$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS213367.roa File: AS213367.roa (raw, json) Hash identifier: ltz1AO48xOoesPs8fOogAQu1NC1FlS9f8KotAXDCdVU= Subject key identifier: 08:58:07:65:E4:CC:E0:61:E0:BA:96:63:43:71:78:65:42:6E:BA:0F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4616AA52F3D19FCF3965585F9C5428B6B650D4E9 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213367.roa Signing time: Fri 23 Oct 2026 11:44:53 +0000 ROA not before: Fri 23 Oct 2026 11:39:53 +0000 ROA not after: Fri 22 Oct 2027 11:44:53 +0000 asID: 213367 IP address blocks: 2a0f:6280:1057::/48 maxlen: 48 2a0f:6280:1f00::/40 maxlen: 41 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:16:aa:52:f3:d1:9f:cf:39:65:58:5f:9c:54:28:b6:b6:50:d4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 23 11:39:53 2026 GMT Not After : Oct 22 11:44:53 2027 GMT Subject: CN=08580765E4CCE061E0BA966343717865426EBA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:fa:70:59:7f:7d:56:14:a1:1e:5f:7b:f1: cc:bb:9a:51:9c:f5:2c:db:9c:78:fc:90:42:f5:3d: 2d:a5:ed:c3:9d:c7:3b:4d:4a:20:43:9d:9d:86:9d: d8:aa:10:b7:2e:b2:7a:fa:59:98:65:d6:e3:57:96: 22:d3:ac:3d:c4:52:ae:99:e3:c5:11:4d:a8:1f:7a: 2f:38:06:b8:25:ba:32:db:85:d2:a4:32:06:75:7b: 79:fa:93:0c:8c:b2:6d:9b:38:06:f9:65:bf:99:17: ba:3b:a9:15:20:4c:b3:2c:58:d8:63:7e:98:bc:c7: d5:dd:84:be:da:ec:3f:57:8f:56:32:08:12:30:d6: 7a:58:32:6b:86:4f:17:ef:51:33:03:18:ba:6f:fb: ef:bd:c6:d0:c4:66:6a:20:f9:ee:fd:b6:1f:66:ba: bc:13:1c:fb:54:38:31:c1:06:be:0b:7a:a9:7f:1e: cb:6c:01:37:74:c1:63:0e:90:5f:67:0b:dd:b8:ed: 4d:04:90:52:1a:f8:17:2d:4e:96:03:a5:7f:e5:fa: 41:6d:85:6d:8a:10:e7:bc:b7:4b:22:a3:b2:ef:8b: b8:1e:a6:2e:ad:ce:af:1e:cc:c2:02:0b:15:fa:cb: f2:f1:ff:32:0a:78:3b:23:cd:c1:65:26:6f:bb:1a: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:58:07:65:E4:CC:E0:61:E0:BA:96:63:43:71:78:65:42:6E:BA:0F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213367.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1057::/48 2a0f:6280:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 63:59:e8:ea:6d:01:b5:b6:cc:a0:d8:e5:26:f0:ec:5f:c7:ec: 75:b2:af:b6:65:41:1d:ad:b8:cd:0b:0d:b2:a6:13:46:36:a5: ae:87:a6:3d:fd:b6:a1:73:28:b2:c6:99:3d:6d:bb:d2:2b:bb: 40:be:a8:22:e2:59:01:01:9b:19:ab:ab:28:eb:4f:4b:66:d8: de:d1:2f:b6:9a:26:0e:2b:29:7e:d3:7a:24:0f:88:91:8e:ea: 5a:84:63:0e:3f:b7:e8:4e:b8:81:d0:0f:b9:22:67:4c:50:af: b0:93:9f:4a:62:d6:20:c4:98:0f:40:59:db:bf:a3:9f:6a:bc: 3e:af:14:5a:d3:31:47:d1:d1:41:96:89:10:63:7d:4c:db:71: 16:1b:af:dc:9d:5c:8d:87:6f:a3:fb:a8:fc:4d:24:15:52:27: 24:ec:31:a9:60:c2:c6:fc:fc:c6:fa:f7:ad:f0:ac:9d:51:b2: df:0b:a5:3f:97:0e:a5:cc:4a:7c:d8:96:b0:61:bb:70:56:92: d0:f2:5f:f0:06:85:09:ef:a4:81:c5:31:2e:76:70:95:62:f4: 79:6d:9a:8d:99:ca:ee:66:cc:c4:88:5f:d1:dd:b4:15:ab:b3: 78:dd:7c:e2:17:3e:af:2b:fc:0d:79:18:88:6f:c0:f4:0d:05: 4a:2c:66:63 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIURhaqUvPRn885ZVhfnFQotrZQ1OkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMjMxMTM5NTNaFw0yNzEwMjIxMTQ0NTNaMDMxMTAvBgNV BAMTKDA4NTgwNzY1RTRDQ0UwNjFFMEJBOTY2MzQzNzE3ODY1NDI2RUJBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSh/pwWX99VhShHl978cy7mlGc 9SzbnHj8kEL1PS2l7cOdxztNSiBDnZ2GndiqELcusnr6WZhl1uNXliLTrD3EUq6Z 48URTagfei84BrglujLbhdKkMgZ1e3n6kwyMsm2bOAb5Zb+ZF7o7qRUgTLMsWNhj fpi8x9XdhL7a7D9Xj1YyCBIw1npYMmuGTxfvUTMDGLpv+++9xtDEZmog+e79th9m urwTHPtUODHBBr4Leql/HstsATd0wWMOkF9nC9247U0EkFIa+BctTpYDpX/l+kFt hW2KEOe8t0sio7Lvi7gepi6tzq8ezMICCxX6y/Lx/zIKeDsjzcFlJm+7Gl+3AgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUCFgHZeTM4GHgupZjQ3F4ZUJuug8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTMzNjcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBwAq D2KAEFcDBgAqD2KAHzANBgkqhkiG9w0BAQsFAAOCAQEAY1no6m0BtbbMoNjlJvDs X8fsdbKvtmVBHa24zQsNsqYTRjalroemPf22oXMossaZPW270iu7QL6oIuJZAQGb GaurKOtPS2bY3tEvtpomDispftN6JA+IkY7qWoRjDj+36E64gdAPuSJnTFCvsJOf SmLWIMSYD0BZ27+jn2q8Pq8UWtMxR9HRQZaJEGN9TNtxFhuv3J1cjYdvo/uo/E0k FVInJOwxqWDCxvz8xvr3rfCsnVGy3wulP5cOpcxKfNiWsGG7cFaS0PJf8AaFCe+k gcUxLnZwlWL0eW2ajZnK7mbMxIhf0d20FauzeN184hc+ryv8DXkYiG/A9A0FSixm Yw== -----END CERTIFICATE-----Generated at Thu Nov 5 17:23:00 2026 by rpki-client