$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218243.roa File: AS218243.roa (raw, json) Hash identifier: q/15McZFHBaNemQwj6CpYgVF50W995sU5aaE7AdSnnw= Subject key identifier: 81:A7:D2:35:A2:21:C6:5E:58:66:35:B7:B6:63:F2:A6:4B:A4:6D:CB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 15B44F65AC629E0BBC4A5E3119950D0DD72862E8 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218243.roa Signing time: Thu 29 Oct 2026 21:41:51 +0000 ROA not before: Thu 29 Oct 2026 21:36:51 +0000 ROA not after: Thu 28 Oct 2027 21:41:51 +0000 asID: 218243 IP address blocks: 2a0f:6280:2200::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 17:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b4:4f:65:ac:62:9e:0b:bc:4a:5e:31:19:95:0d:0d:d7:28:62:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 29 21:36:51 2026 GMT Not After : Oct 28 21:41:51 2027 GMT Subject: CN=81A7D235A221C65E586635B7B663F2A64BA46DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:9d:db:27:ef:c1:4a:75:d2:24:95:7e:bd: a0:02:ca:90:1e:a6:e9:95:5e:c3:2f:6a:a2:48:ab: c0:df:26:bd:47:7f:e1:9c:11:d6:6f:27:77:4f:57: 01:68:3d:e1:83:4a:b0:1e:d4:af:42:05:33:83:ab: fc:57:33:24:05:e8:ec:05:26:af:91:67:e5:58:f9: 70:2a:b2:a4:6f:b6:d0:7a:61:7a:a0:0b:2a:82:b2: c1:63:a3:b1:fb:9e:9d:12:88:07:77:d9:36:45:89: 16:a2:a4:66:84:a9:18:6b:93:79:86:a2:c1:b1:5a: f4:b5:71:b2:d8:7d:e2:a0:1e:aa:c0:8e:55:19:10: 10:46:36:d3:bc:df:43:a1:21:5c:19:4e:ae:b1:a8: 85:b5:ab:11:52:8b:35:ca:4d:33:db:9f:33:68:df: ce:91:66:ce:dc:5d:d0:cc:9c:62:1c:2d:46:63:18: 70:2f:4b:82:93:24:0e:33:9c:00:57:91:a9:51:5f: 4d:8b:4a:2a:a4:87:bb:08:03:ab:30:dd:07:4c:12: d2:f2:e5:4e:04:5a:5f:6f:69:6b:57:56:a0:3e:b7: 1b:21:1e:59:99:ee:49:ca:5b:21:29:88:c0:5f:56: 97:3d:0f:cb:b2:17:50:e5:04:2d:8a:7f:02:88:9b: 66:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A7:D2:35:A2:21:C6:5E:58:66:35:B7:B6:63:F2:A6:4B:A4:6D:CB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218243.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:2200::/40 Signature Algorithm: sha256WithRSAEncryption 6b:63:e8:2a:65:52:b1:c7:25:77:17:eb:a9:9d:32:81:21:c2: fa:21:84:a8:15:7d:a5:11:a5:7b:ac:d2:02:1c:f2:d3:ad:4b: 58:8e:cb:4d:06:7f:ed:ae:a6:19:37:fd:28:4f:54:f5:62:72: fb:89:f2:05:81:99:0c:c7:0f:95:f3:eb:27:3f:65:f5:c8:60: 05:91:37:b9:1c:d9:cd:8a:48:15:b0:15:bc:fd:3e:5e:ae:f9: 93:f9:ce:09:a1:de:74:4f:a0:07:77:79:f2:a1:2b:ba:8a:72: 5c:98:ea:87:33:15:04:db:9e:fe:0e:4a:65:5a:bf:ff:ec:de: 3e:41:4c:62:c3:a9:0b:61:51:dd:49:c4:5f:a8:0a:85:88:47: 57:4b:33:b7:6a:27:41:9c:78:85:d3:da:5d:10:66:62:18:d0: a1:2d:c2:9e:cb:19:a8:9b:ec:8a:4c:e4:55:db:27:4c:53:95: 02:1f:ee:2b:72:57:46:e7:c9:21:ce:49:40:be:18:97:d2:47: 69:7b:39:f5:c8:c6:47:01:94:61:3f:75:17:ef:5c:3b:f0:62: 58:ca:dd:e8:db:90:6c:e9:ea:eb:16:d5:72:b1:f9:4e:9f:74: e0:04:d4:8b:6b:ae:b0:cb:c2:e5:90:5c:90:12:e1:87:ae:50: cb:86:e6:4b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUFbRPZaxingu8Sl4xGZUNDdcoYugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMjkyMTM2NTFaFw0yNzEwMjgyMTQxNTFaMDMxMTAvBgNV BAMTKDgxQTdEMjM1QTIyMUM2NUU1ODY2MzVCN0I2NjNGMkE2NEJBNDZEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCia53bJ+/BSnXSJJV+vaACypAe pumVXsMvaqJIq8DfJr1Hf+GcEdZvJ3dPVwFoPeGDSrAe1K9CBTODq/xXMyQF6OwF Jq+RZ+VY+XAqsqRvttB6YXqgCyqCssFjo7H7np0SiAd32TZFiRaipGaEqRhrk3mG osGxWvS1cbLYfeKgHqrAjlUZEBBGNtO830OhIVwZTq6xqIW1qxFSizXKTTPbnzNo 386RZs7cXdDMnGIcLUZjGHAvS4KTJA4znABXkalRX02LSiqkh7sIA6sw3QdMEtLy 5U4EWl9vaWtXVqA+txshHlmZ7knKWyEpiMBfVpc9D8uyF1DlBC2KfwKIm2bPAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUgafSNaIhxl5YZjW3tmPypkukbcswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTgyNDMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KAIjANBgkqhkiG9w0BAQsFAAOCAQEAa2PoKmVSsccldxfrqZ0ygSHC+iGEqBV9 pRGle6zSAhzy061LWI7LTQZ/7a6mGTf9KE9U9WJy+4nyBYGZDMcPlfPrJz9l9chg BZE3uRzZzYpIFbAVvP0+Xq75k/nOCaHedE+gB3d58qEruopyXJjqhzMVBNue/g5K ZVq//+zePkFMYsOpC2FR3UnEX6gKhYhHV0szt2onQZx4hdPaXRBmYhjQoS3CnssZ qJvsikzkVdsnTFOVAh/uK3JXRufJIc5JQL4Yl9JHaXs59cjGRwGUYT91F+9cO/Bi WMrd6NuQbOnq6xbVcrH5Tp904ATUi2uusMvC5ZBckBLhh65Qy4bmSw== -----END CERTIFICATE-----Generated at Sun Nov 15 10:48:52 2026 by rpki-client