$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS212895.roa File: AS212895.roa (raw, json) Hash identifier: eYOh6vsW+4aq5LlBG5K8Eg4U8iZ2uHJzBv+f1H9cw4s= Subject key identifier: 05:57:85:BE:20:E0:6E:4C:26:E6:AE:3D:86:E9:D8:F3:64:9D:0D:5F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3B403E0D103F2AFF26B130579C9E3999028B4270 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212895.roa Signing time: Mon 14 Sep 2026 15:11:01 +0000 ROA not before: Mon 14 Sep 2026 15:06:01 +0000 ROA not after: Mon 13 Sep 2027 15:11:01 +0000 asID: 212895 IP address blocks: 2a0f:6280:1100::/44 maxlen: 48 2a0f:6280:1c00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:40:3e:0d:10:3f:2a:ff:26:b1:30:57:9c:9e:39:99:02:8b:42:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 14 15:06:01 2026 GMT Not After : Sep 13 15:11:01 2027 GMT Subject: CN=055785BE20E06E4C26E6AE3D86E9D8F3649D0D5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:a5:38:c0:f6:2f:8d:34:29:a2:eb:a0:c4: 93:06:7f:45:56:63:64:2c:74:8e:dc:3c:18:f3:f5: 87:16:bc:6e:b6:a0:55:ec:a1:c5:48:1f:52:2f:aa: e5:d1:44:92:a6:1f:33:87:c0:86:1d:07:af:8f:c5: 8d:94:ce:23:aa:be:b7:88:ea:20:db:51:31:40:38: 9b:63:00:ff:51:c6:c5:0b:5f:00:1f:71:ea:8f:59: 90:17:26:b2:4e:23:ad:a7:07:1c:dd:69:c2:04:b2: 15:4d:72:ae:7f:62:04:2b:ae:fa:70:8b:38:43:ae: 32:05:9c:cf:88:17:60:c6:9f:13:00:42:e9:72:84: 5f:22:e1:67:77:6a:da:e2:03:9a:66:33:36:c4:1a: 91:8c:49:7d:87:cc:a7:07:4a:d4:cc:cd:fd:64:8c: 20:fa:a9:56:16:36:a3:e8:94:9e:5e:f1:b5:ad:39: c2:15:9e:7e:72:12:53:a8:e2:10:1b:a1:2c:95:b2: d2:b5:96:9a:16:0e:86:33:a0:56:00:fe:40:a9:10: 88:d4:ae:10:3d:93:96:5b:5b:ec:36:28:80:b3:a7: e5:96:08:df:bd:bc:f6:e7:99:49:ed:c0:b3:7c:0d: 50:18:d3:e3:d2:cd:01:3b:18:dc:5f:36:19:75:0c: 2a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:57:85:BE:20:E0:6E:4C:26:E6:AE:3D:86:E9:D8:F3:64:9D:0D:5F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1100::/44 2a0f:6280:1c00::/40 Signature Algorithm: sha256WithRSAEncryption 86:55:cb:50:7b:8e:5a:6c:e7:99:a9:f3:ab:52:f9:6c:4d:d7: 73:1c:22:fc:08:f7:0a:2b:d5:08:17:d3:ee:78:02:59:db:3a: a0:bf:43:4c:e8:0b:12:7a:d6:fa:9f:6d:13:07:bc:de:d0:71: c3:2b:18:ec:e6:01:fb:ca:93:93:c7:a8:12:d7:0a:f3:f1:c1: 8f:2c:72:17:bb:b5:a3:17:bd:e7:29:1d:b8:de:5d:93:6e:e5: 93:3d:27:cb:59:48:79:e5:d4:ef:94:0a:5a:04:30:b7:e4:d6: 9c:92:94:4e:a7:e4:3c:ba:78:17:ee:75:8e:be:ec:b9:5c:af: 1d:f2:c5:a6:d1:1a:7a:f5:40:8b:10:34:3b:06:d1:d0:0d:a1: d4:90:9c:83:13:82:f3:a4:24:66:a1:3e:de:17:91:6d:24:6e: a1:d2:65:07:1c:2b:04:fe:06:64:e3:57:8e:d3:3f:25:d1:75: 2f:75:ed:17:61:3d:a1:a3:b6:0c:b8:3d:f1:0e:74:11:e9:70: f6:78:c6:94:b2:f6:e6:30:23:52:e4:7f:23:69:e3:2f:30:66: 08:fa:c2:0d:05:65:c5:75:88:e0:23:12:99:ce:fa:7d:22:26: e7:90:e5:bc:64:f9:e7:f8:e7:1d:5a:5f:de:10:7a:6b:23:f3: e6:5d:0c:03 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUO0A+DRA/Kv8msTBXnJ45mQKLQnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTQxNTA2MDFaFw0yNzA5MTMxNTExMDFaMDMxMTAvBgNV BAMTKDA1NTc4NUJFMjBFMDZFNEMyNkU2QUUzRDg2RTlEOEYzNjQ5RDBENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeGKU4wPYvjTQpouugxJMGf0VW Y2QsdI7cPBjz9YcWvG62oFXsocVIH1IvquXRRJKmHzOHwIYdB6+PxY2UziOqvreI 6iDbUTFAOJtjAP9RxsULXwAfceqPWZAXJrJOI62nBxzdacIEshVNcq5/YgQrrvpw izhDrjIFnM+IF2DGnxMAQulyhF8i4Wd3atriA5pmMzbEGpGMSX2HzKcHStTMzf1k jCD6qVYWNqPolJ5e8bWtOcIVnn5yElOo4hAboSyVstK1lpoWDoYzoFYA/kCpEIjU rhA9k5ZbW+w2KICzp+WWCN+9vPbnmUntwLN8DVAY0+PSzQE7GNxfNhl1DCo3AgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUBVeFviDgbkwm5q49hunY82SdDV8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTI4OTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBwQq D2KAEQADBgAqD2KAHDANBgkqhkiG9w0BAQsFAAOCAQEAhlXLUHuOWmznmanzq1L5 bE3Xcxwi/Aj3CivVCBfT7ngCWds6oL9DTOgLEnrW+p9tEwe83tBxwysY7OYB+8qT k8eoEtcK8/HBjyxyF7u1oxe95ykduN5dk27lkz0ny1lIeeXU75QKWgQwt+TWnJKU TqfkPLp4F+51jr7suVyvHfLFptEaevVAixA0OwbR0A2h1JCcgxOC86QkZqE+3heR bSRuodJlBxwrBP4GZONXjtM/JdF1L3XtF2E9oaO2DLg98Q50Eelw9njGlLL25jAj UuR/I2njLzBmCPrCDQVlxXWI4CMSmc76fSIm55DlvGT55/jnHVpf3hB6ayPz5l0M Aw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:54:42 2026 by rpki-client