$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214223.roa File: AS214223.roa (raw, json) Hash identifier: bE3lyqCYjPklE3pea2p1+c0V+sWk0Zy73ufUQPkb+1Y= Subject key identifier: 70:A3:31:41:0A:46:68:A7:BA:65:4A:83:AD:79:0E:86:18:12:1E:18 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 19006D06B2EAC5277490414711E1638CAC3C6EA6 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214223.roa Signing time: Sat 31 Oct 2026 20:56:37 +0000 ROA not before: Sat 31 Oct 2026 20:51:37 +0000 ROA not after: Sat 30 Oct 2027 20:56:37 +0000 asID: 214223 IP address blocks: 2a05:dfc3:fa00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:00:6d:06:b2:ea:c5:27:74:90:41:47:11:e1:63:8c:ac:3c:6e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 31 20:51:37 2026 GMT Not After : Oct 30 20:56:37 2027 GMT Subject: CN=70A331410A4668A7BA654A83AD790E8618121E18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:63:14:87:34:da:f3:15:61:dd:b6:1c:ac: da:64:ae:b9:ef:a8:13:26:e5:f4:7a:c8:0b:2c:a3: 36:e2:02:7a:a6:bc:00:ad:a5:2e:c4:a1:2c:6c:62: a5:36:ae:31:b7:1f:b1:c8:1c:e1:29:c8:91:0d:46: fb:43:48:2b:4b:aa:93:e2:cc:f7:60:e8:d5:28:16: 78:62:94:41:50:3a:85:23:bf:f2:18:18:e3:92:15: 4b:a6:42:dc:af:09:fb:50:7a:5a:75:12:6a:dc:19: 77:b0:4e:90:0c:0d:ca:ee:86:24:26:d1:21:72:a2: 44:e4:24:6e:e9:9c:64:9c:d6:25:87:e2:8e:78:87: 21:ab:08:13:a9:c1:47:4d:63:3f:4c:7d:4c:84:16: 97:c1:18:97:17:64:83:49:7d:98:fe:fd:c0:59:2d: 56:0b:d7:8c:2f:3e:db:6a:4c:7d:39:80:ff:c2:2b: bd:0d:2f:ce:55:02:7f:98:d1:db:b7:80:95:10:df: d0:08:33:ee:9f:94:18:c8:b9:1e:1e:6d:f2:78:94: 81:01:3f:74:99:3c:2f:cc:ac:32:f7:b7:f1:6b:e1: bc:2a:b3:f0:fa:6f:9f:56:31:58:10:42:b6:48:7a: e6:b7:94:89:2a:1c:ed:cf:60:bb:4f:4a:47:12:0b: 7e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A3:31:41:0A:46:68:A7:BA:65:4A:83:AD:79:0E:86:18:12:1E:18 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214223.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fa00::/40 Signature Algorithm: sha256WithRSAEncryption 4a:ee:cb:c2:01:3a:b0:0d:ce:c6:9d:cd:5e:50:e4:29:27:67: 40:bc:51:14:93:45:2b:aa:ea:99:57:4d:e0:8d:78:a3:1a:5e: 0d:92:04:6d:25:1c:bd:bd:ad:de:58:e4:21:67:c1:c3:1b:59: 9c:04:f6:33:72:94:b1:f5:58:13:7a:47:a7:39:e8:4a:b2:2a: 76:a5:bd:e9:f5:b3:f8:a3:db:59:f8:6e:d6:48:53:ba:56:9c: 66:dd:fa:27:10:bd:43:47:fe:97:d0:a0:4c:5a:d9:01:d9:99: d0:2e:9b:dc:8c:aa:20:8a:42:67:fc:45:6e:4e:5e:0f:2e:d4: 72:a0:e2:ef:a1:87:3f:ec:47:49:10:eb:19:10:a2:ae:26:e8: 61:57:9f:d1:00:e1:b5:87:8f:3b:5e:49:4f:cc:74:07:f2:87: ae:1a:f1:73:69:25:1c:b8:90:02:f7:5e:8a:47:bf:54:f3:57: d6:79:16:49:03:84:16:28:c3:d2:c0:68:13:f4:16:d3:e6:5c: 58:f5:89:cc:0d:23:3a:b0:3b:45:08:3a:82:42:37:f9:1f:42: 8d:6e:e0:c1:6d:66:be:c9:bf:2a:d3:2b:ec:4b:45:3b:51:fc: 53:2e:69:30:7e:f1:33:1e:50:d7:84:7d:59:73:f2:6c:22:15: 67:9c:9e:0a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUGQBtBrLqxSd0kEFHEeFjjKw8bqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMzEyMDUxMzdaFw0yNzEwMzAyMDU2MzdaMDMxMTAvBgNV BAMTKDcwQTMzMTQxMEE0NjY4QTdCQTY1NEE4M0FENzkwRTg2MTgxMjFFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX9mMUhzTa8xVh3bYcrNpkrrnv qBMm5fR6yAssozbiAnqmvACtpS7EoSxsYqU2rjG3H7HIHOEpyJENRvtDSCtLqpPi zPdg6NUoFnhilEFQOoUjv/IYGOOSFUumQtyvCftQelp1EmrcGXewTpAMDcruhiQm 0SFyokTkJG7pnGSc1iWH4o54hyGrCBOpwUdNYz9MfUyEFpfBGJcXZINJfZj+/cBZ LVYL14wvPttqTH05gP/CK70NL85VAn+Y0du3gJUQ39AIM+6flBjIuR4ebfJ4lIEB P3SZPC/MrDL3t/Fr4bwqs/D6b59WMVgQQrZIeua3lIkqHO3PYLtPSkcSC35fAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUcKMxQQpGaKe6ZUqDrXkOhhgSHhgwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQyMjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq Bd/D+jANBgkqhkiG9w0BAQsFAAOCAQEASu7LwgE6sA3Oxp3NXlDkKSdnQLxRFJNF K6rqmVdN4I14oxpeDZIEbSUcvb2t3ljkIWfBwxtZnAT2M3KUsfVYE3pHpznoSrIq dqW96fWz+KPbWfhu1khTulacZt36JxC9Q0f+l9CgTFrZAdmZ0C6b3IyqIIpCZ/xF bk5eDy7UcqDi76GHP+xHSRDrGRCiriboYVef0QDhtYePO15JT8x0B/KHrhrxc2kl HLiQAvdeike/VPNX1nkWSQOEFijD0sBoE/QW0+ZcWPWJzA0jOrA7RQg6gkI3+R9C jW7gwW1mvsm/KtMr7EtFO1H8Uy5pMH7xMx5Q14R9WXPybCIVZ5yeCg== -----END CERTIFICATE-----Generated at Thu Nov 5 17:23:43 2026 by rpki-client