$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS212815.roa File: AS212815.roa (raw, json) Hash identifier: DKBD4MzTDUzc7cHVXjcC60jJl97HzC8pYE2lvR1y49k= Subject key identifier: A1:AA:D7:01:12:78:2E:55:58:8E:2D:C6:9E:19:23:52:5A:90:35:3D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 645B242CBAB14379152179AF7D0D043BFF8670A0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212815.roa Signing time: Wed 21 Oct 2026 19:33:33 +0000 ROA not before: Wed 21 Oct 2026 19:28:33 +0000 ROA not after: Wed 20 Oct 2027 19:33:33 +0000 asID: 212815 IP address blocks: 2a0f:6280:10a0::/45 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 17:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5b:24:2c:ba:b1:43:79:15:21:79:af:7d:0d:04:3b:ff:86:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 21 19:28:33 2026 GMT Not After : Oct 20 19:33:33 2027 GMT Subject: CN=A1AAD70112782E55588E2DC69E1923525A90353D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:17:8a:dc:a8:21:36:42:d1:e5:16:9f:0a:b3: 46:e5:bb:ec:33:99:4f:b6:14:c3:26:a6:25:d3:7b: 4f:3d:fc:bb:db:d6:40:6a:98:6d:c8:e8:4b:97:04: c7:b3:14:4b:77:f5:92:8b:e9:4e:04:3b:ae:ce:80: cb:a3:35:d1:9b:59:ee:89:bd:e0:ae:83:5c:60:53: 93:79:05:a6:36:ef:54:1a:9f:36:fa:b0:5b:18:cd: 34:89:e9:5e:37:95:d0:47:54:39:f0:d4:64:5e:fc: 17:df:df:e9:9a:d1:f3:bc:87:8f:bb:da:70:65:5a: f2:81:ab:2a:18:eb:1a:7d:52:af:68:68:b9:2a:82: d1:8c:ce:d6:9d:92:49:da:7c:a8:05:a1:6f:01:dd: b5:37:79:3f:3d:21:76:71:4e:13:94:d2:26:68:9d: 11:15:3d:0c:73:5f:24:7a:59:82:dd:91:5a:cf:50: 35:4d:da:da:37:41:78:37:c2:78:c4:35:79:40:2a: 8c:bb:a7:ed:83:21:b2:e9:6a:7a:12:9e:4c:86:55: aa:7f:62:2d:e7:d9:f2:a7:69:b5:14:4b:05:a5:04: bc:06:95:6d:e6:46:73:21:ed:c1:37:1b:8c:81:96: f1:f9:9f:f4:2b:b7:24:dd:02:b5:10:ce:f9:d8:44: 58:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AA:D7:01:12:78:2E:55:58:8E:2D:C6:9E:19:23:52:5A:90:35:3D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212815.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:10a0::/45 Signature Algorithm: sha256WithRSAEncryption 8d:07:52:0b:62:ea:c1:f8:7d:af:36:85:50:c3:99:a0:74:d1: c7:d4:31:33:fe:9e:bd:7f:21:d7:ea:09:2f:19:4b:2e:8e:3f: 4b:0c:a6:ba:5e:17:65:2a:86:f6:f9:16:6f:3d:d1:85:51:65: bc:f4:46:bc:89:9f:66:78:94:7c:ef:8b:f4:00:42:bd:f0:8c: a7:50:ee:24:16:52:c6:9c:13:21:fa:49:76:bc:de:c9:09:6d: 1e:d2:1f:37:ec:2e:a5:9c:aa:06:f0:41:9b:c7:a1:95:bd:5f: 81:eb:04:a4:f7:77:16:c6:b8:6c:33:f8:92:7e:89:d3:fd:8b: e3:db:54:cf:4e:2c:b7:3c:0a:d8:c6:65:c2:13:b5:fd:a1:4b: ce:08:f4:ea:ce:6e:60:45:15:b4:03:cd:d3:3e:79:5e:ba:8d: c0:ab:c4:99:79:2d:fb:20:ba:ae:08:a2:3c:6c:b6:5b:a5:6d: fa:80:cc:87:e0:6b:0a:c7:bd:d1:f8:13:9a:e4:64:67:ea:b5: 5d:c5:b7:9d:34:3d:21:bb:1b:af:63:1d:4b:89:4d:36:6a:f5: 7d:2c:c0:00:be:7f:a9:01:0d:bf:87:2f:05:cc:28:2b:30:b0: 68:ff:ec:cb:3d:31:2a:84:e8:94:3d:cd:11:6d:4b:e8:f0:00: ec:71:77:bd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUZFskLLqxQ3kVIXmvfQ0EO/+GcKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMjExOTI4MzNaFw0yNzEwMjAxOTMzMzNaMDMxMTAvBgNV BAMTKEExQUFENzAxMTI3ODJFNTU1ODhFMkRDNjlFMTkyMzUyNUE5MDM1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfF4rcqCE2QtHlFp8Ks0blu+wz mU+2FMMmpiXTe089/Lvb1kBqmG3I6EuXBMezFEt39ZKL6U4EO67OgMujNdGbWe6J veCug1xgU5N5BaY271Qanzb6sFsYzTSJ6V43ldBHVDnw1GRe/Bff3+ma0fO8h4+7 2nBlWvKBqyoY6xp9Uq9oaLkqgtGMztadkknafKgFoW8B3bU3eT89IXZxThOU0iZo nREVPQxzXyR6WYLdkVrPUDVN2to3QXg3wnjENXlAKoy7p+2DIbLpanoSnkyGVap/ Yi3n2fKnabUUSwWlBLwGlW3mRnMh7cE3G4yBlvH5n/QrtyTdArUQzvnYRFi9AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUoarXARJ4LlVYji3GnhkjUlqQNT0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTI4MTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMq D2KAEKAwDQYJKoZIhvcNAQELBQADggEBAI0HUgti6sH4fa82hVDDmaB00cfUMTP+ nr1/IdfqCS8ZSy6OP0sMprpeF2Uqhvb5Fm890YVRZbz0RryJn2Z4lHzvi/QAQr3w jKdQ7iQWUsacEyH6SXa83skJbR7SHzfsLqWcqgbwQZvHoZW9X4HrBKT3dxbGuGwz +JJ+idP9i+PbVM9OLLc8CtjGZcITtf2hS84I9OrObmBFFbQDzdM+eV66jcCrxJl5 Lfsguq4IojxstlulbfqAzIfgawrHvdH4E5rkZGfqtV3Ft500PSG7G69jHUuJTTZq 9X0swAC+f6kBDb+HLwXMKCswsGj/7Ms9MSqE6JQ9zRFtS+jwAOxxd70= -----END CERTIFICATE-----Generated at Thu Nov 5 04:56:11 2026 by rpki-client