$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS213864.roa File: AS213864.roa (raw, json) Hash identifier: QAk/EKsNJo28p9DZ2z25DO1o2UeB/FsuJWbUu84LxvA= Subject key identifier: C5:28:31:6C:D0:46:38:28:9D:DE:38:37:4C:3F:39:1C:83:DC:92:7C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 30F1E57C087D94A25C1BD2E77EE4AF1E5BE88F63 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213864.roa Signing time: Fri 11 Sep 2026 16:01:05 +0000 ROA not before: Fri 11 Sep 2026 15:56:05 +0000 ROA not after: Fri 10 Sep 2027 16:01:05 +0000 asID: 213864 IP address blocks: 2a05:dfc2::/32 maxlen: 32 2a09:54c4::/32 maxlen: 32 2a0f:6280:5000::/36 maxlen: 48 2a0f:6282:5000::/36 maxlen: 48 2a0f:6282:6000::/36 maxlen: 48 2a0f:6285::/32 maxlen: 32 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f1:e5:7c:08:7d:94:a2:5c:1b:d2:e7:7e:e4:af:1e:5b:e8:8f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 11 15:56:05 2026 GMT Not After : Sep 10 16:01:05 2027 GMT Subject: CN=C528316CD04638289DDE38374C3F391C83DC927C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:43:5d:12:84:d0:33:01:ca:e5:db:18:eb: 54:e2:18:30:d2:69:fa:fe:95:08:c2:6c:fe:c6:67: 07:b3:5a:92:1a:71:ad:fe:2d:1b:9f:8e:8b:8f:b7: dc:8d:7f:3c:33:6f:30:22:a9:69:b8:ec:f7:36:f6: b5:18:6d:c9:a3:2c:3c:9d:01:f7:a7:7a:5b:5c:b1: c8:5f:2f:6b:1b:ff:dd:d4:7d:d8:0f:f8:7e:75:cd: b7:f4:ce:dd:22:e6:d6:e9:9a:12:66:21:b8:5f:43: 20:d4:1d:36:b7:a8:83:bb:b9:64:af:60:21:aa:a3: 3e:0e:9f:96:6c:85:83:1c:3b:15:7c:f7:25:99:9c: e1:bb:2f:a7:6f:ca:f3:b0:96:e1:d5:b2:29:5d:3d: ae:60:c0:aa:c1:86:fd:08:0e:6a:65:44:26:8a:3d: c4:d4:38:43:c4:da:31:23:ee:62:5a:03:75:6c:9b: 0c:ec:90:e6:db:5f:07:fb:16:c8:ec:7f:3e:3b:4f: 22:1a:65:f6:85:d5:44:c0:4e:18:6e:fc:87:7e:aa: 13:89:75:a6:08:3b:99:1b:fa:7e:84:32:3f:fd:62: ec:b6:6a:7f:c6:c7:7e:43:bb:a8:c8:ef:ef:aa:06: 3f:49:fb:d5:e9:7f:ac:10:7f:fe:c2:41:c8:41:e5: 70:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:28:31:6C:D0:46:38:28:9D:DE:38:37:4C:3F:39:1C:83:DC:92:7C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213864.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc2::/32 2a09:54c4::/32 2a0f:6280:5000::/36 2a0f:6282:5000::-2a0f:6282:6fff:ffff:ffff:ffff:ffff:ffff 2a0f:6285::/32 Signature Algorithm: sha256WithRSAEncryption 7e:de:e1:b1:24:b6:a0:59:b0:e6:fb:2a:bc:a7:6c:3a:19:c0: cd:92:ed:4f:ba:6d:f5:e0:75:de:5d:ee:eb:0e:48:8f:fb:72: e7:e2:00:5a:40:7e:9a:5f:c7:73:fe:24:19:ce:c4:1e:b0:25: be:66:d8:02:71:8c:85:8a:0e:a6:fa:31:a4:b2:a9:78:c6:2d: cd:71:05:ba:8f:fd:a8:2c:b6:09:5d:94:be:0f:55:60:7b:58: 11:14:d0:7e:9e:44:5f:1d:0c:dd:84:64:61:e1:7d:df:59:fe: 9a:0b:87:1d:dd:42:f6:d2:3d:6a:79:83:fb:9e:ef:56:3e:60: ed:ea:bb:42:05:17:2c:21:8f:7c:6f:ff:11:aa:fd:dd:5b:bc: fd:a3:3b:74:30:01:9e:0a:c8:f8:d8:52:34:9f:d8:80:27:87: b8:c6:b8:4f:99:bf:47:cf:2b:d5:3a:a1:be:c0:1f:3f:2c:e3: aa:7c:89:3f:6f:cd:fa:56:9d:f7:7b:9e:88:3f:e7:98:53:72: 38:73:98:94:d4:df:f7:98:c5:cb:8c:6b:fa:7e:e8:9f:b3:6a: 3f:f5:23:1e:fa:ce:7f:7d:dd:eb:34:29:09:29:e9:ca:8b:dc: fa:56:92:02:ff:72:d9:64:8d:b6:5d:12:97:10:05:a3:12:50: a5:d5:da:91 -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIUMPHlfAh9lKJcG9LnfuSvHlvoj2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTExNTU2MDVaFw0yNzA5MTAxNjAxMDVaMDMxMTAvBgNV BAMTKEM1MjgzMTZDRDA0NjM4Mjg5RERFMzgzNzRDM0YzOTFDODNEQzkyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCim0NdEoTQMwHK5dsY61TiGDDS afr+lQjCbP7GZwezWpIaca3+LRufjouPt9yNfzwzbzAiqWm47Pc29rUYbcmjLDyd AfeneltcschfL2sb/93UfdgP+H51zbf0zt0i5tbpmhJmIbhfQyDUHTa3qIO7uWSv YCGqoz4On5ZshYMcOxV89yWZnOG7L6dvyvOwluHVsildPa5gwKrBhv0IDmplRCaK PcTUOEPE2jEj7mJaA3VsmwzskObbXwf7Fsjsfz47TyIaZfaF1UTAThhu/Id+qhOJ daYIO5kb+n6EMj/9Yuy2an/Gx35Du6jI7++qBj9J+9Xpf6wQf/7CQchB5XBZAgMB AAGjggIFMIICATAdBgNVHQ4EFgQUxSgxbNBGOCid3jg3TD85HIPcknwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM4NjQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUHAQcBAf8EOTA3MDUEAgACMC8DBQAq Bd/CAwUAKglUxAMGBCoPYoBQMBADBgQqD2KCUAMGBCoPYoJgAwUAKg9ihTANBgkq hkiG9w0BAQsFAAOCAQEAft7hsSS2oFmw5vsqvKdsOhnAzZLtT7pt9eB13l3u6w5I j/ty5+IAWkB+ml/Hc/4kGc7EHrAlvmbYAnGMhYoOpvoxpLKpeMYtzXEFuo/9qCy2 CV2Uvg9VYHtYERTQfp5EXx0M3YRkYeF931n+mguHHd1C9tI9anmD+57vVj5g7eq7 QgUXLCGPfG//Ear93Vu8/aM7dDABngrI+NhSNJ/YgCeHuMa4T5m/R88r1TqhvsAf PyzjqnyJP2/N+lad93ueiD/nmFNyOHOYlNTf95jFy4xr+n7on7NqP/UjHvrOf33d 6zQpCSnpyovc+laSAv9y2WSNtl0SlxAFoxJQpdXakQ== -----END CERTIFICATE-----Generated at Sun Sep 20 17:58:44 2026 by rpki-client