$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214660.roa File: AS214660.roa (raw, json) Hash identifier: YRBJKer0LDgv0UmurXWLPqpYoUJSnDcQBzli/Tj9WFQ= Subject key identifier: 70:C1:29:B9:0D:AC:8C:AD:6D:20:BC:CE:9D:3C:1D:12:52:26:52:13 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6BB23FC0F455D5515ECAA779D3185326CF05C883 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214660.roa Signing time: Thu 03 Jul 2025 15:52:59 +0000 ROA not before: Thu 03 Jul 2025 15:47:59 +0000 ROA not after: Thu 02 Jul 2026 15:52:59 +0000 asID: 214660 IP address blocks: 2a0a:6044:6600::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b2:3f:c0:f4:55:d5:51:5e:ca:a7:79:d3:18:53:26:cf:05:c8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:47:59 2025 GMT Not After : Jul 2 15:52:59 2026 GMT Subject: CN=70C129B90DAC8CAD6D20BCCE9D3C1D1252265213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7c:c7:48:6f:fd:63:d6:d6:4a:49:27:4f:12: 69:4b:7a:8d:65:a9:87:d1:74:a9:68:0a:7d:fb:50: 3c:1b:2d:21:62:26:e9:63:b2:79:c4:c1:1d:e7:9f: ab:24:fb:6f:27:ec:a5:40:d6:c4:de:8c:f4:29:16: 33:df:9b:5e:50:a3:6d:7f:3d:0d:1f:3a:5d:51:76: 1c:b1:ec:5b:86:ca:9e:10:75:a5:05:12:f4:01:dd: 91:e2:f1:3c:a8:b1:e7:74:79:11:a1:af:0c:4a:c7: 5d:5f:3e:eb:49:13:36:55:41:ff:3c:71:62:7a:36: 56:f3:5c:bf:27:dd:11:4e:95:bd:78:9e:0c:61:4d: c6:33:78:a5:17:5a:f0:d1:75:6f:2d:fc:7f:7a:bd: 9b:d5:51:d4:ec:c0:51:2b:d2:23:29:8e:d9:4e:2f: e5:87:a0:8c:38:c5:6a:a0:59:e7:14:02:19:7e:b1: e9:d1:bd:2b:94:a3:da:3d:95:e0:c3:c9:8b:c1:29: 7d:30:e2:2c:27:e6:5d:17:04:28:26:39:0e:71:7e: 71:f1:ec:48:4c:f7:49:9c:d2:f0:5b:bf:52:14:2b: e2:99:25:d2:ee:62:11:1c:b8:96:92:c0:97:17:b4: 11:7f:98:29:94:17:ca:b7:ba:d1:9c:b5:93:f5:89: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C1:29:B9:0D:AC:8C:AD:6D:20:BC:CE:9D:3C:1D:12:52:26:52:13 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214660.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6600::/40 Signature Algorithm: sha256WithRSAEncryption 62:05:78:c9:53:25:62:87:a9:72:b9:6a:b0:b9:ee:3c:05:76: 49:cd:45:64:e0:93:29:95:f0:bd:06:6b:83:32:c5:cf:17:c7: e1:28:e1:61:ed:fb:da:6a:a3:d7:1c:a0:b4:6f:88:ce:f2:93: bb:6f:ac:df:2a:a9:9a:85:49:a5:bd:83:28:27:0e:18:c7:84: 13:db:1a:1e:a4:e6:69:b4:2d:9b:f3:cb:9a:9f:96:bf:d7:49: f5:69:72:04:e8:24:c8:d3:31:19:47:de:10:89:aa:4f:4f:35: 58:0c:1e:0a:17:90:fc:85:db:ee:22:a7:49:57:c6:ff:92:05: cf:5c:04:93:2e:a3:a8:0b:63:c0:86:06:e1:e8:0a:89:8e:0a: 55:e3:ee:cf:9d:9f:4a:d0:e6:ba:62:f4:b0:0c:d0:44:44:33: 06:c4:68:af:60:9f:37:a5:d5:1a:44:30:08:2c:10:44:79:79: 76:3e:d6:2d:8d:ee:90:34:0d:94:73:bf:c1:dc:00:7b:b8:22: 30:1a:e0:d5:b4:3c:88:e3:f6:a8:14:a6:ce:8f:ff:90:1e:85: 4a:69:e0:7e:24:be:55:ec:65:12:d1:47:94:7b:01:8b:03:96: 3a:60:21:e1:a4:11:ea:a7:89:d1:0d:50:5b:1a:23:9c:f7:69: 8b:58:ac:03 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUa7I/wPRV1VFeyqd50xhTJs8FyIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ3NTlaFw0yNjA3MDIxNTUyNTlaMDMxMTAvBgNV BAMTKDcwQzEyOUI5MERBQzhDQUQ2RDIwQkNDRTlEM0MxRDEyNTIyNjUyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnfMdIb/1j1tZKSSdPEmlLeo1l qYfRdKloCn37UDwbLSFiJuljsnnEwR3nn6sk+28n7KVA1sTejPQpFjPfm15Qo21/ PQ0fOl1Rdhyx7FuGyp4QdaUFEvQB3ZHi8Tyosed0eRGhrwxKx11fPutJEzZVQf88 cWJ6NlbzXL8n3RFOlb14ngxhTcYzeKUXWvDRdW8t/H96vZvVUdTswFEr0iMpjtlO L+WHoIw4xWqgWecUAhl+senRvSuUo9o9leDDyYvBKX0w4iwn5l0XBCgmOQ5xfnHx 7EhM90mc0vBbv1IUK+KZJdLuYhEcuJaSwJcXtBF/mCmUF8q3utGctZP1iUdhAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUcMEpuQ2sjK1tILzOnTwdElImUhMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ2NjAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEZjANBgkqhkiG9w0BAQsFAAOCAQEAYgV4yVMlYoepcrlqsLnuPAV2Sc1FZOCT KZXwvQZrgzLFzxfH4SjhYe372mqj1xygtG+IzvKTu2+s3yqpmoVJpb2DKCcOGMeE E9saHqTmabQtm/PLmp+Wv9dJ9WlyBOgkyNMxGUfeEImqT081WAweCheQ/IXb7iKn SVfG/5IFz1wEky6jqAtjwIYG4egKiY4KVePuz52fStDmumL0sAzQREQzBsRor2Cf N6XVGkQwCCwQRHl5dj7WLY3ukDQNlHO/wdwAe7giMBrg1bQ8iOP2qBSmzo//kB6F SmngfiS+VexlEtFHlHsBiwOWOmAh4aQR6qeJ0Q1QWxojnPdpi1isAw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:43:58 2025 by rpki-client