$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213641.roa File: AS213641.roa (raw, json) Hash identifier: Ol7iMv2uGWk1XHVwZpG8YboNvhkLaATscXpgaqxVl34= Subject key identifier: E6:79:E0:E1:01:CC:D6:D7:46:6B:50:09:B5:3D:B7:AA:32:AE:36:83 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 20699D63360A7A73E028C6E6150C8399C79EF54E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213641.roa Signing time: Fri 13 Mar 2026 11:34:32 +0000 ROA not before: Fri 13 Mar 2026 11:29:32 +0000 ROA not after: Fri 12 Mar 2027 11:34:32 +0000 asID: 213641 IP address blocks: 2a05:dfc3:fd50::/44 maxlen: 48 2a05:dfc3:fd50::/48 maxlen: 48 2a05:dfc3:fd51::/48 maxlen: 48 2a05:dfc3:fd52::/48 maxlen: 48 2a05:dfc3:fd53::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:69:9d:63:36:0a:7a:73:e0:28:c6:e6:15:0c:83:99:c7:9e:f5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 13 11:29:32 2026 GMT Not After : Mar 12 11:34:32 2027 GMT Subject: CN=E679E0E101CCD6D7466B5009B53DB7AA32AE3683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9a:14:88:21:e4:bf:9d:65:3f:d3:aa:45:83: 92:91:21:50:00:a9:cc:e7:52:1b:b9:45:63:79:a6: da:9a:52:de:30:ef:a6:e0:5d:57:eb:6b:d6:1e:58: 34:d0:27:dd:5c:eb:de:53:e3:d5:0a:bd:a8:67:78: 9a:a2:8d:44:a9:88:04:3f:78:2d:cb:da:54:fc:2d: f5:99:f7:a5:d3:63:b4:70:9c:20:9d:1e:0e:48:5e: 17:46:90:57:87:e3:ac:02:ea:77:31:df:a1:50:88: b6:2a:45:48:c2:a4:6d:d7:2b:2f:62:71:ef:68:d2: 1e:b4:57:ca:15:3d:c2:b7:fe:49:58:71:be:c3:dd: 96:9d:5c:b0:c4:e0:78:c9:61:ee:78:63:67:92:11: d9:b3:f5:9b:f5:06:90:f5:05:3a:16:5f:af:93:ae: e6:8c:53:7f:0c:4f:63:a0:6d:56:62:92:dd:dc:12: 18:53:48:2e:c1:c8:75:2f:c0:62:b3:94:5c:48:ee: 25:c0:23:cb:0e:8a:0c:f1:d6:fe:d5:5f:09:61:86: 15:9d:6d:64:1f:4f:4f:b9:92:7a:14:7b:5a:d0:c5: a8:ff:94:b7:ec:e4:45:1f:bf:09:28:bf:0b:30:72: 56:af:b4:57:c5:8b:05:1c:1c:b6:8b:29:8d:51:0b: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:79:E0:E1:01:CC:D6:D7:46:6B:50:09:B5:3D:B7:AA:32:AE:36:83 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd50::/44 Signature Algorithm: sha256WithRSAEncryption 4d:5f:99:92:ba:19:87:4e:a6:c0:d8:bb:fd:bb:31:62:0d:66: a9:3c:a8:24:f7:98:ee:d2:ca:38:d9:23:9f:f1:c0:58:4d:82: 54:a5:14:e5:cc:49:4c:de:1b:c4:25:d7:32:85:26:c4:11:5c: bc:6c:d2:a3:59:97:98:17:fc:1b:73:71:80:2b:88:1b:ce:e9: ed:86:37:14:6f:26:f8:dc:82:89:52:d6:21:bd:38:54:3d:fb: e1:7e:a2:a9:b8:00:72:6b:13:d8:c6:e9:87:b1:e7:33:3a:ff: a2:9f:53:dd:68:23:34:59:a6:73:89:ea:05:a7:e2:fe:f9:a6: 3b:20:c2:45:5a:c8:db:36:5f:74:3c:a8:07:2f:4b:d7:36:d5: 26:3e:dd:c5:f2:96:e1:46:4e:77:28:b6:a9:cd:48:df:3c:ce: 81:82:7a:5c:ed:9e:5a:bb:24:e4:5a:46:86:33:1e:a2:70:eb: 77:1c:c6:02:47:bb:44:42:39:05:97:78:98:aa:b1:21:77:4d: 59:65:93:3f:b8:ac:14:29:57:6d:69:d1:7e:09:c3:49:20:42: 60:ad:ba:f5:09:99:ea:05:45:22:ea:d2:30:4f:d4:28:6a:59: 72:17:34:15:a3:87:51:a1:af:89:5c:25:9d:03:62:d7:15:f8: 6d:67:6b:3a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUIGmdYzYKenPgKMbmFQyDmcee9U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMTMxMTI5MzJaFw0yNzAzMTIxMTM0MzJaMDMxMTAvBgNV BAMTKEU2NzlFMEUxMDFDQ0Q2RDc0NjZCNTAwOUI1M0RCN0FBMzJBRTM2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3mhSIIeS/nWU/06pFg5KRIVAA qcznUhu5RWN5ptqaUt4w76bgXVfra9YeWDTQJ91c695T49UKvahneJqijUSpiAQ/ eC3L2lT8LfWZ96XTY7RwnCCdHg5IXhdGkFeH46wC6ncx36FQiLYqRUjCpG3XKy9i ce9o0h60V8oVPcK3/klYcb7D3ZadXLDE4HjJYe54Y2eSEdmz9Zv1BpD1BToWX6+T ruaMU38MT2OgbVZikt3cEhhTSC7ByHUvwGKzlFxI7iXAI8sOigzx1v7VXwlhhhWd bWQfT0+5knoUe1rQxaj/lLfs5EUfvwkovwswclavtFfFiwUcHLaLKY1RC9/LAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU5nng4QHM1tdGa1AJtT23qjKuNoMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM2NDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq Bd/D/VAwDQYJKoZIhvcNAQELBQADggEBAE1fmZK6GYdOpsDYu/27MWINZqk8qCT3 mO7SyjjZI5/xwFhNglSlFOXMSUzeG8Ql1zKFJsQRXLxs0qNZl5gX/BtzcYAriBvO 6e2GNxRvJvjcgolS1iG9OFQ9++F+oqm4AHJrE9jG6Yex5zM6/6KfU91oIzRZpnOJ 6gWn4v75pjsgwkVayNs2X3Q8qAcvS9c21SY+3cXyluFGTncotqnNSN88zoGCelzt nlq7JORaRoYzHqJw63ccxgJHu0RCOQWXeJiqsSF3TVllkz+4rBQpV21p0X4Jw0kg QmCtuvUJmeoFRSLq0jBP1ChqWXIXNBWjh1Ghr4lcJZ0DYtcV+G1nazo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:32:23 2026 by rpki-client