$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS210738.roa File: AS210738.roa (raw, json) Hash identifier: g56lm5VMrEc/YDN0m34eVigDMGM8OynaCF6ZAZZsMoo= Subject key identifier: 8F:49:DA:7A:78:9E:9C:25:FD:C3:EE:90:F0:8E:FC:F5:DE:CF:6D:7E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1917C418DCAD7980A73C248FAB6B447D9D003099 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS210738.roa Signing time: Sun 15 Mar 2026 05:27:13 +0000 ROA not before: Sun 15 Mar 2026 05:22:13 +0000 ROA not after: Sun 14 Mar 2027 05:27:13 +0000 asID: 210738 IP address blocks: 2a0f:6284:51::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:17:c4:18:dc:ad:79:80:a7:3c:24:8f:ab:6b:44:7d:9d:00:30:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 15 05:22:13 2026 GMT Not After : Mar 14 05:27:13 2027 GMT Subject: CN=8F49DA7A789E9C25FDC3EE90F08EFCF5DECF6D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:87:b1:8a:34:b1:f1:ca:e8:6c:13:a3:19: a7:91:c8:20:95:df:3e:46:45:62:e8:44:e3:43:c6: 97:dd:a7:20:4d:52:88:3c:ac:df:d1:22:7d:03:40: b1:b8:52:5a:6c:83:a9:53:bd:de:e8:9c:08:ca:62: fb:10:b6:4e:be:23:61:f3:1b:80:60:b4:63:65:47: fd:fa:da:c3:51:77:da:9b:04:f1:a4:39:e7:4c:25: af:b4:06:4f:f6:3f:db:63:61:ac:7a:65:3d:c7:fa: 7a:1d:12:10:49:64:8c:38:a3:cb:38:ad:4d:f8:6e: 4d:91:17:23:9b:0a:a8:f0:1c:17:6e:3b:c5:9a:bd: df:10:0d:00:e8:bc:80:a6:82:3c:dd:6f:71:23:7c: 28:a3:10:78:4c:fe:9d:34:d7:ec:c3:4e:c7:45:ef: d7:00:9a:35:69:e3:6e:cf:80:1c:27:00:1a:5c:c6: 5a:c3:f0:0f:1f:9d:2e:b4:83:cb:66:4d:2f:07:13: 5f:c7:a3:a7:76:88:d0:b8:ba:ab:d7:a0:72:53:2c: b4:74:71:2c:9c:9b:7d:ba:93:68:55:5e:52:cf:c6: 2a:c8:fc:98:25:e1:26:58:c3:12:aa:57:3c:84:32: c8:9c:62:61:22:89:a9:14:33:25:15:9b:47:b6:bd: 20:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:49:DA:7A:78:9E:9C:25:FD:C3:EE:90:F0:8E:FC:F5:DE:CF:6D:7E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS210738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:51::/48 Signature Algorithm: sha256WithRSAEncryption 91:e9:bb:79:83:34:e2:8c:3a:ad:e0:23:9a:45:bd:cb:b6:ec: 9c:76:7a:4c:82:ae:aa:51:6c:e8:e7:fa:9e:40:99:56:ad:90: e4:88:b5:96:ea:e7:8e:11:e7:30:82:46:b6:17:b0:3f:73:8a: ed:6c:80:e4:d9:d5:bf:41:4a:55:1b:6d:2b:1d:ce:95:a4:58: 76:6d:5e:9b:9f:7c:d3:62:77:9e:e8:ec:49:68:18:d3:95:e4: a3:10:bb:12:8d:06:1f:ec:18:0e:3b:71:2e:f3:fa:8f:b5:c7: 1d:b0:61:fe:57:e4:a8:85:0e:72:11:e9:a6:d9:1f:5e:6d:c1: b9:7e:58:48:83:d4:3c:1d:7d:b0:e7:c8:a2:d3:4f:65:db:17: 47:17:ef:28:c2:3f:6d:83:46:8e:97:88:be:30:ed:c3:72:54: 8b:83:50:67:cb:51:08:eb:c3:09:ae:a5:cc:6b:46:af:d7:ac: d6:b8:ba:bb:31:75:ec:ad:27:b2:8a:26:11:c4:02:f7:38:a4: 45:34:08:d5:69:04:92:8d:10:0d:89:bd:7f:f1:90:32:8b:77: 2b:6b:0e:e9:61:1a:93:e8:5e:98:2e:7a:d0:9b:e8:67:41:b1: f9:2e:5a:90:5d:65:85:b9:64:d4:3a:e0:71:3a:c6:f3:8b:a9: ec:9a:54:c5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUGRfEGNyteYCnPCSPq2tEfZ0AMJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMTUwNTIyMTNaFw0yNzAzMTQwNTI3MTNaMDMxMTAvBgNV BAMTKDhGNDlEQTdBNzg5RTlDMjVGREMzRUU5MEYwOEVGQ0Y1REVDRjZEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjoexijSx8crobBOjGaeRyCCV 3z5GRWLoRONDxpfdpyBNUog8rN/RIn0DQLG4Ulpsg6lTvd7onAjKYvsQtk6+I2Hz G4BgtGNlR/362sNRd9qbBPGkOedMJa+0Bk/2P9tjYax6ZT3H+nodEhBJZIw4o8s4 rU34bk2RFyObCqjwHBduO8Wavd8QDQDovICmgjzdb3EjfCijEHhM/p001+zDTsdF 79cAmjVp427PgBwnABpcxlrD8A8fnS60g8tmTS8HE1/Ho6d2iNC4uqvXoHJTLLR0 cSycm326k2hVXlLPxirI/Jgl4SZYwxKqVzyEMsicYmEiiakUMyUVm0e2vSDfAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUj0naenienCX9w+6Q8I789d7PbX4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTA3Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAFEwDQYJKoZIhvcNAQELBQADggEBAJHpu3mDNOKMOq3gI5pFvcu27Jx2ekyC rqpRbOjn+p5AmVatkOSItZbq544R5zCCRrYXsD9ziu1sgOTZ1b9BSlUbbSsdzpWk WHZtXpuffNNid57o7EloGNOV5KMQuxKNBh/sGA47cS7z+o+1xx2wYf5X5KiFDnIR 6abZH15twbl+WEiD1DwdfbDnyKLTT2XbF0cX7yjCP22DRo6XiL4w7cNyVIuDUGfL UQjrwwmupcxrRq/XrNa4ursxdeytJ7KKJhHEAvc4pEU0CNVpBJKNEA2JvX/xkDKL dytrDulhGpPoXpguetCb6GdBsfkuWpBdZYW5ZNQ64HE6xvOLqeyaVMU= -----END CERTIFICATE-----Generated at Thu Mar 26 14:04:52 2026 by rpki-client