$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214768.roa File: AS214768.roa (raw, json) Hash identifier: g+cSSrkfHie0bUDqJ/Oh+ObIfV4RpFk7KxDTxaBYk3Q= Subject key identifier: 59:EE:BF:E8:E2:93:AD:43:37:48:46:5D:B6:12:9C:2E:B8:E8:D7:FB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0A516127B8FBCC03B1D11F2E06FB46F745250106 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214768.roa Signing time: Tue 09 Sep 2025 12:03:12 +0000 ROA not before: Tue 09 Sep 2025 11:58:12 +0000 ROA not after: Tue 08 Sep 2026 12:03:12 +0000 asID: 214768 IP address blocks: 2a0a:6044:7b00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 12:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:51:61:27:b8:fb:cc:03:b1:d1:1f:2e:06:fb:46:f7:45:25:01:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 9 11:58:12 2025 GMT Not After : Sep 8 12:03:12 2026 GMT Subject: CN=59EEBFE8E293AD433748465DB6129C2EB8E8D7FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:8f:ff:72:74:68:c8:de:24:4a:1b:7f:6d: e6:0e:22:6d:ae:93:3d:07:c3:aa:68:16:69:7b:29: 14:c7:a6:66:7a:83:b9:ad:86:e4:0a:68:3b:c4:51: 83:24:c0:5e:81:17:f3:f1:4e:31:e1:7b:44:86:d9: 60:dd:c2:a1:78:15:81:b9:a4:9e:21:14:07:9d:d9: 2c:bd:9a:1e:a8:2f:54:3c:02:71:7c:f4:3c:bf:b0: 1d:d3:06:03:1a:60:a2:91:fe:61:28:2b:21:88:d4: 77:76:45:b4:98:f7:a0:ca:f2:4d:c9:06:9b:a0:46: ac:4a:97:a6:f5:2a:75:64:96:79:9c:e5:49:e9:a1: ce:41:e1:4b:dd:48:52:81:a0:74:72:88:fb:dc:18: 68:38:ef:1f:ca:d9:2f:28:fb:03:95:83:07:9f:79: 2d:33:ee:bc:5d:a9:a6:64:65:e3:48:69:ea:29:71: 31:8e:18:9b:fa:b3:0b:8b:a8:f6:43:7b:83:b2:fb: c5:43:a2:42:c6:0f:62:59:63:48:37:3f:35:9b:59: 51:be:05:68:75:2d:61:36:9d:67:d4:b8:dc:98:a7: 31:50:54:5d:de:03:6a:f8:c9:83:8a:94:37:f8:fa: aa:8b:d5:73:54:a5:a9:0f:91:50:51:3c:49:88:15: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EE:BF:E8:E2:93:AD:43:37:48:46:5D:B6:12:9C:2E:B8:E8:D7:FB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214768.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7b00::/40 Signature Algorithm: sha256WithRSAEncryption 6c:98:e5:f5:3f:ce:7e:a0:7b:0f:9b:24:2c:a6:d8:7b:92:c8: fd:b1:98:10:0b:6f:8e:a6:78:1f:e3:26:ad:c7:2c:de:ab:bc: 0e:32:8a:f0:a6:d2:69:1c:90:d9:db:61:5d:30:16:c3:49:8b: 2f:ee:1b:c3:23:f9:d2:0f:cf:66:43:4f:96:c6:cb:1d:10:60: 92:f1:7e:17:08:4a:ff:4b:bb:9e:f1:83:04:8c:58:90:4d:0d: da:61:09:f6:8c:9b:a1:e6:94:8f:e2:4b:bf:8b:40:e0:23:90: b6:a1:a1:43:59:1c:60:64:4a:85:2b:29:a7:36:a8:35:e9:47: e3:6b:1c:b9:f2:6e:1c:10:94:02:ea:d8:48:54:e8:54:eb:ed: 6e:ac:5b:a1:35:c5:fc:e8:ae:21:15:29:fc:e6:d7:0c:c0:05: bf:8d:14:b8:de:54:71:ee:8e:c1:63:4f:5c:b3:ff:d4:c2:5d: b4:74:c7:68:70:b2:49:b0:3d:0f:e5:db:12:ff:67:11:bc:1b: 06:6d:e9:19:b6:ba:18:aa:9c:0c:2d:a8:f7:cd:c9:15:ae:68: 43:69:09:9e:18:c9:9a:af:94:18:0e:84:5b:c5:9b:30:91:b0: f6:f6:81:b3:8b:23:e9:96:7d:d4:41:ec:a2:23:44:44:ea:72: e7:32:a4:2e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUClFhJ7j7zAOx0R8uBvtG90UlAQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA5MDkxMTU4MTJaFw0yNjA5MDgxMjAzMTJaMDMxMTAvBgNV BAMTKDU5RUVCRkU4RTI5M0FENDMzNzQ4NDY1REI2MTI5QzJFQjhFOEQ3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC244//cnRoyN4kSht/beYOIm2u kz0Hw6poFml7KRTHpmZ6g7mthuQKaDvEUYMkwF6BF/PxTjHhe0SG2WDdwqF4FYG5 pJ4hFAed2Sy9mh6oL1Q8AnF89Dy/sB3TBgMaYKKR/mEoKyGI1Hd2RbSY96DK8k3J BpugRqxKl6b1KnVklnmc5Unpoc5B4UvdSFKBoHRyiPvcGGg47x/K2S8o+wOVgwef eS0z7rxdqaZkZeNIaeopcTGOGJv6swuLqPZDe4Oy+8VDokLGD2JZY0g3PzWbWVG+ BWh1LWE2nWfUuNyYpzFQVF3eA2r4yYOKlDf4+qqL1XNUpakPkVBRPEmIFaSRAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUWe6/6OKTrUM3SEZdthKcLrjo1/swHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ3Njgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEezANBgkqhkiG9w0BAQsFAAOCAQEAbJjl9T/OfqB7D5skLKbYe5LI/bGYEAtv jqZ4H+Mmrccs3qu8DjKK8KbSaRyQ2dthXTAWw0mLL+4bwyP50g/PZkNPlsbLHRBg kvF+FwhK/0u7nvGDBIxYkE0N2mEJ9oyboeaUj+JLv4tA4COQtqGhQ1kcYGRKhSsp pzaoNelH42scufJuHBCUAurYSFToVOvtbqxboTXF/OiuIRUp/ObXDMAFv40UuN5U ce6OwWNPXLP/1MJdtHTHaHCySbA9D+XbEv9nEbwbBm3pGba6GKqcDC2o983JFa5o Q2kJnhjJmq+UGA6EW8WbMJGw9vaBs4sj6ZZ91EHsoiNEROpy5zKkLg== -----END CERTIFICATE-----Generated at Mon Sep 15 19:48:26 2025 by rpki-client