$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS211585.roa File: AS211585.roa (raw, json) Hash identifier: WqlST3DXj/XmGDA4uQ6zYcr0qBJ9t1FqHWSmCjBRKnU= Subject key identifier: A8:F7:20:04:ED:74:DE:08:0A:9E:57:86:79:2A:6A:6E:FB:F6:AB:C4 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 59A0A2556ECBFD3BDAA4ADBDE38876B89CF53338 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS211585.roa Signing time: Tue 13 Oct 2026 03:43:05 +0000 ROA not before: Tue 13 Oct 2026 03:38:05 +0000 ROA not after: Tue 12 Oct 2027 03:43:05 +0000 asID: 211585 IP address blocks: 2a0f:6282:2100::/45 maxlen: 45 2a0f:6282:2108::/47 maxlen: 47 2a0f:6282:210a::/48 maxlen: 48 2a0f:6282:210b::/48 maxlen: 48 2a0f:6282:210c::/46 maxlen: 46 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 17:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a0:a2:55:6e:cb:fd:3b:da:a4:ad:bd:e3:88:76:b8:9c:f5:33:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 13 03:38:05 2026 GMT Not After : Oct 12 03:43:05 2027 GMT Subject: CN=A8F72004ED74DE080A9E5786792A6A6EFBF6ABC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:74:19:e6:53:b1:3b:2f:b9:07:71:c9:a7: 07:66:c1:c0:1a:fc:3e:b0:80:4e:52:3b:e3:e5:7d: 30:3e:c0:2f:c4:bd:a4:0c:3b:78:9f:8c:08:72:00: c5:e7:df:29:8f:52:69:6f:b0:91:02:2c:0a:2f:6e: 50:0a:6d:ae:36:19:78:d7:e6:61:1b:cf:9a:d2:24: 1a:aa:7a:eb:db:f9:f3:0c:9b:93:64:2e:dc:73:b2: b6:7c:28:31:70:c2:a0:83:c9:1f:2d:38:a8:81:76: 18:65:7d:b7:b6:80:40:ba:3c:b5:e3:3a:f7:19:70: 66:50:84:dd:33:fa:24:23:ec:6d:77:b5:ba:5d:d2: 24:f7:6d:a8:5e:cd:b0:b4:f5:f1:8a:8a:af:15:9e: 59:db:26:53:ca:88:f5:66:17:69:e2:0d:4e:c5:d4: b0:82:99:01:a4:1b:fb:0d:8c:d6:c3:94:de:50:79: 9e:d3:e8:66:05:cb:07:1c:d1:53:4f:7d:67:3d:ff: dd:05:c8:99:c1:83:32:8c:17:5f:1f:24:20:35:53: ab:22:78:e3:86:f4:ca:09:ec:55:8b:bb:bd:20:3e: 74:3f:4d:14:99:a3:57:d8:57:a9:b0:2e:f9:40:ea: 06:cd:86:8e:ed:56:58:4f:ef:e4:ef:5f:35:4c:c3: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F7:20:04:ED:74:DE:08:0A:9E:57:86:79:2A:6A:6E:FB:F6:AB:C4 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS211585.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:2100::/44 Signature Algorithm: sha256WithRSAEncryption 17:bc:c7:98:54:9b:4d:9d:3a:57:87:0d:23:a1:5a:a9:66:c3: 6f:a7:6d:67:06:cf:af:3f:db:5d:57:83:96:c0:da:e8:58:87: ef:b8:cf:e2:3d:7f:5b:ef:a8:bb:ea:76:84:cc:14:89:7f:d9: 07:c5:4e:1f:2d:1b:ad:81:10:6b:f8:e2:3e:5c:eb:e5:a5:22: 07:31:16:63:2d:ec:ae:1f:3a:e2:de:4d:4f:37:e6:ca:c5:bf: 38:b1:3b:f4:88:9b:d8:6f:28:92:87:ca:67:57:aa:99:8a:db: 94:21:6e:c4:54:05:e3:66:9a:8a:75:99:6f:a4:9c:0c:3b:5a: 7a:2e:9d:59:fb:cd:1b:54:70:5e:34:bd:60:c0:18:e6:19:69: d1:db:04:ad:10:6c:75:42:90:ca:b3:1b:c7:a7:7e:a9:b8:fb: a7:34:29:84:64:fa:51:ce:8c:95:d2:af:bc:b9:07:e8:c3:fe: 9c:31:e6:6a:1c:ab:7a:d0:ae:61:45:fe:dd:98:58:29:f5:02: c4:35:a7:f2:21:57:2a:ab:a0:c4:60:03:c9:45:09:95:2e:32: 7c:97:42:48:55:ed:56:30:e8:72:a9:ab:82:93:1b:6d:69:e9: db:78:4c:7b:54:07:8e:80:de:0d:66:be:82:b6:71:5f:75:ba: e5:95:65:fe -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUWaCiVW7L/TvapK2944h2uJz1MzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMTMwMzM4MDVaFw0yNzEwMTIwMzQzMDVaMDMxMTAvBgNV BAMTKEE4RjcyMDA0RUQ3NERFMDgwQTlFNTc4Njc5MkE2QTZFRkJGNkFCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DHQZ5lOxOy+5B3HJpwdmwcAa /D6wgE5SO+PlfTA+wC/EvaQMO3ifjAhyAMXn3ymPUmlvsJECLAovblAKba42GXjX 5mEbz5rSJBqqeuvb+fMMm5NkLtxzsrZ8KDFwwqCDyR8tOKiBdhhlfbe2gEC6PLXj OvcZcGZQhN0z+iQj7G13tbpd0iT3bahezbC09fGKiq8VnlnbJlPKiPVmF2niDU7F 1LCCmQGkG/sNjNbDlN5QeZ7T6GYFywcc0VNPfWc9/90FyJnBgzKMF18fJCA1U6si eOOG9MoJ7FWLu70gPnQ/TRSZo1fYV6mwLvlA6gbNho7tVlhP7+TvXzVMwxgfAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUqPcgBO103ggKnleGeSpqbvv2q8QwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTE1ODUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KCIQAwDQYJKoZIhvcNAQELBQADggEBABe8x5hUm02dOleHDSOhWqlmw2+nbWcG z68/211Xg5bA2uhYh++4z+I9f1vvqLvqdoTMFIl/2QfFTh8tG62BEGv44j5c6+Wl IgcxFmMt7K4fOuLeTU835srFvzixO/SIm9hvKJKHymdXqpmK25QhbsRUBeNmmop1 mW+knAw7WnounVn7zRtUcF40vWDAGOYZadHbBK0QbHVCkMqzG8enfqm4+6c0KYRk +lHOjJXSr7y5B+jD/pwx5mocq3rQrmFF/t2YWCn1AsQ1p/IhVyqroMRgA8lFCZUu MnyXQkhV7VYw6HKpq4KTG21p6dt4THtUB46A3g1mvoK2cV91uuWVZf4= -----END CERTIFICATE-----Generated at Thu Nov 5 04:18:22 2026 by rpki-client