$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214915.roa File: AS214915.roa (raw, json) Hash identifier: f0ljOwdM0q1iEfbjlgRoPv0qADg/6yjHTUEEY1yOSZI= Subject key identifier: 24:BF:9F:B1:B0:8A:5D:6B:01:79:17:56:8A:78:55:20:D8:E8:23:49 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5175F165F10C693A5E3C15DA1E63958EC0B9F687 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214915.roa Signing time: Sun 28 Jun 2026 18:56:31 +0000 ROA not before: Sun 28 Jun 2026 18:51:31 +0000 ROA not after: Sun 27 Jun 2027 18:56:31 +0000 asID: 214915 IP address blocks: 2a0f:6284:c00::/40 maxlen: 48 2a0f:6284:4300::/40 maxlen: 44 2a0f:6284:4316::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:75:f1:65:f1:0c:69:3a:5e:3c:15:da:1e:63:95:8e:c0:b9:f6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:51:31 2026 GMT Not After : Jun 27 18:56:31 2027 GMT Subject: CN=24BF9FB1B08A5D6B017917568A785520D8E82349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:bd:e1:39:83:81:01:44:82:9d:84:09:5e: 96:83:37:ab:f9:a7:7d:0e:1f:18:87:73:64:8b:39: b3:6b:bd:b9:2e:ef:5a:ac:b1:21:85:d6:b1:94:97: 0a:c4:c1:a3:c6:ef:20:a7:5a:28:51:70:37:53:c7: eb:59:6d:a3:76:74:8b:57:2d:c7:a4:b8:1d:25:3f: 83:a6:50:42:1e:7b:54:92:33:6f:11:d1:e5:6d:d0: 94:ce:9c:a2:47:80:1f:ce:fd:a0:c2:01:63:f8:d0: d8:0a:eb:1f:be:87:8a:87:e6:26:e0:ba:32:31:14: 9a:87:5c:47:11:69:16:dc:2d:95:be:ef:db:00:b7: 91:4b:9e:8c:d8:54:b3:7a:a7:c3:01:d5:74:53:03: 88:87:55:8d:a3:36:34:74:1b:6c:f2:90:ac:4d:51: 2f:57:a4:2d:a0:d4:92:65:79:e7:d6:a9:56:e4:db: 48:b5:b9:0c:41:f8:fe:03:5d:d5:75:23:32:cd:ba: b1:6b:d4:03:a7:d3:58:8b:d5:49:34:2e:f9:e2:01: bf:bb:f1:2a:58:c6:54:0c:1a:fa:ac:70:f1:0c:a5: b7:1c:65:5b:83:d9:8f:4c:fe:6f:93:38:f2:ae:bf: 72:4e:18:8a:7a:f1:06:3a:f6:df:9c:d0:51:6f:40: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BF:9F:B1:B0:8A:5D:6B:01:79:17:56:8A:78:55:20:D8:E8:23:49 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214915.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:c00::/40 2a0f:6284:4300::/40 Signature Algorithm: sha256WithRSAEncryption 71:bd:1b:80:50:85:d7:ef:ef:4c:f2:fa:70:09:fc:89:2f:20: 2b:fe:23:37:c2:6d:63:38:d3:91:a6:f4:2a:4c:08:77:ae:45: 95:78:60:ba:25:c3:74:a4:8e:7e:45:e6:18:79:c7:fe:b9:51: c4:05:50:ee:91:f4:d1:90:04:40:f8:6d:22:55:f5:a8:0d:96: bf:f9:51:14:a6:79:2c:09:e4:cd:3b:3d:3e:9c:38:73:36:2c: 48:55:1e:61:5c:fa:9f:39:aa:3d:20:5c:a1:9d:8d:ec:d9:ce: 9c:c6:3b:ec:da:be:47:bc:c9:e7:db:4d:49:a8:f9:65:b2:63: af:29:f2:1c:b8:07:44:2a:21:be:b6:e4:ea:12:31:1f:a2:5d: 7d:7d:d5:1d:54:ab:aa:65:2e:b4:09:98:77:6c:54:39:52:0b: d3:d6:58:88:c0:79:6a:24:6c:ea:08:83:9b:93:f7:c2:97:10: b4:83:d8:79:f3:a6:e2:8c:d2:87:7b:de:c5:cd:ce:4e:98:b9: 7f:c7:86:8d:50:46:9a:a8:9a:f8:27:bd:72:80:b2:ad:e3:81: 48:15:dc:9c:7f:44:f6:16:fe:5f:15:1a:c0:35:93:01:3b:ab: 46:51:c2:eb:33:d9:50:03:1a:4c:ad:2b:e9:d0:09:c1:c7:dc: 6c:1b:8d:c0 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUUXXxZfEMaTpePBXaHmOVjsC59ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUxMzFaFw0yNzA2MjcxODU2MzFaMDMxMTAvBgNV BAMTKDI0QkY5RkIxQjA4QTVENkIwMTc5MTc1NjhBNzg1NTIwRDhFODIzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Xr3hOYOBAUSCnYQJXpaDN6v5 p30OHxiHc2SLObNrvbku71qssSGF1rGUlwrEwaPG7yCnWihRcDdTx+tZbaN2dItX LcekuB0lP4OmUEIee1SSM28R0eVt0JTOnKJHgB/O/aDCAWP40NgK6x++h4qH5ibg ujIxFJqHXEcRaRbcLZW+79sAt5FLnozYVLN6p8MB1XRTA4iHVY2jNjR0G2zykKxN US9XpC2g1JJleefWqVbk20i1uQxB+P4DXdV1IzLNurFr1AOn01iL1Uk0LvniAb+7 8SpYxlQMGvqscPEMpbccZVuD2Y9M/m+TOPKuv3JOGIp68QY69t+c0FFvQG5HAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUJL+fsbCKXWsBeRdWinhVINjoI0kwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ5MTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAq D2KEDAMGACoPYoRDMA0GCSqGSIb3DQEBCwUAA4IBAQBxvRuAUIXX7+9M8vpwCfyJ LyAr/iM3wm1jONORpvQqTAh3rkWVeGC6JcN0pI5+ReYYecf+uVHEBVDukfTRkARA +G0iVfWoDZa/+VEUpnksCeTNOz0+nDhzNixIVR5hXPqfOao9IFyhnY3s2c6cxjvs 2r5HvMnn201JqPllsmOvKfIcuAdEKiG+tuTqEjEfol19fdUdVKuqZS60CZh3bFQ5 UgvT1liIwHlqJGzqCIObk/fClxC0g9h586bijNKHe97Fzc5OmLl/x4aNUEaaqJr4 J71ygLKt44FIFdycf0T2Fv5fFRrANZMBO6tGUcLrM9lQAxpMrSvp0AnBx9xsG43A -----END CERTIFICATE-----Generated at Thu Jul 23 23:48:18 2026 by rpki-client