$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS211585.roa File: AS211585.roa (raw, json) Hash identifier: WOEVYlBGuUDE7SEibNqfg5wPPf2KzGqabA3aUbjvAIc= Subject key identifier: DE:9F:46:5D:DF:F7:B0:E1:49:0E:35:AA:05:13:B7:BD:B1:F0:4F:34 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 7A457FC66B27A2A60928507CDB0AF44E4D7145D0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS211585.roa Signing time: Fri 29 May 2026 21:47:58 +0000 ROA not before: Fri 29 May 2026 21:42:58 +0000 ROA not after: Fri 28 May 2027 21:47:58 +0000 asID: 211585 IP address blocks: 2a0f:6282:2100::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 10:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:45:7f:c6:6b:27:a2:a6:09:28:50:7c:db:0a:f4:4e:4d:71:45:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 29 21:42:58 2026 GMT Not After : May 28 21:47:58 2027 GMT Subject: CN=DE9F465DDFF7B0E1490E35AA0513B7BDB1F04F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:02:fb:6f:f6:9f:75:05:f2:f8:76:cd:7e: 50:0c:91:16:5e:f3:28:c0:97:78:4c:a5:45:8b:f3: f8:fa:d5:49:c4:00:5d:ce:ba:67:64:ef:eb:13:d0: 4a:19:a0:eb:d7:b5:f6:bf:62:12:f1:80:b2:c0:28: 6d:02:e6:26:ce:13:7a:c5:65:77:4b:1a:99:de:b8: b5:31:16:26:67:e7:55:a7:6f:91:42:dd:e3:4c:49: 65:44:ad:fc:91:03:ef:40:bf:f2:db:19:0d:4b:b2: f3:ff:9c:df:34:c2:b3:d1:66:bc:cf:74:f5:23:87: 83:6c:b3:0d:fc:d3:80:98:92:d1:71:22:47:72:0b: 50:d2:f0:2e:33:7f:0b:2a:d8:2f:a3:62:a7:5b:2f: dc:b2:b5:14:b0:79:9b:17:80:de:0f:76:96:c3:43: 8d:81:be:21:5f:9f:78:81:51:f1:8f:f4:26:4c:45: 75:1e:c4:ab:63:c6:4b:1f:24:dd:e7:04:33:40:ed: bc:d6:58:0c:d7:17:a2:23:c2:d3:3e:64:ff:74:f8: e4:3d:b8:fd:8b:97:21:1c:6f:5e:e1:33:bb:63:e7: 1a:fc:3b:44:b2:33:69:0a:d7:75:7a:ea:d4:13:95: c0:d6:76:74:73:47:bf:c7:70:78:24:e6:c1:0e:aa: 32:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9F:46:5D:DF:F7:B0:E1:49:0E:35:AA:05:13:B7:BD:B1:F0:4F:34 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS211585.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:2100::/44 Signature Algorithm: sha256WithRSAEncryption 7d:5e:ab:7e:56:fa:38:8c:67:96:36:3f:fb:83:86:64:56:58: 18:10:a0:fe:29:1d:5b:f2:c3:eb:03:eb:40:8d:df:29:80:d3: 28:11:e6:af:6e:25:c2:93:0e:c7:27:c9:99:6a:da:f1:6e:72: b5:d5:c3:7f:67:a2:97:cc:26:0a:18:fc:8a:67:4f:23:55:9d: 81:47:87:12:61:26:02:74:6e:fb:5b:57:b6:1f:96:57:89:4e: 53:14:a1:72:20:b7:da:4d:d6:d2:f4:c4:e4:36:64:34:2f:ce: 29:1f:5e:b3:8d:5f:57:54:9a:e6:ce:37:ab:81:e3:bc:4a:3d: 5c:80:6c:86:fd:9e:51:45:c7:e6:1e:67:cf:00:dc:87:09:a8: 99:05:9e:37:cc:0e:09:cf:d9:d2:75:5c:a4:f2:fe:fd:95:76: 68:7c:a8:34:0c:c7:10:1b:32:b5:80:4e:e7:47:2a:23:7f:68: 3c:18:4b:23:ae:c6:41:c5:6c:a1:29:ae:71:23:97:5c:cf:06: 29:21:83:e9:59:36:61:9f:68:f9:b8:5d:2a:f8:bb:09:9d:4b: 45:c4:9c:79:45:55:96:d6:86:24:c0:0b:ca:3a:0c:fd:5f:48: e4:fa:29:fa:28:8d:b3:e8:fd:2a:93:a0:bc:60:38:1f:72:f4: ac:56:ba:44 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUekV/xmsnoqYJKFB82wr0Tk1xRdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MjkyMTQyNThaFw0yNzA1MjgyMTQ3NThaMDMxMTAvBgNV BAMTKERFOUY0NjVEREZGN0IwRTE0OTBFMzVBQTA1MTNCN0JEQjFGMDRGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTRwL7b/afdQXy+HbNflAMkRZe 8yjAl3hMpUWL8/j61UnEAF3Oumdk7+sT0EoZoOvXtfa/YhLxgLLAKG0C5ibOE3rF ZXdLGpneuLUxFiZn51Wnb5FC3eNMSWVErfyRA+9Av/LbGQ1LsvP/nN80wrPRZrzP dPUjh4Nssw3804CYktFxIkdyC1DS8C4zfwsq2C+jYqdbL9yytRSweZsXgN4PdpbD Q42BviFfn3iBUfGP9CZMRXUexKtjxksfJN3nBDNA7bzWWAzXF6IjwtM+ZP90+OQ9 uP2LlyEcb17hM7tj5xr8O0SyM2kK13V66tQTlcDWdnRzR7/HcHgk5sEOqjIBAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU3p9GXd/3sOFJDjWqBRO3vbHwTzQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTE1ODUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KCIQAwDQYJKoZIhvcNAQELBQADggEBAH1eq35W+jiMZ5Y2P/uDhmRWWBgQoP4p HVvyw+sD60CN3ymA0ygR5q9uJcKTDscnyZlq2vFucrXVw39nopfMJgoY/IpnTyNV nYFHhxJhJgJ0bvtbV7YflleJTlMUoXIgt9pN1tL0xOQ2ZDQvzikfXrONX1dUmubO N6uB47xKPVyAbIb9nlFFx+YeZ88A3IcJqJkFnjfMDgnP2dJ1XKTy/v2Vdmh8qDQM xxAbMrWATudHKiN/aDwYSyOuxkHFbKEprnEjl1zPBikhg+lZNmGfaPm4XSr4uwmd S0XEnHlFVZbWhiTAC8o6DP1fSOT6KfoojbPo/SqToLxgOB9y9KxWukQ= -----END CERTIFICATE-----Generated at Sat Jun 6 15:49:54 2026 by rpki-client