$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213641.roa File: AS213641.roa (raw, json) Hash identifier: BA7EaAWznhGHaC+5ouZQgUVfxf6YfJKvcVCYzaFB8o0= Subject key identifier: DF:02:B4:FA:E8:31:C6:62:EA:9D:91:9C:CF:8A:18:37:F7:E1:1E:CE Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 57649594D976209282345E85EDA25755DC7DE695 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213641.roa Signing time: Wed 03 Sep 2025 15:06:09 +0000 ROA not before: Wed 03 Sep 2025 15:01:09 +0000 ROA not after: Wed 02 Sep 2026 15:06:09 +0000 asID: 213641 IP address blocks: 2a05:dfc3:fd50::/48 maxlen: 48 2a05:dfc3:fd51::/48 maxlen: 48 2a05:dfc3:fd53::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:64:95:94:d9:76:20:92:82:34:5e:85:ed:a2:57:55:dc:7d:e6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 3 15:01:09 2025 GMT Not After : Sep 2 15:06:09 2026 GMT Subject: CN=DF02B4FAE831C662EA9D919CCF8A1837F7E11ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:48:17:55:1a:a5:3e:0a:da:08:93:63:e5: 88:94:b9:1b:ac:b9:6c:97:5b:3a:3e:b6:60:23:e2: 1c:0f:7a:dd:87:a5:5a:bd:a2:7e:0f:b5:70:7e:0c: 16:45:4b:a9:9f:67:d2:3b:1b:28:49:54:03:48:a1: 39:10:4c:97:db:94:3d:23:a2:e5:0e:d7:33:10:ff: 83:6b:d1:c3:6d:44:20:34:cb:4b:5d:c7:af:2a:4e: c8:58:7d:8d:11:30:8d:04:ac:64:ac:7d:11:d4:78: 7b:26:78:c4:b0:b0:c3:90:a3:67:2c:6a:b5:b5:32: d2:57:f1:40:e0:ee:d0:9c:6d:82:db:a0:b0:f6:84: b5:2e:cc:97:55:9e:ae:78:a6:8a:3c:91:5f:0e:05: 8d:a4:d9:b7:30:ba:de:75:bf:f0:8c:33:1b:86:4c: 9f:69:eb:b7:8d:a6:79:07:84:d8:9a:45:d4:7a:22: f5:f2:f8:7b:bc:8e:33:66:1f:cd:de:a8:3d:4f:ac: 22:7e:d0:9e:07:58:be:49:af:8d:9d:89:da:15:ce: 34:ab:85:fb:0c:0f:fe:97:5c:4c:ba:7a:28:49:20: 8b:b2:6e:64:4c:13:36:4a:ee:e8:19:ee:fe:db:23: ad:35:a8:02:c3:4d:2d:01:ec:51:47:dd:cb:9c:da: 47:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:02:B4:FA:E8:31:C6:62:EA:9D:91:9C:CF:8A:18:37:F7:E1:1E:CE X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd50::/47 2a05:dfc3:fd53::/48 Signature Algorithm: sha256WithRSAEncryption 70:b0:ab:9c:b7:b5:47:17:15:80:58:51:7b:a2:7e:5e:0b:db: 9f:7e:fd:f9:32:7a:4e:60:29:65:48:83:98:a7:7a:c0:9f:c1: 5b:44:b5:21:f5:67:70:51:b2:18:41:10:4d:24:34:d5:c2:27: d8:78:ba:4f:6d:35:02:2f:42:af:92:48:43:0d:b4:93:98:fe: 4b:ad:e1:7e:00:cf:a4:b1:1d:2d:17:cd:5e:68:3b:20:34:8f: 50:a3:23:0d:e3:43:c1:a3:f7:20:85:a4:c6:24:c1:c6:c5:7b: d2:df:14:41:54:06:59:b1:c6:40:ea:29:7a:1f:c8:d4:6f:28: 4f:0e:24:e6:87:e3:36:97:84:bf:62:bb:40:ef:7f:40:b8:8c: bf:47:65:85:6f:9c:a7:1e:31:42:20:5a:eb:71:64:d7:73:c2: 9e:4b:fe:5f:04:3e:3f:72:d9:e5:23:b7:b2:9f:66:58:7f:93: 66:c3:5f:41:a7:7c:c4:29:44:07:0d:ef:08:0a:c3:13:ca:26: 7a:ce:a8:7e:02:b6:32:b7:9d:75:e7:36:e1:77:a1:1d:be:d8: 21:d1:9f:7e:a7:64:05:36:b8:eb:3c:1d:ca:0b:8a:40:bf:12: 90:91:d8:c3:c2:0f:41:ab:5b:2b:fe:8b:27:4c:f3:d1:35:5e: 7f:cc:e4:fb -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUV2SVlNl2IJKCNF6F7aJXVdx95pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA5MDMxNTAxMDlaFw0yNjA5MDIxNTA2MDlaMDMxMTAvBgNV BAMTKERGMDJCNEZBRTgzMUM2NjJFQTlEOTE5Q0NGOEExODM3RjdFMTFFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZEgXVRqlPgraCJNj5YiUuRus uWyXWzo+tmAj4hwPet2HpVq9on4PtXB+DBZFS6mfZ9I7GyhJVANIoTkQTJfblD0j ouUO1zMQ/4Nr0cNtRCA0y0tdx68qTshYfY0RMI0ErGSsfRHUeHsmeMSwsMOQo2cs arW1MtJX8UDg7tCcbYLboLD2hLUuzJdVnq54poo8kV8OBY2k2bcwut51v/CMMxuG TJ9p67eNpnkHhNiaRdR6IvXy+Hu8jjNmH83eqD1PrCJ+0J4HWL5Jr42didoVzjSr hfsMD/6XXEy6eihJIIuybmRMEzZK7ugZ7v7bI601qALDTS0B7FFH3cuc2kdHAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU3wK0+ugxxmLqnZGcz4oYN/fhHs4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM2NDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwEq Bd/D/VADBwAqBd/D/VMwDQYJKoZIhvcNAQELBQADggEBAHCwq5y3tUcXFYBYUXui fl4L259+/fkyek5gKWVIg5inesCfwVtEtSH1Z3BRshhBEE0kNNXCJ9h4uk9tNQIv Qq+SSEMNtJOY/kut4X4Az6SxHS0XzV5oOyA0j1CjIw3jQ8Gj9yCFpMYkwcbFe9Lf FEFUBlmxxkDqKXofyNRvKE8OJOaH4zaXhL9iu0Dvf0C4jL9HZYVvnKceMUIgWutx ZNdzwp5L/l8EPj9y2eUjt7KfZlh/k2bDX0GnfMQpRAcN7wgKwxPKJnrOqH4CtjK3 nXXnNuF3oR2+2CHRn36nZAU2uOs8HcoLikC/EpCR2MPCD0GrWyv+iydM89E1Xn/M 5Ps= -----END CERTIFICATE-----Generated at Wed Oct 8 17:35:51 2025 by rpki-client