$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215110.roa File: AS215110.roa (raw, json) Hash identifier: P0/I4elLzNuggp4kbj+GJncckRsRqwK5xSqd2TLbV9I= Subject key identifier: AB:52:B7:E0:65:3F:C7:8A:4F:32:49:E5:4D:21:DB:89:CA:14:D7:67 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0C2BF9B333A554E3AA443B74645EB0DA3D66850D Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215110.roa Signing time: Mon 13 Jul 2026 21:26:30 +0000 ROA not before: Mon 13 Jul 2026 21:21:30 +0000 ROA not after: Mon 12 Jul 2027 21:26:30 +0000 asID: 215110 IP address blocks: 2a0f:6280:703d::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2b:f9:b3:33:a5:54:e3:aa:44:3b:74:64:5e:b0:da:3d:66:85:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 13 21:21:30 2026 GMT Not After : Jul 12 21:26:30 2027 GMT Subject: CN=AB52B7E0653FC78A4F3249E54D21DB89CA14D767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:02:69:5b:91:a1:7e:c2:71:ee:08:de:28: 34:40:e1:8b:8c:4c:41:4c:98:72:b4:2c:7d:4a:b9: 93:8f:32:da:e8:38:7b:61:0f:bd:09:3f:ce:3f:0e: 03:3f:de:5f:ca:8e:2a:59:83:45:bb:ba:dc:42:6b: bb:03:b5:d9:a6:ef:26:35:65:91:11:52:9c:de:f5: 50:4c:0c:e9:b0:bd:0c:48:b6:62:2c:72:6f:13:e5: 94:5c:b2:09:cf:86:09:e2:ca:11:86:e0:03:10:86: fd:93:93:fe:88:8c:62:10:64:6f:2e:c0:23:70:b3: c1:8b:4e:5d:ce:76:a0:8a:4b:03:b3:80:73:b9:02: 2b:14:bf:ee:82:20:86:f4:bd:27:bd:b7:eb:7c:32: c6:b7:3c:dc:7c:82:71:cd:d3:d5:89:62:0c:06:ab: d0:e0:e6:4b:c5:47:8c:db:00:68:27:4c:12:b6:ea: c8:2c:e5:57:e6:38:13:2a:c8:f2:b5:f7:c7:94:23: 59:a2:ae:b5:0a:b0:b6:af:b6:e7:59:8d:26:1f:d4: 7f:d1:1b:74:a2:13:8e:c4:96:6a:78:7c:f9:a7:44: 0e:0b:ec:ae:93:3b:36:93:38:51:99:83:7e:1b:20: 69:d5:e7:50:de:89:0c:29:75:6b:8c:b2:8d:59:dd: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:52:B7:E0:65:3F:C7:8A:4F:32:49:E5:4D:21:DB:89:CA:14:D7:67 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215110.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:703d::/48 Signature Algorithm: sha256WithRSAEncryption 57:60:49:ed:f8:05:69:23:f7:d2:f5:e8:3c:41:92:b5:6d:fd: 58:85:8d:30:11:0f:d8:6b:7d:1f:a5:ba:1a:8c:83:5f:b9:27: 34:54:e2:e8:5b:23:f4:17:c1:42:14:80:03:ba:e0:39:0a:87: 56:be:0f:1d:3c:bb:d9:c4:9e:19:0b:b8:93:44:af:cf:7b:ba: 7d:ae:eb:2c:b9:bb:37:80:de:74:08:d1:94:63:cf:fb:52:ed: 42:b8:49:9f:f0:6a:19:0d:ce:06:80:5a:fd:0c:2f:6d:41:d4: b8:cc:f8:16:14:dc:f2:18:b3:3d:65:cc:76:f7:38:8e:39:01: ff:03:3b:9d:4e:49:cf:d3:c6:88:e5:dd:91:73:9a:27:74:f2: 4a:1b:fd:0c:d5:77:50:98:b8:ff:0d:51:a4:62:3c:97:c4:e5: 57:27:96:0c:b7:ef:5d:b8:f7:25:4a:76:fd:67:35:38:d9:b4: 18:ff:76:8c:a6:c2:d2:eb:16:c7:c0:d2:6a:1d:14:7f:4b:68: ac:aa:02:1f:66:51:9d:88:b7:4d:8c:ed:5b:4f:e3:0d:9f:93: 8b:b7:20:b4:d8:40:3e:f6:26:c8:bb:43:e1:de:98:93:6c:b3: b0:4e:2c:47:d2:18:81:0b:8c:68:c1:b7:dd:5e:6e:af:a8:cd: 30:45:8b:3a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUDCv5szOlVOOqRDt0ZF6w2j1mhQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTMyMTIxMzBaFw0yNzA3MTIyMTI2MzBaMDMxMTAvBgNV BAMTKEFCNTJCN0UwNjUzRkM3OEE0RjMyNDlFNTREMjFEQjg5Q0ExNEQ3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/AJpW5GhfsJx7gjeKDRA4YuM TEFMmHK0LH1KuZOPMtroOHthD70JP84/DgM/3l/KjipZg0W7utxCa7sDtdmm7yY1 ZZERUpze9VBMDOmwvQxItmIscm8T5ZRcsgnPhgniyhGG4AMQhv2Tk/6IjGIQZG8u wCNws8GLTl3OdqCKSwOzgHO5AisUv+6CIIb0vSe9t+t8Msa3PNx8gnHN09WJYgwG q9Dg5kvFR4zbAGgnTBK26sgs5VfmOBMqyPK198eUI1mirrUKsLavtudZjSYf1H/R G3SiE47Elmp4fPmnRA4L7K6TOzaTOFGZg34bIGnV51DeiQwpdWuMso1Z3e4bAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUq1K34GU/x4pPMknlTSHbicoU12cwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUxMTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KAcD0wDQYJKoZIhvcNAQELBQADggEBAFdgSe34BWkj99L16DxBkrVt/ViFjTAR D9hrfR+luhqMg1+5JzRU4uhbI/QXwUIUgAO64DkKh1a+Dx08u9nEnhkLuJNEr897 un2u6yy5uzeA3nQI0ZRjz/tS7UK4SZ/wahkNzgaAWv0ML21B1LjM+BYU3PIYsz1l zHb3OI45Af8DO51OSc/Txojl3ZFzmid08kob/QzVd1CYuP8NUaRiPJfE5Vcnlgy3 71249yVKdv1nNTjZtBj/doymwtLrFsfA0modFH9LaKyqAh9mUZ2It02M7VtP4w2f k4u3ILTYQD72Jsi7Q+HemJNss7BOLEfSGIELjGjBt91ebq+ozTBFizo= -----END CERTIFICATE-----Generated at Thu Jul 23 21:17:07 2026 by rpki-client