$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219418.roa File: AS219418.roa (raw, json) Hash identifier: pwU0MCBiY1WN1ZycQSwLjLfQScBbpETqdIcJPUY1nVA= Subject key identifier: 4F:83:0B:61:C5:6F:C9:C8:DF:5F:D6:FC:95:73:65:13:BD:4D:01:69 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2E41DC5F14BA8868B5A1DC0E0D16C4DE45B3A1B3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219418.roa Signing time: Sat 05 Sep 2026 21:28:14 +0000 ROA not before: Sat 05 Sep 2026 21:23:14 +0000 ROA not after: Sat 04 Sep 2027 21:28:14 +0000 asID: 219418 IP address blocks: 2a0f:6280:1600::/48 maxlen: 48 2a0f:6280:1601::/48 maxlen: 128 2a0f:6280:7010::/44 maxlen: 128 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:41:dc:5f:14:ba:88:68:b5:a1:dc:0e:0d:16:c4:de:45:b3:a1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 5 21:23:14 2026 GMT Not After : Sep 4 21:28:14 2027 GMT Subject: CN=4F830B61C56FC9C8DF5FD6FC95736513BD4D0169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:2e:37:5f:b1:92:a1:f9:c7:41:59:67:8c: 5f:f8:b3:39:fc:17:9f:57:f0:7a:01:12:e1:6d:30: 7e:f1:9b:e4:d0:43:3d:2a:2a:c2:70:4e:e1:c3:e2: 45:50:94:c6:61:71:c8:f0:69:6d:5f:88:fb:1b:8a: 73:46:ef:f1:37:27:ce:ba:eb:2a:4f:d6:65:c5:86: 77:e6:ae:02:96:4d:8d:af:ca:82:12:c1:d1:4d:8e: 1d:a6:4e:57:2a:e7:fe:1a:6a:39:c3:08:4f:79:31: 36:54:9a:41:42:04:3b:bf:f8:28:e2:58:a6:5b:99: 9b:ae:5f:35:17:bd:b0:dc:ca:6f:00:2a:16:a6:6e: 52:38:5e:30:f6:6f:9b:c2:6b:f0:82:be:0f:b3:ec: 6a:57:39:ba:98:cd:1a:2e:bf:25:fa:1a:0a:42:85: dd:28:94:0e:b8:53:db:47:d7:80:3b:33:bc:0d:cf: 87:34:9e:f2:4f:82:e3:96:eb:ec:97:29:bc:ed:d8: bc:01:d7:b9:2f:cc:09:99:93:8b:43:18:9d:5d:0d: ae:7a:76:03:44:8a:b4:ae:db:24:99:f3:56:f2:f6: 11:ef:d9:17:e3:cf:77:2e:6d:bc:54:26:e7:b3:c9: e7:38:6d:06:0c:7b:01:02:ca:bf:99:6f:de:22:24: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:83:0B:61:C5:6F:C9:C8:DF:5F:D6:FC:95:73:65:13:BD:4D:01:69 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219418.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1600::/47 2a0f:6280:7010::/44 Signature Algorithm: sha256WithRSAEncryption 59:2a:2e:3c:71:c8:ea:08:ed:4a:c1:93:b4:75:7e:d5:2b:8a: 03:ef:87:8b:b7:ae:92:8a:df:38:d4:e5:2c:89:a3:d7:26:49: ea:a6:5c:08:16:63:db:f5:50:3c:35:f2:7f:4a:19:87:d2:3e: ef:26:10:18:c8:db:4e:01:b6:06:f5:21:a4:50:03:25:22:a6: 66:46:6e:30:ca:57:e2:5a:db:0a:8d:94:39:58:c6:f2:95:c1: 9b:d2:d8:31:e7:2f:4c:25:93:4f:43:e0:2f:35:c2:c4:ca:94: 78:28:ca:40:47:f6:50:68:c6:ef:96:b3:70:cd:af:e1:54:24: 06:28:6e:f4:d9:49:05:10:42:72:8f:45:7e:2f:49:db:ea:aa: e0:d3:47:06:fd:21:57:e6:df:82:08:ab:25:f0:60:44:95:42: b8:a1:d1:97:c4:29:b9:76:6c:0b:df:3b:d7:4d:6d:8c:fa:48: 99:9e:04:d3:81:37:3b:4b:26:dd:e7:2f:ca:79:10:97:7d:f6: 9e:af:52:6e:66:8d:f0:b6:96:1a:df:b1:ff:ad:75:19:9b:e2: eb:9d:93:af:ba:bb:66:90:63:e8:05:31:1f:92:b5:4d:4b:07: c1:63:8b:2f:a6:23:a2:36:bc:e6:9b:e4:6f:3d:9e:af:75:f5: 67:4c:5b:37 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIULkHcXxS6iGi1odwODRbE3kWzobMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MDUyMTIzMTRaFw0yNzA5MDQyMTI4MTRaMDMxMTAvBgNV BAMTKDRGODMwQjYxQzU2RkM5QzhERjVGRDZGQzk1NzM2NTEzQkQ0RDAxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCddC43X7GSofnHQVlnjF/4szn8 F59X8HoBEuFtMH7xm+TQQz0qKsJwTuHD4kVQlMZhccjwaW1fiPsbinNG7/E3J866 6ypP1mXFhnfmrgKWTY2vyoISwdFNjh2mTlcq5/4aajnDCE95MTZUmkFCBDu/+Cji WKZbmZuuXzUXvbDcym8AKhamblI4XjD2b5vCa/CCvg+z7GpXObqYzRouvyX6GgpC hd0olA64U9tH14A7M7wNz4c0nvJPguOW6+yXKbzt2LwB17kvzAmZk4tDGJ1dDa56 dgNEirSu2ySZ81by9hHv2Rfjz3cubbxUJuezyec4bQYMewECyr+Zb94iJHddAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUT4MLYcVvycjfX9b8lXNlE71NAWkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTk0MTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwEq D2KAFgADBwQqD2KAcBAwDQYJKoZIhvcNAQELBQADggEBAFkqLjxxyOoI7UrBk7R1 ftUrigPvh4u3rpKK3zjU5SyJo9cmSeqmXAgWY9v1UDw18n9KGYfSPu8mEBjI204B tgb1IaRQAyUipmZGbjDKV+Ja2wqNlDlYxvKVwZvS2DHnL0wlk09D4C81wsTKlHgo ykBH9lBoxu+Ws3DNr+FUJAYobvTZSQUQQnKPRX4vSdvqquDTRwb9IVfm34IIqyXw YESVQrih0ZfEKbl2bAvfO9dNbYz6SJmeBNOBNztLJt3nL8p5EJd99p6vUm5mjfC2 lhrfsf+tdRmb4uudk6+6u2aQY+gFMR+StU1LB8Fjiy+mI6I2vOab5G89nq919WdM Wzc= -----END CERTIFICATE-----Generated at Sun Sep 20 14:28:39 2026 by rpki-client