$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS216260.roa File: AS216260.roa (raw, json) Hash identifier: LusnRXpCOfPdRWfD1Bxnb6aocEAPvEsVnoEcwAOfhCc= Subject key identifier: 06:F5:12:DF:E4:A0:B3:2B:18:92:2A:F1:DF:AB:AF:FB:CB:F3:10:68 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2E9B475CFF4C960015516CB9B5817FFA82164D24 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS216260.roa Signing time: Thu 03 Jul 2025 15:52:59 +0000 ROA not before: Thu 03 Jul 2025 15:47:59 +0000 ROA not after: Thu 02 Jul 2026 15:52:59 +0000 asID: 216260 IP address blocks: 2a09:54c7:3000::/36 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9b:47:5c:ff:4c:96:00:15:51:6c:b9:b5:81:7f:fa:82:16:4d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:47:59 2025 GMT Not After : Jul 2 15:52:59 2026 GMT Subject: CN=06F512DFE4A0B32B18922AF1DFABAFFBCBF31068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:86:b0:6f:3e:e9:ef:4a:08:94:34:e6:d7: c2:d0:04:da:21:8d:21:78:f4:01:fd:d7:7e:2d:07: 1f:37:55:24:4d:7d:7a:1a:7f:a6:0c:d8:f0:c0:0a: 67:c7:3d:19:c6:88:4e:09:c5:1d:a4:7a:24:35:ad: 43:82:e7:76:78:91:b9:56:05:06:b8:f8:5e:df:8b: 84:5f:8c:3b:cc:14:60:b2:45:f5:0d:a1:3c:53:62: a9:b0:a7:56:d7:5c:67:77:3a:af:8e:90:92:47:05: c9:1d:ac:a7:7f:d5:38:cb:60:0e:f5:a5:2d:2d:49: c5:11:49:df:5a:bd:8d:d5:96:78:2e:ed:df:b6:55: 07:bf:16:59:57:0f:6d:03:37:54:7c:b8:10:82:44: 11:d1:70:4f:45:3d:d4:75:92:05:2f:69:5a:3b:b7: cd:7a:a7:d8:ed:09:cf:a2:f8:f8:7d:fa:12:3e:78: 30:85:7a:77:bf:a5:03:c6:27:36:2b:4a:1f:2c:ba: 18:cb:5d:a5:f0:cd:22:3e:7d:8d:71:8f:2c:3a:54: 2d:73:6a:0c:be:a0:70:ea:4e:56:aa:a1:55:de:53: ed:ab:f5:28:fd:73:f9:25:c4:9d:aa:7e:4f:64:3d: 1f:fb:03:d8:0b:ad:9e:58:f5:5a:86:a4:4a:44:33: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F5:12:DF:E4:A0:B3:2B:18:92:2A:F1:DF:AB:AF:FB:CB:F3:10:68 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS216260.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7:3000::/36 Signature Algorithm: sha256WithRSAEncryption 60:0f:2a:82:da:d0:25:fa:5f:48:f2:56:1f:1a:0a:aa:bc:de: bf:b9:47:b2:53:6e:28:77:61:2f:52:1f:e3:5c:24:b0:68:98: f9:c9:88:c1:49:18:de:a2:c6:37:b9:ae:c6:3c:55:09:c7:88: 27:89:12:04:fc:37:c8:23:e0:99:36:64:49:d4:74:44:fd:dc: f2:da:90:83:e6:4d:b9:50:6f:52:4d:34:3a:d8:1c:a0:4b:4f: 8a:1b:02:eb:71:90:09:c2:4b:47:61:80:61:1a:4c:c0:56:d3: a4:84:35:fc:74:1f:e7:37:d2:b5:df:3d:fa:e4:b3:ec:74:24: 61:48:f2:39:56:06:d5:b1:d1:22:16:8d:7e:4f:a3:e6:4c:ca: 5d:5a:d8:10:05:7d:69:35:d1:86:1d:59:42:1b:96:41:f3:23: e5:79:c3:bd:44:3d:04:d3:d1:5c:e4:a8:7c:ce:0c:be:60:5b: a8:d1:f0:4a:68:c8:7f:87:e1:82:c8:26:4c:db:6a:53:a4:04: 9f:a3:9d:49:f4:e0:a7:d7:50:1f:5b:61:5a:f5:76:8c:d1:70: 43:72:62:15:a5:bc:19:5f:72:71:cf:bb:f0:aa:11:55:98:dd: 7e:24:5e:6c:86:c1:eb:d4:15:17:41:c5:14:ce:f9:e1:9e:23: d6:4c:cc:36 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIULptHXP9MlgAVUWy5tYF/+oIWTSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ3NTlaFw0yNjA3MDIxNTUyNTlaMDMxMTAvBgNV BAMTKDA2RjUxMkRGRTRBMEIzMkIxODkyMkFGMURGQUJBRkZCQ0JGMzEwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioYawbz7p70oIlDTm18LQBNoh jSF49AH9134tBx83VSRNfXoaf6YM2PDACmfHPRnGiE4JxR2keiQ1rUOC53Z4kblW BQa4+F7fi4RfjDvMFGCyRfUNoTxTYqmwp1bXXGd3Oq+OkJJHBckdrKd/1TjLYA71 pS0tScURSd9avY3Vlngu7d+2VQe/FllXD20DN1R8uBCCRBHRcE9FPdR1kgUvaVo7 t816p9jtCc+i+Ph9+hI+eDCFene/pQPGJzYrSh8suhjLXaXwzSI+fY1xjyw6VC1z agy+oHDqTlaqoVXeU+2r9Sj9c/klxJ2qfk9kPR/7A9gLrZ5Y9VqGpEpEM3KXAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUBvUS3+SgsysYkirx36uv+8vzEGgwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTYyNjAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq CVTHMDANBgkqhkiG9w0BAQsFAAOCAQEAYA8qgtrQJfpfSPJWHxoKqrzev7lHslNu KHdhL1If41wksGiY+cmIwUkY3qLGN7muxjxVCceIJ4kSBPw3yCPgmTZkSdR0RP3c 8tqQg+ZNuVBvUk00OtgcoEtPihsC63GQCcJLR2GAYRpMwFbTpIQ1/HQf5zfStd89 +uSz7HQkYUjyOVYG1bHRIhaNfk+j5kzKXVrYEAV9aTXRhh1ZQhuWQfMj5XnDvUQ9 BNPRXOSofM4MvmBbqNHwSmjIf4fhgsgmTNtqU6QEn6OdSfTgp9dQH1thWvV2jNFw Q3JiFaW8GV9ycc+78KoRVZjdfiRebIbB69QVF0HFFM754Z4j1kzMNg== -----END CERTIFICATE-----Generated at Sat Jul 5 02:27:23 2025 by rpki-client