$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS216112.roa File: AS216112.roa (raw, json) Hash identifier: F+xYlUD7BiQfBYRW3Dsq///zBu2AWfxzhsgixUjkGxw= Subject key identifier: 8B:63:54:F4:7E:D8:99:09:1F:C7:4E:64:B5:48:72:2C:19:A0:6C:3D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 12F531BDFA5CD6DED2245599BEAF11D5C58BC366 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS216112.roa Signing time: Sat 15 Aug 2026 18:52:02 +0000 ROA not before: Sat 15 Aug 2026 18:47:02 +0000 ROA not after: Sat 14 Aug 2027 18:52:02 +0000 asID: 216112 IP address blocks: 2a06:1281:20::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 13:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f5:31:bd:fa:5c:d6:de:d2:24:55:99:be:af:11:d5:c5:8b:c3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 15 18:47:02 2026 GMT Not After : Aug 14 18:52:02 2027 GMT Subject: CN=8B6354F47ED899091FC74E64B548722C19A06C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:33:da:67:c4:47:34:21:26:f0:1b:67:37: 8d:1e:4e:18:ad:73:db:d5:eb:3a:d4:e3:d0:5f:4e: 88:69:dc:2c:3e:e4:f9:c6:93:9d:61:bf:7f:81:04: fb:2f:f6:69:a9:af:ac:66:a2:85:f2:ea:d7:48:50: db:e1:9e:95:ae:cc:e3:eb:d3:6a:a3:b2:18:73:40: 00:4c:95:24:67:ba:12:e0:01:b9:9e:d9:47:1c:64: ed:a1:0b:83:da:c4:70:c5:82:05:1e:33:ff:52:16: 91:30:82:86:94:3c:29:87:2e:ea:f2:c4:aa:ae:83: 54:f2:09:f7:7e:da:40:2d:87:d6:9e:d7:34:2e:25: d5:d6:f7:45:e9:31:19:3e:41:d8:20:01:25:63:0f: 8a:5f:52:29:da:7d:d2:fb:87:20:6a:f3:57:d5:46: 84:9c:15:c7:96:04:fa:72:be:89:a0:8a:c5:24:90: e7:28:91:b4:74:b0:e5:9a:9c:65:0c:ea:8e:ee:2c: c8:bc:d5:af:93:ab:cf:e1:c8:4e:33:71:0f:6f:01: 27:40:40:06:1e:66:4f:61:c4:ea:c5:1a:cb:4f:7e: df:87:4a:13:0a:74:14:9e:80:7a:55:09:30:16:d8: 4d:39:67:02:f3:0a:83:e0:ac:b6:c7:63:86:06:3e: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:54:F4:7E:D8:99:09:1F:C7:4E:64:B5:48:72:2C:19:A0:6C:3D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS216112.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:20::/44 Signature Algorithm: sha256WithRSAEncryption 49:09:9f:df:6f:be:b8:e5:ea:30:0d:4b:d2:bd:ff:0a:30:d0: a6:df:15:6e:30:e5:d9:9d:e7:0b:81:d5:09:6b:5f:c0:cc:35: 34:da:c6:d9:41:5a:2e:4d:36:6e:b3:cd:b5:b1:9c:f3:25:22: 6e:c4:d6:ed:e2:ca:10:5b:14:9f:1b:96:f7:81:d1:a1:ad:84: f0:1a:30:c4:1f:10:e9:f6:f9:a4:62:13:eb:7e:e4:a4:07:ed: 44:d5:2e:42:62:18:52:1e:08:ce:4b:df:3c:b5:2c:d6:fc:45: 82:20:20:f1:f2:73:1b:e9:2e:f9:5b:88:f1:f2:b8:23:8b:c1: d4:26:78:11:26:ef:4b:ce:95:ec:d3:c2:70:78:33:0b:ef:30: 58:9b:87:c1:4c:ff:09:c6:0b:c0:05:b3:b4:43:a7:73:9f:d4: 58:6b:8f:cb:79:56:1e:32:45:94:1a:7b:ec:01:79:8f:c4:3e: 38:1c:d8:ee:8d:8a:26:83:50:16:49:95:52:e9:a3:15:4a:fc: 90:0e:9d:9f:a2:88:e7:3b:9d:86:76:82:70:c9:a4:63:6e:14: d5:f4:be:39:c1:24:e1:a1:a2:c3:e6:69:fe:09:5d:ac:d4:c4: a0:ae:83:8d:95:9a:65:74:8f:e4:10:52:fb:60:6a:ce:b3:a9: 04:a1:67:ab -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUEvUxvfpc1t7SJFWZvq8R1cWLw2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTUxODQ3MDJaFw0yNzA4MTQxODUyMDJaMDMxMTAvBgNV BAMTKDhCNjM1NEY0N0VEODk5MDkxRkM3NEU2NEI1NDg3MjJDMTlBMDZDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvjPaZ8RHNCEm8BtnN40eThit c9vV6zrU49BfTohp3Cw+5PnGk51hv3+BBPsv9mmpr6xmooXy6tdIUNvhnpWuzOPr 02qjshhzQABMlSRnuhLgAbme2UccZO2hC4PaxHDFggUeM/9SFpEwgoaUPCmHLury xKqug1TyCfd+2kAth9ae1zQuJdXW90XpMRk+QdggASVjD4pfUinafdL7hyBq81fV RoScFceWBPpyvomgisUkkOcokbR0sOWanGUM6o7uLMi81a+Tq8/hyE4zcQ9vASdA QAYeZk9hxOrFGstPft+HShMKdBSegHpVCTAW2E05ZwLzCoPgrLbHY4YGPufTAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUi2NU9H7YmQkfx05ktUhyLBmgbD0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTYxMTIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq BhKBACAwDQYJKoZIhvcNAQELBQADggEBAEkJn99vvrjl6jANS9K9/wow0KbfFW4w 5dmd5wuB1QlrX8DMNTTaxtlBWi5NNm6zzbWxnPMlIm7E1u3iyhBbFJ8blveB0aGt hPAaMMQfEOn2+aRiE+t+5KQH7UTVLkJiGFIeCM5L3zy1LNb8RYIgIPHycxvpLvlb iPHyuCOLwdQmeBEm70vOlezTwnB4MwvvMFibh8FM/wnGC8AFs7RDp3Of1Fhrj8t5 Vh4yRZQae+wBeY/EPjgc2O6NiiaDUBZJlVLpoxVK/JAOnZ+iiOc7nYZ2gnDJpGNu FNX0vjnBJOGhosPmaf4JXazUxKCug42VmmV0j+QQUvtgas6zqQShZ6s= -----END CERTIFICATE-----Generated at Tue Aug 25 15:37:29 2026 by rpki-client