$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214980.roa File: AS214980.roa (raw, json) Hash identifier: lqWw2GdUlae/FQpo/85ljUt0qiiFi1Z2DlQiFYFScvI= Subject key identifier: 01:17:03:6A:A0:5D:8F:7B:31:C4:C3:D8:A0:A9:A8:74:09:46:F0:3D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 297F4E46F024384883D5BB5DF1771C0AF06EDCEE Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214980.roa Signing time: Sun 13 Sep 2026 21:52:17 +0000 ROA not before: Sun 13 Sep 2026 21:47:17 +0000 ROA not after: Sun 12 Sep 2027 21:52:17 +0000 asID: 214980 IP address blocks: 2a0a:6044:c100::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7f:4e:46:f0:24:38:48:83:d5:bb:5d:f1:77:1c:0a:f0:6e:dc:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 13 21:47:17 2026 GMT Not After : Sep 12 21:52:17 2027 GMT Subject: CN=0117036AA05D8F7B31C4C3D8A0A9A8740946F03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:64:38:d0:e9:7c:da:45:cf:f3:5b:bc:11: 93:e2:ef:2a:3d:94:59:79:76:fb:50:23:d8:47:fc: 32:19:9e:e1:bc:ea:b0:37:b9:b5:c1:e5:03:0f:0c: a2:3b:3b:07:64:76:86:5b:62:8f:17:3e:8b:fd:16: 70:62:a1:a9:2f:eb:c9:5f:83:49:18:39:58:10:8a: 95:f5:28:d4:df:79:65:de:ea:06:33:47:c9:31:c3: 6d:17:95:f3:45:0d:e4:b2:6a:77:4f:11:b9:95:c1: 97:ae:87:7d:09:34:52:21:d0:a2:fe:8e:00:63:57: 46:ec:ee:ef:db:e6:8e:b5:95:3a:8b:75:f0:c2:a0: 1d:38:6c:71:c2:b5:25:8e:f9:e9:57:26:bb:f2:59: 32:f2:d5:84:81:09:cf:b1:ce:de:63:24:1e:57:75: ae:c0:c5:2a:97:da:3e:1e:80:42:63:16:03:05:4b: d7:b1:41:2d:51:00:c6:33:d3:53:7b:80:ed:ac:24: 57:5d:3a:65:4d:d0:96:ac:c5:1f:54:ad:57:c0:5e: 1c:c7:f9:d8:ec:e4:e7:50:f5:53:f0:15:9f:84:57: 8e:47:6b:dd:c7:fe:61:60:22:01:ec:ec:3a:69:3b: 2b:93:c0:e5:9a:20:33:05:0e:94:26:2c:9e:a3:64: 46:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:17:03:6A:A0:5D:8F:7B:31:C4:C3:D8:A0:A9:A8:74:09:46:F0:3D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214980.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:c100::/44 Signature Algorithm: sha256WithRSAEncryption 48:1e:03:11:89:16:db:01:8d:4c:fe:e4:c9:eb:e2:d1:33:c3: b5:15:4a:bc:20:d2:5f:89:8c:92:6c:10:5e:fb:ce:bb:1f:6d: 98:10:33:04:eb:f9:7a:03:d9:b8:7b:24:f4:5c:83:1a:e4:75: 4b:26:52:10:26:e0:fa:e2:45:f2:c3:73:24:a2:71:a4:b4:83: 00:92:e0:3d:d6:11:d2:4e:bf:ac:90:b1:7f:26:3c:b9:94:09: 3c:6a:36:25:75:d5:6e:a2:86:a1:aa:c9:dd:73:41:9c:41:ab: c0:92:82:ea:25:20:52:3b:72:c4:87:66:cd:73:c3:3a:52:5b: a5:28:f2:c3:60:42:e2:be:dd:52:51:43:4e:c9:3a:23:d6:fc: 28:5a:0c:7e:7a:3c:b7:08:8d:d5:98:e7:12:10:ca:14:1b:84: bf:0a:14:d1:6a:0e:be:d4:ce:56:d1:18:a6:d9:28:60:b9:c6: b8:4c:e6:7b:c2:13:7a:7c:61:c2:41:db:1f:28:33:ae:eb:4f: 24:2a:2b:e1:74:90:7d:ca:21:a5:d9:16:f8:5a:1b:f5:ed:15: 99:52:d7:4f:c4:0a:50:f6:ad:0d:2b:90:de:35:67:79:e0:c4: d6:8f:94:2e:5d:10:d2:1e:52:93:58:bf:05:69:13:c7:fc:a6: 74:df:91:e8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUKX9ORvAkOEiD1btd8XccCvBu3O4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTMyMTQ3MTdaFw0yNzA5MTIyMTUyMTdaMDMxMTAvBgNV BAMTKDAxMTcwMzZBQTA1RDhGN0IzMUM0QzNEOEEwQTlBODc0MDk0NkYwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMzGQ40Ol82kXP81u8EZPi7yo9 lFl5dvtQI9hH/DIZnuG86rA3ubXB5QMPDKI7OwdkdoZbYo8XPov9FnBioakv68lf g0kYOVgQipX1KNTfeWXe6gYzR8kxw20XlfNFDeSyandPEbmVwZeuh30JNFIh0KL+ jgBjV0bs7u/b5o61lTqLdfDCoB04bHHCtSWO+elXJrvyWTLy1YSBCc+xzt5jJB5X da7AxSqX2j4egEJjFgMFS9exQS1RAMYz01N7gO2sJFddOmVN0JasxR9UrVfAXhzH +djs5OdQ9VPwFZ+EV45Ha93H/mFgIgHs7DppOyuTwOWaIDMFDpQmLJ6jZEadAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUARcDaqBdj3sxxMPYoKmodAlG8D0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ5ODAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq CmBEwQAwDQYJKoZIhvcNAQELBQADggEBAEgeAxGJFtsBjUz+5Mnr4tEzw7UVSrwg 0l+JjJJsEF77zrsfbZgQMwTr+XoD2bh7JPRcgxrkdUsmUhAm4PriRfLDcySicaS0 gwCS4D3WEdJOv6yQsX8mPLmUCTxqNiV11W6ihqGqyd1zQZxBq8CSguolIFI7csSH Zs1zwzpSW6Uo8sNgQuK+3VJRQ07JOiPW/ChaDH56PLcIjdWY5xIQyhQbhL8KFNFq Dr7UzlbRGKbZKGC5xrhM5nvCE3p8YcJB2x8oM67rTyQqK+F0kH3KIaXZFvhaG/Xt FZlS10/EClD2rQ0rkN41Z3ngxNaPlC5dENIeUpNYvwVpE8f8pnTfkeg= -----END CERTIFICATE-----Generated at Sun Sep 20 11:44:21 2026 by rpki-client