$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS216256.roa File: AS216256.roa (raw, json) Hash identifier: okQ6G3Loo/KIK2pH6Juj5G48VxJh1pRcYJuhm1Iix34= Subject key identifier: 4A:20:4B:17:AA:C0:63:A9:01:51:5E:C5:37:AF:C0:19:42:E1:D2:3E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 65C03A4D51BEA681B5BCF2B9A73B700EB5C15F72 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS216256.roa Signing time: Sun 20 Sep 2026 10:52:18 +0000 ROA not before: Sun 20 Sep 2026 10:47:18 +0000 ROA not after: Sun 19 Sep 2027 10:52:18 +0000 asID: 216256 IP address blocks: 2a0f:6284:4b00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c0:3a:4d:51:be:a6:81:b5:bc:f2:b9:a7:3b:70:0e:b5:c1:5f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 20 10:47:18 2026 GMT Not After : Sep 19 10:52:18 2027 GMT Subject: CN=4A204B17AAC063A901515EC537AFC01942E1D23E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:23:d5:a2:8d:49:5d:b5:04:42:88:38:3c:bd: f0:04:c1:1e:b1:5d:1c:51:ba:ff:63:a7:70:6e:65: 16:9e:56:1e:e5:8b:99:04:50:62:5a:fb:54:f8:8d: 34:56:79:a4:8f:ba:de:28:62:e2:15:ca:06:30:74: 41:0d:2b:75:82:5f:9a:47:35:62:c2:83:c9:78:8d: 05:c2:8c:83:52:ba:16:66:a8:c8:87:59:8a:5b:00: cf:32:f6:ca:bd:ac:e4:49:1e:02:3e:df:7c:d3:ff: ae:32:15:2f:20:db:b6:9f:4f:aa:a1:4b:94:eb:19: be:c8:2e:22:b3:48:43:1b:ab:90:46:05:00:25:41: 4d:f3:dc:87:11:ce:ee:3b:c1:ae:6a:14:2c:c1:7e: bb:c0:25:ee:26:f1:6d:bb:0b:b3:73:6d:05:7f:f5: f8:f9:a4:5b:68:e1:43:fd:c9:b1:7f:d8:e1:9a:1a: 5f:8d:be:61:8f:e4:26:d2:86:09:7d:4a:8c:a9:f8: 6f:a2:6a:f1:7b:dd:62:44:20:c5:ec:fd:73:17:4b: 48:a5:51:f2:ed:db:2c:b9:ff:04:af:44:39:0b:6d: 51:72:cf:3b:fd:d5:17:93:46:df:93:32:3b:61:82: 84:c3:79:f3:04:b3:be:9e:02:e0:d0:58:05:33:9c: b2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:20:4B:17:AA:C0:63:A9:01:51:5E:C5:37:AF:C0:19:42:E1:D2:3E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS216256.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4b00::/40 Signature Algorithm: sha256WithRSAEncryption 87:3c:8b:af:a4:db:4e:1a:4e:67:4f:74:2a:db:ac:fc:a1:53: 59:4f:80:95:39:01:63:cd:cd:68:78:19:9d:7b:b9:c9:01:6c: 4c:75:bf:ff:c4:30:95:da:6c:2b:40:1a:fd:4a:df:df:d4:b6: 75:58:6b:ef:7c:0c:4e:48:49:2c:56:00:a3:c1:c1:d7:b9:21: 1e:68:5b:c7:3d:bf:76:65:24:5a:65:30:a1:75:e1:85:c9:4d: 6d:19:0b:1d:24:5b:9a:a7:a4:96:80:81:7d:da:16:b5:c0:4e: 1d:33:f0:36:51:88:be:3a:fb:c2:1b:5a:f4:70:c4:3e:b1:d3: e9:2b:d6:98:f7:06:52:53:2d:41:65:e7:1b:c6:fb:b4:4a:19: 28:6c:9b:89:5a:72:ea:2d:c2:39:d7:5a:24:e9:44:f9:a0:e7: 1b:13:ce:7c:d4:5c:91:74:de:4f:63:f1:60:9d:b7:28:b2:9b: 71:b7:c9:db:21:d5:70:a0:39:7e:6b:fe:3a:d5:5c:51:96:bb: 3b:a4:65:a9:ce:c0:a6:98:7c:72:db:f8:06:e3:93:84:3f:72: aa:61:2e:db:c0:99:ef:e4:a5:11:d5:56:6a:71:fc:34:6c:49: 77:3d:f0:e6:56:c5:34:9e:9b:04:36:37:d3:ce:f3:90:60:63: c9:a0:16:3c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUZcA6TVG+poG1vPK5pztwDrXBX3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MjAxMDQ3MThaFw0yNzA5MTkxMDUyMThaMDMxMTAvBgNV BAMTKDRBMjA0QjE3QUFDMDYzQTkwMTUxNUVDNTM3QUZDMDE5NDJFMUQyM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeI9WijUldtQRCiDg8vfAEwR6x XRxRuv9jp3BuZRaeVh7li5kEUGJa+1T4jTRWeaSPut4oYuIVygYwdEENK3WCX5pH NWLCg8l4jQXCjINSuhZmqMiHWYpbAM8y9sq9rORJHgI+33zT/64yFS8g27afT6qh S5TrGb7ILiKzSEMbq5BGBQAlQU3z3IcRzu47wa5qFCzBfrvAJe4m8W27C7NzbQV/ 9fj5pFto4UP9ybF/2OGaGl+NvmGP5CbShgl9Soyp+G+iavF73WJEIMXs/XMXS0il UfLt2yy5/wSvRDkLbVFyzzv91ReTRt+TMjthgoTDefMEs76eAuDQWAUznLIlAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUSiBLF6rAY6kBUV7FN6/AGULh0j4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTYyNTYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KESzANBgkqhkiG9w0BAQsFAAOCAQEAhzyLr6TbThpOZ090Ktus/KFTWU+AlTkB Y83NaHgZnXu5yQFsTHW//8QwldpsK0Aa/Urf39S2dVhr73wMTkhJLFYAo8HB17kh Hmhbxz2/dmUkWmUwoXXhhclNbRkLHSRbmqekloCBfdoWtcBOHTPwNlGIvjr7whta 9HDEPrHT6SvWmPcGUlMtQWXnG8b7tEoZKGybiVpy6i3COddaJOlE+aDnGxPOfNRc kXTeT2PxYJ23KLKbcbfJ2yHVcKA5fmv+OtVcUZa7O6Rlqc7Apph8ctv4BuOThD9y qmEu28CZ7+SlEdVWanH8NGxJdz3w5lbFNJ6bBDY3087zkGBjyaAWPA== -----END CERTIFICATE-----Generated at Sun Sep 20 21:46:31 2026 by rpki-client