$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS210106.roa File: AS210106.roa (raw, json) Hash identifier: k6JuruUeV1vgLKEXt0CuLSogEVdUPakT1JxJLTnGcSw= Subject key identifier: 7C:46:7F:91:AA:4C:41:7E:B3:D4:58:33:1B:9E:0C:77:0F:1A:75:F6 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5821D404C05666B46D7135CE0E5082FCA20FCC3E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS210106.roa Signing time: Fri 15 Aug 2025 10:56:50 +0000 ROA not before: Fri 15 Aug 2025 10:51:50 +0000 ROA not after: Fri 14 Aug 2026 10:56:50 +0000 asID: 210106 IP address blocks: 2a0f:6284:4310::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:21:d4:04:c0:56:66:b4:6d:71:35:ce:0e:50:82:fc:a2:0f:cc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 15 10:51:50 2025 GMT Not After : Aug 14 10:56:50 2026 GMT Subject: CN=7C467F91AA4C417EB3D458331B9E0C770F1A75F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:af:e1:96:84:0e:65:53:ff:cd:82:eb:26:05: 8b:4c:47:fd:da:e6:f3:f2:cd:83:24:83:0d:70:33: 03:39:ec:76:26:57:ef:69:96:d5:53:aa:93:28:cd: 70:99:92:81:8b:4d:e5:5e:56:47:33:33:12:7f:4b: d8:4c:0d:e8:ab:4c:ce:85:9a:92:f0:66:da:c1:88: 2c:c8:4d:fd:c0:db:5c:e5:8a:5c:69:1c:df:42:eb: f0:3f:8a:21:20:1f:ae:d7:42:0c:61:1c:3c:3e:95: c4:98:c7:33:ff:3c:c7:77:a9:60:e3:35:6a:69:40: 04:68:71:cf:ed:be:b2:33:64:0c:94:78:88:0c:f3: 5f:26:23:15:4a:41:af:05:c4:11:ac:8e:4f:6d:8c: f7:29:31:44:4a:28:be:d2:1a:d2:92:c6:04:69:37: b6:f9:71:01:a2:9f:a0:ed:85:2e:0d:53:8a:c6:57: 05:b8:2a:5a:47:96:be:b4:c9:6b:c7:5c:eb:fd:97: 28:35:eb:9a:8f:4f:9c:f6:c9:2d:dc:8b:43:04:92: cb:dd:47:cd:82:f4:68:b6:ad:10:6e:a3:94:ec:75: 93:63:9e:0d:6a:f7:aa:46:fc:64:10:e3:eb:a7:32: e1:b1:3c:86:1d:83:d3:b4:e1:fa:1d:3d:93:81:ae: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:46:7F:91:AA:4C:41:7E:B3:D4:58:33:1B:9E:0C:77:0F:1A:75:F6 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS210106.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4310::/48 Signature Algorithm: sha256WithRSAEncryption 0c:36:a1:c6:d8:a2:83:2f:b0:27:b1:06:17:b1:a5:fa:89:3a: f2:97:b4:ff:a6:55:59:03:f9:24:b6:4e:79:a6:6f:c6:3f:76: 72:2d:da:51:5d:89:f9:27:da:42:2c:98:5a:8e:04:35:bc:d1: 2d:38:b4:49:a9:83:23:d0:34:e7:c6:6e:b8:fb:53:04:0d:25: d3:73:20:b1:b4:b3:a3:8b:6b:46:ad:a4:f7:6f:c4:11:01:ba: 6a:2d:d4:d3:f2:97:dc:8a:ea:85:5e:36:41:77:7e:2a:fd:b4: 94:4d:db:13:0c:20:15:4b:49:ef:27:b1:32:73:5c:a2:da:0c: 39:29:22:89:6a:5f:1b:67:d1:41:ad:87:d6:af:90:04:4d:b2: 69:9e:22:7e:67:e1:d0:64:ee:24:4e:6c:2b:ee:f8:05:4e:41: d1:19:d2:52:c0:67:5a:75:b7:92:64:06:96:3e:d2:0a:ab:ac: 14:8f:46:78:d9:d7:30:73:1f:1d:a9:de:db:9d:2e:f4:15:c7: ab:40:82:24:95:e0:97:d9:2e:89:00:e0:74:59:c6:9e:bb:26: a3:a0:89:14:28:0d:83:32:8a:d0:d3:e8:7e:db:7e:1f:fc:26: b9:41:0a:ec:d8:8f:12:2c:15:83:09:a5:ea:0a:a7:59:1f:c6: 8b:74:a3:57 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUWCHUBMBWZrRtcTXODlCC/KIPzD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA4MTUxMDUxNTBaFw0yNjA4MTQxMDU2NTBaMDMxMTAvBgNV BAMTKDdDNDY3RjkxQUE0QzQxN0VCM0Q0NTgzMzFCOUUwQzc3MEYxQTc1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlr+GWhA5lU//NgusmBYtMR/3a 5vPyzYMkgw1wMwM57HYmV+9pltVTqpMozXCZkoGLTeVeVkczMxJ/S9hMDeirTM6F mpLwZtrBiCzITf3A21zlilxpHN9C6/A/iiEgH67XQgxhHDw+lcSYxzP/PMd3qWDj NWppQARocc/tvrIzZAyUeIgM818mIxVKQa8FxBGsjk9tjPcpMURKKL7SGtKSxgRp N7b5cQGin6DthS4NU4rGVwW4KlpHlr60yWvHXOv9lyg165qPT5z2yS3ci0MEksvd R82C9Gi2rRBuo5TsdZNjng1q96pG/GQQ4+unMuGxPIYdg9O04fodPZOBri65AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUfEZ/kapMQX6z1FgzG54Mdw8adfYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTAxMDYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEQxAwDQYJKoZIhvcNAQELBQADggEBAAw2ocbYooMvsCexBhexpfqJOvKXtP+m VVkD+SS2Tnmmb8Y/dnIt2lFdifkn2kIsmFqOBDW80S04tEmpgyPQNOfGbrj7UwQN JdNzILG0s6OLa0atpPdvxBEBumot1NPyl9yK6oVeNkF3fir9tJRN2xMMIBVLSe8n sTJzXKLaDDkpIolqXxtn0UGth9avkARNsmmeIn5n4dBk7iRObCvu+AVOQdEZ0lLA Z1p1t5JkBpY+0gqrrBSPRnjZ1zBzHx2p3tudLvQVx6tAgiSV4JfZLokA4HRZxp67 JqOgiRQoDYMyitDT6H7bfh/8JrlBCuzYjxIsFYMJpeoKp1kfxot0o1c= -----END CERTIFICATE-----Generated at Wed Nov 5 08:31:52 2025 by rpki-client