$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215820.roa File: AS215820.roa (raw, json) Hash identifier: 7a4Kggg/pyTZHuxgGzU7nUuHlZeTH55g31hj/NpfVP0= Subject key identifier: 00:5A:CA:89:BC:7F:D0:3F:F3:73:50:32:1A:87:35:AF:42:5C:E8:02 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2BA52A7A44279772D7FA5A9595D4D0990C5299A4 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215820.roa Signing time: Tue 09 Jun 2026 10:53:53 +0000 ROA not before: Tue 09 Jun 2026 10:48:53 +0000 ROA not after: Tue 08 Jun 2027 10:53:53 +0000 asID: 215820 IP address blocks: 2a06:1281:6000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 17:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a5:2a:7a:44:27:97:72:d7:fa:5a:95:95:d4:d0:99:0c:52:99:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 9 10:48:53 2026 GMT Not After : Jun 8 10:53:53 2027 GMT Subject: CN=005ACA89BC7FD03FF37350321A8735AF425CE802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4a:39:d5:c2:e0:d1:ef:17:91:b9:24:d6:cd: dc:3d:c2:99:1a:8e:6f:f9:03:e2:ca:90:57:64:12: 74:0b:ae:ad:4f:26:08:cb:ff:62:7f:1b:c0:11:71: fe:ca:a3:25:04:c4:3d:29:32:8b:c8:15:8e:49:08: d9:50:34:fd:6b:67:22:7e:1d:e3:c2:93:68:b6:19: 89:85:9d:92:26:bb:f9:27:46:1f:96:61:70:c8:85: 9b:b6:ef:25:a9:63:4f:16:eb:90:44:be:e4:25:95: 41:0d:67:52:cc:4c:50:ed:4c:58:bb:f9:a9:b0:97: e5:db:21:48:c8:35:84:c2:53:37:ff:d8:98:b7:3c: fb:05:50:fd:a2:63:1b:1b:61:cd:d0:8c:8f:fb:ca: ff:8f:87:b6:79:6a:fc:81:f4:57:2e:8c:cf:7a:12: 3b:36:2e:53:4b:e3:07:11:f1:79:c8:db:6e:ef:8c: 0e:f4:97:a5:9c:4a:fa:76:06:5c:af:83:83:13:fc: 28:1e:69:39:66:a2:72:b9:9e:ec:df:a7:30:0c:3c: 9a:f1:9e:68:cc:ff:0d:f2:20:52:49:e6:4c:47:c2: be:93:10:54:11:15:e0:06:15:ff:01:7e:52:bc:3c: a0:40:03:21:97:24:e7:75:c7:a6:81:18:25:45:d2: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5A:CA:89:BC:7F:D0:3F:F3:73:50:32:1A:87:35:AF:42:5C:E8:02 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215820.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:6000::/36 Signature Algorithm: sha256WithRSAEncryption 5e:0e:be:40:c9:16:c9:7c:91:b9:e9:fa:b7:b7:f8:a2:6b:12: 8a:96:a6:76:9d:ca:3a:7c:a9:80:c8:2b:33:c0:1e:9e:bb:08: 01:09:ed:a7:b9:65:e1:5e:dd:bf:84:eb:52:81:7c:e8:5c:cf: a6:7d:cc:24:0f:b9:4f:30:fd:b6:03:68:aa:73:70:2c:86:d6: c3:25:69:7c:06:7f:b4:03:ff:7a:98:8b:7a:31:ad:52:c1:7f: 62:d1:e6:0d:33:a4:40:03:3a:8b:34:91:cc:48:f9:8e:ce:e6: 07:8c:41:a2:78:c3:c1:f4:f8:a1:f9:23:01:67:8a:cc:5d:59: e1:9a:d4:da:5e:80:6e:1b:c0:4d:06:49:a4:1e:a0:81:7c:44: 94:40:6a:57:91:e3:f7:0e:0e:94:f1:18:cc:4e:34:56:b2:e8: 5f:95:f6:8b:a1:49:08:7c:29:3c:86:f4:36:df:09:fc:53:db: 41:de:95:d7:7b:b6:6c:dd:ad:bb:90:a0:79:65:e5:fc:67:16: f9:24:f1:b0:c5:93:93:eb:85:65:6f:e6:79:80:8e:d2:5f:e0: 90:3b:a3:7d:6a:82:0a:bc:c9:6c:01:19:14:bc:35:13:54:d8: 06:2c:2a:95:98:72:c6:e8:34:b1:48:4a:f6:f1:11:7e:68:5d: f4:17:b8:0a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUK6UqekQnl3LX+lqVldTQmQxSmaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDkxMDQ4NTNaFw0yNzA2MDgxMDUzNTNaMDMxMTAvBgNV BAMTKDAwNUFDQTg5QkM3RkQwM0ZGMzczNTAzMjFBODczNUFGNDI1Q0U4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvSjnVwuDR7xeRuSTWzdw9wpka jm/5A+LKkFdkEnQLrq1PJgjL/2J/G8ARcf7KoyUExD0pMovIFY5JCNlQNP1rZyJ+ HePCk2i2GYmFnZImu/knRh+WYXDIhZu27yWpY08W65BEvuQllUENZ1LMTFDtTFi7 +amwl+XbIUjINYTCUzf/2Ji3PPsFUP2iYxsbYc3QjI/7yv+Ph7Z5avyB9FcujM96 Ejs2LlNL4wcR8XnI227vjA70l6WcSvp2Blyvg4MT/CgeaTlmonK5nuzfpzAMPJrx nmjM/w3yIFJJ5kxHwr6TEFQRFeAGFf8BflK8PKBAAyGXJOd1x6aBGCVF0l0nAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUAFrKibx/0D/zc1AyGoc1r0Jc6AIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTU4MjAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq BhKBYDANBgkqhkiG9w0BAQsFAAOCAQEAXg6+QMkWyXyRuen6t7f4omsSipamdp3K OnypgMgrM8AenrsIAQntp7ll4V7dv4TrUoF86FzPpn3MJA+5TzD9tgNoqnNwLIbW wyVpfAZ/tAP/epiLejGtUsF/YtHmDTOkQAM6izSRzEj5js7mB4xBonjDwfT4ofkj AWeKzF1Z4ZrU2l6AbhvATQZJpB6ggXxElEBqV5Hj9w4OlPEYzE40VrLoX5X2i6FJ CHwpPIb0Nt8J/FPbQd6V13u2bN2tu5CgeWXl/GcW+STxsMWTk+uFZW/meYCO0l/g kDujfWqCCrzJbAEZFLw1E1TYBiwqlZhyxug0sUhK9vERfmhd9Be4Cg== -----END CERTIFICATE-----Generated at Sat Jun 13 07:58:30 2026 by rpki-client