$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214848.roa File: AS214848.roa (raw, json) Hash identifier: j5D1ebnhbs1rVFlZFhMlesXYrb5+pFps4qkprDJwSTU= Subject key identifier: BF:F9:37:86:B2:A3:CD:BF:C1:65:B7:8C:6A:9D:72:C7:70:B4:EB:E7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 035A4C6FC502CF70C425724D079FCA3CC3FFE7E2 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214848.roa Signing time: Tue 12 May 2026 02:51:57 +0000 ROA not before: Tue 12 May 2026 02:46:57 +0000 ROA not after: Tue 11 May 2027 02:51:57 +0000 asID: 214848 IP address blocks: 2a0f:6282:d000::/36 maxlen: 48 2a0f:6282:d000::/48 maxlen: 48 2a0f:6282:d001::/48 maxlen: 48 2a0f:6282:d002::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5a:4c:6f:c5:02:cf:70:c4:25:72:4d:07:9f:ca:3c:c3:ff:e7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 12 02:46:57 2026 GMT Not After : May 11 02:51:57 2027 GMT Subject: CN=BFF93786B2A3CDBFC165B78C6A9D72C770B4EBE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:d7:5a:cc:42:a9:b4:b7:90:8d:34:30:0b: 55:21:46:ac:3e:53:97:99:3a:fd:d8:50:2b:bf:49: 2a:b8:cf:fa:fb:f8:08:50:6b:4b:8f:56:84:eb:d5: 51:47:3e:c0:d4:7b:a6:2d:11:c3:88:2c:be:94:c9: f9:4d:d6:fe:4d:6e:f3:f6:56:9f:94:69:18:5f:97: b9:0e:ba:64:2f:1d:30:14:ad:b9:44:bd:bb:ee:a7: 70:e2:29:1b:7e:28:d6:fd:65:e0:b7:97:fa:b3:fe: 45:cc:4e:40:93:3b:57:5f:bc:5e:fc:f1:6c:d4:e5: bb:28:2d:88:f3:dc:66:4b:c6:93:49:0a:ef:12:3b: e1:9a:b4:95:6e:9c:9e:6e:c7:1f:ed:4a:3c:cc:40: 90:22:8e:b1:3a:9c:1d:83:65:d9:1a:e3:63:55:a6: e8:2a:77:af:5e:b0:ea:2d:4f:36:cc:fd:c3:68:48: 73:51:fa:a2:6c:3d:47:dd:93:63:52:12:71:ee:c5: cf:52:a6:93:73:86:20:33:89:f0:3f:4b:99:ca:ec: f4:9c:f5:29:c2:1d:84:9d:45:26:33:c8:b4:67:77: bc:a1:76:b5:74:d3:70:c2:de:b1:79:4f:67:53:1a: b6:23:c2:79:35:f0:fb:83:6f:bd:aa:dc:11:6d:ea: d1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F9:37:86:B2:A3:CD:BF:C1:65:B7:8C:6A:9D:72:C7:70:B4:EB:E7 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:d000::/36 Signature Algorithm: sha256WithRSAEncryption 43:08:8a:19:4c:f6:ab:3c:20:3d:90:e3:80:92:7b:53:21:02: 04:df:15:bc:17:8f:7e:2c:55:3f:0a:18:53:d0:65:91:0b:17: 9f:a4:80:ca:d3:53:9e:a2:16:2c:db:22:98:2e:7d:b7:6a:cc: 2a:9d:41:7c:a1:ab:94:92:3f:cf:40:2f:40:ba:fc:3b:6c:85: 04:6d:0b:8b:2f:9b:ed:df:b9:3d:71:99:30:69:29:29:ff:1b: 73:3e:7a:75:79:54:4d:5a:f4:79:b3:e1:fc:1b:38:20:20:20: 67:2a:5b:5d:22:57:a9:59:ae:96:fb:94:22:28:44:89:c9:a9: 04:2f:4b:c8:80:72:e7:32:b6:91:20:8e:48:04:31:b4:3b:68: 2e:59:2a:8d:c8:d1:0f:37:d0:7a:80:d8:ae:9e:2c:4c:3f:c7: fe:58:e0:34:ba:44:b1:3e:e6:f1:6f:10:85:bc:d1:4b:95:ef: 74:a6:b2:84:79:88:04:20:6d:28:11:30:35:32:f5:07:6a:53: 14:2f:1c:54:74:74:c0:b6:26:78:5d:06:0e:c4:ab:6a:fb:9b: 9a:30:5e:18:48:13:58:3a:60:13:32:1b:c6:ec:c5:16:d6:85: 5e:f9:e2:3b:98:42:c7:1c:b6:12:d3:92:7a:ff:44:a2:12:49: 20:1a:18:e7 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUA1pMb8UCz3DEJXJNB5/KPMP/5+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MTIwMjQ2NTdaFw0yNzA1MTEwMjUxNTdaMDMxMTAvBgNV BAMTKEJGRjkzNzg2QjJBM0NEQkZDMTY1Qjc4QzZBOUQ3MkM3NzBCNEVCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFN9dazEKptLeQjTQwC1UhRqw+ U5eZOv3YUCu/SSq4z/r7+AhQa0uPVoTr1VFHPsDUe6YtEcOILL6UyflN1v5NbvP2 Vp+UaRhfl7kOumQvHTAUrblEvbvup3DiKRt+KNb9ZeC3l/qz/kXMTkCTO1dfvF78 8WzU5bsoLYjz3GZLxpNJCu8SO+GatJVunJ5uxx/tSjzMQJAijrE6nB2DZdka42NV pugqd69esOotTzbM/cNoSHNR+qJsPUfdk2NSEnHuxc9SppNzhiAzifA/S5nK7PSc 9SnCHYSdRSYzyLRnd7yhdrV003DC3rF5T2dTGrYjwnk18PuDb72q3BFt6tEvAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUv/k3hrKjzb/BZbeMap1yx3C06+cwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ4NDgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KC0DANBgkqhkiG9w0BAQsFAAOCAQEAQwiKGUz2qzwgPZDjgJJ7UyECBN8VvBeP fixVPwoYU9BlkQsXn6SAytNTnqIWLNsimC59t2rMKp1BfKGrlJI/z0AvQLr8O2yF BG0Liy+b7d+5PXGZMGkpKf8bcz56dXlUTVr0ebPh/Bs4ICAgZypbXSJXqVmulvuU IihEicmpBC9LyIBy5zK2kSCOSAQxtDtoLlkqjcjRDzfQeoDYrp4sTD/H/ljgNLpE sT7m8W8QhbzRS5XvdKayhHmIBCBtKBEwNTL1B2pTFC8cVHR0wLYmeF0GDsSravub mjBeGEgTWDpgEzIbxuzFFtaFXvniO5hCxxy2EtOSev9EohJJIBoY5w== -----END CERTIFICATE-----Generated at Tue May 12 23:49:11 2026 by rpki-client