$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214040.roa File: AS214040.roa (raw, json) Hash identifier: qsBqdPsbxmOvJM/hnq6foPXI6PSgeIuNZjwISD3gSlk= Subject key identifier: E4:8A:66:52:58:61:E9:76:E0:BD:59:7B:31:91:77:72:2D:4D:E8:2B Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 52A0F2ED8199BF764712DBB1E52037CAD6AEF377 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa Signing time: Tue 02 Sep 2025 08:06:58 +0000 ROA not before: Tue 02 Sep 2025 08:01:58 +0000 ROA not after: Tue 01 Sep 2026 08:06:58 +0000 asID: 214040 IP address blocks: 2a06:1281:8000::/36 maxlen: 36 2a09:54c6:3000::/36 maxlen: 36 2a09:54c6:6000::/36 maxlen: 36 2a09:54c6:7000::/36 maxlen: 36 2a09:54c6:b000::/36 maxlen: 36 2a09:54c6:c000::/36 maxlen: 44 2a09:54c6:e000::/36 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 03:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a0:f2:ed:81:99:bf:76:47:12:db:b1:e5:20:37:ca:d6:ae:f3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 2 08:01:58 2025 GMT Not After : Sep 1 08:06:58 2026 GMT Subject: CN=E48A66525861E976E0BD597B319177722D4DE82B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:62:fa:72:39:8e:89:06:6b:f1:cb:08:c7: 8d:31:19:92:33:76:99:a6:aa:aa:b3:ef:82:33:15: df:1a:17:1e:f7:66:a8:c2:b6:48:35:83:23:de:c7: 53:cc:a6:52:d4:ce:5e:7f:82:78:55:61:e2:5b:0b: cc:f3:f8:b4:b7:2b:84:b9:73:52:c9:52:71:e2:98: a5:d1:86:81:9c:1e:97:36:d4:32:67:36:55:b0:9f: 59:72:ac:1f:5a:fd:84:e4:3b:33:e7:42:7b:97:df: f9:ed:31:61:f9:bb:44:d9:10:c2:61:87:db:e3:dc: b1:c0:3e:d8:97:f3:2d:48:0d:b4:77:e3:10:e2:72: e4:92:28:7b:54:41:87:66:35:f8:35:98:08:65:69: 1d:11:ea:91:18:95:c1:d3:42:f4:ea:1c:c4:f4:02: 81:dc:86:af:d1:a3:18:62:3c:44:ac:90:9c:4f:16: 1c:df:b1:fe:b2:45:1a:fb:78:e6:d6:dc:8c:71:74: 37:fc:10:2a:d3:b2:bc:8c:e4:23:df:f6:29:1c:25: a3:74:ae:94:1f:d7:00:59:2b:d7:c0:8e:ae:a9:ca: e4:ab:a0:bd:6c:ef:14:ec:60:78:3d:ce:d5:d1:7c: 32:11:e7:e5:f0:2e:69:e2:81:12:01:2a:2a:da:81: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8A:66:52:58:61:E9:76:E0:BD:59:7B:31:91:77:72:2D:4D:E8:2B X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:8000::/36 2a09:54c6:3000::/36 2a09:54c6:6000::/35 2a09:54c6:b000::-2a09:54c6:cfff:ffff:ffff:ffff:ffff:ffff 2a09:54c6:e000::/36 Signature Algorithm: sha256WithRSAEncryption 36:63:e3:ce:4f:a9:bc:79:1f:ee:59:eb:06:1c:02:e5:40:6e: a9:a3:e0:d5:71:d6:30:7c:23:0a:90:ca:30:28:02:b3:7b:e8: 28:93:48:d2:05:10:4b:2a:ef:af:89:cd:45:c9:0e:7d:fa:70: 11:fa:a9:ab:54:e5:cd:b1:2f:2c:c4:de:29:1c:fb:15:25:7f: c6:b7:9f:7b:39:0c:0b:4c:ab:d8:54:66:fa:f5:0c:59:2a:c2: 86:04:36:ac:d9:e6:61:5e:4a:19:5c:04:dd:5b:a3:79:d9:85: 37:f6:55:fc:ae:ee:11:e1:be:d7:f1:ff:a1:71:1f:f8:7d:37: 39:fb:a3:1b:dc:e6:98:3b:41:74:c0:de:59:d2:0c:d6:6e:f6: 77:85:f2:0e:4a:52:b6:b7:1b:18:83:6e:8c:24:fd:9f:74:43: a8:06:aa:23:11:ea:c4:8f:7b:09:c9:35:c5:a8:8f:30:a2:c6: 86:c8:f5:bf:7a:df:cc:d3:4d:f7:c5:36:2e:18:85:82:95:9e: 1b:b4:a5:ab:17:72:d9:24:a7:12:01:74:e3:f2:e9:99:c5:54: 78:e4:a6:aa:15:04:5b:dd:d9:16:39:57:7c:4b:22:51:ad:2f: e6:89:ff:23:11:24:8c:69:45:eb:d2:1c:a3:e9:cd:4c:9d:33: 3b:4f:53:98 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUUqDy7YGZv3ZHEtux5SA3ytau83cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA5MDIwODAxNThaFw0yNjA5MDEwODA2NThaMDMxMTAvBgNV BAMTKEU0OEE2NjUyNTg2MUU5NzZFMEJENTk3QjMxOTE3NzcyMkQ0REU4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2mL6cjmOiQZr8csIx40xGZIz dpmmqqqz74IzFd8aFx73ZqjCtkg1gyPex1PMplLUzl5/gnhVYeJbC8zz+LS3K4S5 c1LJUnHimKXRhoGcHpc21DJnNlWwn1lyrB9a/YTkOzPnQnuX3/ntMWH5u0TZEMJh h9vj3LHAPtiX8y1IDbR34xDicuSSKHtUQYdmNfg1mAhlaR0R6pEYlcHTQvTqHMT0 AoHchq/RoxhiPESskJxPFhzfsf6yRRr7eObW3IxxdDf8ECrTsryM5CPf9ikcJaN0 rpQf1wBZK9fAjq6pyuSroL1s7xTsYHg9ztXRfDIR5+XwLmnigRIBKiragbspAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQU5IpmUlhh6XbgvVl7MZF3ci1N6CswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQwNDAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUHAQcBAf8EPDA6MDgEAgACMDIDBgQq BhKBgAMGBCoJVMYwAwYFKglUxmAwEAMGBCoJVMawAwYEKglUxsADBgQqCVTG4DAN BgkqhkiG9w0BAQsFAAOCAQEANmPjzk+pvHkf7lnrBhwC5UBuqaPg1XHWMHwjCpDK MCgCs3voKJNI0gUQSyrvr4nNRckOffpwEfqpq1TlzbEvLMTeKRz7FSV/xrefezkM C0yr2FRm+vUMWSrChgQ2rNnmYV5KGVwE3VujedmFN/ZV/K7uEeG+1/H/oXEf+H03 OfujG9zmmDtBdMDeWdIM1m72d4XyDkpStrcbGINujCT9n3RDqAaqIxHqxI97Cck1 xaiPMKLGhsj1v3rfzNNN98U2LhiFgpWeG7Slqxdy2SSnEgF04/LpmcVUeOSmqhUE W93ZFjlXfEsiUa0v5on/IxEkjGlF69Ico+nNTJ0zO09TmA== -----END CERTIFICATE-----Generated at Wed Oct 8 17:36:23 2025 by rpki-client