$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS210464.roa File: AS210464.roa (raw, json) Hash identifier: ljOk1ItD0XlilYueEuuTlf+bflgrcT5888WImhQ4LfM= Subject key identifier: 4A:D2:DF:3C:FB:F9:96:C2:0D:C4:A7:5C:E5:D7:4D:47:98:0D:22:67 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 73ADE0376A99518C1A28CA0E0D5B244C5507FFDD Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS210464.roa Signing time: Sat 28 Feb 2026 16:07:14 +0000 ROA not before: Sat 28 Feb 2026 16:02:14 +0000 ROA not after: Sat 27 Feb 2027 16:07:14 +0000 asID: 210464 IP address blocks: 2a0f:6284:f::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ad:e0:37:6a:99:51:8c:1a:28:ca:0e:0d:5b:24:4c:55:07:ff:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 28 16:02:14 2026 GMT Not After : Feb 27 16:07:14 2027 GMT Subject: CN=4AD2DF3CFBF996C20DC4A75CE5D74D47980D2267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:5f:bb:1b:e9:a6:18:26:04:63:be:2a:71: 61:fc:93:44:b3:17:cc:20:e7:2d:13:90:86:35:b1: 74:f7:9c:0d:bc:07:0a:b7:50:4a:04:93:7d:40:44: 65:9f:73:50:47:73:23:f0:ef:ab:dc:5d:45:be:24: ca:f4:47:f7:ab:72:83:11:dd:34:7c:4b:87:f8:34: 41:02:38:b3:ce:2a:ef:31:15:da:b0:65:75:03:d6: 89:d1:c2:fd:55:cd:35:3d:9d:8f:30:5a:7e:de:48: 64:67:fc:83:d3:18:7a:f2:4a:fa:25:61:1b:c1:43: 09:87:55:5a:35:70:cf:c7:cf:b0:63:ec:98:20:91: ff:60:0b:04:54:26:f0:aa:28:00:be:14:26:6e:e9: dd:1d:f6:1c:29:03:29:3e:fe:ec:85:36:b6:cb:29: fb:c6:68:9d:ef:83:5e:ce:5b:d8:c5:02:a0:c1:7d: a0:b8:78:50:bc:84:14:87:06:3b:8f:1c:e8:d2:c2: 87:d5:64:bf:7c:30:40:59:76:f9:7c:18:a1:02:2e: d8:4f:fb:97:7e:51:9a:21:fe:d5:6f:d6:a3:20:d2: 3f:45:a6:3c:5c:f6:3b:6f:99:e9:e8:8a:6a:ab:c2: 2e:3c:ce:5f:17:a5:50:c1:17:ab:1f:81:f1:f4:de: 9d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D2:DF:3C:FB:F9:96:C2:0D:C4:A7:5C:E5:D7:4D:47:98:0D:22:67 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS210464.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:f::/48 Signature Algorithm: sha256WithRSAEncryption 26:3d:0e:84:85:81:a0:5e:a3:9c:b6:96:87:9e:c0:a8:79:43: 2a:60:7c:f3:91:ee:39:bd:9d:e0:a2:7c:c3:50:90:2d:3f:69: e1:18:56:9b:a4:86:1a:e9:b9:72:b6:d3:6d:10:04:00:31:4b: d8:0c:5c:e1:f4:bd:12:a2:80:96:b4:56:19:d9:a0:b7:ec:cb: fd:a7:c1:60:ca:c9:c1:a3:99:04:18:aa:b7:5c:f3:1d:43:5a: b7:cf:71:52:00:9a:1f:84:45:c4:01:0d:61:17:f7:af:58:70: de:7c:37:78:98:1b:a7:b3:91:ae:83:b6:b2:02:88:33:bb:45: db:84:6f:a7:2c:7d:4b:1f:eb:0e:47:0d:09:51:a1:17:4b:1f: 5b:08:7e:37:11:17:f9:33:08:3b:83:b1:d5:85:dc:1e:b6:28: 7d:82:8e:6d:dd:2b:91:25:e9:4f:10:c6:92:3a:86:97:23:43: dc:37:7a:d2:41:93:36:08:c3:9d:f1:ca:fd:56:7c:8f:c6:18: fe:35:43:1c:c1:55:e7:c5:e6:44:e9:26:d8:fd:56:4b:41:4f: a5:5f:bf:8b:c1:3b:d0:81:d9:02:3f:a9:03:56:dc:81:2c:eb: b2:5a:e4:b4:db:ff:8f:87:1d:84:88:8b:0b:db:77:77:9b:80: 84:86:08:c4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUc63gN2qZUYwaKMoODVskTFUH/90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMjgxNjAyMTRaFw0yNzAyMjcxNjA3MTRaMDMxMTAvBgNV BAMTKDRBRDJERjNDRkJGOTk2QzIwREM0QTc1Q0U1RDc0RDQ3OTgwRDIyNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hl+7G+mmGCYEY74qcWH8k0Sz F8wg5y0TkIY1sXT3nA28Bwq3UEoEk31ARGWfc1BHcyPw76vcXUW+JMr0R/ercoMR 3TR8S4f4NEECOLPOKu8xFdqwZXUD1onRwv1VzTU9nY8wWn7eSGRn/IPTGHrySvol YRvBQwmHVVo1cM/Hz7Bj7Jggkf9gCwRUJvCqKAC+FCZu6d0d9hwpAyk+/uyFNrbL KfvGaJ3vg17OW9jFAqDBfaC4eFC8hBSHBjuPHOjSwofVZL98MEBZdvl8GKECLthP +5d+UZoh/tVv1qMg0j9Fpjxc9jtvmenoimqrwi48zl8XpVDBF6sfgfH03p3tAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUStLfPPv5lsINxKdc5ddNR5gNImcwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTA0NjQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAA8wDQYJKoZIhvcNAQELBQADggEBACY9DoSFgaBeo5y2loeewKh5QypgfPOR 7jm9neCifMNQkC0/aeEYVpukhhrpuXK2020QBAAxS9gMXOH0vRKigJa0VhnZoLfs y/2nwWDKycGjmQQYqrdc8x1DWrfPcVIAmh+ERcQBDWEX969YcN58N3iYG6ezka6D trICiDO7RduEb6csfUsf6w5HDQlRoRdLH1sIfjcRF/kzCDuDsdWF3B62KH2Cjm3d K5El6U8QxpI6hpcjQ9w3etJBkzYIw53xyv1WfI/GGP41QxzBVefF5kTpJtj9VktB T6Vfv4vBO9CB2QI/qQNW3IEs67Ja5LTb/4+HHYSIiwvbd3ebgISGCMQ= -----END CERTIFICATE-----Generated at Sun Mar 1 16:21:48 2026 by rpki-client