$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214040.roa File: AS214040.roa (raw, json) Hash identifier: 4FW2jW/V5o8J7JvnuB+WaUKIs5oPVECc3TlUCF3yJe8= Subject key identifier: CF:9D:F2:52:FF:43:EB:8E:67:C3:F2:EC:E8:67:3D:AB:F7:DC:A7:7A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1F4EB05FED91AC2B86D1AB9FEAE49F505E8D04C1 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa Signing time: Thu 03 Jul 2025 15:53:06 +0000 ROA not before: Thu 03 Jul 2025 15:48:06 +0000 ROA not after: Thu 02 Jul 2026 15:53:06 +0000 asID: 214040 IP address blocks: 2a09:54c6:c000::/36 maxlen: 44 2a09:54c6:e000::/36 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4e:b0:5f:ed:91:ac:2b:86:d1:ab:9f:ea:e4:9f:50:5e:8d:04:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:48:06 2025 GMT Not After : Jul 2 15:53:06 2026 GMT Subject: CN=CF9DF252FF43EB8E67C3F2ECE8673DABF7DCA77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:6c:a3:05:c5:e7:60:a8:96:06:f0:df:f6: 16:85:2d:c5:38:5b:26:9b:25:74:1a:54:63:ea:aa: 74:ac:a6:b7:a7:96:41:68:dc:7f:07:0b:d9:df:87: b7:80:a7:8c:85:90:14:b2:7f:f3:77:40:be:65:14: f4:d6:c7:83:0d:5a:1e:e6:ac:4c:e3:be:84:4f:f9: 93:4e:28:be:68:cd:d7:f8:9f:e8:de:d6:81:6f:20: 83:2b:06:63:9a:ed:78:6f:6d:49:c7:e1:5a:32:6d: 7e:fc:b9:b0:b5:ef:69:ad:49:d2:bb:bb:53:ec:c6: 4f:91:14:b2:87:92:c0:65:05:87:af:c1:af:ad:f7: 14:cd:e7:56:bc:95:62:2e:93:e5:b8:a8:c4:2d:a6: 8f:e2:2d:03:c7:5f:dd:7f:86:39:fb:49:1a:48:ac: 81:02:af:f6:90:81:09:69:b5:d3:77:d1:09:37:8c: c7:14:7c:0a:e7:12:aa:c5:08:43:36:b1:53:cf:50: 0a:d4:66:bf:f0:42:49:8a:1b:f3:8f:26:c4:68:b2: 00:66:c1:86:c6:86:6d:8a:c5:04:2f:27:24:41:92: 97:26:64:fc:d8:b1:48:58:5d:88:ab:b6:76:3a:1a: 29:37:8c:a9:83:ec:eb:1c:31:a6:7d:e4:a2:44:bb: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9D:F2:52:FF:43:EB:8E:67:C3:F2:EC:E8:67:3D:AB:F7:DC:A7:7A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:c000::/36 2a09:54c6:e000::/36 Signature Algorithm: sha256WithRSAEncryption 2d:9a:80:ac:5d:bc:24:44:fe:54:61:6d:93:b0:04:38:65:47: 29:41:63:d1:35:49:fe:d3:5b:ae:ea:55:15:bc:09:4f:61:68: 09:36:75:3a:6b:1c:d4:28:e7:c0:da:2f:9b:f6:b9:6f:2f:f2: ec:7f:1d:d6:27:9f:5c:14:50:7d:96:89:9d:78:5d:3b:31:d3: c7:db:bc:2f:76:d2:ef:11:40:c8:bd:7e:d9:60:c2:27:91:3e: 11:28:f0:dc:de:c2:8a:53:ff:56:f9:c8:81:fe:6c:6d:53:f2: 84:5d:80:c9:22:7a:2e:33:70:00:f1:ac:bd:1c:5c:11:fa:ed: 7e:7b:9c:3b:48:1c:bb:01:a8:e8:10:fb:e2:ac:82:4f:18:57: 2e:c9:d7:ab:df:cd:5e:99:f6:83:6a:c0:35:f3:8d:95:71:b9: b1:cb:e4:cd:fc:33:86:cf:ef:7c:0d:48:f0:49:78:4f:a1:5c: 76:23:3a:68:9f:12:d2:5c:a8:04:e0:2c:9d:80:01:84:5c:0a: 90:09:30:66:5c:7a:e8:9e:58:c5:98:ff:4a:9f:39:c5:b5:62: 06:63:3f:7b:90:b9:b3:81:27:ae:e9:31:13:65:de:f8:d1:14: a5:26:30:c9:4c:66:ba:12:50:32:88:aa:bd:3c:be:38:43:ea: aa:9c:ff:c5 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUH06wX+2RrCuG0auf6uSfUF6NBMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ4MDZaFw0yNjA3MDIxNTUzMDZaMDMxMTAvBgNV BAMTKENGOURGMjUyRkY0M0VCOEU2N0MzRjJFQ0U4NjczREFCRjdEQ0E3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqWyjBcXnYKiWBvDf9haFLcU4 WyabJXQaVGPqqnSsprenlkFo3H8HC9nfh7eAp4yFkBSyf/N3QL5lFPTWx4MNWh7m rEzjvoRP+ZNOKL5ozdf4n+je1oFvIIMrBmOa7XhvbUnH4VoybX78ubC172mtSdK7 u1Psxk+RFLKHksBlBYevwa+t9xTN51a8lWIuk+W4qMQtpo/iLQPHX91/hjn7SRpI rIECr/aQgQlptdN30Qk3jMcUfArnEqrFCEM2sVPPUArUZr/wQkmKG/OPJsRosgBm wYbGhm2KxQQvJyRBkpcmZPzYsUhYXYirtnY6Gik3jKmD7OscMaZ95KJEu9lzAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUz53yUv9D645nw/Ls6Gc9q/fcp3owHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQwNDAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgQq CVTGwAMGBCoJVMbgMA0GCSqGSIb3DQEBCwUAA4IBAQAtmoCsXbwkRP5UYW2TsAQ4 ZUcpQWPRNUn+01uu6lUVvAlPYWgJNnU6axzUKOfA2i+b9rlvL/Lsfx3WJ59cFFB9 lomdeF07MdPH27wvdtLvEUDIvX7ZYMInkT4RKPDc3sKKU/9W+ciB/mxtU/KEXYDJ InouM3AA8ay9HFwR+u1+e5w7SBy7AajoEPvirIJPGFcuyder381emfaDasA1842V cbmxy+TN/DOGz+98DUjwSXhPoVx2IzponxLSXKgE4CydgAGEXAqQCTBmXHronljF mP9KnznFtWIGYz97kLmzgSeu6TETZd740RSlJjDJTGa6ElAyiKq9PL44Q+qqnP/F -----END CERTIFICATE-----Generated at Sat Jul 5 01:57:40 2025 by rpki-client