$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215216.roa File: AS215216.roa (raw, json) Hash identifier: cMcgCiZ4/OYsYoltoEWmwqYAvqjT91DGDN8WOvMOQN4= Subject key identifier: 5C:60:A3:9D:FE:DC:E6:FA:49:21:70:DA:A7:CF:35:CF:3A:CB:02:B9 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 490845163F5CF83781E656951FA8782BD530CA50 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215216.roa Signing time: Thu 04 Jun 2026 16:51:47 +0000 ROA not before: Thu 04 Jun 2026 16:46:47 +0000 ROA not after: Thu 03 Jun 2027 16:51:47 +0000 asID: 215216 IP address blocks: 2a0a:6044:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:08:45:16:3f:5c:f8:37:81:e6:56:95:1f:a8:78:2b:d5:30:ca:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 4 16:46:47 2026 GMT Not After : Jun 3 16:51:47 2027 GMT Subject: CN=5C60A39DFEDCE6FA492170DAA7CF35CF3ACB02B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:90:4d:a0:9c:72:2e:08:14:c9:50:ad:f4: c1:09:d7:af:f7:a1:d6:34:a0:67:e4:51:c1:93:35: d7:be:ff:70:bc:03:28:31:13:c6:22:c1:21:ee:4c: 2c:45:da:64:45:31:76:4e:90:2a:b6:82:63:c5:16: 8a:ca:ad:f1:da:f0:5a:cf:6b:b1:eb:65:4d:83:d5: be:d5:c6:87:39:1c:4a:48:e8:53:d2:ee:81:fb:c0: 77:62:3c:a2:38:c9:00:57:cb:9f:1a:f1:d5:93:00: 28:20:a8:19:b6:d6:79:19:58:a5:db:94:8a:6b:b3: d9:65:61:46:9f:25:23:49:8e:f6:e3:65:e6:de:d6: e7:56:a7:ec:72:70:e6:b8:82:0e:42:10:12:9d:40: c9:55:97:f5:d2:e0:07:0c:eb:c9:71:ab:e8:9e:1e: 37:ee:ca:b8:57:ff:f4:3c:19:5d:d7:1f:77:b2:fd: 78:5b:58:69:7a:a9:d5:5e:d7:34:f5:57:dc:08:38: 18:8a:29:65:50:ad:d3:ff:f3:ab:ad:4f:cf:af:2e: 6d:d0:11:2b:74:1f:63:c3:8f:81:84:cc:10:52:5e: 97:fd:7a:83:b1:c7:8f:d1:3b:33:56:01:8e:d8:10: 32:50:d6:08:e9:3d:79:21:bd:6d:d4:1c:9e:59:4d: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:60:A3:9D:FE:DC:E6:FA:49:21:70:DA:A7:CF:35:CF:3A:CB:02:B9 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215216.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:18:cd:14:3f:8c:0e:3d:00:79:99:b9:98:0e:0f:db:4d:f8: 1d:c2:ef:8a:36:e5:3e:d4:52:0b:8e:05:e4:21:ac:bf:c9:25: 0d:8f:5c:6f:4a:af:63:22:c6:4e:74:08:4c:62:51:75:7f:65: 7e:65:81:b9:4e:70:b4:7d:37:19:6d:69:69:25:5a:c7:9c:3b: 42:40:3e:81:0a:a5:a2:92:c2:ed:3d:c8:26:6f:b9:21:49:54: 0c:b4:ce:4b:e3:48:63:7c:74:80:9f:4f:c4:1c:f5:4e:d0:5e: d3:97:49:2c:44:42:b6:46:7a:6d:14:35:dc:8c:4e:e5:14:97: 59:ad:2b:bb:d6:87:5a:29:03:45:72:7e:d8:e5:fe:11:7a:51: 34:a7:cf:98:c4:0b:8d:6b:d0:7c:5f:4c:4e:4f:17:74:d0:39: be:c1:f3:49:a1:91:4e:25:63:46:30:30:d9:95:68:26:65:48: 53:12:e1:ab:0d:43:09:9c:d2:05:43:82:37:4d:11:d0:96:b0: 27:be:d9:22:55:00:77:4e:fc:98:30:71:76:83:07:e7:9e:73: 9f:8b:64:f5:92:22:f1:19:02:e1:24:0a:98:a1:d4:1f:86:cf: 54:b0:b4:53:93:28:83:ce:8c:de:09:f7:8d:7f:04:f4:80:bd: 40:82:fb:5b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUSQhFFj9c+DeB5laVH6h4K9UwylAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDQxNjQ2NDdaFw0yNzA2MDMxNjUxNDdaMDMxMTAvBgNV BAMTKDVDNjBBMzlERkVEQ0U2RkE0OTIxNzBEQUE3Q0YzNUNGM0FDQjAyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QZBNoJxyLggUyVCt9MEJ16/3 odY0oGfkUcGTNde+/3C8AygxE8YiwSHuTCxF2mRFMXZOkCq2gmPFForKrfHa8FrP a7HrZU2D1b7Vxoc5HEpI6FPS7oH7wHdiPKI4yQBXy58a8dWTACggqBm21nkZWKXb lIprs9llYUafJSNJjvbjZebe1udWp+xycOa4gg5CEBKdQMlVl/XS4AcM68lxq+ie HjfuyrhX//Q8GV3XH3ey/XhbWGl6qdVe1zT1V9wIOBiKKWVQrdP/86utT8+vLm3Q ESt0H2PDj4GEzBBSXpf9eoOxx4/ROzNWAY7YEDJQ1gjpPXkhvW3UHJ5ZTW1dAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUXGCjnf7c5vpJIXDap881zzrLArkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUyMTYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEsDANBgkqhkiG9w0BAQsFAAOCAQEACxjNFD+MDj0AeZm5mA4P2034HcLvijbl PtRSC44F5CGsv8klDY9cb0qvYyLGTnQITGJRdX9lfmWBuU5wtH03GW1paSVax5w7 QkA+gQqlopLC7T3IJm+5IUlUDLTOS+NIY3x0gJ9PxBz1TtBe05dJLERCtkZ6bRQ1 3IxO5RSXWa0ru9aHWikDRXJ+2OX+EXpRNKfPmMQLjWvQfF9MTk8XdNA5vsHzSaGR TiVjRjAw2ZVoJmVIUxLhqw1DCZzSBUOCN00R0JawJ77ZIlUAd078mDBxdoMH555z n4tk9ZIi8RkC4SQKmKHUH4bPVLC0U5Mog86M3gn3jX8E9IC9QIL7Ww== -----END CERTIFICATE-----Generated at Wed Jun 17 08:24:19 2026 by rpki-client