$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219418.roa File: AS219418.roa (raw, json) Hash identifier: EzvPovfRYWrdduuLjrnHYYgYDV/+tdOBX4pynwP/Jgc= Subject key identifier: A7:BE:D1:F2:BF:A6:96:52:2E:07:6B:3C:7B:6E:69:68:15:BD:0E:88 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3CBEC13EB1D0E4E8D69EC0F5E4D9D46A05C4FAA7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219418.roa Signing time: Fri 07 Aug 2026 15:24:51 +0000 ROA not before: Fri 07 Aug 2026 15:19:51 +0000 ROA not after: Fri 06 Aug 2027 15:24:51 +0000 asID: 219418 IP address blocks: 2a0f:6280:1600::/48 maxlen: 48 2a0f:6280:7010::/44 maxlen: 128 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 13:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:be:c1:3e:b1:d0:e4:e8:d6:9e:c0:f5:e4:d9:d4:6a:05:c4:fa:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 7 15:19:51 2026 GMT Not After : Aug 6 15:24:51 2027 GMT Subject: CN=A7BED1F2BFA696522E076B3C7B6E696815BD0E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:2b:c9:dd:b6:81:00:d7:2d:10:1f:c5:b7: 49:9b:44:c5:dc:1a:3b:c2:d9:28:62:f5:1c:10:f4: cf:9a:46:6d:77:83:1b:55:a7:b4:4e:a1:84:bf:a3: 53:ed:f5:64:fb:47:7e:46:a7:84:fc:25:38:0a:62: d3:be:de:25:0f:40:13:3a:53:36:f6:4d:56:dd:99: 44:b9:f6:1d:04:76:36:a5:46:71:41:6d:86:aa:fd: b9:bf:f9:a2:75:9c:9b:c8:d2:7c:bc:6a:26:02:76: bc:d7:f0:0c:3b:96:75:8c:d7:15:47:d0:09:64:fb: 56:58:91:a5:33:34:b8:ae:fa:67:c3:64:98:2f:a4: 9b:e7:5e:9b:47:5a:31:f9:82:cb:b0:96:eb:3e:bc: d0:1f:99:7b:bf:2b:c5:b8:c5:a4:d1:27:3a:5e:08: 90:e3:a4:b2:1a:0f:46:15:74:64:97:12:66:61:da: d3:cc:6f:a6:70:76:aa:5b:56:75:bd:f9:f6:b6:0c: af:84:cc:37:a6:24:19:62:31:b3:e3:76:a5:b7:74: 29:33:70:25:63:4b:fc:95:29:48:83:30:f0:ef:97: 2d:bb:ec:38:9e:79:26:16:ef:19:0c:a7:41:cc:7e: ca:ac:43:6d:10:d5:dd:6a:28:60:4f:b2:14:93:72: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BE:D1:F2:BF:A6:96:52:2E:07:6B:3C:7B:6E:69:68:15:BD:0E:88 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219418.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1600::/48 2a0f:6280:7010::/44 Signature Algorithm: sha256WithRSAEncryption 7e:c9:d6:42:f3:d7:b7:2e:2b:07:f2:aa:21:37:05:d1:18:f3: 68:fe:16:a2:f3:ce:05:23:4d:75:a0:3b:72:5a:92:8a:46:b8: 13:e8:b7:8c:fe:20:7b:56:76:c7:9b:81:cb:e4:48:09:35:6c: 72:05:04:34:ec:9f:e6:78:8e:2e:49:35:09:20:0d:99:92:f2: 2b:80:04:4d:b8:d6:15:39:d1:4e:05:e7:16:9a:6f:65:52:f0: 4f:22:30:69:c8:c5:90:b3:c6:16:70:51:27:bb:ea:95:df:a1: dd:46:6b:65:59:f6:b4:9e:ec:6c:c6:09:91:00:36:76:ee:a8: 07:b1:51:5c:7f:fd:17:ec:1b:f4:10:84:95:54:5c:16:35:96: 05:bf:4e:d2:cc:d8:63:6c:d5:6a:37:28:62:09:c9:58:f8:10: 7c:34:e6:65:59:ca:47:cf:f1:7e:e1:89:55:6a:81:50:eb:c0: 50:83:55:5c:7f:7d:6c:1c:79:83:f9:1c:eb:09:96:ec:5f:92: 5c:57:6d:ae:d4:95:10:78:83:bf:bb:09:48:42:a9:b6:34:e0: 7d:9a:7d:46:a2:0b:61:f5:fc:47:5b:d6:93:c6:2c:bd:bb:9a: d6:10:e4:24:4a:b0:ca:81:a3:23:a2:e2:74:dc:59:f9:02:c4: 25:28:8d:71 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUPL7BPrHQ5OjWnsD15NnUagXE+qcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MDcxNTE5NTFaFw0yNzA4MDYxNTI0NTFaMDMxMTAvBgNV BAMTKEE3QkVEMUYyQkZBNjk2NTIyRTA3NkIzQzdCNkU2OTY4MTVCRDBFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrSvJ3baBANctEB/Ft0mbRMXc GjvC2Shi9RwQ9M+aRm13gxtVp7ROoYS/o1Pt9WT7R35Gp4T8JTgKYtO+3iUPQBM6 Uzb2TVbdmUS59h0EdjalRnFBbYaq/bm/+aJ1nJvI0ny8aiYCdrzX8Aw7lnWM1xVH 0Alk+1ZYkaUzNLiu+mfDZJgvpJvnXptHWjH5gsuwlus+vNAfmXu/K8W4xaTRJzpe CJDjpLIaD0YVdGSXEmZh2tPMb6ZwdqpbVnW9+fa2DK+EzDemJBliMbPjdqW3dCkz cCVjS/yVKUiDMPDvly277DieeSYW7xkMp0HMfsqsQ20Q1d1qKGBPshSTcjY7AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUp77R8r+mllIuB2s8e25paBW9DogwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTk0MTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KAFgADBwQqD2KAcBAwDQYJKoZIhvcNAQELBQADggEBAH7J1kLz17cuKwfyqiE3 BdEY82j+FqLzzgUjTXWgO3JakopGuBPot4z+IHtWdsebgcvkSAk1bHIFBDTsn+Z4 ji5JNQkgDZmS8iuABE241hU50U4F5xaab2VS8E8iMGnIxZCzxhZwUSe76pXfod1G a2VZ9rSe7GzGCZEANnbuqAexUVx//RfsG/QQhJVUXBY1lgW/TtLM2GNs1Wo3KGIJ yVj4EHw05mVZykfP8X7hiVVqgVDrwFCDVVx/fWwceYP5HOsJluxfklxXba7UlRB4 g7+7CUhCqbY04H2afUaiC2H1/Edb1pPGLL27mtYQ5CRKsMqBoyOi4nTcWfkCxCUo jXE= -----END CERTIFICATE-----Generated at Tue Aug 25 20:57:02 2026 by rpki-client