$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212085.roa File: AS212085.roa (raw, json) Hash identifier: 5oKnHoFIqCaTVivyc7CLO8ddneHcDpa2psgGQ0ftjp8= Subject key identifier: 17:A8:F4:9E:26:40:F7:EA:7C:DD:45:E1:56:4C:82:09:99:6F:EA:1E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1BB70C58E5E3FBB2BEF0ED6710FA9EAE750CFBF7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212085.roa Signing time: Thu 03 Jul 2025 15:53:02 +0000 ROA not before: Thu 03 Jul 2025 15:48:02 +0000 ROA not after: Thu 02 Jul 2026 15:53:02 +0000 asID: 212085 IP address blocks: 2a0a:6044:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 10:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b7:0c:58:e5:e3:fb:b2:be:f0:ed:67:10:fa:9e:ae:75:0c:fb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:48:02 2025 GMT Not After : Jul 2 15:53:02 2026 GMT Subject: CN=17A8F49E2640F7EA7CDD45E1564C8209996FEA1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:f9:cd:7a:76:8b:6a:59:08:a0:2a:bd:21: 08:ca:e4:39:52:50:0c:89:cc:bd:86:e0:e8:b7:58: 26:22:e4:61:24:ca:5b:ab:c4:aa:14:78:66:cb:d0: de:d3:f8:4a:62:e5:ab:f9:44:8d:e4:78:d2:8b:4a: c3:2b:f5:5c:ea:46:b4:13:9e:c2:bb:ff:ac:cc:65: 5e:4f:13:69:cf:fa:c3:ef:f2:48:35:a4:06:06:78: a1:15:ed:7a:a1:70:38:c0:b1:76:c6:07:59:96:57: 1a:08:fd:fc:4a:53:92:1a:6e:ca:d1:ce:52:ea:55: 53:96:70:07:a1:30:74:f9:16:a0:0d:32:dd:b4:bd: 6a:61:55:d2:22:cd:c4:2c:db:9f:95:6f:77:45:ee: 4c:0f:5d:3f:fe:6f:8c:18:07:e7:9b:9e:e0:2f:80: 2e:90:b1:5e:3c:70:a5:d9:d0:25:0a:31:81:82:c0: 0b:3c:ed:77:66:a6:fe:16:9c:bd:43:53:3d:22:6d: d9:45:85:04:31:b5:6a:1d:c0:c0:54:28:2e:c3:32: 78:c9:65:dc:12:12:7e:bf:26:57:59:70:37:a1:96: 61:21:fa:cb:5a:98:25:77:c6:ab:94:af:96:3b:18: 54:e4:b0:6a:15:18:a0:e2:69:53:5e:62:6e:c1:00: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A8:F4:9E:26:40:F7:EA:7C:DD:45:E1:56:4C:82:09:99:6F:EA:1E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212085.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ab00::/40 Signature Algorithm: sha256WithRSAEncryption 7e:ee:a7:20:37:57:b2:73:e2:ed:ad:55:f8:c5:aa:95:d6:f8: ec:8a:f8:52:a4:7a:62:69:3d:00:d6:ee:e8:a0:f1:de:3c:e3: 0a:3a:0e:94:28:ac:2d:d2:a3:15:14:2b:14:b2:35:60:cf:a4: a8:14:80:c9:ef:a7:2f:b1:8e:25:4b:6c:96:f2:2c:44:bc:b7: ef:50:9f:ba:4c:da:eb:32:22:18:be:4c:ac:c5:68:57:42:e2: 96:49:f8:dd:09:77:13:97:87:15:d9:65:0a:0f:39:dc:63:db: e8:db:b2:d9:de:ef:77:7c:c3:97:25:6a:90:ef:38:dd:4b:95: 0f:ff:c4:e2:3c:f2:e7:89:ea:06:4f:ed:7d:db:b4:ed:60:d3: b8:cf:45:bb:ac:d4:91:82:00:be:b0:82:ff:67:48:0d:c5:8a: 8e:da:68:aa:a6:9d:01:da:b9:f8:14:20:f2:36:b8:58:86:4d: ab:9a:f1:31:85:ad:68:5e:56:3d:cf:3e:64:74:60:35:75:c3: 56:9f:9c:b3:1b:1f:2d:e6:50:de:54:85:e1:9d:26:17:cf:e1: 6c:3d:2a:8b:00:cb:08:67:74:97:1e:64:fb:f0:23:4a:29:02: 85:42:0e:c3:a9:42:8e:f8:76:74:46:e4:03:46:45:f9:f2:2d: 10:07:5b:66 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUG7cMWOXj+7K+8O1nEPqernUM+/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ4MDJaFw0yNjA3MDIxNTUzMDJaMDMxMTAvBgNV BAMTKDE3QThGNDlFMjY0MEY3RUE3Q0RENDVFMTU2NEM4MjA5OTk2RkVBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JPnNenaLalkIoCq9IQjK5DlS UAyJzL2G4Oi3WCYi5GEkylurxKoUeGbL0N7T+Epi5av5RI3keNKLSsMr9VzqRrQT nsK7/6zMZV5PE2nP+sPv8kg1pAYGeKEV7XqhcDjAsXbGB1mWVxoI/fxKU5IabsrR zlLqVVOWcAehMHT5FqANMt20vWphVdIizcQs25+Vb3dF7kwPXT/+b4wYB+ebnuAv gC6QsV48cKXZ0CUKMYGCwAs87Xdmpv4WnL1DUz0ibdlFhQQxtWodwMBUKC7DMnjJ ZdwSEn6/JldZcDehlmEh+stamCV3xquUr5Y7GFTksGoVGKDiaVNeYm7BAAWBAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUF6j0niZA9+p83UXhVkyCCZlv6h4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTIwODUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEqzANBgkqhkiG9w0BAQsFAAOCAQEAfu6nIDdXsnPi7a1V+MWqldb47Ir4UqR6 Ymk9ANbu6KDx3jzjCjoOlCisLdKjFRQrFLI1YM+kqBSAye+nL7GOJUtslvIsRLy3 71Cfukza6zIiGL5MrMVoV0Lilkn43Ql3E5eHFdllCg853GPb6Nuy2d7vd3zDlyVq kO843UuVD//E4jzy54nqBk/tfdu07WDTuM9Fu6zUkYIAvrCC/2dIDcWKjtpoqqad Adq5+BQg8ja4WIZNq5rxMYWtaF5WPc8+ZHRgNXXDVp+csxsfLeZQ3lSF4Z0mF8/h bD0qiwDLCGd0lx5k+/AjSikChUIOw6lCjvh2dEbkA0ZF+fItEAdbZg== -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:13 2025 by rpki-client