$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215575.roa File: AS215575.roa (raw, json) Hash identifier: MSoOB8fdtZ5QI4ulDDut3vb0lbzCo5FRILo7bld4xKI= Subject key identifier: 0A:24:EE:78:2B:C0:4E:76:A7:A7:75:0D:FC:DA:8E:FB:9E:1C:F5:12 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 787815162E581C9B58D22F502F5567B843DB9AFC Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215575.roa Signing time: Wed 22 Oct 2025 11:39:09 +0000 ROA not before: Wed 22 Oct 2025 11:34:09 +0000 ROA not after: Wed 21 Oct 2026 11:39:09 +0000 asID: 215575 IP address blocks: 2a0a:6044:6800::/40 maxlen: 40 2a0a:6044:ac80::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:78:15:16:2e:58:1c:9b:58:d2:2f:50:2f:55:67:b8:43:db:9a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 22 11:34:09 2025 GMT Not After : Oct 21 11:39:09 2026 GMT Subject: CN=0A24EE782BC04E76A7A7750DFCDA8EFB9E1CF512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:39:a5:de:12:46:34:df:49:04:46:74:6d: dc:a0:90:82:11:41:62:62:b6:c2:56:1c:cd:84:0d: 0b:f4:70:93:ab:ce:fd:19:85:67:af:ce:52:63:0c: cf:4f:58:e4:ff:4d:9c:da:29:62:ae:96:04:0f:07: 8a:60:5d:f5:a9:6b:e0:52:9a:e4:aa:2d:53:66:d0: 4a:db:02:e0:09:00:61:10:87:ec:79:d9:02:ed:13: 37:3d:60:6f:90:aa:57:db:24:2c:61:25:66:b3:35: 1e:09:c4:3e:d4:a7:d0:fb:16:e2:54:c0:e4:32:05: a2:76:f5:7c:a9:b2:a7:bf:d9:13:e6:28:36:fc:11: 4b:e9:7e:87:e3:8d:82:6c:ef:13:56:78:15:8c:2a: 83:64:e2:12:ec:98:a0:93:6e:f5:91:62:4d:4e:ae: 04:01:36:38:e1:75:5f:22:2b:cb:84:37:72:6e:1e: 51:4c:c3:b7:b6:2b:cd:95:15:1b:ba:9d:80:72:b0: f1:5a:2d:fd:f7:ec:9d:21:31:7e:91:c9:e2:d0:a0: 22:71:f5:e5:f4:96:35:13:0e:07:7e:c0:ad:5e:a1: c5:fe:56:ea:1e:66:7c:12:b9:e3:a2:33:9f:36:0f: bf:31:56:62:41:d0:f6:e1:89:79:19:3f:7c:fa:49: 3e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:24:EE:78:2B:C0:4E:76:A7:A7:75:0D:FC:DA:8E:FB:9E:1C:F5:12 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215575.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6800::/40 2a0a:6044:ac80::/44 Signature Algorithm: sha256WithRSAEncryption 7e:2e:f3:f7:5a:22:8e:6f:c6:f2:58:c0:60:3f:56:94:11:ae: 6d:2c:7f:bb:4b:9c:c1:36:29:c1:e0:55:4f:7a:11:12:e0:ef: c3:b5:69:ac:67:5f:d4:17:6f:47:66:34:5d:08:4f:a0:1a:33: 15:37:9b:cf:50:bd:39:5a:c7:11:3d:ba:86:e2:a7:43:d1:bc: 01:3f:65:a5:ed:53:de:56:b0:97:ba:f7:55:48:bf:b4:0f:2b: c3:0e:ef:bf:0a:7c:a1:02:c1:d7:4d:ec:9d:14:a4:99:33:e4: 25:cf:3c:9c:5b:c1:c0:14:4d:4b:42:83:66:f2:c4:3c:e0:85: 63:96:17:dc:d1:3b:0c:3b:e8:7d:cb:e4:93:3d:2d:b0:b6:be: b0:bd:64:59:76:9d:15:39:eb:c0:f1:d5:03:08:c7:b9:43:8f: bf:3e:05:23:52:d1:dd:3e:4f:d9:1e:da:2f:f6:9f:fd:c5:cf: 98:27:f2:e0:7e:9c:92:47:16:2f:a4:ce:05:ee:0d:aa:19:96: 9c:f3:6c:1e:99:84:54:28:37:52:dd:b5:f0:6e:30:a7:89:29: eb:37:43:be:fe:c9:36:8c:f3:d9:17:5b:fd:f2:48:a9:1d:f2: 40:78:e3:60:57:d1:25:e6:ea:e6:8a:85:0d:63:b3:2a:12:04: ca:27:3c:8e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUeHgVFi5YHJtY0i9QL1VnuEPbmvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEwMjIxMTM0MDlaFw0yNjEwMjExMTM5MDlaMDMxMTAvBgNV BAMTKDBBMjRFRTc4MkJDMDRFNzZBN0E3NzUwREZDREE4RUZCOUUxQ0Y1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4jml3hJGNN9JBEZ0bdygkIIR QWJitsJWHM2EDQv0cJOrzv0ZhWevzlJjDM9PWOT/TZzaKWKulgQPB4pgXfWpa+BS muSqLVNm0ErbAuAJAGEQh+x52QLtEzc9YG+QqlfbJCxhJWazNR4JxD7Up9D7FuJU wOQyBaJ29Xypsqe/2RPmKDb8EUvpfofjjYJs7xNWeBWMKoNk4hLsmKCTbvWRYk1O rgQBNjjhdV8iK8uEN3JuHlFMw7e2K82VFRu6nYBysPFaLf337J0hMX6RyeLQoCJx 9eX0ljUTDgd+wK1eocX+VuoeZnwSueOiM582D78xVmJB0PbhiXkZP3z6ST6JAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUCiTueCvATnanp3UN/NqO+54c9RIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTU1NzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBgAq CmBEaAMHBCoKYESsgDANBgkqhkiG9w0BAQsFAAOCAQEAfi7z91oijm/G8ljAYD9W lBGubSx/u0ucwTYpweBVT3oREuDvw7VprGdf1BdvR2Y0XQhPoBozFTebz1C9OVrH ET26huKnQ9G8AT9lpe1T3lawl7r3VUi/tA8rww7vvwp8oQLB103snRSkmTPkJc88 nFvBwBRNS0KDZvLEPOCFY5YX3NE7DDvofcvkkz0tsLa+sL1kWXadFTnrwPHVAwjH uUOPvz4FI1LR3T5P2R7aL/af/cXPmCfy4H6ckkcWL6TOBe4NqhmWnPNsHpmEVCg3 Ut218G4wp4kp6zdDvv7JNozz2Rdb/fJIqR3yQHjjYFfRJebq5oqFDWOzKhIEyic8 jg== -----END CERTIFICATE-----Generated at Wed Nov 5 00:49:16 2025 by rpki-client