$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212128.roa File: AS212128.roa (raw, json) Hash identifier: rAGlwAJdPYr9re+6mu2ow27cf6EN9FZGeISvnvVJN+k= Subject key identifier: 2F:4F:62:B2:51:51:A2:7F:D0:E3:8C:90:8D:51:B2:34:11:B1:41:2E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6FEE0DB2569F8B3404AD34BCBF4395FF861CB7BE Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212128.roa Signing time: Mon 16 Mar 2026 08:19:19 +0000 ROA not before: Mon 16 Mar 2026 08:14:19 +0000 ROA not after: Mon 15 Mar 2027 08:19:19 +0000 asID: 212128 IP address blocks: 2a0f:6284:9::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ee:0d:b2:56:9f:8b:34:04:ad:34:bc:bf:43:95:ff:86:1c:b7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 16 08:14:19 2026 GMT Not After : Mar 15 08:19:19 2027 GMT Subject: CN=2F4F62B25151A27FD0E38C908D51B23411B1412E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3f:ac:fd:ca:67:fb:0f:94:5a:3b:fc:16:2f: 1c:c8:c8:97:80:4b:4f:53:99:51:68:2b:15:36:d5: 94:a7:07:e2:ab:b1:79:99:f6:86:aa:50:3a:06:7a: f6:08:8d:7e:51:89:2b:2b:e5:f7:06:1c:60:7d:74: cc:00:25:26:26:45:10:f6:c4:7f:56:88:6e:7a:f8: a8:ad:9c:b4:e9:a0:be:13:19:5d:13:f8:f7:ad:db: 7c:15:a4:78:6c:08:63:1b:5b:6f:01:d2:bb:cc:35: 95:8c:7e:73:08:ea:5a:9b:48:f9:03:3d:8e:20:e7: 9b:b3:77:f7:45:48:5c:b7:e2:ae:6c:68:cd:61:60: ff:36:aa:dd:db:26:a4:39:11:4a:5e:f0:7f:44:8f: 17:26:d3:85:87:ac:aa:67:12:f2:a4:76:1a:56:d3: 97:ca:1c:a4:b0:da:4c:a5:8a:95:df:e4:1c:18:21: ab:e8:69:c3:8b:75:ad:f5:84:04:59:08:3f:21:f9: dc:fd:41:97:c8:7a:06:ff:e7:a0:87:2d:7d:f7:7b: 31:87:fd:a9:99:1a:64:d2:ef:c8:e2:57:39:b1:ec: 38:66:f5:d0:c7:6f:b9:50:2e:77:31:62:3c:a9:9c: 29:92:a3:92:0f:00:9c:47:93:ed:b2:ab:8f:a6:ce: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4F:62:B2:51:51:A2:7F:D0:E3:8C:90:8D:51:B2:34:11:B1:41:2E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212128.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:9::/48 Signature Algorithm: sha256WithRSAEncryption 7b:8b:8d:d6:ee:ae:90:0d:8b:11:ed:38:cb:43:58:29:f1:d5: 06:e1:9b:63:38:c2:aa:8c:48:35:57:57:68:65:25:09:49:37: db:06:6e:8f:6f:3e:04:b1:10:20:1d:08:8b:87:3b:9c:96:6a: 1f:93:a2:41:a1:b2:3a:ae:e7:b0:34:0b:4f:a9:df:57:34:37: 9f:20:1b:47:26:58:a7:c4:26:e1:0e:01:89:25:14:b4:96:11: c0:2b:56:00:62:86:5d:38:8b:1b:cc:a3:b2:92:e8:e6:c1:c6: fa:d0:f7:76:31:5a:58:aa:b5:c8:f2:e2:4c:f1:1a:36:f5:49: f9:b0:29:1e:db:02:18:40:9f:b6:31:9d:76:5c:c2:fe:72:19: 3c:e3:b6:dc:c5:43:94:32:7a:8c:5c:2f:01:fe:d0:96:fa:fd: e2:27:08:ff:e1:bb:32:50:8b:29:b2:e9:30:c2:82:32:e1:48: 2c:16:19:6f:1e:72:96:7f:ae:ce:fe:58:86:91:90:47:60:58: 59:b6:6f:5e:ff:87:87:14:71:df:8b:7e:99:c1:b1:67:a5:33: e4:ff:b0:ac:79:8a:1b:fc:3b:52:48:5f:64:b1:7c:cc:8d:be: 01:e6:e6:50:30:bc:69:91:38:ee:44:25:ff:4f:62:18:85:f4: 82:e8:8a:e3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUb+4NslafizQErTS8v0OV/4Yct74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMTYwODE0MTlaFw0yNzAzMTUwODE5MTlaMDMxMTAvBgNV BAMTKDJGNEY2MkIyNTE1MUEyN0ZEMEUzOEM5MDhENTFCMjM0MTFCMTQxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaP6z9ymf7D5RaO/wWLxzIyJeA S09TmVFoKxU21ZSnB+KrsXmZ9oaqUDoGevYIjX5RiSsr5fcGHGB9dMwAJSYmRRD2 xH9WiG56+KitnLTpoL4TGV0T+Pet23wVpHhsCGMbW28B0rvMNZWMfnMI6lqbSPkD PY4g55uzd/dFSFy34q5saM1hYP82qt3bJqQ5EUpe8H9Ejxcm04WHrKpnEvKkdhpW 05fKHKSw2kylipXf5BwYIavoacOLda31hARZCD8h+dz9QZfIegb/56CHLX33ezGH /amZGmTS78jiVzmx7Dhm9dDHb7lQLncxYjypnCmSo5IPAJxHk+2yq4+mzv63AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUL09islFRon/Q44yQjVGyNBGxQS4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTIxMjgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAAkwDQYJKoZIhvcNAQELBQADggEBAHuLjdburpANixHtOMtDWCnx1Qbhm2M4 wqqMSDVXV2hlJQlJN9sGbo9vPgSxECAdCIuHO5yWah+TokGhsjqu57A0C0+p31c0 N58gG0cmWKfEJuEOAYklFLSWEcArVgBihl04ixvMo7KS6ObBxvrQ93YxWliqtcjy 4kzxGjb1SfmwKR7bAhhAn7YxnXZcwv5yGTzjttzFQ5QyeoxcLwH+0Jb6/eInCP/h uzJQiymy6TDCgjLhSCwWGW8ecpZ/rs7+WIaRkEdgWFm2b17/h4cUcd+LfpnBsWel M+T/sKx5ihv8O1JIX2SxfMyNvgHm5lAwvGmROO5EJf9PYhiF9ILoiuM= -----END CERTIFICATE-----Generated at Thu Mar 26 09:16:16 2026 by rpki-client