$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213422.roa File: AS213422.roa (raw, json) Hash identifier: 82tfVWx1k9/2olVqqIbHfUL6qh5Tew/3u4MJ7jlKRCI= Subject key identifier: 4D:2A:FF:2D:D4:0E:1A:89:49:CE:56:4D:C6:1A:2A:2B:5A:E7:FD:D6 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5565E93DEC3120654641B4D9AFBFDCA8C05272DF Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213422.roa Signing time: Fri 18 Jul 2025 18:59:37 +0000 ROA not before: Fri 18 Jul 2025 18:54:37 +0000 ROA not after: Fri 17 Jul 2026 18:59:37 +0000 asID: 213422 IP address blocks: 2a0f:6283:1400::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 07:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:65:e9:3d:ec:31:20:65:46:41:b4:d9:af:bf:dc:a8:c0:52:72:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 18 18:54:37 2025 GMT Not After : Jul 17 18:59:37 2026 GMT Subject: CN=4D2AFF2DD40E1A8949CE564DC61A2A2B5AE7FDD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:17:4a:c8:cd:93:cf:ab:f2:fd:50:29:b8: 35:59:c3:3d:3b:fb:d2:c3:e1:7f:44:20:0a:87:b7: cb:37:ff:57:f4:ce:65:97:60:30:f0:a4:25:07:29: 84:0d:86:be:46:85:08:36:25:a7:7d:19:57:41:19: 32:e5:f2:b2:f7:23:09:bd:6d:41:03:d2:ef:55:b6: f2:c4:a1:3b:10:e3:2e:11:7e:78:12:68:42:52:a5: e8:0e:f3:de:0e:bb:02:a7:16:aa:d2:32:08:3f:71: 08:8b:39:9d:20:06:7c:c4:2f:0d:ad:9b:c7:68:86: 3d:b5:e5:90:55:5f:31:b8:e9:cf:e8:4b:6c:b4:dd: 03:1b:2d:dd:dd:a7:c8:2a:24:ed:00:aa:31:90:61: ac:78:94:02:06:a4:41:6a:b6:e2:29:a8:15:2c:e9: 0b:44:d5:b8:ca:84:da:41:bd:ee:cd:e4:61:40:d3: c1:d6:ad:f3:a8:19:50:07:85:0c:97:e5:84:06:f5: 28:7b:35:a6:4a:0f:1f:b4:59:20:e9:e7:45:b6:d0: d1:ed:8d:2f:67:24:94:62:f5:3c:17:84:72:d1:58: 9c:02:a9:7c:20:79:04:cd:59:7a:37:cc:df:78:20: a1:54:5d:ed:bb:46:e3:96:5c:4f:19:fd:5c:58:3b: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2A:FF:2D:D4:0E:1A:89:49:CE:56:4D:C6:1A:2A:2B:5A:E7:FD:D6 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213422.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:1400::/40 Signature Algorithm: sha256WithRSAEncryption 5e:9d:d2:c9:d6:ad:54:50:f7:64:84:26:08:f0:24:d7:5d:94: 64:3a:45:f0:54:41:df:60:d7:23:e1:4b:14:1b:42:0c:39:a1: 0e:c0:09:5c:15:b0:9a:b1:4c:2c:f8:81:b6:50:24:a4:9f:d0: ac:2f:b7:54:a2:4d:cc:4d:56:e3:e1:48:7d:18:60:48:19:74: f7:e0:cd:aa:b7:9a:10:9e:5e:14:6a:27:73:83:77:41:14:c1: a3:be:93:c8:20:9b:d7:52:e9:e8:e5:5e:cf:e6:06:8e:4c:dc: 21:ac:b5:fd:6f:41:6d:ee:0a:5a:c3:ff:d0:9c:59:01:0e:fd: 09:ad:a1:df:58:7d:47:37:d7:9e:95:a8:f2:5d:5f:7e:07:13: 7c:cc:88:cd:1b:53:c2:13:92:1d:9b:20:3e:1f:09:7f:53:84: 84:7e:58:b7:bc:3c:72:b7:e5:64:61:26:53:6b:7d:b2:8a:3b: 92:f6:fc:99:b8:24:bf:98:0a:a4:fc:36:12:be:e4:e9:1b:2f: 16:1b:67:5a:65:68:b1:b3:45:97:5b:a1:da:37:ad:72:eb:55: bd:fc:8c:47:61:c1:90:dc:49:05:ce:19:15:39:9c:86:17:3b: 72:b4:9a:d8:11:e5:d4:ea:c3:d6:23:0c:26:6a:ee:15:cf:dc: 2c:c2:0e:90 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUVWXpPewxIGVGQbTZr7/cqMBSct8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MTgxODU0MzdaFw0yNjA3MTcxODU5MzdaMDMxMTAvBgNV BAMTKDREMkFGRjJERDQwRTFBODk0OUNFNTY0REM2MUEyQTJCNUFFN0ZERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLxdKyM2Tz6vy/VApuDVZwz07 +9LD4X9EIAqHt8s3/1f0zmWXYDDwpCUHKYQNhr5GhQg2Jad9GVdBGTLl8rL3Iwm9 bUED0u9VtvLEoTsQ4y4RfngSaEJSpegO894OuwKnFqrSMgg/cQiLOZ0gBnzELw2t m8dohj215ZBVXzG46c/oS2y03QMbLd3dp8gqJO0AqjGQYax4lAIGpEFqtuIpqBUs 6QtE1bjKhNpBve7N5GFA08HWrfOoGVAHhQyX5YQG9Sh7NaZKDx+0WSDp50W20NHt jS9nJJRi9TwXhHLRWJwCqXwgeQTNWXo3zN94IKFUXe27RuOWXE8Z/VxYO7PtAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUTSr/LdQOGolJzlZNxhoqK1rn/dYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM0MjIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KDFDANBgkqhkiG9w0BAQsFAAOCAQEAXp3SydatVFD3ZIQmCPAk112UZDpF8FRB 32DXI+FLFBtCDDmhDsAJXBWwmrFMLPiBtlAkpJ/QrC+3VKJNzE1W4+FIfRhgSBl0 9+DNqreaEJ5eFGonc4N3QRTBo76TyCCb11Lp6OVez+YGjkzcIay1/W9Bbe4KWsP/ 0JxZAQ79Ca2h31h9RzfXnpWo8l1ffgcTfMyIzRtTwhOSHZsgPh8Jf1OEhH5Yt7w8 crflZGEmU2t9soo7kvb8mbgkv5gKpPw2Er7k6RsvFhtnWmVosbNFl1uh2jetcutV vfyMR2HBkNxJBc4ZFTmchhc7crSa2BHl1OrD1iMMJmruFc/cLMIOkA== -----END CERTIFICATE-----Generated at Tue Jul 22 19:21:40 2025 by rpki-client