$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS212895.roa File: AS212895.roa (raw, json) Hash identifier: BMA1aVFlazAad59tXCIT2goVXMzYjv5f8QZOHUYECas= Subject key identifier: F9:6E:62:19:05:B0:41:32:F5:2E:DD:96:56:05:3D:44:C3:FC:72:52 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 38F378DEA60320AD1C4E007199A7113BDAF22B27 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212895.roa Signing time: Tue 18 Aug 2026 18:00:27 +0000 ROA not before: Tue 18 Aug 2026 17:55:27 +0000 ROA not after: Tue 17 Aug 2027 18:00:27 +0000 asID: 212895 IP address blocks: 2a0f:6280:1100::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 13:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f3:78:de:a6:03:20:ad:1c:4e:00:71:99:a7:11:3b:da:f2:2b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 18 17:55:27 2026 GMT Not After : Aug 17 18:00:27 2027 GMT Subject: CN=F96E621905B04132F52EDD9656053D44C3FC7252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a0:b1:89:a3:9a:7e:93:7c:1e:95:44:f3:4c: e1:99:52:69:82:70:92:d9:c6:3f:b6:8e:ec:15:f5: 03:2d:5a:04:25:d3:3a:d0:f3:c6:f8:25:a7:df:a3: 77:e6:4c:00:b3:83:ed:63:56:d9:52:91:1e:fa:a5: 84:ff:9c:1c:2d:02:3e:75:bd:99:f4:f3:5a:76:31: 1c:d7:81:b4:23:b7:45:a2:98:68:bb:09:5e:59:6f: 0b:e4:b7:0f:cc:8f:d7:bc:24:01:e0:85:a5:fa:70: d4:59:a4:52:37:92:e1:56:7f:42:79:db:e0:8d:6a: ca:a5:18:20:26:f0:b0:67:1b:a3:91:bb:d6:0f:7c: cc:e8:7e:58:bc:8d:c8:5e:69:ff:48:6d:fa:ec:37: 62:03:84:21:bd:10:62:91:89:a8:ee:71:67:4b:ee: 22:af:fc:65:56:19:15:66:b0:9b:71:d3:a6:28:07: 3d:4f:6f:f7:05:d9:9e:c2:37:b3:48:25:10:6f:b7: bb:c9:a0:92:bb:da:fd:9d:3c:11:a5:a8:3e:6e:ec: e6:b9:23:fb:33:b5:9e:39:e5:03:29:a6:84:b3:61: 8e:47:a0:8c:88:81:9d:de:b2:d7:63:9a:1d:e1:85: ea:07:5d:df:f7:6a:f7:2b:ec:bb:cf:06:f3:a6:b0: 36:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6E:62:19:05:B0:41:32:F5:2E:DD:96:56:05:3D:44:C3:FC:72:52 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1100::/44 Signature Algorithm: sha256WithRSAEncryption 06:8e:2a:ea:d3:6e:fb:9b:a6:1e:e3:86:89:71:d3:81:b2:fc: f3:cb:3a:99:63:96:33:6d:e1:dc:a6:8b:6f:6c:54:d1:09:a0: f0:02:27:b2:f6:00:93:ac:d4:55:72:e5:39:94:08:72:3c:62: 4b:81:1f:0d:ab:f4:dc:30:3e:38:3e:32:2c:a8:c4:bb:f8:4e: 33:60:40:45:47:1d:a3:92:0c:71:72:a2:95:5d:a8:31:ee:32: 7f:c5:16:95:b2:a5:53:8e:77:33:84:2a:1d:40:9f:08:37:d3: d7:8b:81:f9:17:7e:77:3a:7b:c2:bb:d0:b3:31:55:a6:8e:8f: 9e:47:0a:43:fa:c1:26:70:d9:e1:f2:da:d1:c5:6c:e5:8a:53: b1:a6:74:47:ed:e1:f9:65:14:4d:21:f3:d3:17:b0:39:e1:65: 02:98:54:02:4c:3c:22:5e:8a:22:88:d0:a3:78:ae:bb:0d:b7: 23:58:02:a4:fb:52:02:b4:d8:db:76:4c:1f:52:52:14:4d:60: 00:0d:10:e2:3c:26:68:76:19:09:0e:f2:e4:29:5f:20:0e:ca: 73:3d:ef:65:fb:28:9d:99:5c:81:35:5a:07:40:24:10:85:02: 0d:78:b5:79:32:24:e9:56:98:36:94:bf:5b:81:5d:3b:98:d9: 51:ef:17:55 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUOPN43qYDIK0cTgBxmacRO9ryKycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTgxNzU1MjdaFw0yNzA4MTcxODAwMjdaMDMxMTAvBgNV BAMTKEY5NkU2MjE5MDVCMDQxMzJGNTJFREQ5NjU2MDUzRDQ0QzNGQzcyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYoLGJo5p+k3welUTzTOGZUmmC cJLZxj+2juwV9QMtWgQl0zrQ88b4Jaffo3fmTACzg+1jVtlSkR76pYT/nBwtAj51 vZn081p2MRzXgbQjt0WimGi7CV5Zbwvktw/Mj9e8JAHghaX6cNRZpFI3kuFWf0J5 2+CNasqlGCAm8LBnG6ORu9YPfMzofli8jcheaf9IbfrsN2IDhCG9EGKRiajucWdL 7iKv/GVWGRVmsJtx06YoBz1Pb/cF2Z7CN7NIJRBvt7vJoJK72v2dPBGlqD5u7Oa5 I/sztZ455QMppoSzYY5HoIyIgZ3estdjmh3hheoHXd/3avcr7LvPBvOmsDbTAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU+W5iGQWwQTL1Lt2WVgU9RMP8clIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTI4OTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KAEQAwDQYJKoZIhvcNAQELBQADggEBAAaOKurTbvubph7jholx04Gy/PPLOplj ljNt4dymi29sVNEJoPACJ7L2AJOs1FVy5TmUCHI8YkuBHw2r9NwwPjg+MiyoxLv4 TjNgQEVHHaOSDHFyopVdqDHuMn/FFpWypVOOdzOEKh1Anwg309eLgfkXfnc6e8K7 0LMxVaaOj55HCkP6wSZw2eHy2tHFbOWKU7GmdEft4fllFE0h89MXsDnhZQKYVAJM PCJeiiKI0KN4rrsNtyNYAqT7UgK02Nt2TB9SUhRNYAANEOI8Jmh2GQkO8uQpXyAO ynM972X7KJ2ZXIE1WgdAJBCFAg14tXkyJOlWmDaUv1uBXTuY2VHvF1U= -----END CERTIFICATE-----Generated at Tue Aug 25 17:02:04 2026 by rpki-client