$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213124.roa File: AS213124.roa (raw, json) Hash identifier: h8l/0bHQMNwCC4tNmb8DVyrfk3y2FhVR3lBGqZ86FKE= Subject key identifier: B2:23:76:02:DC:97:21:C4:60:09:42:34:0D:FC:FF:CE:88:76:B3:4C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4A99B6BDC01A904E1E7E3797516B7DCF5A982F86 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213124.roa Signing time: Wed 16 Jul 2025 01:07:34 +0000 ROA not before: Wed 16 Jul 2025 01:02:34 +0000 ROA not after: Wed 15 Jul 2026 01:07:34 +0000 asID: 213124 IP address blocks: 2a0f:6283:2001::/48 maxlen: 48 2a0f:6283:2002::/48 maxlen: 48 2a0f:6283:2048::/45 maxlen: 45 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 02:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:99:b6:bd:c0:1a:90:4e:1e:7e:37:97:51:6b:7d:cf:5a:98:2f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 16 01:02:34 2025 GMT Not After : Jul 15 01:07:34 2026 GMT Subject: CN=B2237602DC9721C4600942340DFCFFCE8876B34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:65:ed:b8:f0:b1:c9:1c:b3:2b:82:c0:61:c2: b6:79:44:c7:a3:36:2f:c0:06:09:31:70:6b:2c:35: 2a:00:3d:71:9c:ec:32:e8:0e:ec:63:5e:a0:7e:7c: 25:66:d2:11:43:d5:32:63:4a:5c:e2:17:b2:ca:41: ac:0a:d2:67:ad:2e:8e:09:55:22:e8:ae:30:68:65: d1:c5:7d:1b:f4:55:97:22:08:70:69:21:22:4e:11: 09:07:37:82:88:f4:ec:c7:ab:81:86:ca:25:fa:a6: 2c:f6:0c:f2:a4:8e:42:94:dc:25:49:aa:7b:3a:0d: 47:06:24:7d:9a:6c:69:f9:a0:6c:11:24:b4:af:4d: c2:a4:57:33:88:2c:fe:4c:62:e9:ab:8f:01:7d:01: 3d:60:8b:4d:b6:7e:cc:95:b9:c7:0d:a6:bd:9e:06: 53:bc:d3:05:1a:72:94:1a:6a:52:87:78:fd:3a:5c: fb:d4:ca:1c:c8:4d:06:70:74:97:68:dc:0c:e9:ed: f6:9b:d8:b3:bc:15:61:98:bd:5d:35:b4:6c:6d:6f: 5b:32:17:f4:08:39:0c:25:86:f0:7d:9a:b8:c5:75: f8:78:5f:8c:15:e1:db:e9:de:49:90:9a:8f:18:85: 51:de:b0:b5:63:0d:e6:24:5c:21:89:d9:aa:2a:c5: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:23:76:02:DC:97:21:C4:60:09:42:34:0D:FC:FF:CE:88:76:B3:4C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213124.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:2001::-2a0f:6283:2002:ffff:ffff:ffff:ffff:ffff 2a0f:6283:2048::/45 Signature Algorithm: sha256WithRSAEncryption 06:c6:e4:a3:56:71:98:c9:89:62:86:dc:a3:78:65:0d:7b:ba: 03:77:46:ea:35:13:be:6b:12:57:37:00:d5:7c:e0:f1:4e:af: df:93:41:54:7c:4c:0b:7d:d6:09:52:cd:bd:05:10:52:ed:f8: 20:52:00:95:f7:89:e6:57:0c:05:98:35:d0:00:d1:ae:8e:83: 38:d0:19:81:e1:e8:65:73:a3:6a:f6:ed:83:5b:88:d3:4c:ad: 6c:fe:f3:c6:43:89:3f:92:ca:bf:c5:f3:f3:80:70:db:fe:a7: 9f:b5:e8:d3:69:ab:9f:a0:4e:33:21:04:7e:49:22:e0:6d:c8: 8f:ce:78:f6:ce:9c:43:fa:9f:3a:c2:50:71:f3:c4:f7:15:20: 0d:ac:e9:7b:71:53:71:9e:3d:5b:73:e7:db:04:fc:71:db:f7: 98:dc:43:8b:1c:52:4f:34:99:00:73:e0:ad:f4:d7:dc:fd:6f: bf:08:e8:dd:8d:61:72:5f:8f:7c:06:e0:67:79:c7:f4:8a:74: 22:7a:ea:62:70:04:6d:9f:61:a6:8d:89:69:d0:be:46:e1:5b: b1:07:db:87:28:41:8e:a3:00:b7:57:24:d6:4b:97:8f:37:d3: 3b:32:f0:d2:69:57:b1:26:f2:0a:d0:ac:08:68:09:38:0e:32: 61:ea:b8:58 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUSpm2vcAakE4efjeXUWt9z1qYL4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MTYwMTAyMzRaFw0yNjA3MTUwMTA3MzRaMDMxMTAvBgNV BAMTKEIyMjM3NjAyREM5NzIxQzQ2MDA5NDIzNDBERkNGRkNFODg3NkIzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZe248LHJHLMrgsBhwrZ5RMej Ni/ABgkxcGssNSoAPXGc7DLoDuxjXqB+fCVm0hFD1TJjSlziF7LKQawK0metLo4J VSLorjBoZdHFfRv0VZciCHBpISJOEQkHN4KI9OzHq4GGyiX6piz2DPKkjkKU3CVJ qns6DUcGJH2abGn5oGwRJLSvTcKkVzOILP5MYumrjwF9AT1gi022fsyVuccNpr2e BlO80wUacpQaalKHeP06XPvUyhzITQZwdJdo3Azp7fab2LO8FWGYvV01tGxtb1sy F/QIOQwlhvB9mrjFdfh4X4wV4dvp3kmQmo8YhVHesLVjDeYkXCGJ2aoqxZ4zAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUsiN2AtyXIcRgCUI0Dfz/zoh2s0wwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTMxMjQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMCMEAgACMB0wEgMH ACoPYoMgAQMHACoPYoMgAgMHAyoPYoMgSDANBgkqhkiG9w0BAQsFAAOCAQEABsbk o1ZxmMmJYobco3hlDXu6A3dG6jUTvmsSVzcA1Xzg8U6v35NBVHxMC33WCVLNvQUQ Uu34IFIAlfeJ5lcMBZg10ADRro6DONAZgeHoZXOjavbtg1uI00ytbP7zxkOJP5LK v8Xz84Bw2/6nn7Xo02mrn6BOMyEEfkki4G3Ij8549s6cQ/qfOsJQcfPE9xUgDazp e3FTcZ49W3Pn2wT8cdv3mNxDixxSTzSZAHPgrfTX3P1vvwjo3Y1hcl+PfAbgZ3nH 9Ip0InrqYnAEbZ9hpo2JadC+RuFbsQfbhyhBjqMAt1ck1kuXjzfTOzLw0mlXsSby CtCsCGgJOA4yYeq4WA== -----END CERTIFICATE-----Generated at Wed Aug 6 16:14:16 2025 by rpki-client