$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS215263.roa File: AS215263.roa (raw, json) Hash identifier: j12C3zE0PsRZeHwR4MI55dYPdDISf5G+S/TeB6u54y4= Subject key identifier: AC:57:0F:89:5C:9C:E1:7B:75:CB:E3:84:B3:91:2A:C5:41:A1:4F:5F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 32A6E721C0284E50DB8F52E7C4338BFA4CCD81E3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215263.roa Signing time: Fri 14 Aug 2026 12:52:01 +0000 ROA not before: Fri 14 Aug 2026 12:47:01 +0000 ROA not after: Fri 13 Aug 2027 12:52:01 +0000 asID: 215263 IP address blocks: 2a0f:6284:4a00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a6:e7:21:c0:28:4e:50:db:8f:52:e7:c4:33:8b:fa:4c:cd:81:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 14 12:47:01 2026 GMT Not After : Aug 13 12:52:01 2027 GMT Subject: CN=AC570F895C9CE17B75CBE384B3912AC541A14F5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:4e:4f:c6:dc:a7:d2:60:60:f2:dd:d3:ae: f3:6c:63:b4:ae:b3:86:df:b6:83:26:5d:fa:b1:a7: e6:c3:7a:2e:fd:ea:4d:cf:73:60:a7:79:bf:bc:0a: c8:0c:d6:d7:cb:9b:e2:c1:19:4d:60:69:ea:87:f7: 66:e3:39:71:d5:4e:99:1a:a9:66:3b:8f:35:07:5e: 74:2b:f1:be:77:a1:55:d6:d3:91:49:dc:bc:d9:a6: 4f:7b:cd:7e:cc:3f:6d:8b:18:c0:44:ac:66:2e:73: b8:61:dc:48:66:f5:ac:19:4a:bf:c5:a9:70:18:7f: d9:f4:b1:6b:c0:3d:89:bc:96:c7:84:af:c2:3b:de: 6e:e5:89:44:86:99:ff:28:64:da:4b:4d:4a:77:bc: f7:34:d8:e9:5d:87:5d:e1:29:fa:79:d1:04:6c:2e: 57:be:45:05:2c:cf:d5:5a:8b:20:14:6c:98:14:50: a0:9b:a4:7c:da:24:46:6b:3c:2f:e4:ee:98:23:7e: cd:fb:c2:f6:64:b2:e0:b7:07:29:db:43:96:28:2e: 80:11:07:89:67:f0:3f:52:4a:e7:75:11:1c:57:93: 9a:4b:3a:e4:ec:67:36:88:85:8a:89:d6:17:ca:11: 1f:64:e1:48:6a:5b:9e:c3:79:fa:53:7c:3b:83:4b: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:57:0F:89:5C:9C:E1:7B:75:CB:E3:84:B3:91:2A:C5:41:A1:4F:5F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215263.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4a00::/40 Signature Algorithm: sha256WithRSAEncryption 4a:ba:b2:16:8d:fd:8e:f0:49:79:62:c1:2a:f9:b6:1f:7a:b3: 45:f1:53:7e:64:b7:4c:e6:5c:49:e1:12:22:42:30:b3:b4:b4: ca:ce:c1:ce:23:d4:01:6c:7e:d3:31:ce:a5:88:19:9d:f5:44: 18:51:db:86:aa:61:53:15:e7:2a:96:68:86:89:3d:65:1b:3a: b2:bd:d7:5a:71:6c:1b:1c:eb:0a:be:10:e8:35:d7:ce:f5:82: fd:87:6c:c4:66:0d:16:ba:13:2d:43:0a:49:a2:d6:0d:98:21: 30:38:6c:86:07:a0:17:03:38:6d:a9:ec:e7:18:0f:bd:24:24: 14:f4:6d:a3:71:5d:6a:8e:fe:c5:23:84:69:be:da:16:b3:07: ec:e5:84:aa:d5:c0:f0:53:21:62:69:2d:d4:05:5f:ba:ce:fc: ec:ee:f5:6e:4d:e3:cf:89:04:41:6b:e5:2e:23:81:67:01:40: e0:ee:5c:c9:a3:15:36:e3:4c:91:3c:e1:1c:ff:5c:bb:02:86: 44:f0:c0:72:87:f3:e4:da:75:eb:c4:a7:0e:5c:d6:84:59:52: d8:0b:d0:e5:15:8b:6c:d2:ed:6f:d6:4f:e5:b8:45:85:8b:08: 95:a1:c1:ed:26:ce:25:19:96:1c:31:65:fe:50:7b:f4:16:13: 61:9a:13:2b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUMqbnIcAoTlDbj1LnxDOL+kzNgeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTQxMjQ3MDFaFw0yNzA4MTMxMjUyMDFaMDMxMTAvBgNV BAMTKEFDNTcwRjg5NUM5Q0UxN0I3NUNCRTM4NEIzOTEyQUM1NDFBMTRGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncE5Pxtyn0mBg8t3TrvNsY7Su s4bftoMmXfqxp+bDei796k3Pc2Cneb+8CsgM1tfLm+LBGU1gaeqH92bjOXHVTpka qWY7jzUHXnQr8b53oVXW05FJ3LzZpk97zX7MP22LGMBErGYuc7hh3Ehm9awZSr/F qXAYf9n0sWvAPYm8lseEr8I73m7liUSGmf8oZNpLTUp3vPc02Oldh13hKfp50QRs Lle+RQUsz9VaiyAUbJgUUKCbpHzaJEZrPC/k7pgjfs37wvZksuC3BynbQ5YoLoAR B4ln8D9SSud1ERxXk5pLOuTsZzaIhYqJ1hfKER9k4UhqW57DefpTfDuDS9uDAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUrFcPiVyc4Xt1y+OEs5EqxUGhT18wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUyNjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KESjANBgkqhkiG9w0BAQsFAAOCAQEASrqyFo39jvBJeWLBKvm2H3qzRfFTfmS3 TOZcSeESIkIws7S0ys7BziPUAWx+0zHOpYgZnfVEGFHbhqphUxXnKpZohok9ZRs6 sr3XWnFsGxzrCr4Q6DXXzvWC/YdsxGYNFroTLUMKSaLWDZghMDhshgegFwM4bans 5xgPvSQkFPRto3Fdao7+xSOEab7aFrMH7OWEqtXA8FMhYmkt1AVfus787O71bk3j z4kEQWvlLiOBZwFA4O5cyaMVNuNMkTzhHP9cuwKGRPDAcofz5Np168SnDlzWhFlS 2AvQ5RWLbNLtb9ZP5bhFhYsIlaHB7SbOJRmWHDFl/lB79BYTYZoTKw== -----END CERTIFICATE-----Generated at Wed Aug 26 07:55:18 2026 by rpki-client