$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212128.roa File: AS212128.roa (raw, json) Hash identifier: 6t5eHgeuamv77NtNd0d08ncaxbr2QKKty4a3ZENMTqI= Subject key identifier: 01:37:04:38:0B:7B:8A:ED:B9:F5:B1:FF:57:BC:BA:88:4C:59:A9:48 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6433F201DBE501CF09AEAB276A37B901158A9AA1 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212128.roa Signing time: Sun 28 Jun 2026 18:55:40 +0000 ROA not before: Sun 28 Jun 2026 18:50:40 +0000 ROA not after: Sun 27 Jun 2027 18:55:40 +0000 asID: 212128 IP address blocks: 2a0f:6282:f000::/36 maxlen: 36 2a0f:6284:9::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:33:f2:01:db:e5:01:cf:09:ae:ab:27:6a:37:b9:01:15:8a:9a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:40 2026 GMT Not After : Jun 27 18:55:40 2027 GMT Subject: CN=013704380B7B8AEDB9F5B1FF57BCBA884C59A948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:c5:4c:8f:9a:76:67:a9:b9:00:e8:a7:df: e0:22:9d:68:d1:6e:92:0d:70:6f:00:e8:63:61:28: be:e9:22:f2:d5:29:05:b6:dc:4a:d0:dd:92:79:14: bf:1f:18:eb:8b:41:e5:f0:ac:43:9e:68:36:a0:16: 8a:c7:55:e0:38:dd:a3:f0:b6:db:8a:6e:1d:ce:a5: 9e:64:32:bf:6c:d0:bd:9f:5e:54:60:14:13:a1:25: f3:58:98:89:cb:1d:ce:7c:11:b1:c8:5e:0a:25:40: af:4d:36:3b:2f:ec:18:59:9e:5b:85:6c:69:be:36: 7b:21:50:41:61:b7:7d:ec:cf:f6:a1:23:fa:91:bd: 7c:73:c1:87:2b:d2:bb:56:77:3d:cf:60:68:6d:e1: d7:db:56:a9:28:1e:e8:eb:20:28:bb:2b:bd:6e:6e: a7:84:61:2e:3e:96:74:13:66:bf:b1:df:23:6d:62: 44:40:8c:a3:2d:56:7f:b2:0d:71:37:d6:b6:f2:b1: 35:87:47:7a:65:03:ea:cc:9e:05:f2:92:aa:77:10: 97:91:44:0b:d1:d9:44:66:50:c2:48:37:17:5d:c6: eb:ee:1c:a2:26:bc:cf:bb:cc:81:50:9a:54:2e:43: be:be:ca:fb:7c:8c:c7:b1:73:8a:11:7c:13:96:67: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:04:38:0B:7B:8A:ED:B9:F5:B1:FF:57:BC:BA:88:4C:59:A9:48 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212128.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:f000::/36 2a0f:6284:9::/48 Signature Algorithm: sha256WithRSAEncryption 2c:8e:ce:81:11:58:86:d1:4e:9d:80:43:2c:3a:27:da:a0:fb: 80:d9:3d:6c:f8:43:72:d9:e3:a6:3a:fa:11:2d:72:ef:3b:3e: 58:2a:f8:e0:5c:4f:73:00:6d:73:85:cd:7d:7e:c8:5e:d8:b3: 6b:bc:29:0e:72:1c:87:12:db:6c:d3:03:3e:eb:4b:18:b5:1b: 11:1f:c8:ad:d0:25:f6:8a:70:60:67:69:f7:da:88:7b:b5:6a: 09:17:b1:1e:84:62:02:d2:dc:6a:d4:b7:b5:07:8f:31:97:fa: d4:a7:70:fd:74:35:74:f5:30:ab:73:8c:71:8c:07:bf:1c:60: 3f:03:f4:da:57:c5:d9:8d:3b:3d:79:47:c3:78:69:66:8e:4f: 7e:3a:a0:41:b1:3a:e4:96:b8:3e:da:58:46:4c:ae:08:c2:04: 22:bc:38:c5:b2:17:30:22:0e:d5:b5:7d:d9:dc:3b:52:ca:45: c7:d8:46:af:0e:dd:8c:2e:a8:ef:4f:06:1b:34:c4:8a:3a:27: 71:97:3c:d6:4d:26:e9:0f:26:d1:57:02:2e:2e:43:45:44:93: f9:37:56:52:7f:36:40:60:82:f0:3f:ed:13:da:b6:93:36:e1: ad:f4:37:60:b3:b5:65:ac:fc:2e:55:ff:95:cf:b8:9b:8d:c8: 68:36:b7:fa -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUZDPyAdvlAc8Jrqsnaje5ARWKmqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwNDBaFw0yNzA2MjcxODU1NDBaMDMxMTAvBgNV BAMTKDAxMzcwNDM4MEI3QjhBRURCOUY1QjFGRjU3QkNCQTg4NEM1OUE5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pMVMj5p2Z6m5AOin3+AinWjR bpINcG8A6GNhKL7pIvLVKQW23ErQ3ZJ5FL8fGOuLQeXwrEOeaDagForHVeA43aPw ttuKbh3OpZ5kMr9s0L2fXlRgFBOhJfNYmInLHc58EbHIXgolQK9NNjsv7BhZnluF bGm+NnshUEFht33sz/ahI/qRvXxzwYcr0rtWdz3PYGht4dfbVqkoHujrICi7K71u bqeEYS4+lnQTZr+x3yNtYkRAjKMtVn+yDXE31rbysTWHR3plA+rMngXykqp3EJeR RAvR2URmUMJINxddxuvuHKImvM+7zIFQmlQuQ76+yvt8jMexc4oRfBOWZ6PnAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUATcEOAt7iu259bH/V7y6iExZqUgwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTIxMjgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBgQq D2KC8AMHACoPYoQACTANBgkqhkiG9w0BAQsFAAOCAQEALI7OgRFYhtFOnYBDLDon 2qD7gNk9bPhDctnjpjr6ES1y7zs+WCr44FxPcwBtc4XNfX7IXtiza7wpDnIchxLb bNMDPutLGLUbER/IrdAl9opwYGdp99qIe7VqCRexHoRiAtLcatS3tQePMZf61Kdw /XQ1dPUwq3OMcYwHvxxgPwP02lfF2Y07PXlHw3hpZo5PfjqgQbE65Ja4PtpYRkyu CMIEIrw4xbIXMCIO1bV92dw7UspFx9hGrw7djC6o708GGzTEijoncZc81k0m6Q8m 0VcCLi5DRUST+TdWUn82QGCC8D/tE9q2kzbhrfQ3YLO1Zaz8LlX/lc+4m43IaDa3 +g== -----END CERTIFICATE-----Generated at Fri Jul 24 01:05:20 2026 by rpki-client