$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214660.roa File: AS214660.roa (raw, json) Hash identifier: nQWIG/1aohLw+8BCzmyYnO2cqHBJOXBKve1xeKfCogE= Subject key identifier: 17:93:9C:FF:AB:3E:C6:6C:1A:A8:6E:57:39:9B:D8:27:10:8C:DF:8F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 16B5B7BB6E9847101AD49EB0822976C88D38125A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214660.roa Signing time: Thu 04 Jun 2026 16:51:50 +0000 ROA not before: Thu 04 Jun 2026 16:46:50 +0000 ROA not after: Thu 03 Jun 2027 16:51:50 +0000 asID: 214660 IP address blocks: 2a0a:6044:6600::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b5:b7:bb:6e:98:47:10:1a:d4:9e:b0:82:29:76:c8:8d:38:12:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 4 16:46:50 2026 GMT Not After : Jun 3 16:51:50 2027 GMT Subject: CN=17939CFFAB3EC66C1AA86E57399BD827108CDF8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bf:19:0a:ba:52:d4:88:c3:f2:7d:a7:b5:86: cf:b9:d3:44:62:15:88:9c:83:6d:62:de:ef:dd:0c: 83:53:39:44:4f:fe:2a:3a:a5:e7:ef:ad:2b:39:e4: fc:ad:29:a4:30:65:aa:69:63:07:7b:32:a6:25:d2: e7:9f:6b:92:a5:7c:11:cf:af:71:e6:e3:33:ab:ca: 44:e9:8a:1f:bc:65:06:98:f8:42:41:3a:fc:1e:d4: 1a:8e:b2:e7:c8:e4:a5:0b:41:20:61:19:4d:da:2d: 9e:cd:50:2e:c9:ac:4a:f4:60:40:68:8e:81:74:87: 2e:98:86:53:a0:76:19:70:d4:c8:bf:ca:9e:91:71: 8d:d5:97:a6:e7:b5:c3:30:04:08:eb:18:53:66:92: 9e:0c:51:6b:5c:6e:d9:1a:c2:3b:bd:c4:28:f0:a7: ed:6f:0a:78:c4:52:0a:86:76:21:61:33:cc:7b:ff: d8:89:06:8c:47:37:a5:5e:c3:ba:7f:98:4a:2d:14: 8b:c6:5c:52:e7:99:61:50:2e:39:93:ed:47:a4:7e: f1:d6:9e:c4:f7:9d:8a:51:8f:7e:ad:46:fc:36:b8: 19:8c:7d:54:93:97:47:a5:b1:73:d2:ca:21:92:bc: e0:0a:d6:11:50:c4:b3:f7:c6:39:c5:04:ec:b8:bc: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:93:9C:FF:AB:3E:C6:6C:1A:A8:6E:57:39:9B:D8:27:10:8C:DF:8F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214660.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6600::/40 Signature Algorithm: sha256WithRSAEncryption 8e:ed:16:c6:8d:07:b1:39:8f:ec:12:a8:0a:2d:f5:c4:44:88: 37:1d:f4:69:7f:a5:71:9d:97:65:74:ac:ff:60:e5:4e:55:98: a7:ef:02:6d:7d:82:8e:5a:1c:7e:68:7d:68:e6:c2:10:f2:ab: a2:b1:7f:7f:7c:33:02:1f:a3:6e:ff:d2:b6:50:58:0c:d3:48: fd:41:0a:25:92:1f:2c:01:4f:fc:4c:1d:fe:2c:ad:91:3d:5e: 74:b4:75:2c:a8:41:c8:33:32:ea:d8:21:3e:f5:1d:fc:c4:c8: 58:d9:e1:2c:c6:58:5e:6e:9d:f1:2a:90:32:da:52:da:0b:11: 98:e8:ad:67:14:35:bf:96:bf:b5:18:cd:ae:99:b1:09:fb:0c: 0d:5f:ba:52:a7:7a:ef:70:8d:0d:e6:1f:c6:42:db:00:2c:28: 5c:6d:c7:fe:7c:bf:6b:86:58:b1:81:a7:0c:c1:89:b1:20:c0: d6:04:b4:c9:0c:e8:8c:b6:6b:4b:33:40:5d:ff:27:1d:d6:80: 09:bb:49:23:79:72:8e:eb:3e:4e:50:a6:60:a3:ff:b9:43:4e: ab:7b:d2:14:43:5e:64:3d:28:c7:40:fc:b2:21:f3:01:08:4b: 5c:52:a0:06:e8:84:4f:20:b6:c3:9e:50:5c:dd:fe:a2:32:c8: af:cc:23:0c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUFrW3u26YRxAa1J6wgil2yI04ElowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDQxNjQ2NTBaFw0yNzA2MDMxNjUxNTBaMDMxMTAvBgNV BAMTKDE3OTM5Q0ZGQUIzRUM2NkMxQUE4NkU1NzM5OUJEODI3MTA4Q0RGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlvxkKulLUiMPyfae1hs+500Ri FYicg21i3u/dDINTOURP/io6pefvrSs55PytKaQwZappYwd7MqYl0uefa5KlfBHP r3Hm4zOrykTpih+8ZQaY+EJBOvwe1BqOsufI5KULQSBhGU3aLZ7NUC7JrEr0YEBo joF0hy6YhlOgdhlw1Mi/yp6RcY3Vl6bntcMwBAjrGFNmkp4MUWtcbtkawju9xCjw p+1vCnjEUgqGdiFhM8x7/9iJBoxHN6Vew7p/mEotFIvGXFLnmWFQLjmT7UekfvHW nsT3nYpRj36tRvw2uBmMfVSTl0elsXPSyiGSvOAK1hFQxLP3xjnFBOy4vKmlAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUF5Oc/6s+xmwaqG5XOZvYJxCM348wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ2NjAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEZjANBgkqhkiG9w0BAQsFAAOCAQEAju0Wxo0HsTmP7BKoCi31xESINx30aX+l cZ2XZXSs/2DlTlWYp+8CbX2Cjlocfmh9aObCEPKrorF/f3wzAh+jbv/StlBYDNNI /UEKJZIfLAFP/Ewd/iytkT1edLR1LKhByDMy6tghPvUd/MTIWNnhLMZYXm6d8SqQ MtpS2gsRmOitZxQ1v5a/tRjNrpmxCfsMDV+6Uqd673CNDeYfxkLbACwoXG3H/ny/ a4ZYsYGnDMGJsSDA1gS0yQzojLZrSzNAXf8nHdaACbtJI3lyjus+TlCmYKP/uUNO q3vSFENeZD0ox0D8siHzAQhLXFKgBuiETyC2w55QXN3+ojLIr8wjDA== -----END CERTIFICATE-----Generated at Wed Jun 17 08:24:56 2026 by rpki-client