$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215502.roa File: AS215502.roa (raw, json) Hash identifier: NJvWqw0HpqlLp6RONcCzYP2cN4jrj1EnJmubwBNGvaA= Subject key identifier: A6:87:23:27:32:C8:52:ED:AE:2D:22:F6:57:07:8D:EB:A7:05:A9:46 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 22CF124993EFA946058A0D7E79330E603D52B1C0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215502.roa Signing time: Mon 13 Jul 2026 10:07:42 +0000 ROA not before: Mon 13 Jul 2026 10:02:42 +0000 ROA not after: Mon 12 Jul 2027 10:07:42 +0000 asID: 215502 IP address blocks: 2a0f:6280:1400::/40 maxlen: 48 2a0f:6284:4c00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:cf:12:49:93:ef:a9:46:05:8a:0d:7e:79:33:0e:60:3d:52:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 13 10:02:42 2026 GMT Not After : Jul 12 10:07:42 2027 GMT Subject: CN=A687232732C852EDAE2D22F657078DEBA705A946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:02:0c:e9:8d:0a:00:d8:c2:c4:5a:39:07: c4:62:9d:24:4f:e1:e4:f6:66:14:18:aa:56:8a:eb: fd:e5:73:3c:47:06:17:24:b6:8a:bb:88:cf:c7:d6: c7:3e:ef:5f:61:bc:fc:e4:3d:3c:3f:5f:2a:4c:c5: bf:ec:da:3b:4b:39:76:21:21:57:44:a4:73:c7:a5: 0e:d8:8e:b1:16:2c:b3:14:65:c9:2b:58:71:6e:44: 77:5c:23:c6:de:20:23:7a:38:ac:aa:6c:69:ba:de: e4:eb:92:7d:f0:5d:1a:b7:37:62:87:d8:0f:b5:fe: ee:67:56:f2:95:81:dd:3f:53:64:fd:ba:fd:ce:09: 34:02:e3:3d:5a:c2:4d:63:49:2a:66:68:a6:10:5e: f6:5f:31:45:b2:c2:c5:69:fd:d9:e5:33:61:95:e9: 9e:55:9d:58:5a:af:a5:fd:da:63:45:08:9a:6b:38: ef:a6:ef:32:fd:bc:1b:df:2d:1e:27:be:90:63:e9: 0c:ea:c0:01:d3:dd:95:a8:49:e8:10:a6:e8:e9:92: 37:a3:8f:80:75:ae:fc:43:a3:84:1e:2a:ea:ac:c0: 33:17:14:61:bb:00:45:8b:98:17:b8:50:c7:14:c2: 1e:50:b4:ec:66:15:a0:1b:da:bc:dc:54:ce:b2:1d: 22:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:87:23:27:32:C8:52:ED:AE:2D:22:F6:57:07:8D:EB:A7:05:A9:46 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215502.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1400::/40 2a0f:6284:4c00::/40 Signature Algorithm: sha256WithRSAEncryption 5f:60:9b:f6:85:10:93:71:34:92:8c:ca:ce:4d:6d:f2:29:14: 1b:7c:2b:7b:93:f6:f6:69:da:6d:09:c2:3b:8a:d5:ad:44:3b: 96:25:46:bc:65:b6:30:bb:42:fb:41:21:17:7f:5b:07:32:a4: b7:91:7f:a6:f9:6f:c0:87:de:06:2d:22:78:a1:ef:85:df:c9: 60:d7:0d:e9:ed:c1:74:06:df:bc:ea:a1:07:63:7e:58:bf:57: ec:fd:fa:07:6b:e1:82:6e:76:31:b5:3c:1d:74:d5:62:fb:40: 33:36:28:78:97:cb:5d:3a:b9:b4:bf:48:af:58:62:db:9a:e1: 14:d1:bb:eb:30:f0:f6:7c:a2:96:ba:79:86:1f:73:e0:b7:d1: 80:91:de:59:91:71:da:ac:63:31:eb:c4:bc:8a:0d:63:e5:ec: 54:83:43:66:b1:10:5c:57:f4:59:41:a5:26:66:45:e0:a1:50: d1:e0:cb:0b:81:a0:d6:ab:08:fe:d7:00:5a:70:f2:b7:6a:8b: f5:c2:b3:47:2f:91:d2:53:e3:a4:d9:77:24:d9:b1:9a:45:b5: f5:7b:c4:12:1e:e0:f0:6b:ec:76:11:ae:ef:a8:9a:a9:98:d7: 06:26:d2:ee:0e:48:09:00:6b:15:b1:7e:7e:28:a4:fd:e0:74: 98:ac:2f:6b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUIs8SSZPvqUYFig1+eTMOYD1SscAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTMxMDAyNDJaFw0yNzA3MTIxMDA3NDJaMDMxMTAvBgNV BAMTKEE2ODcyMzI3MzJDODUyRURBRTJEMjJGNjU3MDc4REVCQTcwNUE5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwwIM6Y0KANjCxFo5B8RinSRP 4eT2ZhQYqlaK6/3lczxHBhcktoq7iM/H1sc+719hvPzkPTw/XypMxb/s2jtLOXYh IVdEpHPHpQ7YjrEWLLMUZckrWHFuRHdcI8beICN6OKyqbGm63uTrkn3wXRq3N2KH 2A+1/u5nVvKVgd0/U2T9uv3OCTQC4z1awk1jSSpmaKYQXvZfMUWywsVp/dnlM2GV 6Z5VnVhar6X92mNFCJprOO+m7zL9vBvfLR4nvpBj6QzqwAHT3ZWoSegQpujpkjej j4B1rvxDo4QeKuqswDMXFGG7AEWLmBe4UMcUwh5QtOxmFaAb2rzcVM6yHSKbAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUpocjJzLIUu2uLSL2VweN66cFqUYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTU1MDIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAq D2KAFAMGACoPYoRMMA0GCSqGSIb3DQEBCwUAA4IBAQBfYJv2hRCTcTSSjMrOTW3y KRQbfCt7k/b2adptCcI7itWtRDuWJUa8ZbYwu0L7QSEXf1sHMqS3kX+m+W/Ah94G LSJ4oe+F38lg1w3p7cF0Bt+86qEHY35Yv1fs/foHa+GCbnYxtTwddNVi+0AzNih4 l8tdOrm0v0ivWGLbmuEU0bvrMPD2fKKWunmGH3Pgt9GAkd5ZkXHarGMx68S8ig1j 5exUg0NmsRBcV/RZQaUmZkXgoVDR4MsLgaDWqwj+1wBacPK3aov1wrNHL5HSU+Ok 2Xck2bGaRbX1e8QSHuDwa+x2Ea7vqJqpmNcGJtLuDkgJAGsVsX5+KKT94HSYrC9r -----END CERTIFICATE-----Generated at Fri Jul 24 01:07:21 2026 by rpki-client