$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213413.roa File: AS213413.roa (raw, json) Hash identifier: sjFknyov/a1ZvoenFTlkUr5yuV34NilzbMHQxk77HZY= Subject key identifier: A2:3C:F0:A6:D5:75:29:8F:B3:38:52:16:22:61:CC:69:3D:CA:95:73 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3FBB820DD1491C463BC766562548E249876E084A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213413.roa Signing time: Wed 29 Apr 2026 08:33:39 +0000 ROA not before: Wed 29 Apr 2026 08:28:39 +0000 ROA not after: Wed 28 Apr 2027 08:33:39 +0000 asID: 213413 IP address blocks: 2a0f:6283:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:bb:82:0d:d1:49:1c:46:3b:c7:66:56:25:48:e2:49:87:6e:08:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Apr 29 08:28:39 2026 GMT Not After : Apr 28 08:33:39 2027 GMT Subject: CN=A23CF0A6D575298FB33852162261CC693DCA9573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b1:1e:2d:e8:38:53:dd:7f:f6:83:c0:45:c3: dd:be:2c:43:64:b3:b8:1c:18:e2:9c:9f:89:22:9f: 03:32:45:90:5d:1e:22:d4:09:3c:86:9d:82:43:fd: 0b:dd:a6:18:86:52:be:e8:cc:41:b1:dd:1f:16:8d: 4c:00:57:76:71:0e:1a:58:5a:71:67:cc:85:cf:e7: 8f:50:db:00:12:5a:fd:67:35:9c:3e:e7:93:ea:f6: 69:12:d4:24:a0:7b:10:3f:6b:1c:2e:59:88:4d:0a: 45:d9:6b:45:7f:78:1b:97:40:de:ff:b6:bf:74:e3: c0:a9:63:a5:7f:d9:ce:d5:30:cb:94:99:69:8b:17: 16:46:5f:ca:ff:4b:75:5e:76:1a:0a:11:6a:c9:4e: bc:82:9d:a6:07:4e:92:f9:8c:e0:84:4b:ca:6e:11: f6:f6:64:b4:ef:1d:e3:59:87:6b:ef:87:25:2b:de: 2c:7e:63:22:65:c2:cf:97:9a:fd:34:04:5c:4a:c4: 02:47:15:08:a1:9f:ed:7f:bc:7c:a3:3e:b9:b7:db: 4b:82:2a:87:e0:fa:06:62:61:3a:ec:0c:a0:6c:73: 29:71:f6:67:fe:e5:8e:85:68:df:1f:29:84:13:e7: 4d:f2:a6:eb:a4:d3:2d:d2:2f:82:53:4e:ac:c7:96: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3C:F0:A6:D5:75:29:8F:B3:38:52:16:22:61:CC:69:3D:CA:95:73 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213413.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:4000::/34 Signature Algorithm: sha256WithRSAEncryption 84:59:96:b1:b0:10:97:0f:bd:4a:2e:1a:28:9c:96:fa:1d:34: e4:d7:7f:66:5d:05:bd:fe:f9:d5:7b:e5:01:fb:9b:ba:d2:52: e9:33:78:30:25:a5:dc:65:58:b9:f6:bf:97:6d:6e:86:2d:96: 84:f2:87:75:f6:ba:04:63:be:20:55:f1:c0:71:32:29:ac:97: a4:7d:80:9f:83:5c:d3:e0:b3:7b:3b:be:45:be:53:dd:ef:82: b3:36:0b:cd:8a:7c:0c:14:b4:b7:ac:58:99:c5:e9:67:ee:f6: ed:c9:f5:33:19:94:bd:18:e0:8b:9c:ed:9c:f2:b4:f0:84:12: fc:8d:56:6e:74:15:22:7a:b3:3d:f9:7d:e9:db:3f:e8:28:c3: d4:57:c8:70:7c:9e:6f:fd:25:94:0a:b6:de:4a:29:75:7b:02: 4f:c1:5e:d6:1a:30:6e:74:33:45:9c:d6:88:83:42:02:8b:1e: 9a:3b:9c:47:ea:a7:ea:c9:ad:6f:43:76:3d:ed:2e:ad:1a:27: f9:9f:a2:41:e7:33:5b:e3:1f:2d:3d:ba:05:3f:12:4a:57:57: 3d:c7:9c:8e:29:0b:19:40:79:96:15:b0:3b:f6:1b:fc:2f:0c: e9:e0:2d:c4:5d:0d:36:7d:84:fc:d8:8d:1a:63:91:ff:96:65: c8:99:9e:27 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUP7uCDdFJHEY7x2ZWJUjiSYduCEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA0MjkwODI4MzlaFw0yNzA0MjgwODMzMzlaMDMxMTAvBgNV BAMTKEEyM0NGMEE2RDU3NTI5OEZCMzM4NTIxNjIyNjFDQzY5M0RDQTk1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsR4t6DhT3X/2g8BFw92+LENk s7gcGOKcn4kinwMyRZBdHiLUCTyGnYJD/QvdphiGUr7ozEGx3R8WjUwAV3ZxDhpY WnFnzIXP549Q2wASWv1nNZw+55Pq9mkS1CSgexA/axwuWYhNCkXZa0V/eBuXQN7/ tr9048CpY6V/2c7VMMuUmWmLFxZGX8r/S3VedhoKEWrJTryCnaYHTpL5jOCES8pu Efb2ZLTvHeNZh2vvhyUr3ix+YyJlws+Xmv00BFxKxAJHFQihn+1/vHyjPrm320uC Kofg+gZiYTrsDKBscylx9mf+5Y6FaN8fKYQT503ypuuk0y3SL4JTTqzHlmghAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUojzwptV1KY+zOFIWImHMaT3KlXMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM0MTMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYq D2KDQDANBgkqhkiG9w0BAQsFAAOCAQEAhFmWsbAQlw+9Si4aKJyW+h005Nd/Zl0F vf751XvlAfubutJS6TN4MCWl3GVYufa/l21uhi2WhPKHdfa6BGO+IFXxwHEyKayX pH2An4Nc0+Czezu+Rb5T3e+CszYLzYp8DBS0t6xYmcXpZ+727cn1MxmUvRjgi5zt nPK08IQS/I1WbnQVInqzPfl96ds/6CjD1FfIcHyeb/0llAq23kopdXsCT8Fe1how bnQzRZzWiINCAosemjucR+qn6smtb0N2Pe0urRon+Z+iQeczW+MfLT26BT8SSldX PcecjikLGUB5lhWwO/Yb/C8M6eAtxF0NNn2E/NiNGmOR/5ZlyJmeJw== -----END CERTIFICATE-----Generated at Tue May 12 21:54:10 2026 by rpki-client