$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219268.roa File: AS219268.roa (raw, json) Hash identifier: 18R2XgYhRZrL1qyMgGAbDNoW5F7kgsr6YcFa7iDmJBQ= Subject key identifier: DF:0E:84:5C:6F:47:58:E4:E4:9A:6B:D7:EF:E5:10:AB:CA:5A:91:0F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3A817EAE724BB642E3B26B5199EF3BD8A7430819 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219268.roa Signing time: Thu 17 Sep 2026 18:21:03 +0000 ROA not before: Thu 17 Sep 2026 18:16:03 +0000 ROA not after: Thu 16 Sep 2027 18:21:03 +0000 asID: 219268 IP address blocks: 2a0f:6280:100a::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:81:7e:ae:72:4b:b6:42:e3:b2:6b:51:99:ef:3b:d8:a7:43:08:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 17 18:16:03 2026 GMT Not After : Sep 16 18:21:03 2027 GMT Subject: CN=DF0E845C6F4758E4E49A6BD7EFE510ABCA5A910F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:e5:ef:35:12:3e:a8:55:64:4c:f2:2f:4a: b9:e4:d4:69:58:78:b3:d7:7f:8a:45:e9:f7:4c:d3: 75:8f:27:79:b6:b4:7e:93:93:a7:3c:f0:44:6f:3c: af:4f:da:ec:58:72:45:ad:7e:9c:a2:eb:ad:b2:ee: da:91:7b:61:a5:13:96:67:3b:a6:94:86:86:77:de: 6d:22:73:ea:b1:d6:c1:83:3a:c5:47:ca:e7:fe:ba: 6c:a2:da:5b:e5:46:17:95:0e:e6:b3:06:97:37:d1: 28:bf:11:2c:57:f4:78:a4:19:8b:19:73:a3:98:68: 01:e0:c6:46:4c:fa:67:09:62:dd:a8:92:12:5a:2e: 51:27:a5:c0:c3:54:87:32:96:82:1a:25:b2:b8:fb: 05:35:62:08:65:51:99:3a:26:70:58:7d:88:0a:d4: f7:1a:dc:1b:c9:50:ce:84:3c:25:e1:0a:dd:06:82: 8a:ec:1c:f5:8f:a3:14:ec:82:86:9b:9e:03:c4:ac: 16:a7:33:e8:6b:1a:3a:64:2e:68:de:b0:51:a7:7d: 69:4c:24:73:ce:06:db:30:87:dc:87:d6:82:b5:59: 9f:37:84:8f:07:55:29:31:90:43:96:ae:d8:68:a2: 63:09:4a:6a:5b:2f:9a:09:e7:12:20:8a:7b:a2:90: 75:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0E:84:5C:6F:47:58:E4:E4:9A:6B:D7:EF:E5:10:AB:CA:5A:91:0F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219268.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:100a::/48 Signature Algorithm: sha256WithRSAEncryption 70:b7:2b:2f:bb:16:f7:ce:0b:48:b4:83:05:c5:72:2d:36:8d: b8:c8:35:e1:ee:ca:bd:72:d9:2b:95:10:15:f4:06:a6:8c:60: 5d:d2:3b:2d:38:31:f0:3d:ed:be:23:03:bd:23:1a:dc:fc:e5: ea:ef:3a:69:cf:66:4d:9a:58:3a:d6:3d:3b:3f:56:df:e8:5c: 24:d3:1a:87:99:62:a7:64:b4:5c:6e:6e:f3:47:69:46:15:3c: 0d:f4:c0:e4:3c:5c:05:a3:44:e4:f9:55:92:11:8d:5f:37:00: f2:e3:2f:2d:2f:28:9f:f5:59:6b:80:07:79:f2:dc:71:1f:83: 8a:73:88:cb:81:84:12:d1:de:af:8c:c3:db:5f:fc:4d:9a:69: af:1d:da:4a:4a:ba:f1:2c:27:ef:c2:34:78:26:84:16:e2:97: 64:ec:30:b2:3e:99:3c:e0:1f:5d:ac:cd:78:15:30:d3:dc:85: 12:3e:1b:b7:bf:b7:9c:02:ab:14:02:7f:4a:d5:33:3c:14:15: 26:26:96:8d:e1:3e:40:19:23:62:ce:96:80:f1:fe:38:8c:02: b5:39:8a:5f:62:60:7e:1e:99:b4:8f:fc:cc:3d:d4:7e:63:71: cc:68:df:4c:88:8f:d8:0b:9c:a3:3a:9d:9c:b0:10:26:18:f9: 32:47:51:7f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUOoF+rnJLtkLjsmtRme872KdDCBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTcxODE2MDNaFw0yNzA5MTYxODIxMDNaMDMxMTAvBgNV BAMTKERGMEU4NDVDNkY0NzU4RTRFNDlBNkJEN0VGRTUxMEFCQ0E1QTkxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCH+XvNRI+qFVkTPIvSrnk1GlY eLPXf4pF6fdM03WPJ3m2tH6Tk6c88ERvPK9P2uxYckWtfpyi662y7tqRe2GlE5Zn O6aUhoZ33m0ic+qx1sGDOsVHyuf+umyi2lvlRheVDuazBpc30Si/ESxX9HikGYsZ c6OYaAHgxkZM+mcJYt2okhJaLlEnpcDDVIcyloIaJbK4+wU1YghlUZk6JnBYfYgK 1Pca3BvJUM6EPCXhCt0GgorsHPWPoxTsgoabngPErBanM+hrGjpkLmjesFGnfWlM JHPOBtswh9yH1oK1WZ83hI8HVSkxkEOWrthoomMJSmpbL5oJ5xIginuikHXpAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU3w6EXG9HWOTkmmvX7+UQq8pakQ8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyNjgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KAEAowDQYJKoZIhvcNAQELBQADggEBAHC3Ky+7FvfOC0i0gwXFci02jbjINeHu yr1y2SuVEBX0BqaMYF3SOy04MfA97b4jA70jGtz85ervOmnPZk2aWDrWPTs/Vt/o XCTTGoeZYqdktFxubvNHaUYVPA30wOQ8XAWjROT5VZIRjV83APLjLy0vKJ/1WWuA B3ny3HEfg4pziMuBhBLR3q+Mw9tf/E2aaa8d2kpKuvEsJ+/CNHgmhBbil2TsMLI+ mTzgH12szXgVMNPchRI+G7e/t5wCqxQCf0rVMzwUFSYmlo3hPkAZI2LOloDx/jiM ArU5il9iYH4embSP/Mw91H5jccxo30yIj9gLnKM6nZywECYY+TJHUX8= -----END CERTIFICATE-----Generated at Sun Sep 20 21:46:21 2026 by rpki-client