$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS210537.roa File: AS210537.roa (raw, json) Hash identifier: 7fYS7b8hL0Cw9ORsP0gUJbfisN+a+tbxAGtcGHuilqk= Subject key identifier: FB:B7:FC:9F:99:8D:B7:52:8F:32:62:D8:6E:4C:05:3E:8F:9D:1B:C0 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 14681F2F6D5150BD0543A9305E672F4201011DF3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS210537.roa Signing time: Wed 06 May 2026 12:28:38 +0000 ROA not before: Wed 06 May 2026 12:23:38 +0000 ROA not after: Wed 05 May 2027 12:28:38 +0000 asID: 210537 IP address blocks: 2a0f:6284:1100::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 May 2026 14:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:68:1f:2f:6d:51:50:bd:05:43:a9:30:5e:67:2f:42:01:01:1d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 6 12:23:38 2026 GMT Not After : May 5 12:28:38 2027 GMT Subject: CN=FBB7FC9F998DB7528F3262D86E4C053E8F9D1BC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:d8:e6:83:be:6b:cc:da:0d:6f:4d:37:a6: 0a:c2:ce:83:17:e7:0a:04:17:06:75:c1:8e:8e:ac: 5d:11:fb:51:11:eb:00:2d:59:58:94:b1:56:90:e1: eb:6c:bc:6e:b9:ce:64:00:d4:aa:70:35:33:77:e2: 6d:65:a4:bd:d6:e8:3e:2c:b0:ee:6f:2f:a4:43:b8: 8f:e0:f2:55:17:11:00:cc:01:bb:3d:46:67:d7:bf: b3:45:4b:30:47:be:97:c8:38:15:2e:fb:de:28:4b: 95:6f:34:f1:8b:22:11:9c:db:08:6e:6e:ad:ce:b1: 59:5b:ac:e3:42:d0:cf:86:f7:6e:91:ff:d0:be:35: 4d:c3:a2:f8:4a:4f:3d:19:42:10:0e:cd:d5:5e:59: cd:44:01:52:15:45:8a:27:89:55:c1:50:26:33:b1: f9:6c:e9:66:85:2f:6b:83:c3:f1:75:04:c2:3b:a7: d4:49:37:97:36:25:c1:b2:4a:dc:fd:05:6b:22:1b: ec:e2:d5:3e:aa:03:ed:99:3c:68:fc:f6:19:6c:88: 4c:13:9a:a7:1d:83:d1:58:ee:13:9c:ee:2f:92:c2: bc:ea:eb:4e:68:fd:d8:cc:30:68:3d:65:7d:12:92: 9d:9c:ce:18:d5:d0:5a:78:8d:a8:5c:2e:07:24:56: ee:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B7:FC:9F:99:8D:B7:52:8F:32:62:D8:6E:4C:05:3E:8F:9D:1B:C0 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS210537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:1100::/40 Signature Algorithm: sha256WithRSAEncryption 61:b8:2a:07:00:c8:55:6c:33:83:5c:12:bd:8c:9c:a7:04:36: f8:99:5a:e4:44:6b:77:38:5b:42:49:58:2e:89:28:6b:0e:47: be:3b:f6:87:3c:69:93:ee:b0:f3:32:6e:37:29:a1:53:3a:ca: 3e:b6:c6:36:de:0a:22:e9:41:57:de:4a:3e:cb:5c:ae:00:a3: 02:43:fd:e0:9b:e8:85:4d:25:fa:93:19:a2:61:68:ca:25:1e: 72:52:df:d7:0d:92:61:8b:14:9a:52:8a:c7:06:87:35:4d:e3: ac:2b:31:8f:63:3d:17:28:16:f7:ba:3f:c0:3d:9f:bf:f0:33: 5b:52:b7:01:b0:97:e5:9a:42:2f:10:59:be:fe:46:19:a0:b4: 7e:2d:99:49:69:3f:d6:a0:cb:40:13:28:b9:42:b0:b2:5f:47: e2:df:60:2b:ba:74:14:02:b3:46:6d:67:88:d5:34:b8:44:76: 4f:07:59:8c:d3:5b:7b:59:ec:65:2f:c4:d5:e3:9a:f4:c5:c4: 60:c9:a7:f6:f6:08:cc:64:68:db:71:f7:9f:a3:cf:eb:1b:e9: c6:cc:e1:9f:7e:52:dd:a0:97:c3:a1:dc:20:02:31:d9:b4:08: b3:32:18:d9:3d:e9:92:5b:fa:f7:a2:b3:03:f3:37:4a:91:55: cc:e4:97:43 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUFGgfL21RUL0FQ6kwXmcvQgEBHfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MDYxMjIzMzhaFw0yNzA1MDUxMjI4MzhaMDMxMTAvBgNV BAMTKEZCQjdGQzlGOTk4REI3NTI4RjMyNjJEODZFNEMwNTNFOEY5RDFCQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY89jmg75rzNoNb003pgrCzoMX 5woEFwZ1wY6OrF0R+1ER6wAtWViUsVaQ4etsvG65zmQA1KpwNTN34m1lpL3W6D4s sO5vL6RDuI/g8lUXEQDMAbs9RmfXv7NFSzBHvpfIOBUu+94oS5VvNPGLIhGc2whu bq3OsVlbrONC0M+G926R/9C+NU3DovhKTz0ZQhAOzdVeWc1EAVIVRYoniVXBUCYz sfls6WaFL2uDw/F1BMI7p9RJN5c2JcGyStz9BWsiG+zi1T6qA+2ZPGj89hlsiEwT mqcdg9FY7hOc7i+Swrzq605o/djMMGg9ZX0Skp2czhjV0Fp4jahcLgckVu5xAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU+7f8n5mNt1KPMmLYbkwFPo+dG8AwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTA1Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KEETANBgkqhkiG9w0BAQsFAAOCAQEAYbgqBwDIVWwzg1wSvYycpwQ2+Jla5ERr dzhbQklYLokoaw5Hvjv2hzxpk+6w8zJuNymhUzrKPrbGNt4KIulBV95KPstcrgCj AkP94JvohU0l+pMZomFoyiUeclLf1w2SYYsUmlKKxwaHNU3jrCsxj2M9FygW97o/ wD2fv/AzW1K3AbCX5ZpCLxBZvv5GGaC0fi2ZSWk/1qDLQBMouUKwsl9H4t9gK7p0 FAKzRm1niNU0uER2TwdZjNNbe1nsZS/E1eOa9MXEYMmn9vYIzGRo23H3n6PP6xvp xszhn35S3aCXw6HcIAIx2bQIszIY2T3pklv696KzA/M3SpFVzOSXQw== -----END CERTIFICATE-----Generated at Thu May 7 07:22:42 2026 by rpki-client