$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214561.roa File: AS214561.roa (raw, json) Hash identifier: c1LeluazpMZeeSm6qmH3t0DhEzDIW9hy+1ECnUuwv94= Subject key identifier: 32:44:25:D3:DB:BF:23:94:AF:A6:48:46:E3:43:FA:99:27:70:5D:CC Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 13FC63DFB7DF662595EDBE3508CC2578491BFA55 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214561.roa Signing time: Thu 03 Jul 2025 15:53:08 +0000 ROA not before: Thu 03 Jul 2025 15:48:08 +0000 ROA not after: Thu 02 Jul 2026 15:53:08 +0000 asID: 214561 IP address blocks: 2a05:dfc3:fd60::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 10:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fc:63:df:b7:df:66:25:95:ed:be:35:08:cc:25:78:49:1b:fa:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:48:08 2025 GMT Not After : Jul 2 15:53:08 2026 GMT Subject: CN=324425D3DBBF2394AFA64846E343FA9927705DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:ac:58:ed:10:c2:c1:06:2f:92:f0:56:4b: 4a:85:09:7d:6b:33:85:51:3f:9d:ce:90:09:91:04: 0a:d3:98:0c:5e:1b:f0:cb:1f:c8:ec:d7:07:03:64: c3:6c:61:07:50:8f:9f:19:23:d8:5b:15:79:50:50: 34:11:fd:78:18:55:d7:0a:50:5c:ac:91:dd:64:1d: 93:ef:11:a3:58:a6:68:85:49:b0:b4:bb:91:b3:57: 4b:19:89:27:8b:a4:76:cd:c5:f4:c2:1b:0b:98:2a: e5:10:e4:b8:41:75:9a:b8:ab:d6:57:26:4b:9c:50: 07:b5:6b:81:4e:1e:db:61:53:b1:12:e7:80:3b:e7: 7e:8b:45:a2:9f:6e:f3:08:2a:57:6d:2e:76:72:34: 8f:a5:93:d9:d4:a9:a8:63:7a:4c:ee:0d:c6:5d:6c: e7:6c:ff:dc:83:3b:b4:b2:25:20:b7:65:2e:47:6e: 9c:41:eb:6f:d6:d4:8f:71:b7:1d:96:c4:b7:e4:7e: 7b:e0:5e:4e:cb:0b:6d:bc:24:74:95:69:60:4c:69: 3b:77:fb:e8:84:ff:0c:d5:8f:48:84:99:e6:37:9b: 8e:db:98:90:99:90:61:8e:1e:23:02:dd:c2:fb:7d: 43:e2:05:24:96:df:7f:25:8a:9b:06:56:9b:fa:ee: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:44:25:D3:DB:BF:23:94:AF:A6:48:46:E3:43:FA:99:27:70:5D:CC X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214561.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd60::/44 Signature Algorithm: sha256WithRSAEncryption 59:fe:d9:90:a2:d6:13:d3:2c:97:f9:63:50:56:66:c1:c9:ac: 67:91:f7:ee:c5:bd:90:22:fd:ef:ff:90:84:8e:35:f8:df:38: 62:88:a0:84:55:8d:b3:37:a5:e1:4e:e3:e2:9c:7e:08:47:1f: fa:52:c0:25:e7:53:4c:0d:78:f6:51:7c:53:e9:10:2a:9c:10: a1:7c:3a:2a:4f:18:96:a0:ed:3e:a2:d4:41:ff:ad:25:09:e1: 39:ce:ee:5a:23:70:f8:4f:ba:bc:13:61:40:a8:f7:01:1c:7a: 5e:3d:c3:4e:90:7b:0c:b5:ba:93:c5:90:6c:41:7f:0c:be:08: a3:a2:cc:66:c2:6f:67:e7:7c:d1:ca:2e:8e:f9:0c:71:61:b6: d6:01:12:3c:61:04:7b:91:e4:81:31:11:1c:f4:84:f4:a0:0e: 6a:ae:7f:41:d1:5e:b3:12:4c:30:dd:82:d6:20:5a:50:73:d3: b5:74:cb:18:52:21:eb:24:87:c2:68:f8:31:64:4b:57:eb:9c: 1d:76:cd:52:b6:47:b9:fd:29:b2:7c:aa:ad:09:51:20:91:ce: c1:fb:f9:1a:60:a9:85:79:a7:a3:59:39:ec:01:ee:f1:82:c3: 07:06:f1:11:16:05:ee:6b:45:13:4e:30:56:74:10:37:90:5a: 7b:76:da:42 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUE/xj37ffZiWV7b41CMwleEkb+lUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ4MDhaFw0yNjA3MDIxNTUzMDhaMDMxMTAvBgNV BAMTKDMyNDQyNUQzREJCRjIzOTRBRkE2NDg0NkUzNDNGQTk5Mjc3MDVEQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2V6xY7RDCwQYvkvBWS0qFCX1r M4VRP53OkAmRBArTmAxeG/DLH8js1wcDZMNsYQdQj58ZI9hbFXlQUDQR/XgYVdcK UFyskd1kHZPvEaNYpmiFSbC0u5GzV0sZiSeLpHbNxfTCGwuYKuUQ5LhBdZq4q9ZX JkucUAe1a4FOHtthU7ES54A7536LRaKfbvMIKldtLnZyNI+lk9nUqahjekzuDcZd bOds/9yDO7SyJSC3ZS5HbpxB62/W1I9xtx2WxLfkfnvgXk7LC228JHSVaWBMaTt3 ++iE/wzVj0iEmeY3m47bmJCZkGGOHiMC3cL7fUPiBSSW338lipsGVpv67rJpAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUMkQl09u/I5SvpkhG40P6mSdwXcwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ1NjEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq Bd/D/WAwDQYJKoZIhvcNAQELBQADggEBAFn+2ZCi1hPTLJf5Y1BWZsHJrGeR9+7F vZAi/e//kISONfjfOGKIoIRVjbM3peFO4+KcfghHH/pSwCXnU0wNePZRfFPpECqc EKF8OipPGJag7T6i1EH/rSUJ4TnO7lojcPhPurwTYUCo9wEcel49w06Qewy1upPF kGxBfwy+CKOizGbCb2fnfNHKLo75DHFhttYBEjxhBHuR5IExERz0hPSgDmquf0HR XrMSTDDdgtYgWlBz07V0yxhSIeskh8Jo+DFkS1frnB12zVK2R7n9KbJ8qq0JUSCR zsH7+RpgqYV5p6NZOewB7vGCwwcG8REWBe5rRRNOMFZ0EDeQWnt22kI= -----END CERTIFICATE-----Generated at Wed Nov 5 20:51:00 2025 by rpki-client