$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213535.roa File: AS213535.roa (raw, json) Hash identifier: 8F5A4DvB+AxaiRWmdPhG+FT55GnN8UCdlOm4+8AKQmA= Subject key identifier: E9:05:B3:72:97:B4:DE:E8:66:63:BB:EE:C7:66:06:D9:09:CC:AB:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4D0662671354EBBDB9FD3DF1533E98DF1B5CC378 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213535.roa Signing time: Wed 11 Mar 2026 13:27:39 +0000 ROA not before: Wed 11 Mar 2026 13:22:39 +0000 ROA not after: Wed 10 Mar 2027 13:27:39 +0000 asID: 213535 IP address blocks: 2a0f:6284:50::/48 maxlen: 48 2a0f:6284:60::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:06:62:67:13:54:eb:bd:b9:fd:3d:f1:53:3e:98:df:1b:5c:c3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 11 13:22:39 2026 GMT Not After : Mar 10 13:27:39 2027 GMT Subject: CN=E905B37297B4DEE86663BBEEC76606D909CCABD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7b:00:07:f4:7f:64:e0:8e:3b:68:57:bd:09: 6c:7d:89:19:06:c2:22:45:0d:0f:bb:da:9e:e8:96: 88:10:95:75:3d:92:e4:37:b2:7c:6d:42:3b:41:05: 6b:d6:0a:8c:53:28:ea:19:71:9d:47:be:10:79:9b: 0e:67:98:f6:2b:9f:65:c1:af:15:24:32:ae:2e:40: 50:c1:86:fa:26:80:f5:80:61:4b:5c:3a:61:27:1e: 83:cd:bf:59:09:8c:e3:98:d3:6d:8f:f7:ae:05:b5: 5b:cd:57:0f:96:01:52:fd:1a:86:74:88:78:dd:71: 5f:a6:2b:5c:57:91:67:c6:2c:3e:ad:f2:13:c9:5a: 73:d4:57:34:da:3e:bf:02:4b:4e:26:ec:16:a8:da: 7d:57:58:11:16:e0:74:85:41:65:91:ea:72:e5:0b: 6a:02:d8:a4:81:75:1c:5c:d8:95:f6:3b:1d:14:6f: 68:9b:67:8f:28:3c:77:4a:28:e9:ce:83:41:17:85: f5:eb:c9:96:61:63:18:cd:5c:7c:6f:79:41:c4:74: b1:34:4e:29:51:7e:26:a9:46:87:4f:58:5d:3e:21: 52:08:10:2c:7e:37:bf:ce:5c:3c:30:5a:c9:17:cb: b9:02:f3:81:35:c2:d2:fd:2f:a9:45:2c:fd:0a:9a: 05:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:05:B3:72:97:B4:DE:E8:66:63:BB:EE:C7:66:06:D9:09:CC:AB:D7 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:50::/48 2a0f:6284:60::/48 Signature Algorithm: sha256WithRSAEncryption 39:33:32:32:0e:db:22:bf:54:4d:17:56:2d:34:b2:9f:e9:12: 99:e8:0d:71:56:0e:bd:d8:21:80:e3:42:e5:8a:d5:05:3e:c4: 20:20:be:f7:d8:d3:ef:70:c9:4d:8a:78:46:38:04:4b:b2:a4: b7:ec:82:96:85:8c:01:6a:66:3b:85:6f:a0:6b:9c:51:15:88: 73:1a:18:8c:d8:0d:ac:76:03:f7:30:b5:dc:2f:31:90:04:2e: 44:cd:d4:53:d4:4b:e3:1e:e4:9e:2f:1a:bf:e8:7b:d3:3f:10: dd:ba:66:25:20:11:e6:dd:62:af:6f:bc:e1:5a:5d:5f:73:88: 20:5f:4e:79:dc:61:50:34:90:74:2b:34:c1:20:b0:e4:a7:6b: cd:84:ec:da:5c:75:b7:e2:8e:9f:09:71:49:85:85:fe:5c:0b: d1:30:fd:f7:a6:fc:9f:a6:30:63:4f:e1:83:b9:0d:7f:9d:fa: 40:12:66:61:d1:ed:e9:c0:87:4a:ed:3a:bb:4d:51:8e:d0:96: 83:6d:5c:e3:74:d6:ea:90:61:84:9e:25:8e:61:d4:24:81:28: 59:e4:53:46:1d:a8:22:32:3a:ba:2d:01:61:d6:1a:29:aa:07: a3:3c:cf:e5:56:ea:fe:e9:03:4a:1f:53:bc:b7:14:d8:36:3c: 2e:54:68:14 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUTQZiZxNU6725/T3xUz6Y3xtcw3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMTExMzIyMzlaFw0yNzAzMTAxMzI3MzlaMDMxMTAvBgNV BAMTKEU5MDVCMzcyOTdCNERFRTg2NjYzQkJFRUM3NjYwNkQ5MDlDQ0FCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ewAH9H9k4I47aFe9CWx9iRkG wiJFDQ+72p7ologQlXU9kuQ3snxtQjtBBWvWCoxTKOoZcZ1HvhB5mw5nmPYrn2XB rxUkMq4uQFDBhvomgPWAYUtcOmEnHoPNv1kJjOOY022P964FtVvNVw+WAVL9GoZ0 iHjdcV+mK1xXkWfGLD6t8hPJWnPUVzTaPr8CS04m7Bao2n1XWBEW4HSFQWWR6nLl C2oC2KSBdRxc2JX2Ox0Ub2ibZ48oPHdKKOnOg0EXhfXryZZhYxjNXHxveUHEdLE0 TilRfiapRodPWF0+IVIIECx+N7/OXDwwWskXy7kC84E1wtL9L6lFLP0KmgU/AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU6QWzcpe03uhmY7vux2YG2QnMq9cwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM1MzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KEAFADBwAqD2KEAGAwDQYJKoZIhvcNAQELBQADggEBADkzMjIO2yK/VE0XVi00 sp/pEpnoDXFWDr3YIYDjQuWK1QU+xCAgvvfY0+9wyU2KeEY4BEuypLfsgpaFjAFq ZjuFb6BrnFEViHMaGIzYDax2A/cwtdwvMZAELkTN1FPUS+Me5J4vGr/oe9M/EN26 ZiUgEebdYq9vvOFaXV9ziCBfTnncYVA0kHQrNMEgsOSna82E7Npcdbfijp8JcUmF hf5cC9Ew/fem/J+mMGNP4YO5DX+d+kASZmHR7enAh0rtOrtNUY7QloNtXON01uqQ YYSeJY5h1CSBKFnkU0YdqCIyOrotAWHWGimqB6M8z+VW6v7pA0ofU7y3FNg2PC5U aBQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:04:55 2026 by rpki-client