$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS219418.roa File: AS219418.roa (raw, json) Hash identifier: R29xAGxCbDGJD0J+HPlN53RgeN2O9p7wSR8OSfAKI9w= Subject key identifier: BA:C9:A9:79:21:09:2F:B0:15:9D:DE:69:D8:76:23:91:0E:63:BA:94 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 048A4FFD705CD7027E64258B8775ECAC9A2C3317 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219418.roa Signing time: Fri 03 Jul 2026 19:10:42 +0000 ROA not before: Fri 03 Jul 2026 19:05:42 +0000 ROA not after: Fri 02 Jul 2027 19:10:42 +0000 asID: 219418 IP address blocks: 2a0f:6280:7010::/44 maxlen: 128 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8a:4f:fd:70:5c:d7:02:7e:64:25:8b:87:75:ec:ac:9a:2c:33:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 19:05:42 2026 GMT Not After : Jul 2 19:10:42 2027 GMT Subject: CN=BAC9A97921092FB0159DDE69D87623910E63BA94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:7d:c1:5a:54:a5:9d:0a:4c:af:44:cb:ac: ce:26:9d:ad:33:cc:24:64:47:28:3c:26:76:eb:26: 9d:28:8f:9e:01:ee:57:1b:01:7c:f8:91:82:72:0f: 7a:ff:4b:49:23:9f:53:e3:68:fc:20:33:8d:86:75: 89:15:c1:4a:ae:fc:95:ca:f8:83:86:f8:05:70:7b: 15:c4:8f:74:b6:61:c0:f5:c7:82:fd:61:f9:11:8c: a4:35:61:ef:bc:8f:f6:8b:71:0c:a7:a9:fb:4a:c3: 50:0d:c2:ae:dc:60:8a:78:9c:77:32:c2:c1:4f:d6: 04:ba:d7:97:f5:90:58:86:37:53:97:d5:19:7b:66: 52:25:ba:34:73:dc:95:06:3d:d8:34:0a:e1:a1:f0: 0d:11:37:10:06:de:7e:ed:33:a1:7e:4c:c1:b6:e2: 4c:91:c6:02:e0:0f:4f:16:12:88:8d:7e:ca:d5:46: d3:c3:24:45:b5:f8:33:24:d5:e3:57:a5:e3:78:c8: d7:d7:38:23:8b:c3:05:2f:84:3b:f6:61:b4:20:15: 41:f1:d7:e6:33:6f:64:78:7f:30:e1:c7:ff:de:31: 50:02:8d:e8:a3:24:b6:97:85:db:c3:c7:14:bf:25: b5:d9:bc:bd:c1:6d:2f:70:e1:04:14:79:df:93:61: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C9:A9:79:21:09:2F:B0:15:9D:DE:69:D8:76:23:91:0E:63:BA:94 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219418.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:7010::/44 Signature Algorithm: sha256WithRSAEncryption 27:05:91:ef:8a:3b:d0:97:27:b1:cd:53:2d:d4:02:e0:50:4b: 77:eb:4b:f2:5e:c3:89:bc:ab:7b:ff:56:e3:f2:14:d5:c0:be: 47:26:4e:01:45:b8:4b:95:5c:f6:aa:4c:4b:ab:5d:1a:c6:b0: 52:79:6a:50:2e:2f:71:f2:fe:6a:e6:72:40:8c:a5:21:db:ff: 80:d7:4d:f7:86:ff:85:ac:b9:e2:9c:be:b3:0a:8b:04:d1:53: e5:17:95:ce:cc:0d:fe:11:af:3b:88:fe:40:6d:a4:22:55:61: 01:09:21:a0:3d:22:86:0a:9d:77:c1:89:8d:62:1e:d6:6c:7f: af:f6:5a:16:f0:5f:63:97:11:db:aa:a2:9b:e6:ba:ce:0a:e2: 63:3a:53:fb:18:30:6d:8f:69:e1:13:70:94:2a:bb:3c:b7:a5: c0:6d:cf:97:d0:9f:61:97:18:65:56:39:3b:f3:3b:da:e9:f3: 8c:42:82:dc:be:ae:36:ec:3a:33:27:71:81:dd:c4:a7:58:47: 0e:50:79:8a:fb:72:5c:59:42:fd:49:2f:96:81:b9:e4:21:1c: 4a:65:57:27:1e:60:e8:52:fe:a5:b0:0e:a2:48:7f:49:fb:4b: 4c:ec:08:61:d9:fd:64:bd:c8:ca:b8:85:d4:a7:55:7a:41:7e: 36:e4:7f:8f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUBIpP/XBc1wJ+ZCWLh3XsrJosMxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MDMxOTA1NDJaFw0yNzA3MDIxOTEwNDJaMDMxMTAvBgNV BAMTKEJBQzlBOTc5MjEwOTJGQjAxNTlEREU2OUQ4NzYyMzkxMEU2M0JBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bn3BWlSlnQpMr0TLrM4mna0z zCRkRyg8JnbrJp0oj54B7lcbAXz4kYJyD3r/S0kjn1PjaPwgM42GdYkVwUqu/JXK +IOG+AVwexXEj3S2YcD1x4L9YfkRjKQ1Ye+8j/aLcQynqftKw1ANwq7cYIp4nHcy wsFP1gS615f1kFiGN1OX1Rl7ZlIlujRz3JUGPdg0CuGh8A0RNxAG3n7tM6F+TMG2 4kyRxgLgD08WEoiNfsrVRtPDJEW1+DMk1eNXpeN4yNfXOCOLwwUvhDv2YbQgFUHx 1+Yzb2R4fzDhx//eMVACjeijJLaXhdvDxxS/JbXZvL3BbS9w4QQUed+TYRJnAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUusmpeSEJL7AVnd5p2HYjkQ5jupQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTk0MTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KAcBAwDQYJKoZIhvcNAQELBQADggEBACcFke+KO9CXJ7HNUy3UAuBQS3frS/Je w4m8q3v/VuPyFNXAvkcmTgFFuEuVXPaqTEurXRrGsFJ5alAuL3Hy/mrmckCMpSHb /4DXTfeG/4WsueKcvrMKiwTRU+UXlc7MDf4RrzuI/kBtpCJVYQEJIaA9IoYKnXfB iY1iHtZsf6/2WhbwX2OXEduqopvmus4K4mM6U/sYMG2PaeETcJQquzy3pcBtz5fQ n2GXGGVWOTvzO9rp84xCgty+rjbsOjMncYHdxKdYRw5QeYr7clxZQv1JL5aBueQh HEplVyceYOhS/qWwDqJIf0n7S0zsCGHZ/WS9yMq4hdSnVXpBfjbkf48= -----END CERTIFICATE-----Generated at Fri Jul 10 16:09:24 2026 by rpki-client