$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214079.roa File: AS214079.roa (raw, json) Hash identifier: tr/Lq86Kx1Fzlk0Dmja2qMbbVYepwsxnSd/g7oPlBxs= Subject key identifier: 78:17:1F:6D:ED:AE:88:60:A4:D3:18:23:4E:D3:CC:DF:D9:69:07:10 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5105D223267BED0A6048EBA5744AE042E36810DC Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214079.roa Signing time: Wed 30 Jul 2025 14:00:04 +0000 ROA not before: Wed 30 Jul 2025 13:55:04 +0000 ROA not after: Wed 29 Jul 2026 14:00:04 +0000 asID: 214079 IP address blocks: 2a09:54c7:2000::/36 maxlen: 48 2a09:54c7:2e00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 20:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:05:d2:23:26:7b:ed:0a:60:48:eb:a5:74:4a:e0:42:e3:68:10:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 30 13:55:04 2025 GMT Not After : Jul 29 14:00:04 2026 GMT Subject: CN=78171F6DEDAE8860A4D318234ED3CCDFD9690710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:44:61:0d:4b:5f:54:89:ee:3e:5e:aa:ee: bd:49:c3:69:cc:e9:1c:c0:d6:64:32:d6:1a:5a:56: 88:f6:70:27:36:6e:c0:88:cc:aa:17:62:57:aa:d3: 08:d3:58:48:24:1d:ef:74:fb:06:6e:0c:39:5d:e4: dd:11:86:13:7e:32:0a:e8:ca:dd:28:c0:5d:69:a9: 1b:e9:2e:86:e8:61:52:c1:44:dc:f0:e7:80:af:84: ab:43:5a:ed:41:48:9a:8e:f4:fe:f7:89:de:2a:c9: 2a:61:34:92:8c:f2:61:84:35:43:8c:d5:4b:31:53: 81:7e:a8:fc:1b:af:62:33:7f:c9:81:d6:34:68:65: bb:36:8f:83:bc:91:8d:4f:56:08:74:c9:9e:d8:30: 81:c4:8d:55:25:58:0a:78:d4:fa:3c:ac:3f:5a:c0: 93:7c:1a:cb:fa:db:86:21:8a:09:e3:a3:67:74:2d: 37:cd:58:44:51:f0:cd:05:e4:e9:fa:28:90:4e:41: 43:64:5f:72:32:93:25:21:a3:4b:3f:61:a0:0a:80: e6:fd:a1:77:24:18:60:90:de:83:56:c1:10:b6:28: 03:d6:87:db:9b:df:59:a0:b0:c8:18:b3:f7:17:bd: 7e:a7:a6:ff:39:f0:c2:fc:0b:6e:6c:ac:35:d6:de: 13:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:17:1F:6D:ED:AE:88:60:A4:D3:18:23:4E:D3:CC:DF:D9:69:07:10 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7:2000::/36 Signature Algorithm: sha256WithRSAEncryption 6d:9a:d8:0f:7c:8d:99:ce:0e:81:78:4e:70:37:f6:f0:da:3f: cb:6b:6e:fc:8b:0f:53:56:ed:6f:50:25:4d:ef:c4:70:85:57: 6a:d9:1c:89:4d:b9:26:2b:9f:8f:fb:36:ab:c0:4b:9f:2d:87: d6:0a:39:7f:90:27:80:ed:17:b5:c1:8d:84:54:03:29:fb:59: 8f:5f:32:ca:10:97:b0:70:2c:8a:f7:00:50:d2:23:fe:43:15: 27:77:f1:fa:fc:6f:b8:06:54:78:c0:74:21:d8:27:af:e6:91: d3:21:c3:07:a5:29:8d:0c:67:bf:5f:47:92:bf:0e:3e:f3:37: b3:70:a9:bf:b9:94:b5:3c:1a:31:ec:b5:71:3f:fc:2d:a3:8d: f9:a5:63:28:8c:e0:19:09:f6:bf:e4:78:29:ea:cc:26:88:56: 1e:6c:05:92:af:f9:6f:ca:26:e3:96:c9:e8:22:f9:83:f2:08: 64:09:58:3d:4b:e1:10:30:a4:ea:7d:08:a3:1d:f9:f9:ff:61: bf:b3:5a:b9:90:1f:94:2c:2c:d7:3d:87:ed:93:eb:2e:bf:74: d3:45:8f:07:50:d6:00:4d:43:e1:83:8f:5f:c1:44:24:4a:db: 7b:81:0a:64:f6:e9:ac:dd:56:e6:9e:f3:c1:c4:87:b3:e8:bd: 38:74:2f:dd -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUUQXSIyZ77QpgSOuldErgQuNoENwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MzAxMzU1MDRaFw0yNjA3MjkxNDAwMDRaMDMxMTAvBgNV BAMTKDc4MTcxRjZERURBRTg4NjBBNEQzMTgyMzRFRDNDQ0RGRDk2OTA3MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRURhDUtfVInuPl6q7r1Jw2nM 6RzA1mQy1hpaVoj2cCc2bsCIzKoXYleq0wjTWEgkHe90+wZuDDld5N0RhhN+Mgro yt0owF1pqRvpLoboYVLBRNzw54CvhKtDWu1BSJqO9P73id4qySphNJKM8mGENUOM 1UsxU4F+qPwbr2Izf8mB1jRoZbs2j4O8kY1PVgh0yZ7YMIHEjVUlWAp41Po8rD9a wJN8Gsv624Yhignjo2d0LTfNWERR8M0F5On6KJBOQUNkX3IykyUho0s/YaAKgOb9 oXckGGCQ3oNWwRC2KAPWh9ub31mgsMgYs/cXvX6npv858ML8C25srDXW3hOjAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUeBcfbe2uiGCk0xgjTtPM39lpBxAwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQwNzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq CVTHIDANBgkqhkiG9w0BAQsFAAOCAQEAbZrYD3yNmc4OgXhOcDf28No/y2tu/IsP U1btb1AlTe/EcIVXatkciU25Jiufj/s2q8BLny2H1go5f5AngO0XtcGNhFQDKftZ j18yyhCXsHAsivcAUNIj/kMVJ3fx+vxvuAZUeMB0Idgnr+aR0yHDB6UpjQxnv19H kr8OPvM3s3Cpv7mUtTwaMey1cT/8LaON+aVjKIzgGQn2v+R4KerMJohWHmwFkq/5 b8om45bJ6CL5g/IIZAlYPUvhEDCk6n0Iox35+f9hv7NauZAflCws1z2H7ZPrLr90 00WPB1DWAE1D4YOPX8FEJErbe4EKZPbprN1W5p7zwcSHs+i9OHQv3Q== -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:53 2025 by rpki-client