$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214299.roa File: AS214299.roa (raw, json) Hash identifier: yn01xjaibdRFqZIewUXCm274raobxHeZEvcK/waqHzs= Subject key identifier: EF:38:4E:BB:61:74:52:5D:FD:AE:C7:C0:30:06:78:81:0D:00:F6:FC Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 248E3CDE969852DA2E4330136272EE14093417D6 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214299.roa Signing time: Wed 29 Oct 2025 17:54:11 +0000 ROA not before: Wed 29 Oct 2025 17:49:11 +0000 ROA not after: Wed 28 Oct 2026 17:54:11 +0000 asID: 214299 IP address blocks: 2a05:dfc3:fd40::/44 maxlen: 52 2a05:dfc3:fd40::/48 maxlen: 48 2a09:54c7:1000::/48 maxlen: 48 2a0f:6284:1000::/36 maxlen: 36 2a0f:6284:1100::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8e:3c:de:96:98:52:da:2e:43:30:13:62:72:ee:14:09:34:17:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 29 17:49:11 2025 GMT Not After : Oct 28 17:54:11 2026 GMT Subject: CN=EF384EBB6174525DFDAEC7C0300678810D00F6FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:ed:e3:9c:70:14:9f:f3:27:e1:47:4e:e3: 72:0e:15:8b:28:30:9b:17:a3:a8:2d:3c:79:32:84: 6f:d6:dc:a5:21:7c:3a:ba:d6:8f:4f:1e:4d:33:c1: 31:b8:f0:3f:ba:3b:a9:fa:24:8a:84:e8:c8:bf:c0: 35:f5:ec:4c:d8:58:18:5b:41:30:22:c3:89:a5:a9: cf:82:43:d4:b3:9b:54:a0:75:78:04:8c:c9:62:38: 96:b8:c4:2e:5f:a3:4b:a6:1c:d5:32:04:9e:2c:58: 80:1b:e5:c6:c3:a2:c7:0d:77:be:5a:65:2e:8e:6b: 9b:4a:7b:6d:5d:5c:44:b6:66:98:8d:ad:bf:b8:19: 74:c6:78:e5:25:6d:80:5d:d5:41:a8:8a:04:2c:3b: 0c:58:27:f9:af:17:be:33:8d:f3:b3:cd:2a:ca:0f: d0:14:b5:bc:b4:83:53:e1:8d:51:b5:c7:fd:dd:84: bb:41:8f:ff:9c:9f:24:71:1e:a3:bc:79:fd:e3:6e: c4:b6:9a:b1:67:08:82:9b:a4:47:1b:9e:f7:83:22: 5e:b8:17:71:67:c4:93:36:1e:44:cc:7c:aa:4a:f2: 8e:63:79:91:c9:98:5a:69:42:a1:95:a0:4a:43:50: 54:72:cd:10:76:7c:34:f6:be:eb:de:28:ea:eb:b1: a2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:38:4E:BB:61:74:52:5D:FD:AE:C7:C0:30:06:78:81:0D:00:F6:FC X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd40::/44 2a09:54c7:1000::/48 2a0f:6284:1000::/36 Signature Algorithm: sha256WithRSAEncryption 25:15:05:c8:d8:67:b4:e9:dd:3d:b0:df:5e:94:cb:26:f6:21: aa:ba:43:11:62:69:1a:95:a6:50:e8:50:c5:b1:b9:a9:fb:2b: 78:44:96:03:eb:6a:a5:6d:ae:8a:7e:5a:f5:27:c2:29:94:9f: e1:07:b9:7d:2c:31:f1:91:d3:43:0d:dc:6c:2b:88:81:f2:98: 71:5d:1c:55:4c:e7:15:d0:fc:cc:b8:11:01:64:1a:1f:f3:00: b1:fc:7d:c5:5e:48:72:8f:12:a7:79:5d:d6:0a:1a:60:4f:83: 6c:cf:ec:1a:9c:de:39:23:bf:70:6e:7d:a5:ca:9f:fe:a8:7a: 71:b9:5d:ab:7a:a6:a6:f7:d5:8d:78:a5:21:c7:df:51:15:a3: c9:73:18:a1:93:57:9c:e5:d3:b0:1d:bd:af:d1:b5:10:36:99: 73:bd:90:a7:54:44:65:44:e2:de:74:22:79:dc:cc:d0:23:29: 67:c2:2f:ac:08:18:46:d5:33:6f:69:2d:26:c0:1e:f4:bf:39: c7:c3:76:fe:42:eb:e9:b8:53:51:6d:62:c0:0b:20:06:52:45: 57:a5:74:1a:90:e3:4b:56:75:81:7f:f3:f9:a9:94:c3:87:6c: f4:2f:85:4d:c9:36:31:5c:ed:e2:16:88:ba:36:6c:37:7c:23: a5:ae:bf:5d -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUJI483paYUtouQzATYnLuFAk0F9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEwMjkxNzQ5MTFaFw0yNjEwMjgxNzU0MTFaMDMxMTAvBgNV BAMTKEVGMzg0RUJCNjE3NDUyNURGREFFQzdDMDMwMDY3ODgxMEQwMEY2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPnO3jnHAUn/Mn4UdO43IOFYso MJsXo6gtPHkyhG/W3KUhfDq61o9PHk0zwTG48D+6O6n6JIqE6Mi/wDX17EzYWBhb QTAiw4mlqc+CQ9Szm1SgdXgEjMliOJa4xC5fo0umHNUyBJ4sWIAb5cbDoscNd75a ZS6Oa5tKe21dXES2ZpiNrb+4GXTGeOUlbYBd1UGoigQsOwxYJ/mvF74zjfOzzSrK D9AUtby0g1PhjVG1x/3dhLtBj/+cnyRxHqO8ef3jbsS2mrFnCIKbpEcbnveDIl64 F3FnxJM2HkTMfKpK8o5jeZHJmFppQqGVoEpDUFRyzRB2fDT2vuveKOrrsaJTAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQU7zhOu2F0Ul39rsfAMAZ4gQ0A9vwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQyOTkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgACMBoDBwQq Bd/D/UADBwAqCVTHEAADBgQqD2KEEDANBgkqhkiG9w0BAQsFAAOCAQEAJRUFyNhn tOndPbDfXpTLJvYhqrpDEWJpGpWmUOhQxbG5qfsreESWA+tqpW2uin5a9SfCKZSf 4Qe5fSwx8ZHTQw3cbCuIgfKYcV0cVUznFdD8zLgRAWQaH/MAsfx9xV5Ico8Sp3ld 1goaYE+DbM/sGpzeOSO/cG59pcqf/qh6cbldq3qmpvfVjXilIcffURWjyXMYoZNX nOXTsB29r9G1EDaZc72Qp1REZUTi3nQiedzM0CMpZ8IvrAgYRtUzb2ktJsAe9L85 x8N2/kLr6bhTUW1iwAsgBlJFV6V0GpDjS1Z1gX/z+amUw4ds9C+FTck2MVzt4haI ujZsN3wjpa6/XQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:31:30 2025 by rpki-client