$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214420.roa File: AS214420.roa (raw, json) Hash identifier: n+JyOfL13GbRiEoY5XIpq2rr4FT1ceuowVCzK7DtE1k= Subject key identifier: 3D:BE:65:76:3D:51:25:C2:AD:55:1A:31:76:AC:9C:07:F6:BE:15:89 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 53A223FDEA1AE24B2C3A4C2FDEE06E80A4B87ED2 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214420.roa Signing time: Mon 18 Aug 2025 20:21:23 +0000 ROA not before: Mon 18 Aug 2025 20:16:23 +0000 ROA not after: Mon 17 Aug 2026 20:21:23 +0000 asID: 214420 IP address blocks: 2a0f:6284:4100::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 20:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a2:23:fd:ea:1a:e2:4b:2c:3a:4c:2f:de:e0:6e:80:a4:b8:7e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 18 20:16:23 2025 GMT Not After : Aug 17 20:21:23 2026 GMT Subject: CN=3DBE65763D5125C2AD551A3176AC9C07F6BE1589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cf:07:93:2f:af:aa:47:d1:3b:aa:44:8d:89: ac:2c:65:fb:c9:fa:5d:df:97:8f:9a:e8:53:a9:8f: 55:c4:3f:4d:3d:25:7c:ff:70:05:26:65:d5:1c:c5: 2c:14:2d:c0:1d:94:90:a9:0d:f6:3b:14:70:36:a7: 15:7f:8f:53:1a:16:c2:f5:90:d6:a8:09:91:f0:6f: 7e:88:6c:b1:4e:78:d6:4e:08:e5:0f:01:16:75:ea: ee:e9:6b:fc:6b:11:61:69:d4:71:76:1e:04:1f:d3: e3:a3:fc:f5:58:e1:94:12:51:de:bb:96:8f:da:99: 89:b5:b5:44:2c:ae:2f:eb:73:39:b1:28:3a:be:39: 8f:e4:1d:6b:6e:c3:48:c9:4b:8c:97:19:3e:7e:68: d8:7c:ea:e7:69:96:70:61:83:f3:6c:cd:59:7c:3e: 17:58:d6:33:32:82:c9:20:2d:27:de:00:36:a3:b2: 12:56:96:e8:ff:73:c9:49:8f:82:cd:71:ac:14:fe: 15:9b:8f:ee:c3:15:4c:25:16:98:3c:57:78:d2:ce: e8:0e:ee:92:4d:aa:17:4b:41:a5:7e:57:d0:2b:b4: 42:23:c2:46:dc:71:4d:3e:ec:18:35:18:1f:9e:a1: fa:4b:0d:86:a6:d0:f2:68:68:e8:61:8f:01:b4:af: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BE:65:76:3D:51:25:C2:AD:55:1A:31:76:AC:9C:07:F6:BE:15:89 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214420.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4100::/40 Signature Algorithm: sha256WithRSAEncryption 14:67:0f:f4:af:1f:3a:bf:82:7a:2a:f7:4a:d8:e7:43:ff:d5: 02:e1:20:4f:92:84:56:61:27:1e:7e:50:8f:01:1a:46:7c:64: 24:77:10:f8:b6:02:52:c5:72:75:61:55:33:8f:ac:d5:50:2d: ed:2c:72:27:18:96:80:5a:11:90:77:10:e9:e0:f0:52:aa:31: 81:00:f3:e2:6d:5b:b9:51:b6:e7:42:8c:62:87:e5:a6:5b:d2: 52:dd:06:0e:35:c4:28:1f:96:59:e6:e1:31:b7:7e:41:28:c4: b7:4b:84:74:80:37:d4:05:a1:eb:87:f0:49:35:27:12:51:c3: 32:df:d1:df:22:ea:cb:3c:47:01:4f:c5:17:fa:e8:8d:b4:ea: 13:28:4a:7e:28:c3:48:ef:55:30:2b:c1:82:e8:2d:68:32:a5: 5d:72:71:7b:7b:89:f1:1a:db:17:31:35:ff:12:57:31:03:be: fa:32:20:d6:c3:c2:40:1c:69:54:8b:e3:93:cb:82:ae:0f:b4: 45:29:91:67:0a:78:f0:fe:73:fe:6c:2a:8d:70:d1:07:04:6f: 6c:e1:55:17:b5:d0:80:ef:42:70:4c:9f:74:75:a8:db:5d:20: e5:1c:5b:56:1a:c9:be:62:e4:89:c0:09:52:1e:1e:2e:80:fe: e6:28:89:bd -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUU6Ij/eoa4kssOkwv3uBugKS4ftIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA4MTgyMDE2MjNaFw0yNjA4MTcyMDIxMjNaMDMxMTAvBgNV BAMTKDNEQkU2NTc2M0Q1MTI1QzJBRDU1MUEzMTc2QUM5QzA3RjZCRTE1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDzweTL6+qR9E7qkSNiawsZfvJ +l3fl4+a6FOpj1XEP009JXz/cAUmZdUcxSwULcAdlJCpDfY7FHA2pxV/j1MaFsL1 kNaoCZHwb36IbLFOeNZOCOUPARZ16u7pa/xrEWFp1HF2HgQf0+Oj/PVY4ZQSUd67 lo/amYm1tUQsri/rczmxKDq+OY/kHWtuw0jJS4yXGT5+aNh86udplnBhg/NszVl8 PhdY1jMygskgLSfeADajshJWluj/c8lJj4LNcawU/hWbj+7DFUwlFpg8V3jSzugO 7pJNqhdLQaV+V9ArtEIjwkbccU0+7Bg1GB+eofpLDYam0PJoaOhhjwG0r9znAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUPb5ldj1RJcKtVRoxdqycB/a+FYkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ0MjAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KEQTANBgkqhkiG9w0BAQsFAAOCAQEAFGcP9K8fOr+Ceir3StjnQ//VAuEgT5KE VmEnHn5QjwEaRnxkJHcQ+LYCUsVydWFVM4+s1VAt7SxyJxiWgFoRkHcQ6eDwUqox gQDz4m1buVG250KMYoflplvSUt0GDjXEKB+WWebhMbd+QSjEt0uEdIA31AWh64fw STUnElHDMt/R3yLqyzxHAU/FF/rojbTqEyhKfijDSO9VMCvBgugtaDKlXXJxe3uJ 8RrbFzE1/xJXMQO++jIg1sPCQBxpVIvjk8uCrg+0RSmRZwp48P5z/mwqjXDRBwRv bOFVF7XQgO9CcEyfdHWo210g5RxbVhrJvmLkicAJUh4eLoD+5iiJvQ== -----END CERTIFICATE-----Generated at Sat Aug 23 13:48:21 2025 by rpki-client