$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214203.roa File: AS214203.roa (raw, json) Hash identifier: u8DftBLS1MnM+UV4hSgMXZqs9LNOhac1gxHs75WlNSE= Subject key identifier: 84:A1:CF:A0:5F:3E:7D:9C:E2:5E:D2:E2:20:DF:EF:8F:F7:05:D3:AB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 32569BB3479B019BBDB4DE269FB6E3915FE3029E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214203.roa Signing time: Thu 05 Nov 2026 06:46:06 +0000 ROA not before: Thu 05 Nov 2026 06:41:06 +0000 ROA not after: Thu 04 Nov 2027 06:46:06 +0000 asID: 214203 IP address blocks: 2a05:dfc3:ff00::/40 maxlen: 48 2a0a:6044:6700::/40 maxlen: 48 2a0a:6044:7a00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:56:9b:b3:47:9b:01:9b:bd:b4:de:26:9f:b6:e3:91:5f:e3:02:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 5 06:41:06 2026 GMT Not After : Nov 4 06:46:06 2027 GMT Subject: CN=84A1CFA05F3E7D9CE25ED2E220DFEF8FF705D3AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:ce:d1:ab:84:98:a1:1a:d8:3a:49:ee:f3: 91:56:11:de:5d:d8:30:d4:b3:b1:ab:3b:7e:26:62: 6c:c1:73:04:49:80:5a:c2:c8:b9:30:db:db:45:55: cc:04:56:ed:fa:ab:06:60:ce:3f:6f:0e:55:66:b8: e8:96:f7:61:30:d2:ec:6f:ff:9c:14:46:16:b4:a7: a7:a0:7a:fc:c7:4d:ad:95:f6:5f:85:56:cc:19:fe: 14:88:40:75:ec:66:74:51:c3:0a:b3:7a:58:d7:88: bb:5d:bd:29:81:48:05:3d:22:e3:7f:0a:97:29:f2: a9:ef:78:6c:7f:6f:f4:9a:55:5c:89:ee:8d:34:f1: 1f:5a:b8:46:dd:e9:57:7b:34:fa:9b:c1:f6:f6:f6: e7:20:f1:1c:e7:9e:7f:ef:36:e0:9a:a5:e4:80:ef: b5:21:e1:70:ec:10:d7:cc:89:4c:06:1c:f0:4a:98: 50:3d:85:1b:46:a6:11:ed:06:60:ec:bd:18:62:e6: 99:a9:6f:11:e6:5b:88:cb:8a:36:8c:fe:e3:ac:2d: 51:f8:78:8d:6c:52:71:b7:09:7c:ae:3c:8e:85:ca: 96:6a:ca:6d:8d:ea:00:03:d2:c2:ab:d6:eb:5d:5d: 31:73:5e:56:2c:3d:1c:2f:a2:5e:a5:e8:42:97:91: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A1:CF:A0:5F:3E:7D:9C:E2:5E:D2:E2:20:DF:EF:8F:F7:05:D3:AB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214203.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:ff00::/40 2a0a:6044:6700::/40 2a0a:6044:7a00::/40 Signature Algorithm: sha256WithRSAEncryption 06:24:49:61:54:cb:59:fc:00:05:36:f2:70:d4:56:84:62:51: f2:e5:27:38:00:31:30:7a:62:70:c5:75:b3:68:c4:a4:15:f4: f5:ca:e1:0c:15:7a:5f:1e:cb:a9:31:4b:dd:44:d7:ac:2e:2b: 3f:2b:f4:57:c3:f7:ef:60:f0:8e:64:dc:15:18:a5:3e:ff:c7: aa:f5:6e:45:2f:45:f0:7d:7d:24:e7:1f:74:66:2c:00:7a:c3: d2:b3:cf:3e:fb:2a:bc:66:79:9f:15:34:b8:b4:99:c9:76:17: 90:52:f4:2f:c1:31:a0:c4:d2:c5:f8:0e:f4:f1:51:6a:48:35: 74:d9:1c:13:d9:21:eb:37:b6:e7:24:79:d0:e8:69:7a:51:98: 18:a9:de:fa:bb:eb:a1:f4:56:83:8f:8d:e7:ec:a6:b4:05:33: 6f:9a:7a:b5:1c:b1:df:f8:cf:e1:cc:0e:09:9e:b0:48:b3:cd: 12:36:fd:d1:23:de:f9:0f:c8:9f:84:27:98:89:fb:f0:8e:d2: 46:01:c9:63:88:83:f5:19:c0:a9:a1:72:6a:dd:e9:ae:84:07: 4e:53:23:0f:3d:ad:87:42:e1:8c:e2:aa:e5:01:0a:7f:f2:bf: 87:62:39:66:6d:a6:ea:65:1f:4f:78:70:42:61:81:c2:35:3d: 23:73:6a:1f -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUMlabs0ebAZu9tN4mn7bjkV/jAp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjExMDUwNjQxMDZaFw0yNzExMDQwNjQ2MDZaMDMxMTAvBgNV BAMTKDg0QTFDRkEwNUYzRTdEOUNFMjVFRDJFMjIwREZFRjhGRjcwNUQzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ts7Rq4SYoRrYOknu85FWEd5d 2DDUs7GrO34mYmzBcwRJgFrCyLkw29tFVcwEVu36qwZgzj9vDlVmuOiW92Ew0uxv /5wURha0p6egevzHTa2V9l+FVswZ/hSIQHXsZnRRwwqzeljXiLtdvSmBSAU9IuN/ Cpcp8qnveGx/b/SaVVyJ7o008R9auEbd6Vd7NPqbwfb29ucg8Rznnn/vNuCapeSA 77Uh4XDsENfMiUwGHPBKmFA9hRtGphHtBmDsvRhi5pmpbxHmW4jLijaM/uOsLVH4 eI1sUnG3CXyuPI6FypZqym2N6gAD0sKr1utdXTFzXlYsPRwvol6l6EKXkTl7AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUhKHPoF8+fZziXtLiIN/vj/cF06swHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQyMDMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgACMBgDBgAq Bd/D/wMGACoKYERnAwYAKgpgRHowDQYJKoZIhvcNAQELBQADggEBAAYkSWFUy1n8 AAU28nDUVoRiUfLlJzgAMTB6YnDFdbNoxKQV9PXK4QwVel8ey6kxS91E16wuKz8r 9FfD9+9g8I5k3BUYpT7/x6r1bkUvRfB9fSTnH3RmLAB6w9Kzzz77KrxmeZ8VNLi0 mcl2F5BS9C/BMaDE0sX4DvTxUWpINXTZHBPZIes3tuckedDoaXpRmBip3vq766H0 VoOPjefsprQFM2+aerUcsd/4z+HMDgmesEizzRI2/dEj3vkPyJ+EJ5iJ+/CO0kYB yWOIg/UZwKmhcmrd6a6EB05TIw89rYdC4YziquUBCn/yv4diOWZtpuplH094cEJh gcI1PSNzah8= -----END CERTIFICATE-----Generated at Thu Nov 5 17:23:36 2026 by rpki-client