$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS219283.roa File: AS219283.roa (raw, json) Hash identifier: qwHnanlnm19WoBq5Y/aqO0a1H8aItjACq7X9E2VAXU8= Subject key identifier: 90:F2:49:BF:5D:27:F8:A1:9B:DA:55:39:E8:22:C1:53:69:17:6A:C4 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 628BE6AC06A39A6AD7899F5F9D6C1594E1C552A7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219283.roa Signing time: Wed 22 Jul 2026 16:55:34 +0000 ROA not before: Wed 22 Jul 2026 16:50:34 +0000 ROA not after: Wed 21 Jul 2027 16:55:34 +0000 asID: 219283 IP address blocks: 2a0f:6280:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8b:e6:ac:06:a3:9a:6a:d7:89:9f:5f:9d:6c:15:94:e1:c5:52:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 22 16:50:34 2026 GMT Not After : Jul 21 16:55:34 2027 GMT Subject: CN=90F249BF5D27F8A19BDA5539E822C15369176AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:6c:4a:17:dd:d5:a3:cb:de:11:71:ac:f7: 3a:78:2b:36:bf:1d:5e:f3:d9:a4:ba:5e:29:17:a2: b2:e8:aa:97:7b:ac:b2:08:cf:ad:7c:4c:c3:da:f2: 6b:bb:90:f0:40:70:1b:5e:86:44:49:3e:f7:b8:c1: ba:f7:dd:d4:40:d5:6d:c0:4f:3f:3d:58:c3:d2:fc: 36:ec:b5:f1:52:a9:23:10:bf:69:f1:26:9c:6d:9b: e4:0b:bd:e0:83:2c:32:32:d5:a5:9b:a4:da:53:62: 0b:6b:e9:d1:54:03:dc:c5:34:2d:61:7c:ae:cd:f0: 5d:43:75:a8:26:45:fb:38:e6:a9:50:7d:b6:74:64: 61:01:45:2c:da:85:5e:ba:4f:99:27:2b:0c:6c:33: 94:ba:1e:f9:8b:6c:3f:38:18:df:b9:88:ce:70:68: 77:d2:11:60:79:29:23:b1:47:15:b5:2a:7d:9f:ec: 63:54:b0:2e:06:c6:42:4e:9b:8f:d9:14:10:2d:8b: 67:7d:5e:77:63:ca:eb:ca:5b:8a:0a:94:37:26:08: e7:ae:05:be:d9:7e:6a:09:d3:74:f7:4e:bf:bf:37: fe:6d:c0:eb:22:a4:9f:8c:3d:57:04:79:73:48:d8: 8c:ee:c7:73:95:5c:e0:c3:40:2c:b5:52:7b:e3:ff: 59:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F2:49:BF:5D:27:F8:A1:9B:DA:55:39:E8:22:C1:53:69:17:6A:C4 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219283.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:f000::/36 Signature Algorithm: sha256WithRSAEncryption 91:69:44:3b:f9:64:a9:6c:06:fb:d5:e6:e0:27:1a:2a:9e:6b: 5b:55:4f:44:ba:3d:7c:7a:97:2b:c6:5a:ce:4e:f2:8e:63:c7: fa:cc:ad:e4:c6:c5:c4:a3:d9:57:5f:73:78:ae:bf:0f:6f:1e: 81:23:4a:d3:4d:ef:e3:28:f9:7a:e7:bd:38:9b:b3:82:08:48: 8d:0b:37:1e:31:f1:6d:6a:94:77:24:32:12:4e:ad:e0:0f:85: 4e:af:26:4d:21:68:cb:3d:84:fe:c3:c5:d3:65:05:d1:d3:90: 01:cb:14:5c:51:a0:d0:80:51:87:e6:49:16:e2:35:b9:ff:34: b8:2a:96:d8:51:8f:34:1f:20:2b:ed:db:9e:5e:4a:ca:24:8b: b8:22:9c:cf:20:7d:7f:7b:fa:f0:a7:3e:6d:ab:0f:58:31:b9: 97:d8:2c:10:51:90:c9:c1:5a:42:67:31:92:fd:43:a8:7a:81: 24:8f:dd:eb:7b:bb:63:85:c0:c3:a2:3c:5b:ef:75:23:45:86: 94:4f:98:09:7e:41:0e:e6:5d:e1:20:e1:5f:95:3f:54:c9:9a: bb:f1:4f:44:43:4d:aa:16:8b:ad:6f:7a:44:b3:78:7e:ca:33: b3:9c:aa:45:40:f2:8e:d2:eb:33:b2:01:3e:9d:69:2a:d4:83: 97:f0:7b:f0 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUYovmrAajmmrXiZ9fnWwVlOHFUqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjIxNjUwMzRaFw0yNzA3MjExNjU1MzRaMDMxMTAvBgNV BAMTKDkwRjI0OUJGNUQyN0Y4QTE5QkRBNTUzOUU4MjJDMTUzNjkxNzZBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYGxKF93Vo8veEXGs9zp4Kza/ HV7z2aS6XikXorLoqpd7rLIIz618TMPa8mu7kPBAcBtehkRJPve4wbr33dRA1W3A Tz89WMPS/DbstfFSqSMQv2nxJpxtm+QLveCDLDIy1aWbpNpTYgtr6dFUA9zFNC1h fK7N8F1DdagmRfs45qlQfbZ0ZGEBRSzahV66T5knKwxsM5S6HvmLbD84GN+5iM5w aHfSEWB5KSOxRxW1Kn2f7GNUsC4GxkJOm4/ZFBAti2d9XndjyuvKW4oKlDcmCOeu Bb7ZfmoJ03T3Tr+/N/5twOsipJ+MPVcEeXNI2Izux3OVXODDQCy1Unvj/1kxAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUkPJJv10n+KGb2lU56CLBU2kXasQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyODMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KA8DANBgkqhkiG9w0BAQsFAAOCAQEAkWlEO/lkqWwG+9Xm4CcaKp5rW1VPRLo9 fHqXK8Zazk7yjmPH+syt5MbFxKPZV19zeK6/D28egSNK003v4yj5eue9OJuzgghI jQs3HjHxbWqUdyQyEk6t4A+FTq8mTSFoyz2E/sPF02UF0dOQAcsUXFGg0IBRh+ZJ FuI1uf80uCqW2FGPNB8gK+3bnl5KyiSLuCKczyB9f3v68Kc+basPWDG5l9gsEFGQ ycFaQmcxkv1DqHqBJI/d63u7Y4XAw6I8W+91I0WGlE+YCX5BDuZd4SDhX5U/VMma u/FPRENNqhaLrW96RLN4fsozs5yqRUDyjtLrM7IBPp1pKtSDl/B78A== -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:04 2026 by rpki-client