$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS216006.roa File: AS216006.roa (raw, json) Hash identifier: 4gFMzCRewEkykp0NfjFEk7svnJp8Qa4YpNpzmbAjDqo= Subject key identifier: 6D:C9:DB:61:09:A0:51:5C:B6:E4:70:95:DD:68:00:18:8B:20:02:42 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 28DA5F4402534A29997B499E3523BDE2033574EA Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS216006.roa Signing time: Sun 28 Jun 2026 18:57:40 +0000 ROA not before: Sun 28 Jun 2026 18:52:40 +0000 ROA not after: Sun 27 Jun 2027 18:57:40 +0000 asID: 216006 IP address blocks: 2a0f:6284:500::/44 maxlen: 44 2a0f:6284:500::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:da:5f:44:02:53:4a:29:99:7b:49:9e:35:23:bd:e2:03:35:74:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:52:40 2026 GMT Not After : Jun 27 18:57:40 2027 GMT Subject: CN=6DC9DB6109A0515CB6E47095DD6800188B200242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:1b:94:28:ea:9b:18:a5:6b:62:c0:85:2a: 73:10:d5:6b:15:31:f2:91:29:fd:05:be:18:1d:d4: b2:c3:19:37:32:43:5d:6f:cf:29:07:e8:82:f9:3d: 0b:2d:2a:49:95:2b:9c:de:21:74:10:f4:33:42:af: a6:89:98:a4:0b:78:ff:ec:4a:4f:ee:46:0a:16:a5: 5b:e7:16:1a:20:eb:09:17:b0:8f:d0:ec:33:a4:42: 8d:c2:f1:19:15:ee:e4:b6:8a:d1:f0:51:23:a8:e0: 1b:4c:67:7f:e1:04:7f:2b:0b:43:66:fb:ee:3c:98: ac:31:1b:cb:1c:83:e8:60:2a:bd:19:03:07:f0:60: 57:5a:7d:4e:88:db:0b:63:05:55:fd:a7:d6:5b:bd: 6a:0c:6e:e9:e4:22:98:52:84:9c:52:db:71:b7:d0: aa:20:41:00:25:3e:1a:d2:dd:6d:63:66:ef:e3:57: e5:3b:8a:bd:8c:5b:96:5f:ba:c9:f0:d5:b4:ee:06: 12:eb:b7:99:98:fd:f2:5b:69:e6:7b:ae:f6:60:cd: 02:26:46:de:68:e0:9b:15:80:ee:0b:c5:9e:94:0b: dd:f6:31:27:24:8d:71:dc:10:27:5e:93:af:85:32: 55:02:b8:08:51:6d:e6:6b:8a:73:88:87:8a:1f:6e: b3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C9:DB:61:09:A0:51:5C:B6:E4:70:95:DD:68:00:18:8B:20:02:42 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS216006.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:500::/44 Signature Algorithm: sha256WithRSAEncryption 6d:a7:31:16:aa:db:ba:ed:93:03:c3:ef:b3:9a:ae:bd:09:53: 6a:89:3f:e8:bd:7d:81:7c:7b:b5:7b:e1:ef:49:b5:72:31:1e: a8:e3:5d:e3:2d:ed:3a:25:e4:db:5e:40:26:0f:28:64:ee:53: ea:e2:d4:f7:d5:d3:aa:61:58:1d:a2:6b:a5:30:87:00:e8:0f: f4:f3:23:46:c7:89:aa:1c:52:d3:83:b2:90:b4:4e:fc:9c:ef: be:4e:f7:6d:0f:1e:98:ba:3f:49:83:a2:df:af:f8:9d:04:af: fe:a1:10:07:0a:b2:4c:3f:f6:bf:0a:2d:83:fe:3c:ea:ee:8f: 82:ea:a9:9f:77:22:a7:c8:17:d7:3b:2d:61:7b:e6:45:8f:6d: 6e:56:10:b5:ed:b5:54:25:28:e2:a6:5d:7c:d3:7c:f0:7d:a9: 5f:18:03:89:f3:15:c6:a9:6d:7c:47:dd:ba:b1:b4:4e:3f:fd: 2f:57:98:4f:04:f5:f9:8c:6b:f8:84:1d:b4:49:c7:c9:ef:97: 49:67:7a:39:cb:39:d9:f9:d4:b5:e2:15:d2:5e:29:95:3f:0e: 81:30:31:da:71:0a:4a:78:7c:9f:4c:e8:71:b4:51:18:fa:d4: bd:51:e9:31:0f:3d:df:a8:6a:3a:90:23:06:71:70:09:09:c1: 96:29:61:02 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUKNpfRAJTSimZe0meNSO94gM1dOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUyNDBaFw0yNzA2MjcxODU3NDBaMDMxMTAvBgNV BAMTKDZEQzlEQjYxMDlBMDUxNUNCNkU0NzA5NURENjgwMDE4OEIyMDAyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VBuUKOqbGKVrYsCFKnMQ1WsV MfKRKf0Fvhgd1LLDGTcyQ11vzykH6IL5PQstKkmVK5zeIXQQ9DNCr6aJmKQLeP/s Sk/uRgoWpVvnFhog6wkXsI/Q7DOkQo3C8RkV7uS2itHwUSOo4BtMZ3/hBH8rC0Nm ++48mKwxG8scg+hgKr0ZAwfwYFdafU6I2wtjBVX9p9ZbvWoMbunkIphShJxS23G3 0KogQQAlPhrS3W1jZu/jV+U7ir2MW5Zfusnw1bTuBhLrt5mY/fJbaeZ7rvZgzQIm Rt5o4JsVgO4LxZ6UC932MSckjXHcECdek6+FMlUCuAhRbeZrinOIh4ofbrNXAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUbcnbYQmgUVy25HCV3WgAGIsgAkIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTYwMDYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KEBQAwDQYJKoZIhvcNAQELBQADggEBAG2nMRaq27rtkwPD77Oarr0JU2qJP+i9 fYF8e7V74e9JtXIxHqjjXeMt7Tol5NteQCYPKGTuU+ri1PfV06phWB2ia6UwhwDo D/TzI0bHiaocUtODspC0Tvyc775O920PHpi6P0mDot+v+J0Er/6hEAcKskw/9r8K LYP+POruj4LqqZ93IqfIF9c7LWF75kWPbW5WELXttVQlKOKmXXzTfPB9qV8YA4nz FcapbXxH3bqxtE4//S9XmE8E9fmMa/iEHbRJx8nvl0lnejnLOdn51LXiFdJeKZU/ DoEwMdpxCkp4fJ9M6HG0URj61L1R6TEPPd+oajqQIwZxcAkJwZYpYQI= -----END CERTIFICATE-----Generated at Fri Jul 10 16:14:15 2026 by rpki-client