$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214989.roa File: AS214989.roa (raw, json) Hash identifier: itjvuOIFk12x2wLi9BWj4nspyxWduxuliMfUztjuMFw= Subject key identifier: 1A:F3:4B:BD:7A:A6:41:8E:D6:D7:48:D6:FD:D7:38:04:29:C7:AC:27 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5A06B1715B4E481A2CDBF421D0B83B94154C5535 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214989.roa Signing time: Tue 09 Jun 2026 16:35:10 +0000 ROA not before: Tue 09 Jun 2026 16:30:10 +0000 ROA not after: Tue 08 Jun 2027 16:35:10 +0000 asID: 214989 IP address blocks: 2a06:1281:c000::/34 maxlen: 35 2a0a:6044:4000::/36 maxlen: 37 2a0f:6284:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:06:b1:71:5b:4e:48:1a:2c:db:f4:21:d0:b8:3b:94:15:4c:55:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 9 16:30:10 2026 GMT Not After : Jun 8 16:35:10 2027 GMT Subject: CN=1AF34BBD7AA6418ED6D748D6FDD7380429C7AC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:19:fd:87:a7:5a:9b:82:1d:28:f4:40:3b:0b: 8b:d0:3b:5f:92:6d:c4:d1:f4:e9:33:6d:3e:19:8b: 46:16:26:f4:8e:8e:a9:7a:22:7f:75:43:25:81:64: ff:ca:03:d1:9a:18:a8:25:ac:a0:ba:b6:0d:e4:b7: b1:13:d9:bd:81:b7:e2:90:d1:b9:6a:64:aa:47:bc: 0c:2a:5d:bd:d2:4d:e6:9b:c6:a9:35:58:87:4a:02: c3:d5:7f:8b:24:90:12:c0:db:6e:bb:42:9c:2f:b3: e9:17:28:d4:0a:2e:1e:f6:a9:5a:3d:a7:de:72:f5: d4:fb:9f:f7:d8:0e:da:a0:7e:19:d7:61:0d:45:54: 13:6b:9b:c9:c9:46:a8:b8:03:29:26:44:52:f9:66: 7b:4c:16:7f:a0:9e:ca:9e:f6:7f:3a:bd:bc:b7:ef: 32:49:ef:90:ec:3f:b7:b0:31:77:99:18:87:12:81: b0:f8:3d:f3:07:91:04:0a:c7:37:dd:30:21:99:92: 21:79:73:ad:a8:b4:6c:d4:03:c1:8f:5b:9a:2b:dd: d4:0e:40:03:68:af:b6:24:71:92:67:eb:70:40:42: 3c:2b:b6:ca:67:4a:85:af:0f:88:af:ce:9e:d2:97: 8e:23:cb:be:d2:19:5c:68:48:33:60:b1:e1:f1:79: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F3:4B:BD:7A:A6:41:8E:D6:D7:48:D6:FD:D7:38:04:29:C7:AC:27 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214989.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:c000::/34 2a0a:6044:4000::/36 2a0f:6284:6000::/36 Signature Algorithm: sha256WithRSAEncryption 59:48:db:7a:b2:3e:ce:97:c4:05:f5:91:57:a3:6a:93:ff:60: fc:38:9a:e2:44:ff:61:ae:e8:ad:1e:9c:ca:cd:1b:b3:be:75: e7:c6:cf:36:9c:db:64:fb:64:a8:0c:63:53:d3:73:95:4a:a4: 8d:f3:96:05:7a:57:4c:0a:5b:93:68:15:c6:58:ea:6d:2e:b5: 61:46:fe:de:a6:d0:c3:f1:7f:ba:9c:f4:74:18:59:bc:9a:7e: 1e:cd:71:66:8b:75:c8:44:7f:e2:f8:c3:33:dc:9c:1c:0d:40: 64:16:9e:fd:25:fb:e6:8e:a8:d3:20:ff:8f:2c:54:00:4b:a7: 86:cb:69:29:e4:f4:5e:88:c8:ed:4a:16:f3:7f:bd:c3:1a:b1: dd:03:d9:79:15:9d:40:d6:1f:56:0a:d2:42:9e:f4:e7:8d:23: 68:6a:6e:a2:a5:7d:ec:2b:7b:72:d8:bc:0a:73:fb:10:4f:0d: 3a:94:36:49:be:a5:f0:00:26:88:39:23:cb:97:34:a0:e7:51: cc:a0:8d:1f:57:0e:5b:84:c6:57:36:a3:8c:02:da:26:c6:b9: 28:e5:0a:7d:e7:08:70:0b:c1:91:e5:e5:ee:07:d4:5d:1f:a8: 19:d6:5c:5e:dd:6b:c3:03:c0:d8:b3:a3:ff:9f:79:c0:26:18: 17:28:bc:21 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUWgaxcVtOSBos2/Qh0Lg7lBVMVTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDkxNjMwMTBaFw0yNzA2MDgxNjM1MTBaMDMxMTAvBgNV BAMTKDFBRjM0QkJEN0FBNjQxOEVENkQ3NDhENkZERDczODA0MjlDN0FDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGf2Hp1qbgh0o9EA7C4vQO1+S bcTR9OkzbT4Zi0YWJvSOjql6In91QyWBZP/KA9GaGKglrKC6tg3kt7ET2b2Bt+KQ 0blqZKpHvAwqXb3STeabxqk1WIdKAsPVf4skkBLA2267Qpwvs+kXKNQKLh72qVo9 p95y9dT7n/fYDtqgfhnXYQ1FVBNrm8nJRqi4AykmRFL5ZntMFn+gnsqe9n86vby3 7zJJ75DsP7ewMXeZGIcSgbD4PfMHkQQKxzfdMCGZkiF5c62otGzUA8GPW5or3dQO QANor7YkcZJn63BAQjwrtspnSoWvD4ivzp7Sl44jy77SGVxoSDNgseHxeb5RAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUGvNLvXqmQY7W10jW/dc4BCnHrCcwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ5ODkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgACMBgDBgYq BhKBwAMGBCoKYERAAwYEKg9ihGAwDQYJKoZIhvcNAQELBQADggEBAFlI23qyPs6X xAX1kVejapP/YPw4muJE/2Gu6K0enMrNG7O+defGzzac22T7ZKgMY1PTc5VKpI3z lgV6V0wKW5NoFcZY6m0utWFG/t6m0MPxf7qc9HQYWbyafh7NcWaLdchEf+L4wzPc nBwNQGQWnv0l++aOqNMg/48sVABLp4bLaSnk9F6IyO1KFvN/vcMasd0D2XkVnUDW H1YK0kKe9OeNI2hqbqKlfewre3LYvApz+xBPDTqUNkm+pfAAJog5I8uXNKDnUcyg jR9XDluExlc2o4wC2ibGuSjlCn3nCHALwZHl5e4H1F0fqBnWXF7da8MDwNizo/+f ecAmGBcovCE= -----END CERTIFICATE-----Generated at Wed Jun 17 08:58:54 2026 by rpki-client