU1MjJaFw0yNzEwMTgwNjAwMjJaMDMxMTAvBgNV BAMTKEI3RTM1NkI3MDE4RkJEQ0UwNEE5MDI0NUQ2QjQ3NDQxQTM5MjNFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TxjIpANsp/Vs21Ny9EdwWYCn UfgOTnaNFCgQhE7XUkEam7AT4ElItmdxq8knDZ5cdO0I3EFDECzgMEPBGwJfbnDY dKt5iPFAmC4+8n0UJ/GquC/5zZ7qTpLDIZdVraYiPsrI6Vz4o49RI9h0RBsaK2sm qTlM7BxYmxnPFdixUFyf6Qprk59Rg8AsOh/R6E4ZPrCpSVDgN9WTiTz+DM8GEF6s UOnaHwecFlpK44icpCay7ecC+HwE9hXhIlAMx0S1IKQW1jLwBHP89urMJ2s/H02j zecJrGF4cG+6rhtFmXB7BuuSZTvLgAlix3VWnY6KEE8FtyCzE/hL5hiiFAoHAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUt+NWtwGPvc4EqQJF1rR0QaOSPmcwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTk0MTIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBgAq Bd/D+QMHACoPYoQAUjANBgkqhkiG9w0BAQsFAAOCAQEAZcDahqCQPSPjASbFex3H uTszV5Cit9rCHM3iDoL0U42c8uOSAoYifG7YYkrErY4vRYxwxKPBC2Yoa8yFLQxz igRXr1wwB9+v0Zk6+XlZ4fDm/P8rwXd6rVYUBRTnEe7gU8+87GrZHBg55wy+BPxJ KrrO0YoAwD4D9fYcWJAnqByZMzQ1rv2EQOP9bPPSksuwGIgtl/yh7iw2P5Mp50++ 5ApKkd0nuu2GOiTcGfOrLGCbnoVg78GxjXveDC2ZY+4JvruiBcPbfZKltMnSfabA DDAWh3e/BqeSyicjQfptjHNf3d+r/QvzroP6xdngJZmE4Ov/AjQAi/zWcRpP3KpW ng== -----END CERTIFICATE-----Generated at Sun Nov 15 22:18:48 2026 by rpki-client