$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214223.roa File: AS214223.roa (raw, json) Hash identifier: Z8YESsKaJ5a+VKXMkQ51EPJe0J7a858xRXodRSKcLO8= Subject key identifier: B8:81:ED:07:35:BF:BC:10:64:33:C6:5F:C8:A6:8A:08:09:A8:77:9B Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5FBF1288C093BD35593DB01898461B4AE0F5791D Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214223.roa Signing time: Sun 20 Sep 2026 06:00:10 +0000 ROA not before: Sun 20 Sep 2026 05:55:10 +0000 ROA not after: Sun 19 Sep 2027 06:00:10 +0000 asID: 214223 IP address blocks: 2a05:dfc3:fa00::/40 maxlen: 48 2a0a:6044:6400::/40 maxlen: 48 2a0f:6280:1020::/44 maxlen: 48 2a0f:6280:1900::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bf:12:88:c0:93:bd:35:59:3d:b0:18:98:46:1b:4a:e0:f5:79:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 20 05:55:10 2026 GMT Not After : Sep 19 06:00:10 2027 GMT Subject: CN=B881ED0735BFBC106433C65FC8A68A0809A8779B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ee:ce:79:d9:20:af:92:52:ba:33:95:3a:7c: 95:09:75:79:d6:16:f7:79:49:e3:42:47:29:9f:7b: fb:22:3f:02:76:f1:7d:08:3f:d7:aa:27:e7:02:e1: dc:17:09:77:07:89:5d:4c:93:84:a8:55:1f:7d:f4: 22:9a:d6:74:0c:b1:4f:c7:f2:7f:fb:30:dc:29:f3: 80:cb:44:93:4f:d0:1c:1b:f9:04:e4:5c:4a:a0:0a: 9f:28:11:5e:7a:e6:b0:0c:a6:e3:54:eb:96:b9:50: 78:9f:f6:d9:66:73:00:d0:f5:4d:87:fd:1f:e3:b2: 41:46:e7:ef:b7:1f:e3:1b:5b:43:28:ee:b0:e1:43: 22:2b:74:12:f1:20:f8:3a:ab:60:19:b1:cb:0f:83: d4:58:52:b0:a8:94:31:17:7d:48:48:e6:da:e0:09: f3:81:2a:0d:04:39:54:52:fe:e1:43:b3:22:35:41: 23:76:96:38:a0:b6:ff:17:40:79:f3:fa:79:46:05: 08:0c:cf:10:26:ec:72:0c:af:66:60:fa:3b:35:1f: c5:61:7f:29:f0:b0:2e:eb:46:8f:8c:65:4e:48:7a: c1:1f:9a:19:2c:fc:4d:ff:d4:cb:20:80:63:7b:fc: 3a:71:e1:3b:eb:8e:79:25:04:5b:b3:63:7d:80:3b: 28:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:81:ED:07:35:BF:BC:10:64:33:C6:5F:C8:A6:8A:08:09:A8:77:9B X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214223.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fa00::/40 2a0a:6044:6400::/40 2a0f:6280:1020::/44 2a0f:6280:1900::/40 Signature Algorithm: sha256WithRSAEncryption 37:b7:2c:bc:0b:e8:86:25:24:cd:28:87:99:09:b4:20:b7:a3: e1:9a:b4:e6:d4:6c:f3:30:b2:20:6c:2e:63:2a:b9:22:dd:5b: 18:c2:83:a6:b7:a1:b7:05:fb:79:c9:ea:68:e7:8e:9a:4b:7b: 27:38:4d:b1:dc:08:15:49:2f:cf:77:7f:9a:87:cd:85:de:99: f6:68:42:01:c4:9c:d0:7d:32:a5:61:5f:d6:2d:85:39:2c:5c: 0c:84:6e:b8:93:da:ae:f2:06:aa:d2:d9:2f:d1:5f:2e:c1:4b: 3b:1b:c1:79:0d:93:40:75:40:ac:18:ef:82:a2:32:2e:d3:84: cd:9a:11:e8:30:63:45:3b:6e:d8:46:19:bb:dd:0f:1f:bd:1d: 5f:b9:f1:55:18:35:6c:91:dd:e9:11:28:79:a3:3e:c5:6b:b0: 6e:d2:7a:24:17:e0:1d:a0:5b:98:e8:31:5d:3b:e5:58:5b:0b: ec:80:ab:d4:94:bb:ff:d0:19:ff:1a:89:c9:f3:93:e6:b4:62: 8a:4e:25:df:01:59:c0:ba:fc:c4:8b:00:7e:95:64:7a:65:8e: ec:cc:50:06:0d:65:c0:50:42:bb:c0:41:08:fe:a9:ec:0b:42: 64:81:56:dc:16:45:5d:81:c1:9d:ca:08:f6:7c:0b:21:c0:f3: d7:9e:da:04 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUX78SiMCTvTVZPbAYmEYbSuD1eR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MjAwNTU1MTBaFw0yNzA5MTkwNjAwMTBaMDMxMTAvBgNV BAMTKEI4ODFFRDA3MzVCRkJDMTA2NDMzQzY1RkM4QTY4QTA4MDlBODc3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD7s552SCvklK6M5U6fJUJdXnW Fvd5SeNCRymfe/siPwJ28X0IP9eqJ+cC4dwXCXcHiV1Mk4SoVR999CKa1nQMsU/H 8n/7MNwp84DLRJNP0Bwb+QTkXEqgCp8oEV565rAMpuNU65a5UHif9tlmcwDQ9U2H /R/jskFG5++3H+MbW0Mo7rDhQyIrdBLxIPg6q2AZscsPg9RYUrColDEXfUhI5trg CfOBKg0EOVRS/uFDsyI1QSN2ljigtv8XQHnz+nlGBQgMzxAm7HIMr2Zg+js1H8Vh fynwsC7rRo+MZU5IesEfmhks/E3/1MsggGN7/Dpx4TvrjnklBFuzY32AOygLAgMB AAGjggH3MIIB8zAdBgNVHQ4EFgQUuIHtBzW/vBBkM8ZfyKaKCAmod5swHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQyMjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMCcEAgACMCEDBgAq Bd/D+gMGACoKYERkAwcEKg9igBAgAwYAKg9igBkwDQYJKoZIhvcNAQELBQADggEB ADe3LLwL6IYlJM0oh5kJtCC3o+GatObUbPMwsiBsLmMquSLdWxjCg6a3obcF+3nJ 6mjnjppLeyc4TbHcCBVJL893f5qHzYXemfZoQgHEnNB9MqVhX9YthTksXAyEbriT 2q7yBqrS2S/RXy7BSzsbwXkNk0B1QKwY74KiMi7ThM2aEegwY0U7bthGGbvdDx+9 HV+58VUYNWyR3ekRKHmjPsVrsG7SeiQX4B2gW5joMV075VhbC+yAq9SUu//QGf8a icnzk+a0YopOJd8BWcC6/MSLAH6VZHpljuzMUAYNZcBQQrvAQQj+qewLQmSBVtwW RV2BwZ3KCPZ8CyHA89ee2gQ= -----END CERTIFICATE-----Generated at Sun Sep 20 21:46:22 2026 by rpki-client