$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219412.roa File: AS219412.roa (raw, json) Hash identifier: AL/Kuz+9OhZERw/LJ7UaRh+CQzzvACutKkOiSX/K4Ls= Subject key identifier: 73:03:B8:B4:6D:2F:03:B8:0B:95:DB:4B:4B:1F:61:D8:39:05:3C:0A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6CA7439CA0ED796DA34A02C40B08888030AD19B3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa Signing time: Tue 22 Sep 2026 23:10:31 +0000 ROA not before: Tue 22 Sep 2026 23:05:31 +0000 ROA not after: Tue 21 Sep 2027 23:10:31 +0000 asID: 219412 IP address blocks: 2a05:dfc3:f900::/40 maxlen: 48 2a0f:6280:c000::/36 maxlen: 48 2a0f:6284:52::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a7:43:9c:a0:ed:79:6d:a3:4a:02:c4:0b:08:88:80:30:ad:19:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 22 23:05:31 2026 GMT Not After : Sep 21 23:10:31 2027 GMT Subject: CN=7303B8B46D2F03B80B95DB4B4B1F61D839053C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:e0:94:5f:13:26:8f:4c:00:5d:8f:77:d4: 7c:bc:43:cf:e4:17:ec:b7:3a:79:3c:25:66:e9:77: 12:c8:4d:94:1d:e6:ff:d3:a1:52:ec:3d:8f:91:87: a6:f7:bd:d7:e6:1d:4b:dd:c8:71:8b:43:de:16:fa: cf:72:7d:31:50:76:dc:3e:53:63:f8:c4:a9:63:91: 20:62:b7:55:5f:08:7f:d8:74:bf:c7:31:f7:12:50: bb:97:d1:fc:02:6c:31:5a:b8:f2:1f:c6:fc:97:80: d9:e2:71:a7:a7:f8:93:e2:c3:e5:58:00:9f:8d:d3: 40:1b:45:23:63:62:80:84:49:0e:36:82:1f:c9:fd: 8d:f2:68:22:96:b0:6d:38:b8:2f:c9:ce:89:26:23: ad:cb:ce:df:b0:88:b7:93:ef:99:d7:02:9c:e4:89: 42:0c:6a:cb:f3:c3:d6:40:8a:9e:63:c4:e1:8e:a5: 83:05:94:9a:65:ea:66:eb:0e:5c:00:04:b9:24:3e: 17:a4:c5:4d:40:80:3e:23:d0:84:59:b8:36:57:89: 0c:84:a0:df:0d:c4:cb:36:be:06:07:2a:5a:36:31: 1f:52:ca:80:15:9a:2a:2c:d7:6a:23:a7:c2:bc:d2: c3:0a:5f:50:12:6b:fd:24:8e:9e:a0:20:e3:62:de: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:03:B8:B4:6D:2F:03:B8:0B:95:DB:4B:4B:1F:61:D8:39:05:3C:0A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f900::/40 2a0f:6280:c000::/36 2a0f:6284:52::/48 Signature Algorithm: sha256WithRSAEncryption 2b:e6:df:f7:a8:b3:b0:1b:be:9b:42:9e:f8:3c:cb:a1:b0:c4: 24:e6:b9:91:44:45:92:22:ca:72:08:dd:a9:41:b0:b5:0a:2c: 0c:60:2b:98:92:31:49:40:4f:31:19:14:aa:3b:57:5e:fb:f6: 55:17:a9:91:c6:a8:42:ef:fb:65:36:70:7a:f0:92:45:60:b0: b3:03:37:65:3d:e2:f2:4b:75:66:3d:89:e9:bc:4e:7a:dd:d1: f8:13:46:51:a3:a9:f5:fa:22:45:01:f8:e2:9d:95:4d:b5:49: 9d:c3:1e:13:be:ba:d2:15:37:fd:5a:44:8b:43:b1:77:ea:af: 20:dd:8d:62:3a:e5:5e:02:51:19:24:70:f7:f5:89:5b:f3:4c: 4a:a6:66:c6:65:f6:55:37:81:5e:15:ab:5b:bc:21:26:a2:2a: 72:dc:0b:09:0d:7d:c7:43:be:3c:97:7a:bb:5c:6f:b0:ee:6d: 3d:b5:19:49:51:a4:7b:52:36:c7:98:46:55:a3:17:72:23:51: 29:ac:b0:22:ab:33:29:22:fe:b6:a7:fc:c4:2f:c2:2d:97:d0: 21:fe:3e:85:04:50:1c:a9:21:5d:ff:94:b8:1a:7a:9b:52:08: fc:43:bd:03:7c:53:09:45:c8:99:78:66:13:43:ab:6f:4f:bc: b5:65:3d:b2 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUbKdDnKDteW2jSgLECwiIgDCtGbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MjIyMzA1MzFaFw0yNzA5MjEyMzEwMzFaMDMxMTAvBgNV BAMTKDczMDNCOEI0NkQyRjAzQjgwQjk1REI0QjRCMUY2MUQ4MzkwNTNDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGqOCUXxMmj0wAXY931Hy8Q8/k F+y3Onk8JWbpdxLITZQd5v/ToVLsPY+Rh6b3vdfmHUvdyHGLQ94W+s9yfTFQdtw+ U2P4xKljkSBit1VfCH/YdL/HMfcSULuX0fwCbDFauPIfxvyXgNnicaen+JPiw+VY AJ+N00AbRSNjYoCESQ42gh/J/Y3yaCKWsG04uC/JzokmI63Lzt+wiLeT75nXApzk iUIMasvzw9ZAip5jxOGOpYMFlJpl6mbrDlwABLkkPhekxU1AgD4j0IRZuDZXiQyE oN8NxMs2vgYHKlo2MR9SyoAVmios12ojp8K80sMKX1ASa/0kjp6gIONi3paXAgMB AAGjggHvMIIB6zAdBgNVHQ4EFgQUcwO4tG0vA7gLldtLSx9h2DkFPAowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTk0MTIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwMgYIKwYBBQUHAQcBAf8EIzAhMB8EAgACMBkDBgAq Bd/D+QMGBCoPYoDAAwcAKg9ihABSMA0GCSqGSIb3DQEBCwUAA4IBAQAr5t/3qLOw G76bQp74PMuhsMQk5rmRREWSIspyCN2pQbC1CiwMYCuYkjFJQE8xGRSqO1de+/ZV F6mRxqhC7/tlNnB68JJFYLCzAzdlPeLyS3VmPYnpvE563dH4E0ZRo6n1+iJFAfji nZVNtUmdwx4TvrrSFTf9WkSLQ7F36q8g3Y1iOuVeAlEZJHD39Ylb80xKpmbGZfZV N4FeFatbvCEmoipy3AsJDX3HQ748l3q7XG+w7m09tRlJUaR7UjbHmEZVoxdyI1Ep rLAiqzMpIv62p/zEL8Itl9Ah/j6FBFAcqSFd/5S4GnqbUgj8Q70DfFMJRciZeGYT Q6tvT7y1ZT2y -----END CERTIFICATE-----Generated at Wed Sep 23 08:12:25 2026 by rpki-client