$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215502.roa File: AS215502.roa (raw, json) Hash identifier: SkC5KqFa/MuLnPZLq2Yu+GcnoxlsOT9ntXJCR9ie86M= Subject key identifier: 14:EA:18:6E:5B:C2:5C:9C:12:DA:5C:6C:DD:21:B6:07:E3:14:80:C9 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 441824049ED01A3C0D0B1FEFB27ACF457EBBBCC7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215502.roa Signing time: Wed 22 Oct 2025 11:15:54 +0000 ROA not before: Wed 22 Oct 2025 11:10:54 +0000 ROA not after: Wed 21 Oct 2026 11:15:54 +0000 asID: 215502 IP address blocks: 2a0f:6284:4c00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 19:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:18:24:04:9e:d0:1a:3c:0d:0b:1f:ef:b2:7a:cf:45:7e:bb:bc:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 22 11:10:54 2025 GMT Not After : Oct 21 11:15:54 2026 GMT Subject: CN=14EA186E5BC25C9C12DA5C6CDD21B607E31480C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ee:d1:96:2f:22:93:85:64:94:b3:84:31:a1: 9d:a5:16:d6:4d:c1:db:84:69:63:4b:a0:f9:78:00: 15:c3:52:2e:9f:0c:66:1b:58:3c:ca:23:51:bc:7d: 04:dd:67:80:a6:50:95:c5:f3:69:63:a9:e4:69:ec: 1e:10:24:91:6d:f7:a1:72:a4:19:85:1f:cd:6f:c5: cf:e5:f2:8c:e7:fa:ac:e9:7e:72:c3:ad:4e:d7:91: 54:f3:4c:78:80:81:bd:e1:d0:79:3d:5e:32:15:06: b5:66:be:f9:c5:b7:ef:f3:a2:d5:54:97:7c:5c:88: 6a:d8:64:26:5c:4b:2d:97:ae:36:95:3b:87:97:c4: 3c:6b:3c:39:a7:73:e6:53:2d:10:de:fc:3f:4b:30: ad:6d:78:eb:24:22:81:de:79:d9:b7:4b:09:1c:be: 10:10:2a:0f:c1:11:24:95:aa:b2:ba:ef:f3:15:33: c8:7f:76:e4:3c:d7:84:85:f3:af:98:19:6b:bf:7a: 5b:2e:28:f8:98:db:65:5b:e1:bc:c8:04:54:3b:db: 06:83:86:c5:1f:ee:7a:24:9f:cd:eb:d4:65:e8:0e: 36:fb:d5:d3:c6:98:c3:7e:b7:65:83:ae:ea:2d:0c: a1:18:f1:47:10:83:c9:19:9b:d5:99:e7:9b:2d:38: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EA:18:6E:5B:C2:5C:9C:12:DA:5C:6C:DD:21:B6:07:E3:14:80:C9 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215502.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4c00::/40 Signature Algorithm: sha256WithRSAEncryption 77:d6:5f:9b:b3:4d:14:5c:45:85:4e:8f:08:0c:5b:5d:de:df: 87:9e:44:d0:04:ab:4b:d0:ca:ff:c3:87:c5:37:80:be:f1:73: 42:7b:a3:fd:50:39:14:9d:4e:3a:4f:ef:03:49:c3:f7:26:95: 75:ab:3b:0d:55:4b:64:40:43:dd:ca:ce:54:b0:3b:c2:c6:73: 27:d0:de:bc:34:38:c3:73:33:ea:61:60:ac:7a:9c:b5:9f:a5: 1a:8b:b8:7c:4e:cc:88:30:6a:ae:8a:83:5f:8d:51:a9:5d:81: e3:8a:a7:15:3a:14:51:db:00:10:f8:09:e5:0a:1a:23:6a:50: db:f3:0c:50:39:51:d6:9e:95:dc:ae:21:40:da:7a:39:47:1b: 7c:fe:65:7a:ce:33:2b:0a:d2:94:85:b9:00:f0:a6:b8:2a:25: c4:fb:48:77:e3:06:cd:49:42:59:83:c5:24:a5:6f:71:04:bf: 09:30:2b:c5:ec:ab:8f:ce:ac:3d:0d:9d:42:73:a1:b0:21:73: dc:42:58:3e:bd:43:06:08:4c:4f:05:a2:db:92:0a:09:aa:60: d7:ff:3b:e1:99:c7:52:71:61:4d:34:e7:68:21:e8:5d:de:a7: b1:0a:a0:05:a2:63:b7:ea:21:44:77:2f:db:ae:70:a6:1a:a5: 46:6a:5b:06 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIURBgkBJ7QGjwNCx/vsnrPRX67vMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEwMjIxMTEwNTRaFw0yNjEwMjExMTE1NTRaMDMxMTAvBgNV BAMTKDE0RUExODZFNUJDMjVDOUMxMkRBNUM2Q0REMjFCNjA3RTMxNDgwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7tGWLyKThWSUs4QxoZ2lFtZN wduEaWNLoPl4ABXDUi6fDGYbWDzKI1G8fQTdZ4CmUJXF82ljqeRp7B4QJJFt96Fy pBmFH81vxc/l8ozn+qzpfnLDrU7XkVTzTHiAgb3h0Hk9XjIVBrVmvvnFt+/zotVU l3xciGrYZCZcSy2XrjaVO4eXxDxrPDmnc+ZTLRDe/D9LMK1teOskIoHeedm3Swkc vhAQKg/BESSVqrK67/MVM8h/duQ814SF86+YGWu/elsuKPiY22Vb4bzIBFQ72waD hsUf7nokn83r1GXoDjb71dPGmMN+t2WDruotDKEY8UcQg8kZm9WZ55stOEz7AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUFOoYblvCXJwS2lxs3SG2B+MUgMkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTU1MDIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KETDANBgkqhkiG9w0BAQsFAAOCAQEAd9Zfm7NNFFxFhU6PCAxbXd7fh55E0ASr S9DK/8OHxTeAvvFzQnuj/VA5FJ1OOk/vA0nD9yaVdas7DVVLZEBD3crOVLA7wsZz J9DevDQ4w3Mz6mFgrHqctZ+lGou4fE7MiDBqroqDX41RqV2B44qnFToUUdsAEPgJ 5QoaI2pQ2/MMUDlR1p6V3K4hQNp6OUcbfP5les4zKwrSlIW5APCmuColxPtId+MG zUlCWYPFJKVvcQS/CTArxeyrj86sPQ2dQnOhsCFz3EJYPr1DBghMTwWi25IKCapg 1/874ZnHUnFhTTTnaCHoXd6nsQqgBaJjt+ohRHcv265wphqlRmpbBg== -----END CERTIFICATE-----Generated at Tue Oct 28 04:49:27 2025 by rpki-client