$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214543.roa File: AS214543.roa (raw, json) Hash identifier: PtcHuUq/FxYlIBNgALzHhZpIUQvWZqxeH7z0+K0VZ60= Subject key identifier: 03:DC:1F:CD:61:DB:6B:2C:5A:F9:7A:A8:46:E6:27:B2:1E:A9:15:1C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 7B234C3ED21E285921F585A3ACC8B1A5EA062540 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214543.roa Signing time: Sun 28 Jun 2026 18:56:13 +0000 ROA not before: Sun 28 Jun 2026 18:51:13 +0000 ROA not after: Sun 27 Jun 2027 18:56:13 +0000 asID: 214543 IP address blocks: 2a0a:6044:bd00::/40 maxlen: 40 2a0a:6044:be00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:23:4c:3e:d2:1e:28:59:21:f5:85:a3:ac:c8:b1:a5:ea:06:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:51:13 2026 GMT Not After : Jun 27 18:56:13 2027 GMT Subject: CN=03DC1FCD61DB6B2C5AF97AA846E627B21EA9151C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:6d:6f:58:5a:9e:08:ac:64:7e:01:e9:89: a2:cd:f1:ff:e7:0a:bc:73:6c:21:a5:60:b8:3a:83: 2a:33:f9:2b:c4:3f:17:1b:b7:9a:44:90:8e:36:c9: cc:87:1d:9b:78:26:df:e8:50:94:5b:b5:d5:a7:5b: 83:31:de:33:3b:2d:7e:7f:da:fc:60:dd:bc:4b:ee: 7c:9d:22:c5:58:33:5d:c2:67:d3:b0:1b:71:39:72: d9:1a:5e:c0:2f:72:b2:d7:88:55:d1:2a:aa:a3:71: ff:cc:d4:89:ce:d7:92:bd:9b:e6:cc:8e:b9:99:59: 4c:b5:3a:bb:af:c6:83:9a:13:07:5f:cc:36:d1:af: bc:a0:71:59:1e:4c:b6:da:85:6c:1f:12:af:ae:b5: d4:33:27:b2:01:50:dc:fd:c7:40:26:c7:fe:98:46: 9c:49:83:56:5a:0f:ef:ef:2a:0f:b5:6a:36:09:7e: c1:8f:3c:a6:6f:ab:d7:cc:10:39:5f:39:fd:29:11: 4c:ca:0d:fd:c6:f2:8d:aa:b6:74:86:a0:99:6c:c1: 23:14:aa:32:99:12:b3:a8:cc:94:c9:e4:89:81:f3: d3:83:15:13:77:8c:09:69:d5:ed:65:16:30:f3:c5: b1:c0:a8:a3:90:86:e6:21:70:9d:62:7a:3a:94:08: f3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DC:1F:CD:61:DB:6B:2C:5A:F9:7A:A8:46:E6:27:B2:1E:A9:15:1C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214543.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:bd00::-2a0a:6044:beff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 33:42:d5:df:4c:a0:ad:fb:3f:31:0f:c4:37:8a:28:7f:fd:55: ee:ab:e9:46:89:35:a9:48:43:0c:f8:1b:0f:9f:3d:b3:9e:f7: fc:ae:26:32:db:05:c7:0c:d0:64:df:e6:cf:c7:02:f7:79:a0: e6:21:ed:00:06:39:b0:fa:be:c3:c5:00:b6:0f:e0:a4:b2:76: ab:09:7a:5c:ac:ae:79:59:a1:d4:7d:5b:c1:f3:72:0b:3f:bd: e5:eb:1d:cc:ab:2b:fb:26:7c:ce:e7:ed:33:75:b9:91:bb:e3: 9f:de:32:c4:30:20:96:79:83:9d:6d:5b:d6:3c:5f:58:c5:a8: 70:8c:b4:2f:f4:e2:48:6b:89:13:8f:12:b6:6b:7e:39:d7:42: 8c:ec:94:6c:ad:dc:ac:62:5b:5b:6c:45:8b:88:5a:65:d3:04: 11:7c:c5:b2:b6:d5:e8:d5:e2:07:2c:5b:3c:6b:20:4e:79:e5: d7:ff:c9:39:a9:4d:2b:d3:42:8f:d9:90:15:24:30:c6:9f:03: 7b:0c:46:bc:9d:94:1a:57:4f:2c:1d:97:ed:c9:05:64:77:64: 73:9c:b3:45:70:2f:62:23:b8:e3:d9:20:af:be:2b:7e:1d:2c: 5f:d4:a1:29:ba:89:e0:e9:0e:0c:b4:56:51:83:75:53:79:b7: 1b:e4:5c:f3 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUeyNMPtIeKFkh9YWjrMixpeoGJUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUxMTNaFw0yNzA2MjcxODU2MTNaMDMxMTAvBgNV BAMTKDAzREMxRkNENjFEQjZCMkM1QUY5N0FBODQ2RTYyN0IyMUVBOTE1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJ21vWFqeCKxkfgHpiaLN8f/n CrxzbCGlYLg6gyoz+SvEPxcbt5pEkI42ycyHHZt4Jt/oUJRbtdWnW4Mx3jM7LX5/ 2vxg3bxL7nydIsVYM13CZ9OwG3E5ctkaXsAvcrLXiFXRKqqjcf/M1InO15K9m+bM jrmZWUy1OruvxoOaEwdfzDbRr7ygcVkeTLbahWwfEq+utdQzJ7IBUNz9x0Amx/6Y RpxJg1ZaD+/vKg+1ajYJfsGPPKZvq9fMEDlfOf0pEUzKDf3G8o2qtnSGoJlswSMU qjKZErOozJTJ5ImB89ODFRN3jAlp1e1lFjDzxbHAqKOQhuYhcJ1iejqUCPOLAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUA9wfzWHbayxa+XqoRuYnsh6pFRwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ1NDMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIwEAMG ACoKYES9AwYAKgpgRL4wDQYJKoZIhvcNAQELBQADggEBADNC1d9MoK37PzEPxDeK KH/9Ve6r6UaJNalIQwz4Gw+fPbOe9/yuJjLbBccM0GTf5s/HAvd5oOYh7QAGObD6 vsPFALYP4KSydqsJelysrnlZodR9W8Hzcgs/veXrHcyrK/smfM7n7TN1uZG745/e MsQwIJZ5g51tW9Y8X1jFqHCMtC/04khriROPErZrfjnXQozslGyt3KxiW1tsRYuI WmXTBBF8xbK21ejV4gcsWzxrIE555df/yTmpTSvTQo/ZkBUkMMafA3sMRrydlBpX Tywdl+3JBWR3ZHOcs0VwL2IjuOPZIK++K34dLF/UoSm6ieDpDgy0VlGDdVN5txvk XPM= -----END CERTIFICATE-----Generated at Fri Jul 10 16:10:00 2026 by rpki-client