$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213641.roa File: AS213641.roa (raw, json) Hash identifier: 1n605SBaxagw+mCxDI3ERPve4Az0DPTbUoFtbaEET8g= Subject key identifier: 32:5A:D3:0D:64:F2:54:DC:C2:57:8E:6B:FC:DD:B7:FD:D7:C6:E3:0E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 29E87D971BA587D1F113AA781583020867A46EAE Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213641.roa Signing time: Mon 20 Oct 2025 11:59:49 +0000 ROA not before: Mon 20 Oct 2025 11:54:49 +0000 ROA not after: Mon 19 Oct 2026 11:59:49 +0000 asID: 213641 IP address blocks: 2a05:dfc3:fd50::/44 maxlen: 48 2a05:dfc3:fd50::/48 maxlen: 48 2a05:dfc3:fd51::/48 maxlen: 48 2a05:dfc3:fd53::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e8:7d:97:1b:a5:87:d1:f1:13:aa:78:15:83:02:08:67:a4:6e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 20 11:54:49 2025 GMT Not After : Oct 19 11:59:49 2026 GMT Subject: CN=325AD30D64F254DCC2578E6BFCDDB7FDD7C6E30E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:aa:c9:5b:c2:ce:2d:07:10:bc:6a:3a:10: 82:be:41:71:8c:22:54:97:4e:86:3b:ed:ea:5c:1a: 1f:86:5e:a5:42:bb:02:20:59:c1:93:96:9b:f5:97: 3e:77:ea:69:d1:cd:7f:ba:65:c7:ca:44:75:80:4d: da:a1:fb:32:fa:0f:d8:2d:b9:73:a1:15:4d:ee:27: 87:03:2a:46:1c:bc:f7:82:54:c4:0f:ae:47:5d:c4: d1:13:77:ba:a8:b4:e5:44:4b:81:b2:8d:7e:a1:9f: d2:3a:f7:d5:69:52:32:ff:8e:9c:6b:32:ed:5b:cd: be:32:33:6c:c4:57:9a:67:57:b8:81:0d:d4:07:ee: 5c:9c:0f:58:76:96:30:3e:84:28:df:1e:ae:c6:c7: 7e:ad:4a:c3:f0:ea:71:2d:d3:10:47:fa:57:08:87: 78:d5:fc:77:7d:1e:39:f3:19:32:29:d6:aa:c9:4f: dc:d9:3a:74:33:87:ca:15:21:6f:6f:f1:5a:49:e6: a5:c9:7a:db:f3:d1:f8:ca:8b:66:1d:f5:6a:12:b4: 32:a9:57:32:17:31:10:ce:0e:ce:a8:47:69:b9:5d: a0:1f:23:e0:e8:98:7c:0e:61:e6:78:a5:13:af:5d: 75:5d:59:41:cc:13:9d:3c:92:a7:6b:bf:13:63:36: c8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5A:D3:0D:64:F2:54:DC:C2:57:8E:6B:FC:DD:B7:FD:D7:C6:E3:0E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd50::/44 Signature Algorithm: sha256WithRSAEncryption 51:0b:df:b0:b0:0e:35:c2:d8:f5:95:f4:9c:fb:76:2c:b1:98: 3d:1f:42:6c:59:c4:24:06:96:ca:73:4c:6d:78:76:04:fe:59: 95:70:94:a9:a0:b3:ed:8d:4a:c3:c3:38:ac:97:48:5b:53:ef: 16:fa:96:32:26:17:63:e8:6f:c2:c6:3e:00:00:a6:94:f7:10: 8e:25:e6:05:da:db:e1:ce:6e:d5:c1:48:3a:fa:fa:b8:c1:eb: 0a:55:86:07:11:19:30:47:54:59:00:77:f8:57:a0:ca:17:77: 49:ff:8b:94:a7:30:d0:a2:4a:2d:08:5c:67:5c:7a:41:14:db: 77:53:2a:68:c1:0c:04:a6:48:31:7d:25:9e:0d:7b:ae:f4:9a: 06:e8:32:97:f3:bd:ca:60:56:72:8e:0b:7e:62:84:ea:33:ee: 0b:e8:66:2a:a8:a4:88:82:a1:04:de:0e:d2:8f:76:ff:0b:58: fe:dd:2e:f5:3d:03:09:75:2f:f2:bc:39:d4:30:0b:11:a3:1a: 97:34:b8:9b:af:f7:31:2e:40:41:79:2d:12:08:ea:5c:2b:d7: e3:e2:39:95:ce:74:df:8f:fa:23:f2:e9:de:7a:4f:c6:c9:1b: 0c:f8:f6:06:a3:6e:22:de:ca:8d:37:01:2f:94:ee:a6:e5:83: 8b:28:f8:94 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUKeh9lxulh9HxE6p4FYMCCGekbq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEwMjAxMTU0NDlaFw0yNjEwMTkxMTU5NDlaMDMxMTAvBgNV BAMTKDMyNUFEMzBENjRGMjU0RENDMjU3OEU2QkZDRERCN0ZERDdDNkUzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyP6rJW8LOLQcQvGo6EIK+QXGM IlSXToY77epcGh+GXqVCuwIgWcGTlpv1lz536mnRzX+6ZcfKRHWATdqh+zL6D9gt uXOhFU3uJ4cDKkYcvPeCVMQPrkddxNETd7qotOVES4GyjX6hn9I699VpUjL/jpxr Mu1bzb4yM2zEV5pnV7iBDdQH7lycD1h2ljA+hCjfHq7Gx36tSsPw6nEt0xBH+lcI h3jV/Hd9HjnzGTIp1qrJT9zZOnQzh8oVIW9v8VpJ5qXJetvz0fjKi2Yd9WoStDKp VzIXMRDODs6oR2m5XaAfI+DomHwOYeZ4pROvXXVdWUHME508kqdrvxNjNsi9AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUMlrTDWTyVNzCV45r/N23/dfG4w4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM2NDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq Bd/D/VAwDQYJKoZIhvcNAQELBQADggEBAFEL37CwDjXC2PWV9Jz7diyxmD0fQmxZ xCQGlspzTG14dgT+WZVwlKmgs+2NSsPDOKyXSFtT7xb6ljImF2Pob8LGPgAAppT3 EI4l5gXa2+HObtXBSDr6+rjB6wpVhgcRGTBHVFkAd/hXoMoXd0n/i5SnMNCiSi0I XGdcekEU23dTKmjBDASmSDF9JZ4Ne670mgboMpfzvcpgVnKOC35ihOoz7gvoZiqo pIiCoQTeDtKPdv8LWP7dLvU9Awl1L/K8OdQwCxGjGpc0uJuv9zEuQEF5LRII6lwr 1+PiOZXOdN+P+iPy6d56T8bJGwz49gajbiLeyo03AS+U7qblg4so+JQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:31:41 2025 by rpki-client