$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212085.roa File: AS212085.roa (raw, json) Hash identifier: J8PKMKxPQ0RPRPV95MNzNjhCV4/pSl9jwk19sykfpDc= Subject key identifier: 9D:22:38:09:E4:2C:DD:4E:98:A4:20:17:43:AD:C2:20:1A:F6:E1:F8 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5793B471E43DDD3FD7FF81F984BFABDCAC6A1368 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212085.roa Signing time: Thu 04 Jun 2026 16:51:49 +0000 ROA not before: Thu 04 Jun 2026 16:46:49 +0000 ROA not after: Thu 03 Jun 2027 16:51:49 +0000 asID: 212085 IP address blocks: 2a0a:6044:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:93:b4:71:e4:3d:dd:3f:d7:ff:81:f9:84:bf:ab:dc:ac:6a:13:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 4 16:46:49 2026 GMT Not After : Jun 3 16:51:49 2027 GMT Subject: CN=9D223809E42CDD4E98A4201743ADC2201AF6E1F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:04:08:d2:b0:e3:af:c7:b7:7b:6e:49:39:a8: 29:9d:77:ff:50:be:9d:9c:f0:0f:b0:98:31:f3:80: bc:d8:aa:38:c8:f3:a7:63:3a:55:69:1a:b9:26:dd: 7a:b1:b0:80:86:73:cb:30:7d:a3:af:61:e4:c7:48: dc:65:ad:86:95:15:70:bf:70:f4:97:17:d6:81:dc: f6:b1:d1:66:df:46:ec:38:56:78:b5:bc:18:49:13: 1b:c8:e9:e6:ba:5e:49:84:15:43:2e:19:2c:f5:2e: 22:59:85:09:c0:b6:7a:da:d8:10:3e:5c:f9:47:16: 9f:d9:32:12:d0:d7:4e:52:5b:00:e5:48:9a:88:08: b6:54:ff:1d:ad:69:47:de:e4:b2:e8:22:b4:ec:a1: 1f:6e:f0:b1:9b:b5:24:86:60:e0:85:5d:b8:f2:4b: fa:10:91:4f:40:c8:12:39:1d:b6:27:51:69:30:d7: 8c:63:e3:91:a0:d0:52:0b:c2:f6:b0:7e:e6:93:76: ed:88:96:ae:8b:e7:b0:2e:fc:ba:66:d4:73:59:e0: 6b:4a:89:ba:e7:2d:02:cc:d4:a9:33:e6:02:0f:57: c4:9f:d3:f0:c1:55:28:bd:c5:3d:2a:6b:b8:50:9c: 8a:f9:f9:1d:48:75:ab:41:a4:19:65:4f:2c:69:bc: 61:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:22:38:09:E4:2C:DD:4E:98:A4:20:17:43:AD:C2:20:1A:F6:E1:F8 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212085.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ab00::/40 Signature Algorithm: sha256WithRSAEncryption 22:d5:b8:56:df:e1:28:76:c8:9e:85:9f:71:f3:ff:2d:46:fb: f3:be:69:95:84:cb:91:20:ad:4e:23:9f:d6:c9:d3:00:8c:80: 4a:9d:d7:6a:a0:3a:08:c7:ec:ed:11:6e:39:fa:d5:f5:46:a7: d8:03:cc:16:0b:86:72:52:0e:79:ad:31:be:02:0a:ea:ff:53: ca:aa:73:5c:c1:99:ea:a6:2e:9d:a0:45:e2:11:dc:89:fc:10: 9f:18:b1:28:42:8a:0d:2d:1e:e7:7c:8e:f4:37:58:f9:62:02: 5b:76:fe:22:9f:51:a2:a1:f9:51:5a:eb:16:79:ad:2f:b6:14: c1:0c:ea:0b:00:9f:55:f4:28:4b:d9:05:61:63:57:9b:b7:ee: 5d:42:31:99:4c:9e:af:eb:2d:6e:8a:db:10:b3:a9:16:96:ce: 2e:70:74:ae:9e:9c:be:01:4b:c5:90:67:8f:f7:84:07:93:de: 57:1a:ec:78:9d:e0:be:66:3e:0c:68:9a:e6:4e:8b:67:15:52: 7e:7a:60:2b:c1:f8:a2:86:8f:ea:ed:5e:84:f9:1e:8e:f5:18: 0f:7f:48:4e:21:f5:40:58:b2:ac:56:75:57:ba:00:b9:2a:fe: aa:e0:15:d2:6e:df:dc:d6:01:91:29:b8:f2:ab:b8:76:68:09: 1e:90:3c:63 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUV5O0ceQ93T/X/4H5hL+r3KxqE2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDQxNjQ2NDlaFw0yNzA2MDMxNjUxNDlaMDMxMTAvBgNV BAMTKDlEMjIzODA5RTQyQ0RENEU5OEE0MjAxNzQzQURDMjIwMUFGNkUxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2BAjSsOOvx7d7bkk5qCmdd/9Q vp2c8A+wmDHzgLzYqjjI86djOlVpGrkm3XqxsICGc8swfaOvYeTHSNxlrYaVFXC/ cPSXF9aB3Pax0WbfRuw4Vni1vBhJExvI6ea6XkmEFUMuGSz1LiJZhQnAtnra2BA+ XPlHFp/ZMhLQ105SWwDlSJqICLZU/x2taUfe5LLoIrTsoR9u8LGbtSSGYOCFXbjy S/oQkU9AyBI5HbYnUWkw14xj45Gg0FILwvawfuaTdu2Ilq6L57Au/Lpm1HNZ4GtK ibrnLQLM1Kkz5gIPV8Sf0/DBVSi9xT0qa7hQnIr5+R1IdatBpBllTyxpvGFXAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUnSI4CeQs3U6YpCAXQ63CIBr24fgwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTIwODUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEqzANBgkqhkiG9w0BAQsFAAOCAQEAItW4Vt/hKHbInoWfcfP/LUb7875plYTL kSCtTiOf1snTAIyASp3XaqA6CMfs7RFuOfrV9Uan2APMFguGclIOea0xvgIK6v9T yqpzXMGZ6qYunaBF4hHcifwQnxixKEKKDS0e53yO9DdY+WICW3b+Ip9RoqH5UVrr FnmtL7YUwQzqCwCfVfQoS9kFYWNXm7fuXUIxmUyer+stborbELOpFpbOLnB0rp6c vgFLxZBnj/eEB5PeVxrseJ3gvmY+DGia5k6LZxVSfnpgK8H4ooaP6u1ehPkejvUY D39ITiH1QFiyrFZ1V7oAuSr+quAV0m7f3NYBkSm48qu4dmgJHpA8Yw== -----END CERTIFICATE-----Generated at Sat Jun 13 11:32:43 2026 by rpki-client