$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS152320.roa File: AS152320.roa (raw, json) Hash identifier: PqHYlOS5oQ/521B+lk9R+LlBQyaecW5SpKnwqatZHTo= Subject key identifier: 40:F2:15:98:C0:D7:FD:3B:64:9B:6E:F4:EC:DB:E6:9A:91:33:5D:F2 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 21A019567319AE62B008DC30FAA70938044CE12D Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS152320.roa Signing time: Mon 21 Sep 2026 09:42:54 +0000 ROA not before: Mon 21 Sep 2026 09:37:54 +0000 ROA not after: Mon 20 Sep 2027 09:42:54 +0000 asID: 152320 IP address blocks: 2a06:1281:403a::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a0:19:56:73:19:ae:62:b0:08:dc:30:fa:a7:09:38:04:4c:e1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 21 09:37:54 2026 GMT Not After : Sep 20 09:42:54 2027 GMT Subject: CN=40F21598C0D7FD3B649B6EF4ECDBE69A91335DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:a8:eb:eb:90:86:ba:8b:82:18:c8:4b:84: c9:c0:d8:eb:04:7a:7b:a3:9e:f6:12:e1:7b:08:7f: 7c:b1:93:8f:60:26:e5:cb:de:da:48:06:6d:01:e3: 76:21:84:85:f5:63:66:ea:74:d5:88:46:90:6e:1c: ef:c1:a1:31:59:3d:0d:97:25:be:35:23:4c:d7:f7: 77:20:0a:8d:07:69:27:bf:19:b6:91:bd:6c:9d:55: f3:5f:05:f0:5e:f8:1d:9d:8b:30:49:3a:cb:1a:38: e6:fb:04:9d:65:dc:97:b9:5d:87:a1:b6:37:4b:92: b8:06:e7:1f:1c:79:af:24:51:ce:e1:99:48:bd:0c: 95:da:ce:19:a8:3a:2d:47:d5:82:fc:45:14:15:66: 17:1e:d1:a1:b2:44:68:f0:4d:d0:c3:d9:fe:25:24: 44:33:14:61:e8:58:a0:e0:9c:65:ba:a7:9f:f9:ca: f9:af:7e:ab:04:41:3f:c3:97:c9:9b:02:55:34:49: f9:5e:4f:a0:8e:96:83:6f:8d:2d:00:1d:9d:5e:67: 33:64:33:ef:d7:b7:d5:53:5a:c4:cf:9f:d6:95:98: 5e:9b:8c:ad:c9:76:a4:8a:6e:a7:6b:a1:76:4a:99: 7f:02:06:a2:75:85:70:5c:43:1c:02:8b:f3:c3:2d: 24:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F2:15:98:C0:D7:FD:3B:64:9B:6E:F4:EC:DB:E6:9A:91:33:5D:F2 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS152320.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:403a::/48 Signature Algorithm: sha256WithRSAEncryption 5f:2c:21:16:c2:05:1c:07:8d:42:22:f0:89:77:1b:ea:cf:11: 70:3d:bd:29:84:ad:e0:a8:fa:35:c5:9e:b6:e4:9f:43:62:e2: 9d:36:ee:1f:36:79:a2:16:64:b5:64:a6:d8:48:fe:4b:b1:0a: 64:52:34:af:76:df:b7:3e:7b:fc:4d:4b:c8:e3:7f:36:a4:82: c7:a3:8c:10:1a:58:7e:da:ff:8a:6c:61:9c:81:77:54:f0:20: e2:0e:96:cf:f2:86:4a:e2:88:f6:3c:52:1a:cf:e8:b3:f2:a8: 3e:82:81:0e:e4:31:51:e4:70:9b:68:c6:fb:07:b1:bd:ac:c4: 41:f9:7f:74:54:0c:2d:2c:db:cf:4b:80:84:f4:31:84:72:bc: b6:3e:5d:f3:e7:c5:25:2c:5a:f9:45:d3:9d:f9:2c:1f:91:77: 72:ec:c7:17:33:da:f0:52:81:29:7d:1f:ea:6c:9c:47:40:8a: da:db:02:73:70:e5:23:cc:1b:06:66:05:36:55:4a:73:82:13: 83:ba:06:f6:60:dd:8f:56:e5:f7:55:98:4d:f8:22:bf:bb:8e: 60:04:6c:d1:0e:25:f3:b0:12:e5:ae:00:a5:c1:06:6a:00:9c: e1:62:cd:ba:44:07:9d:a5:41:cf:9d:0e:d8:8a:5c:3c:13:2d: e5:d7:d7:ea -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUIaAZVnMZrmKwCNww+qcJOARM4S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MjEwOTM3NTRaFw0yNzA5MjAwOTQyNTRaMDMxMTAvBgNV BAMTKDQwRjIxNTk4QzBEN0ZEM0I2NDlCNkVGNEVDREJFNjlBOTEzMzVERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0t6jr65CGuouCGMhLhMnA2OsE enujnvYS4XsIf3yxk49gJuXL3tpIBm0B43YhhIX1Y2bqdNWIRpBuHO/BoTFZPQ2X Jb41I0zX93cgCo0HaSe/GbaRvWydVfNfBfBe+B2dizBJOssaOOb7BJ1l3Je5XYeh tjdLkrgG5x8cea8kUc7hmUi9DJXazhmoOi1H1YL8RRQVZhce0aGyRGjwTdDD2f4l JEQzFGHoWKDgnGW6p5/5yvmvfqsEQT/Dl8mbAlU0SfleT6COloNvjS0AHZ1eZzNk M+/Xt9VTWsTPn9aVmF6bjK3JdqSKbqdroXZKmX8CBqJ1hXBcQxwCi/PDLSQfAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUQPIVmMDX/Ttkm2707NvmmpEzXfIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxNTIzMjAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq BhKBQDowDQYJKoZIhvcNAQELBQADggEBAF8sIRbCBRwHjUIi8Il3G+rPEXA9vSmE reCo+jXFnrbkn0Ni4p027h82eaIWZLVkpthI/kuxCmRSNK9237c+e/xNS8jjfzak gsejjBAaWH7a/4psYZyBd1TwIOIOls/yhkriiPY8UhrP6LPyqD6CgQ7kMVHkcJto xvsHsb2sxEH5f3RUDC0s289LgIT0MYRyvLY+XfPnxSUsWvlF0535LB+Rd3Lsxxcz 2vBSgSl9H+psnEdAitrbAnNw5SPMGwZmBTZVSnOCE4O6BvZg3Y9W5fdVmE34Ir+7 jmAEbNEOJfOwEuWuAKXBBmoAnOFizbpEB52lQc+dDtiKXDwTLeXX1+o= -----END CERTIFICATE-----Generated at Mon Sep 21 22:10:06 2026 by rpki-client