$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS211066.roa File: AS211066.roa (raw, json) Hash identifier: 2VcT4odu05iTNtTcTH3Br3jLo3QVzK7jhtzBbRLevEA= Subject key identifier: 55:BA:99:34:7C:7A:DC:CA:51:8F:8A:0E:15:6C:DA:63:4B:44:6F:A3 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0FC507D18D62FB95A42B262D9EFB16FDA6CB62C0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS211066.roa Signing time: Thu 03 Jul 2025 15:53:02 +0000 ROA not before: Thu 03 Jul 2025 15:48:02 +0000 ROA not after: Thu 02 Jul 2026 15:53:02 +0000 asID: 211066 IP address blocks: 2a05:dfc3:fc00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c5:07:d1:8d:62:fb:95:a4:2b:26:2d:9e:fb:16:fd:a6:cb:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:48:02 2025 GMT Not After : Jul 2 15:53:02 2026 GMT Subject: CN=55BA99347C7ADCCA518F8A0E156CDA634B446FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4c:62:11:c8:2d:17:83:ca:15:32:d1:a9:97: b7:c5:31:7d:ab:b9:9b:7d:ec:3d:4e:a3:4b:11:5f: 35:9a:52:64:2e:e6:9e:0d:a6:6b:50:de:d8:b8:bf: a8:fe:c2:20:d9:14:4f:da:0c:89:a5:6d:a9:e5:07: 7a:49:fb:9a:20:73:33:3b:1c:62:d2:84:88:29:24: f5:09:8e:bd:e9:9c:8a:1b:80:37:22:cb:16:9e:a9: e0:3b:3e:59:8e:bb:2d:d8:b5:68:f8:36:77:2c:b3: b0:36:c4:32:dd:ac:99:2c:44:db:be:29:70:5b:3c: dc:47:f9:7d:ae:67:2d:5e:54:44:fb:cd:7e:50:c0: 1e:1f:ef:83:00:61:bf:c9:1f:14:ca:ed:e6:7d:24: 90:ae:42:09:48:9c:f5:6a:a2:bf:62:17:45:a1:b1: 29:bf:b6:0d:f0:ae:44:94:5d:64:55:ce:c9:fc:69: af:1d:82:7e:88:ce:1f:51:e9:93:b7:ee:b8:a6:d1: c9:fa:6a:0c:1f:50:4a:a7:6b:b4:aa:cc:95:7d:5e: 37:3e:7f:09:5c:e0:35:17:3b:f7:76:1b:08:c8:1d: ce:9e:06:13:3e:c2:05:ae:f5:82:5b:e0:67:b0:b0: e5:7a:3e:c6:d6:0f:7d:f7:c0:04:87:0c:ed:70:5b: 14:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BA:99:34:7C:7A:DC:CA:51:8F:8A:0E:15:6C:DA:63:4B:44:6F:A3 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS211066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fc00::/40 Signature Algorithm: sha256WithRSAEncryption 80:b7:f3:b9:31:34:1a:28:5e:b6:65:57:dd:9f:28:b2:e2:91: 0b:a7:f0:d1:ae:da:ef:24:5d:5b:d1:fa:22:33:88:ac:4a:73: 7d:dc:ac:3c:a1:2c:c4:cf:f2:2b:46:e1:88:a3:9e:2d:27:2d: de:80:ba:49:da:f4:d1:55:df:17:b4:a5:89:d3:6a:e2:7d:39: b5:7e:3e:99:0c:d1:f6:5e:ce:9a:c7:ec:a6:77:65:bf:f5:25: 28:1f:9b:78:78:32:1e:57:d6:8f:b4:4f:b9:ba:bc:c1:d5:2c: 64:2c:81:d3:74:56:66:11:ab:0a:48:55:cf:92:79:6b:a2:cc: c5:f7:59:42:ce:e7:68:7a:1c:ae:73:59:65:2a:f0:01:cc:cb: 31:8d:84:25:32:cb:b0:0d:42:87:3a:9d:b2:df:a5:aa:aa:e5: 85:8d:b8:44:bd:7a:a5:fe:2c:94:ae:1e:32:b4:52:25:a6:36: ce:69:68:5f:11:4a:63:e0:3b:b7:c3:bf:ca:d3:49:b1:90:72: 14:9e:f5:8c:26:5e:0b:99:57:d6:e4:91:00:bc:6a:3d:f6:8d: 73:2a:e1:50:89:9e:40:cd:d7:51:1c:a3:d0:19:78:b5:75:a9: e8:10:c7:db:86:fa:3b:91:27:a7:f9:81:4b:aa:20:15:6e:c0: 41:c8:c7:bb -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUD8UH0Y1i+5WkKyYtnvsW/abLYsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ4MDJaFw0yNjA3MDIxNTUzMDJaMDMxMTAvBgNV BAMTKDU1QkE5OTM0N0M3QURDQ0E1MThGOEEwRTE1NkNEQTYzNEI0NDZGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYTGIRyC0Xg8oVMtGpl7fFMX2r uZt97D1Oo0sRXzWaUmQu5p4NpmtQ3ti4v6j+wiDZFE/aDImlbanlB3pJ+5ogczM7 HGLShIgpJPUJjr3pnIobgDciyxaeqeA7PlmOuy3YtWj4Nncss7A2xDLdrJksRNu+ KXBbPNxH+X2uZy1eVET7zX5QwB4f74MAYb/JHxTK7eZ9JJCuQglInPVqor9iF0Wh sSm/tg3wrkSUXWRVzsn8aa8dgn6Izh9R6ZO37rim0cn6agwfUEqna7SqzJV9Xjc+ fwlc4DUXO/d2GwjIHc6eBhM+wgWu9YJb4GewsOV6PsbWD333wASHDO1wWxTdAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUVbqZNHx63MpRj4oOFWzaY0tEb6MwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTEwNjYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq Bd/D/DANBgkqhkiG9w0BAQsFAAOCAQEAgLfzuTE0GihetmVX3Z8osuKRC6fw0a7a 7yRdW9H6IjOIrEpzfdysPKEsxM/yK0bhiKOeLSct3oC6Sdr00VXfF7SlidNq4n05 tX4+mQzR9l7Omsfspndlv/UlKB+beHgyHlfWj7RPubq8wdUsZCyB03RWZhGrCkhV z5J5a6LMxfdZQs7naHocrnNZZSrwAczLMY2EJTLLsA1Chzqdst+lqqrlhY24RL16 pf4slK4eMrRSJaY2zmloXxFKY+A7t8O/ytNJsZByFJ71jCZeC5lX1uSRALxqPfaN cyrhUImeQM3XURyj0Bl4tXWp6BDH24b6O5Enp/mBS6ogFW7AQcjHuw== -----END CERTIFICATE-----Generated at Sat Jul 5 02:11:03 2025 by rpki-client