$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214930.roa File: AS214930.roa (raw, json) Hash identifier: edm4ha3l86rDLwexIeP/TaEQdb3XEe5oTGoNGwEyyro= Subject key identifier: 43:BF:EC:5A:B7:7C:28:E1:11:CE:2B:89:B9:CA:04:3A:F4:72:12:99 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 022194FB6A98390877E928C1BC31976E7528D760 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214930.roa Signing time: Fri 12 Jun 2026 11:17:01 +0000 ROA not before: Fri 12 Jun 2026 11:12:01 +0000 ROA not after: Fri 11 Jun 2027 11:17:01 +0000 asID: 214930 IP address blocks: 2a0a:6044:b700::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 17:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:21:94:fb:6a:98:39:08:77:e9:28:c1:bc:31:97:6e:75:28:d7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 12 11:12:01 2026 GMT Not After : Jun 11 11:17:01 2027 GMT Subject: CN=43BFEC5AB77C28E111CE2B89B9CA043AF4721299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:11:bd:dd:2a:ce:c2:02:e5:d9:21:67:ac: 9a:b8:bc:08:88:5a:93:17:8b:7a:20:0e:83:44:bb: be:fc:13:1f:15:91:57:a0:9c:a7:80:00:44:4b:f7: ac:81:3e:99:f7:af:63:96:2e:ac:2b:24:e9:15:36: 06:db:30:b8:4f:dc:f9:3a:3b:74:0f:00:f4:da:9b: 74:1e:1c:4e:65:14:58:19:86:8b:06:da:42:e4:fa: 33:a9:fb:86:5b:b5:f0:4c:f1:d4:2f:ee:5a:76:0a: 81:e2:e0:1f:11:f7:69:10:c5:f8:37:84:01:7a:5b: a8:40:88:06:e7:8f:6e:03:af:8e:fa:9a:2f:cf:df: ab:5f:89:69:e9:83:58:71:35:0c:5d:6a:25:ce:6e: 94:d9:cb:36:c9:d3:13:23:9d:9c:26:11:20:17:5a: 15:74:5e:b4:fc:27:1d:06:5e:d6:ac:1d:b3:1d:01: 23:87:cb:bd:7f:85:67:8b:df:20:cf:ef:06:1e:4a: 84:db:20:9d:c9:04:f3:08:a9:44:f3:81:15:26:a1: e5:4a:4b:3b:97:25:f3:64:55:31:e3:0b:f9:ae:fc: 5f:61:97:84:8f:fa:db:d8:f4:4f:c1:84:fe:44:90: d4:59:74:97:6c:bc:bc:e9:c2:0d:6c:99:f9:dd:04: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BF:EC:5A:B7:7C:28:E1:11:CE:2B:89:B9:CA:04:3A:F4:72:12:99 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b700::/40 Signature Algorithm: sha256WithRSAEncryption 1d:a7:7f:c4:ba:d2:ed:f7:0e:a5:e2:b2:6d:3e:e5:9f:d5:83: f8:5c:73:66:27:83:68:67:12:4b:16:0d:cb:c1:1b:45:48:1c: 5b:e4:50:ef:4d:13:60:0a:0b:ca:5d:40:07:42:cd:41:9b:53: 4b:e5:11:1c:7d:34:ed:eb:2d:49:e9:1b:a1:76:ee:86:53:05: 0a:f3:07:45:31:b7:29:86:23:14:45:27:3a:17:ab:d3:7b:70: 08:a5:11:4f:15:bb:e1:54:8e:30:89:81:65:ee:51:bb:d1:81: d0:3f:e2:70:55:09:39:70:e7:20:cf:d3:ce:26:60:df:ea:da: 15:f5:8d:e1:4b:1f:d1:d7:4a:1c:75:40:42:df:7a:cd:52:03: 61:7a:b1:39:8d:ce:21:fe:40:47:fb:97:76:31:67:b5:5e:1f: 77:cc:9b:f6:a1:d8:93:92:53:63:24:7f:2e:d0:38:29:10:eb: ae:d2:58:cb:cf:6f:28:a6:a4:1e:14:b1:9f:d1:f0:82:a2:09: 5c:bf:52:2d:50:b8:cd:80:c9:d4:61:f1:cf:84:dd:1d:d9:4b: 24:ee:81:82:f7:8b:4b:48:4e:6d:42:56:39:2a:5f:95:f5:90: 58:a0:1e:2d:b7:cb:98:c3:42:f6:9b:88:bc:b2:70:43:02:e6: 7d:2a:0c:ff -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUAiGU+2qYOQh36SjBvDGXbnUo12AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MTIxMTEyMDFaFw0yNzA2MTExMTE3MDFaMDMxMTAvBgNV BAMTKDQzQkZFQzVBQjc3QzI4RTExMUNFMkI4OUI5Q0EwNDNBRjQ3MjEyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ/RG93SrOwgLl2SFnrJq4vAiI WpMXi3ogDoNEu778Ex8VkVegnKeAAERL96yBPpn3r2OWLqwrJOkVNgbbMLhP3Pk6 O3QPAPTam3QeHE5lFFgZhosG2kLk+jOp+4ZbtfBM8dQv7lp2CoHi4B8R92kQxfg3 hAF6W6hAiAbnj24Dr476mi/P36tfiWnpg1hxNQxdaiXObpTZyzbJ0xMjnZwmESAX WhV0XrT8Jx0GXtasHbMdASOHy71/hWeL3yDP7wYeSoTbIJ3JBPMIqUTzgRUmoeVK SzuXJfNkVTHjC/mu/F9hl4SP+tvY9E/BhP5EkNRZdJdsvLzpwg1smfndBLeDAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUQ7/sWrd8KOERziuJucoEOvRyEpkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ5MzAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEtzANBgkqhkiG9w0BAQsFAAOCAQEAHad/xLrS7fcOpeKybT7ln9WD+FxzZieD aGcSSxYNy8EbRUgcW+RQ700TYAoLyl1AB0LNQZtTS+URHH007estSekboXbuhlMF CvMHRTG3KYYjFEUnOher03twCKURTxW74VSOMImBZe5Ru9GB0D/icFUJOXDnIM/T ziZg3+raFfWN4Usf0ddKHHVAQt96zVIDYXqxOY3OIf5AR/uXdjFntV4fd8yb9qHY k5JTYyR/LtA4KRDrrtJYy89vKKakHhSxn9HwgqIJXL9SLVC4zYDJ1GHxz4TdHdlL JO6BgveLS0hObUJWOSpflfWQWKAeLbfLmMNC9puIvLJwQwLmfSoM/w== -----END CERTIFICATE-----Generated at Sat Jun 13 06:38:14 2026 by rpki-client