$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219434.roa File: AS219434.roa (raw, json) Hash identifier: QIpAttO+4aWD0mgKYEf/rUywWZpVnf0RdGTfnuQms74= Subject key identifier: AE:29:B0:9E:F3:60:83:67:2E:8D:29:AD:5F:E4:52:FB:A6:E7:A4:1F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6BBD2976B329EA36A06D8644BFEF70B46C057B06 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219434.roa Signing time: Sat 08 Aug 2026 15:53:32 +0000 ROA not before: Sat 08 Aug 2026 15:48:32 +0000 ROA not after: Sat 07 Aug 2027 15:53:32 +0000 asID: 219434 IP address blocks: 2a0f:6280:1010::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 03:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:bd:29:76:b3:29:ea:36:a0:6d:86:44:bf:ef:70:b4:6c:05:7b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 8 15:48:32 2026 GMT Not After : Aug 7 15:53:32 2027 GMT Subject: CN=AE29B09EF36083672E8D29AD5FE452FBA6E7A41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:e4:7a:b9:cb:71:c4:35:cf:1d:29:b2:7a: 76:a6:d6:4d:a5:e1:57:b0:be:3b:90:00:42:a5:9d: 9e:4f:6b:54:6d:1a:ae:69:03:b6:56:f2:0f:fb:92: 4d:45:46:70:4c:64:6d:d0:d8:e3:8d:43:c2:86:49: bf:1b:a7:e2:3c:90:de:4a:b4:37:99:c8:eb:1e:b6: 97:6d:84:69:15:a9:51:3a:5b:1f:1f:3a:37:12:41: 68:db:be:4d:6f:ac:3f:01:0a:9f:61:b0:6f:f7:53: d9:9e:c7:ef:2c:be:77:1a:4a:57:6a:25:d0:c3:dc: 27:c5:26:b7:9d:f9:2d:86:f3:b9:5f:ed:98:ac:d4: b7:f7:a8:a1:46:15:11:e4:3d:c4:0f:b0:f9:13:a0: 57:e2:7c:7a:19:c1:af:20:aa:3d:5b:93:ce:9e:9f: 48:bd:16:97:c0:3c:c7:1e:68:a2:25:db:b3:60:7b: 87:55:63:9d:d0:a2:eb:31:3a:1c:9f:82:7d:3d:8a: 2e:a6:6a:33:69:10:89:6d:4a:fa:71:07:b4:63:15: df:37:cd:25:5c:36:f4:42:ce:4e:ca:7c:58:c9:e6: c7:dc:6a:d6:24:68:3f:82:28:22:1e:d5:b2:7e:3f: 36:49:80:16:a3:8f:89:2c:c5:15:8a:9e:b0:09:c9: 9b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:29:B0:9E:F3:60:83:67:2E:8D:29:AD:5F:E4:52:FB:A6:E7:A4:1F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1010::/44 Signature Algorithm: sha256WithRSAEncryption 84:86:e9:b8:20:e3:1b:9e:07:25:32:61:e6:bd:31:3d:fb:51: fa:41:73:0e:0e:94:b6:26:ce:91:51:96:25:90:f8:e6:7c:e6: ed:40:2b:e7:82:1d:cf:a8:a4:a3:0b:bb:b5:41:4b:30:05:aa: 30:69:4a:69:c0:12:40:02:86:4f:1a:9d:66:84:43:1a:ff:68: fa:df:bb:f5:89:e7:76:09:d1:74:02:c6:37:04:90:ec:bc:0c: 68:d3:58:85:04:6b:57:4e:14:b5:43:91:49:ab:fb:ef:63:18: ae:64:56:8d:17:3b:c2:30:3c:9f:1a:4b:ec:24:3f:e9:e5:ff: 7f:87:06:b0:e4:97:76:4d:25:43:5d:70:94:0f:e0:5d:8b:0a: 9d:b3:b1:79:b8:44:3c:96:93:75:41:bb:18:3a:96:e2:dc:ea: 2d:dd:63:ad:3a:30:b8:97:16:74:52:41:25:9a:44:92:c3:2c: d9:52:aa:e2:8e:b9:52:43:98:66:8f:14:06:e5:b9:a1:65:37: 4e:41:35:da:22:d3:88:0b:72:6e:da:bc:e2:92:a0:c4:d4:f0: d4:35:5e:c4:ab:b9:fb:40:fc:07:a1:0c:ef:bc:e2:7d:06:b1: 62:41:e8:13:03:65:61:c9:8f:84:ad:44:41:76:56:33:03:9f: 18:39:e4:92 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUa70pdrMp6jagbYZEv+9wtGwFewYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MDgxNTQ4MzJaFw0yNzA4MDcxNTUzMzJaMDMxMTAvBgNV BAMTKEFFMjlCMDlFRjM2MDgzNjcyRThEMjlBRDVGRTQ1MkZCQTZFN0E0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtl+R6uctxxDXPHSmyenam1k2l 4VewvjuQAEKlnZ5Pa1RtGq5pA7ZW8g/7kk1FRnBMZG3Q2OONQ8KGSb8bp+I8kN5K tDeZyOsetpdthGkVqVE6Wx8fOjcSQWjbvk1vrD8BCp9hsG/3U9mex+8svncaSldq JdDD3CfFJred+S2G87lf7Zis1Lf3qKFGFRHkPcQPsPkToFfifHoZwa8gqj1bk86e n0i9FpfAPMceaKIl27Nge4dVY53QousxOhyfgn09ii6majNpEIltSvpxB7RjFd83 zSVcNvRCzk7KfFjJ5sfcatYkaD+CKCIe1bJ+PzZJgBajj4ksxRWKnrAJyZthAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUrimwnvNgg2cujSmtX+RS+6bnpB8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTk0MzQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KAEBAwDQYJKoZIhvcNAQELBQADggEBAISG6bgg4xueByUyYea9MT37UfpBcw4O lLYmzpFRliWQ+OZ85u1AK+eCHc+opKMLu7VBSzAFqjBpSmnAEkAChk8anWaEQxr/ aPrfu/WJ53YJ0XQCxjcEkOy8DGjTWIUEa1dOFLVDkUmr++9jGK5kVo0XO8IwPJ8a S+wkP+nl/3+HBrDkl3ZNJUNdcJQP4F2LCp2zsXm4RDyWk3VBuxg6luLc6i3dY606 MLiXFnRSQSWaRJLDLNlSquKOuVJDmGaPFAbluaFlN05BNdoi04gLcm7avOKSoMTU 8NQ1XsSruftA/AehDO+84n0GsWJB6BMDZWHJj4StREF2VjMDnxg55JI= -----END CERTIFICATE-----Generated at Wed Aug 26 16:32:53 2026 by rpki-client