$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213905.roa File: AS213905.roa (raw, json) Hash identifier: VqdFyYtoUK1VKre1tt7bad47SAcnBb7f03bzeqRI7uU= Subject key identifier: 4F:33:D4:9D:63:46:39:C1:17:01:2B:31:42:0C:6C:FD:E1:A8:7C:EA Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 304899D7516B373F145BBACCEC1C549FDAB4DDC8 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213905.roa Signing time: Tue 14 Oct 2025 18:04:25 +0000 ROA not before: Tue 14 Oct 2025 17:59:25 +0000 ROA not after: Tue 13 Oct 2026 18:04:25 +0000 asID: 213905 IP address blocks: 2a0f:6287:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 13:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:48:99:d7:51:6b:37:3f:14:5b:ba:cc:ec:1c:54:9f:da:b4:dd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 14 17:59:25 2025 GMT Not After : Oct 13 18:04:25 2026 GMT Subject: CN=4F33D49D634639C117012B31420C6CFDE1A87CEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e3:41:7e:44:c5:c6:01:47:cb:1c:b3:d7:0b: 10:b5:6e:3e:43:86:7e:34:f8:87:83:a3:43:4e:db: 6e:8b:1e:2e:07:72:bb:1b:a1:af:29:3f:d8:4f:1f: 43:95:c8:02:75:2a:02:21:04:fc:53:8a:f7:f8:b9: 1c:4f:e4:2d:6f:a5:4d:fa:a7:d5:b5:10:5d:66:0b: da:80:6a:60:0f:df:f1:7f:f5:92:cc:b2:a5:2c:29: 5e:02:91:1b:e9:ea:5c:3d:98:9c:0b:03:ea:0d:ea: 65:e5:2a:cd:1b:a8:bf:13:31:ac:bb:4e:80:11:b7: 49:7c:f2:f6:4b:9f:2b:27:fe:5e:dd:1d:b5:73:f7: b8:1a:f1:96:d1:71:7e:c7:8a:c8:c8:9d:d3:a2:09: 86:f6:7b:2e:bc:8e:70:cb:38:8d:2f:f1:f4:05:e5: f8:8a:ac:97:b7:c4:37:3a:79:6f:4f:e9:fa:5c:92: 86:97:9c:b7:3f:3e:1f:0c:ca:1d:ce:ea:1e:d9:05: ce:62:f1:c7:cd:d8:c9:4d:35:4d:e6:a9:78:93:56: 9f:22:b1:e3:91:2b:73:d0:36:1c:b6:31:7e:28:04: d6:1b:71:1c:f6:83:d8:96:68:7b:c2:80:76:0f:28: 70:bf:60:b9:fe:c7:44:60:9c:a7:c5:7b:2a:67:0d: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:33:D4:9D:63:46:39:C1:17:01:2B:31:42:0C:6C:FD:E1:A8:7C:EA X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213905.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:a000::/36 Signature Algorithm: sha256WithRSAEncryption 09:a4:39:ff:e0:30:e3:b5:29:c8:9e:67:5e:1b:4b:22:5d:00: 2e:69:67:ea:bc:ee:ea:13:3d:6b:c8:8b:53:fa:27:8b:f7:45: 81:8c:77:82:70:04:d9:2e:52:c6:f4:97:ad:87:46:01:a8:32: 42:a5:d7:2a:29:70:af:72:bc:31:4e:a1:2d:c6:a3:37:bd:3d: 40:8b:04:f3:59:22:09:fe:bd:c1:ca:13:e7:8d:42:2e:89:22: f9:cd:cd:be:6b:73:40:39:c7:6d:4e:a6:54:6c:87:e0:26:85: 1b:77:88:f9:49:9a:25:42:06:5d:7e:21:52:9e:03:da:74:9c: 38:a4:31:b4:0f:a0:81:b1:86:af:96:a4:b5:09:a8:09:e2:13: ff:73:e2:d1:2d:01:44:ce:9a:e6:d5:d6:c0:50:4a:7e:11:82: 78:5f:3f:66:d1:50:bf:a3:bd:23:36:9d:34:96:c8:9e:9e:19: 27:13:93:87:8c:14:ed:d4:2c:9b:2d:c5:d9:9e:d5:02:e7:0e: 41:79:ca:b7:24:13:c7:cb:b3:37:34:7f:07:17:ce:58:37:b1: 82:8d:90:45:e1:b6:26:ce:b5:fb:6e:28:93:37:44:c4:ea:5d: 6b:e8:82:01:e6:3b:ae:6c:de:c9:d9:2e:9f:37:a7:44:1f:22: 66:e1:e8:a1 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUMEiZ11FrNz8UW7rM7BxUn9q03cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEwMTQxNzU5MjVaFw0yNjEwMTMxODA0MjVaMDMxMTAvBgNV BAMTKDRGMzNENDlENjM0NjM5QzExNzAxMkIzMTQyMEM2Q0ZERTFBODdDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb40F+RMXGAUfLHLPXCxC1bj5D hn40+IeDo0NO226LHi4Hcrsboa8pP9hPH0OVyAJ1KgIhBPxTivf4uRxP5C1vpU36 p9W1EF1mC9qAamAP3/F/9ZLMsqUsKV4CkRvp6lw9mJwLA+oN6mXlKs0bqL8TMay7 ToARt0l88vZLnysn/l7dHbVz97ga8ZbRcX7HisjIndOiCYb2ey68jnDLOI0v8fQF 5fiKrJe3xDc6eW9P6fpckoaXnLc/Ph8Myh3O6h7ZBc5i8cfN2MlNNU3mqXiTVp8i seORK3PQNhy2MX4oBNYbcRz2g9iWaHvCgHYPKHC/YLn+x0RgnKfFeypnDbqDAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUTzPUnWNGOcEXASsxQgxs/eGofOowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM5MDUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KHoDANBgkqhkiG9w0BAQsFAAOCAQEACaQ5/+Aw47UpyJ5nXhtLIl0ALmln6rzu 6hM9a8iLU/oni/dFgYx3gnAE2S5SxvSXrYdGAagyQqXXKilwr3K8MU6hLcajN709 QIsE81kiCf69wcoT541CLoki+c3NvmtzQDnHbU6mVGyH4CaFG3eI+UmaJUIGXX4h Up4D2nScOKQxtA+ggbGGr5aktQmoCeIT/3Pi0S0BRM6a5tXWwFBKfhGCeF8/ZtFQ v6O9IzadNJbInp4ZJxOTh4wU7dQsmy3F2Z7VAucOQXnKtyQTx8uzNzR/BxfOWDex go2QReG2Js61+24okzdExOpda+iCAeY7rmzeydkunzenRB8iZuHooQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:28 2025 by rpki-client