$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS215196.roa File: AS215196.roa (raw, json) Hash identifier: BGG22ekP1tcb0y+efLpL6Y2ObLGVqsTu+ZLXKbjwWZQ= Subject key identifier: 3A:AE:A6:22:65:4B:67:8C:6F:71:C1:9F:D6:A1:72:74:3C:B4:4D:79 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 758593548DC1327902EF84B0543AA78220A1EA36 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215196.roa Signing time: Fri 11 Sep 2026 08:40:30 +0000 ROA not before: Fri 11 Sep 2026 08:35:30 +0000 ROA not after: Fri 10 Sep 2027 08:40:30 +0000 asID: 215196 IP address blocks: 2a0f:6284:4214::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:85:93:54:8d:c1:32:79:02:ef:84:b0:54:3a:a7:82:20:a1:ea:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 11 08:35:30 2026 GMT Not After : Sep 10 08:40:30 2027 GMT Subject: CN=3AAEA622654B678C6F71C19FD6A172743CB44D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:1d:99:b9:0b:be:25:44:93:e1:50:7d:c5: 87:1c:c3:b3:89:fe:09:55:30:d7:8f:7e:0f:a6:6c: 0a:a2:ba:6d:04:50:4b:4b:db:86:6c:75:aa:32:86: b4:06:3b:47:eb:b3:62:8f:d8:57:83:4a:a2:fa:54: 27:23:34:99:72:a5:d8:3f:bb:a1:09:5f:95:08:d0: cf:4d:ec:89:55:1c:fb:de:7a:d6:74:30:07:8e:3a: 99:b1:e2:02:fd:e8:21:75:76:cd:ad:f5:70:fe:a6: 1f:de:f9:8b:96:4a:1b:99:7b:7b:53:09:f0:8d:fb: a4:0b:4a:02:df:3e:f2:12:7d:33:d3:e8:95:b5:b4: d6:81:1a:84:85:b3:06:74:fa:ba:78:10:68:6c:1f: 78:b9:a9:9a:dc:a5:44:91:54:34:8f:16:67:b1:14: d3:19:49:59:ab:8a:40:25:e6:62:64:61:c8:e9:b3: 94:5c:44:55:bd:85:fe:bf:fd:95:12:90:5d:cd:ee: 9b:f1:1e:a9:1f:98:2d:70:eb:db:97:fe:94:3e:c0: c1:e4:e0:cc:ab:2c:5d:63:f3:18:24:dc:2b:7a:36: 61:40:5a:98:cf:8c:21:dd:74:72:64:08:35:de:bf: 6c:a7:a5:98:0a:df:6f:be:19:7e:77:40:51:f9:f1: f9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AE:A6:22:65:4B:67:8C:6F:71:C1:9F:D6:A1:72:74:3C:B4:4D:79 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215196.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4214::/48 Signature Algorithm: sha256WithRSAEncryption 6b:d1:b0:82:9a:5d:30:04:65:50:e8:2f:95:3f:1a:54:e0:07: fc:a1:0d:4a:a6:05:cf:10:82:b9:b8:71:47:d2:ed:81:53:62: ef:c4:9c:0f:8d:cf:29:4e:59:3c:bf:2a:51:dc:77:80:ab:7c: de:6e:ec:11:2e:80:98:71:b7:89:4f:17:36:ff:72:87:54:ca: c1:be:dd:8b:09:27:5a:3b:24:58:cc:e2:c6:a3:47:aa:de:75: 88:c9:de:99:ea:57:43:0a:02:3b:ed:db:73:13:2b:5d:a0:84: b2:9f:e9:7a:c6:ce:98:eb:97:e4:6c:04:d2:0e:fe:a8:5b:3e: 40:99:79:3f:aa:c5:ad:7b:1b:a0:78:33:4f:a7:0d:eb:b9:74: 93:d0:c2:98:fe:b3:c3:58:77:44:bb:66:31:c7:ba:a2:12:cb: 56:b0:91:1e:04:a3:5e:78:2a:1a:ad:10:52:46:f1:c9:96:e6: 44:af:b7:a4:e5:3e:de:8a:29:9e:cc:ab:61:a7:92:56:2c:9f: fa:6b:57:ac:ad:d7:58:54:66:c9:bf:11:dc:34:c2:de:71:48: 99:d8:dd:14:3f:41:ec:e8:be:23:d7:b1:61:64:ab:53:9a:da: 0b:69:2b:43:63:ca:50:58:b9:2e:04:24:4f:48:b3:37:2c:43: 6e:f3:e6:79 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUdYWTVI3BMnkC74SwVDqngiCh6jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTEwODM1MzBaFw0yNzA5MTAwODQwMzBaMDMxMTAvBgNV BAMTKDNBQUVBNjIyNjU0QjY3OEM2RjcxQzE5RkQ2QTE3Mjc0M0NCNDRENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2R2ZuQu+JUST4VB9xYccw7OJ /glVMNePfg+mbAqium0EUEtL24ZsdaoyhrQGO0frs2KP2FeDSqL6VCcjNJlypdg/ u6EJX5UI0M9N7IlVHPveetZ0MAeOOpmx4gL96CF1ds2t9XD+ph/e+YuWShuZe3tT CfCN+6QLSgLfPvISfTPT6JW1tNaBGoSFswZ0+rp4EGhsH3i5qZrcpUSRVDSPFmex FNMZSVmrikAl5mJkYcjps5RcRFW9hf6//ZUSkF3N7pvxHqkfmC1w69uX/pQ+wMHk 4MyrLF1j8xgk3Ct6NmFAWpjPjCHddHJkCDXev2ynpZgK32++GX53QFH58fkPAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUOq6mImVLZ4xvccGf1qFydDy0TXkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUxOTYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEQhQwDQYJKoZIhvcNAQELBQADggEBAGvRsIKaXTAEZVDoL5U/GlTgB/yhDUqm Bc8Qgrm4cUfS7YFTYu/EnA+NzylOWTy/KlHcd4CrfN5u7BEugJhxt4lPFzb/codU ysG+3YsJJ1o7JFjM4sajR6redYjJ3pnqV0MKAjvt23MTK12ghLKf6XrGzpjrl+Rs BNIO/qhbPkCZeT+qxa17G6B4M0+nDeu5dJPQwpj+s8NYd0S7ZjHHuqISy1awkR4E o154KhqtEFJG8cmW5kSvt6TlPt6KKZ7Mq2GnklYsn/prV6yt11hUZsm/Edw0wt5x SJnY3RQ/QezoviPXsWFkq1Oa2gtpK0NjylBYuS4EJE9IszcsQ27z5nk= -----END CERTIFICATE-----Generated at Sun Sep 20 19:54:55 2026 by rpki-client