$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS219412.roa File: AS219412.roa (raw, json) Hash identifier: fXs5dyCmT4tjbzOGN2KwgatLPJbiYWIObR/kjM/kh64= Subject key identifier: 8D:D7:2E:12:34:3F:B9:5E:33:F8:04:0C:52:4E:9B:C5:9A:63:D4:B3 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 467558913F3596C7FC2B4771F486C1E888DE96A5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa Signing time: Sat 18 Jul 2026 11:59:15 +0000 ROA not before: Sat 18 Jul 2026 11:54:15 +0000 ROA not after: Sat 17 Jul 2027 11:59:15 +0000 asID: 219412 IP address blocks: 2a05:dfc3:f900::/40 maxlen: 48 2a0f:6280:3000::/36 maxlen: 48 2a0f:6280:5000::/36 maxlen: 48 2a0f:6280:c000::/36 maxlen: 48 2a0f:6284:52::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:75:58:91:3f:35:96:c7:fc:2b:47:71:f4:86:c1:e8:88:de:96:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 18 11:54:15 2026 GMT Not After : Jul 17 11:59:15 2027 GMT Subject: CN=8DD72E12343FB95E33F8040C524E9BC59A63D4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:60:8a:d8:6f:f5:c0:d7:b5:f8:10:fe:1e:d8: b9:b1:2c:4d:94:0c:79:22:b0:9b:b6:84:89:97:37: 61:1a:81:76:7c:12:24:6d:3d:f6:54:2d:0b:81:a6: 71:71:a3:09:e3:7f:4b:18:fb:cb:b8:23:6b:5f:5c: da:70:ce:de:70:d6:6a:1a:60:97:b6:89:c5:e3:0f: 93:bb:82:b6:1c:cd:57:cf:c3:ee:46:20:31:4d:da: d6:12:5e:db:3f:58:f0:b7:9b:06:7b:dc:d1:9b:bd: 30:3a:a5:5e:8a:be:d3:c1:04:1a:2d:51:1b:84:5c: 17:0c:c3:31:96:9b:79:86:5d:6c:73:d2:5a:ba:38: aa:f4:f4:6f:7f:2d:54:b3:14:a3:9a:88:60:89:50: 88:91:4f:bc:4e:c7:76:9a:6c:75:a5:49:a4:f7:d7: f7:26:a6:18:7b:10:11:ca:b3:be:56:e4:88:b6:76: 84:9c:f7:e3:57:6d:b8:98:af:27:44:d4:0f:7b:eb: 09:bc:06:e3:9a:ef:5a:b7:f3:f7:b6:37:0a:62:4c: b9:ec:9c:f8:27:60:5b:31:9e:47:c6:40:c4:18:e8: 46:ad:10:34:f8:3f:58:43:74:73:72:bf:44:9c:9b: 78:9a:35:30:b9:84:5f:16:16:8f:d1:a2:71:5d:b7: 95:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D7:2E:12:34:3F:B9:5E:33:F8:04:0C:52:4E:9B:C5:9A:63:D4:B3 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f900::/40 2a0f:6280:3000::/36 2a0f:6280:5000::/36 2a0f:6280:c000::/36 2a0f:6284:52::/48 Signature Algorithm: sha256WithRSAEncryption 66:72:b0:e8:e5:fc:97:07:29:c7:60:1f:02:fa:d4:89:7e:b7: 83:50:56:e0:ca:8b:d6:51:87:8b:c0:3c:1b:d7:72:f9:e5:5a: 77:76:df:18:55:4c:d1:85:e5:34:e1:c4:ef:67:85:ed:d0:77: 3c:0b:8a:06:23:28:da:36:4c:6a:18:d2:de:fe:b5:06:29:b7: f1:3e:58:33:8b:c9:7d:f6:d9:47:5c:39:17:78:c0:f5:10:a6: 86:7b:56:64:35:ac:85:d9:4a:c4:27:49:e4:b3:2e:e7:3f:da: ce:7e:96:5b:1e:0d:a4:e8:85:fe:fc:ea:8b:e3:e8:6a:8c:7e: 28:f3:42:04:86:2a:ad:8d:98:da:2f:fb:ba:61:94:cf:73:45: 82:d0:e1:91:ae:b3:29:00:2a:e4:d4:9e:e4:c5:e7:80:e6:14: 9b:70:7a:7e:c9:11:42:df:f1:0c:67:1b:33:51:95:b5:6f:83: c2:52:a5:e7:20:a7:04:3e:e3:70:b8:63:dd:24:8a:78:43:b9: 76:c8:c7:b8:4c:7c:59:36:79:de:52:5d:da:26:a9:2f:c0:78: a9:73:cc:14:c8:51:60:30:c8:05:64:d3:df:a5:2d:b6:23:d8: 80:40:53:53:6a:5d:09:3d:3a:fc:4e:dc:02:46:f5:4d:d3:75: ba:68:a3:63 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIURnVYkT81lsf8K0dx9IbB6IjelqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTgxMTU0MTVaFw0yNzA3MTcxMTU5MTVaMDMxMTAvBgNV BAMTKDhERDcyRTEyMzQzRkI5NUUzM0Y4MDQwQzUyNEU5QkM1OUE2M0Q0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0YIrYb/XA17X4EP4e2LmxLE2U DHkisJu2hImXN2EagXZ8EiRtPfZULQuBpnFxownjf0sY+8u4I2tfXNpwzt5w1moa YJe2icXjD5O7grYczVfPw+5GIDFN2tYSXts/WPC3mwZ73NGbvTA6pV6KvtPBBBot URuEXBcMwzGWm3mGXWxz0lq6OKr09G9/LVSzFKOaiGCJUIiRT7xOx3aabHWlSaT3 1/cmphh7EBHKs75W5Ii2doSc9+NXbbiYrydE1A976wm8BuOa71q38/e2NwpiTLns nPgnYFsxnkfGQMQY6EatEDT4P1hDdHNyv0Scm3iaNTC5hF8WFo/RonFdt5WlAgMB AAGjggH/MIIB+zAdBgNVHQ4EFgQUjdcuEjQ/uV4z+AQMUk6bxZpj1LMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTk0MTIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMC8EAgACMCkDBgAq Bd/D+QMGBCoPYoAwAwYEKg9igFADBgQqD2KAwAMHACoPYoQAUjANBgkqhkiG9w0B AQsFAAOCAQEAZnKw6OX8lwcpx2AfAvrUiX63g1BW4MqL1lGHi8A8G9dy+eVad3bf GFVM0YXlNOHE72eF7dB3PAuKBiMo2jZMahjS3v61Bim38T5YM4vJffbZR1w5F3jA 9RCmhntWZDWshdlKxCdJ5LMu5z/azn6WWx4NpOiF/vzqi+Poaox+KPNCBIYqrY2Y 2i/7umGUz3NFgtDhka6zKQAq5NSe5MXngOYUm3B6fskRQt/xDGcbM1GVtW+DwlKl 5yCnBD7jcLhj3SSKeEO5dsjHuEx8WTZ53lJd2iapL8B4qXPMFMhRYDDIBWTT36Ut tiPYgEBTU2pdCT06/E7cAkb1TdN1umijYw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:10 2026 by rpki-client