$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214079.roa File: AS214079.roa (raw, json) Hash identifier: jIeiDJ0h27d4o4YUuVZ/K4YF7qNe4YJn78c2D1Y9jBE= Subject key identifier: 88:63:1E:20:CE:BA:C8:82:FB:DC:81:5B:08:E3:7F:C1:2D:E7:A7:93 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: E63106B55423C4CD9DFB665AF69A366FAE8E07 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214079.roa Signing time: Thu 03 Jul 2025 16:39:05 +0000 ROA not before: Thu 03 Jul 2025 16:34:05 +0000 ROA not after: Thu 02 Jul 2026 16:39:05 +0000 asID: 214079 IP address blocks: 2a09:54c7:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e6:31:06:b5:54:23:c4:cd:9d:fb:66:5a:f6:9a:36:6f:ae:8e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 16:34:05 2025 GMT Not After : Jul 2 16:39:05 2026 GMT Subject: CN=88631E20CEBAC882FBDC815B08E37FC12DE7A793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f7:c5:36:e6:c5:55:52:42:1f:0e:a2:3e:49: 66:d1:ad:a8:c7:3f:ba:cd:ed:0a:dd:ac:2d:23:38: c0:f3:84:e6:b3:18:57:e5:87:0d:42:84:a1:d7:b9: c5:82:6e:e5:83:3c:b4:08:dc:4f:e7:0c:6d:87:76: ee:52:55:7f:85:33:93:60:55:ed:be:42:25:1b:3c: f5:ef:09:27:43:35:08:8d:69:6b:be:b9:f1:f5:6f: e5:34:3c:5d:7e:ec:7f:e2:98:3e:5d:8a:ad:77:04: ea:21:47:9a:27:d0:60:e4:ba:29:80:02:70:fb:f6: bb:c4:c2:5e:df:2f:8f:05:c6:f6:dc:5b:1e:bc:47: 11:1f:ae:ca:18:4f:4c:c0:0e:56:35:57:6e:0e:e2: 45:69:45:9f:db:b1:86:bc:e9:5a:ac:90:95:c8:29: ca:af:c4:54:99:f6:50:71:a9:44:d5:8b:85:c4:01: 4d:dd:c0:79:1c:9a:22:db:2c:58:e1:60:a2:db:df: 52:c6:e0:7b:71:27:b2:98:51:f3:52:eb:07:2b:78: c5:e4:3a:5e:84:0b:c6:54:2e:5b:c0:8d:dd:66:bb: b6:c3:95:32:6a:88:1c:dc:27:c2:fc:ff:c5:f1:c9: dc:05:58:ec:6d:c0:63:7e:f8:89:a8:08:88:69:53: 22:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:63:1E:20:CE:BA:C8:82:FB:DC:81:5B:08:E3:7F:C1:2D:E7:A7:93 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7:2000::/36 Signature Algorithm: sha256WithRSAEncryption 52:3f:7d:0e:5b:7e:36:cd:74:e9:98:bf:9f:d3:3f:3e:2b:29: 59:27:e6:65:8e:9b:f0:4f:e9:9b:4b:b7:ef:5d:23:d4:85:d5: ee:8a:48:aa:6c:07:59:c4:e9:39:62:77:cd:05:7a:e5:b2:8d: 6c:9a:56:fb:6c:dc:13:27:02:d0:e5:e4:3c:f6:8a:b2:15:11: df:b8:42:a7:fb:f3:67:2d:ea:97:37:1f:ca:3c:55:d5:2e:7e: a8:82:61:d1:f8:1f:cb:5e:be:cc:14:d3:5c:c1:f1:24:6b:f3: 8d:c7:ea:4c:48:d0:d6:7d:f3:ee:35:d0:da:54:8f:db:6f:31: 0f:6b:89:9b:74:12:b0:8c:86:b2:7f:9c:93:b8:e7:ed:38:50: d6:e4:d6:e0:2c:f8:c1:66:18:d4:b8:de:c6:f0:3f:a6:42:79: 55:93:40:7b:a2:fa:c3:26:95:1d:c7:4b:da:56:dc:9a:95:0e: 57:17:68:4c:e6:8a:e5:29:f7:ce:d8:54:84:dc:5f:c6:4e:83: 40:bf:c0:3b:c1:c1:03:3c:5d:af:66:6d:84:a0:7d:34:d5:f6: d9:1e:f3:46:25:c5:0a:2d:0b:30:fc:5d:18:95:a9:6b:8f:b6: 34:bd:a1:83:70:1b:e1:2f:1a:8b:e1:3c:b3:6d:da:0d:65:8d: a2:a3:6c:a6 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUAOYxBrVUI8TNnftmWvaaNm+ujgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNjM0MDVaFw0yNjA3MDIxNjM5MDVaMDMxMTAvBgNV BAMTKDg4NjMxRTIwQ0VCQUM4ODJGQkRDODE1QjA4RTM3RkMxMkRFN0E3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg98U25sVVUkIfDqI+SWbRrajH P7rN7QrdrC0jOMDzhOazGFflhw1ChKHXucWCbuWDPLQI3E/nDG2Hdu5SVX+FM5Ng Ve2+QiUbPPXvCSdDNQiNaWu+ufH1b+U0PF1+7H/imD5diq13BOohR5on0GDkuimA AnD79rvEwl7fL48FxvbcWx68RxEfrsoYT0zADlY1V24O4kVpRZ/bsYa86VqskJXI KcqvxFSZ9lBxqUTVi4XEAU3dwHkcmiLbLFjhYKLb31LG4HtxJ7KYUfNS6wcreMXk Ol6EC8ZULlvAjd1mu7bDlTJqiBzcJ8L8/8XxydwFWOxtwGN++ImoCIhpUyKTAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUiGMeIM66yIL73IFbCON/wS3np5MwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQwNzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq CVTHIDANBgkqhkiG9w0BAQsFAAOCAQEAUj99Dlt+Ns106Zi/n9M/PispWSfmZY6b 8E/pm0u3710j1IXV7opIqmwHWcTpOWJ3zQV65bKNbJpW+2zcEycC0OXkPPaKshUR 37hCp/vzZy3qlzcfyjxV1S5+qIJh0fgfy16+zBTTXMHxJGvzjcfqTEjQ1n3z7jXQ 2lSP228xD2uJm3QSsIyGsn+ck7jn7ThQ1uTW4Cz4wWYY1LjexvA/pkJ5VZNAe6L6 wyaVHcdL2lbcmpUOVxdoTOaK5Sn3zthUhNxfxk6DQL/AO8HBAzxdr2ZthKB9NNX2 2R7zRiXFCi0LMPxdGJWpa4+2NL2hg3Ab4S8ai+E8s23aDWWNoqNspg== -----END CERTIFICATE-----Generated at Sat Jul 5 02:16:40 2025 by rpki-client