$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218654.roa File: AS218654.roa (raw, json) Hash identifier: 3QcWwQIhu+3mruURxxzFt78h92HsK459cKqILwUvD0U= Subject key identifier: EA:ED:87:E8:1A:47:5F:93:F0:34:4A:AE:CA:C2:E0:88:3C:01:FB:D5 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 16EA3DB3BD26D247209CBCE42C3AEE767E621326 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218654.roa Signing time: Mon 21 Sep 2026 18:33:21 +0000 ROA not before: Mon 21 Sep 2026 18:28:21 +0000 ROA not after: Mon 20 Sep 2027 18:33:21 +0000 asID: 218654 IP address blocks: 2a0f:6280:100e::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ea:3d:b3:bd:26:d2:47:20:9c:bc:e4:2c:3a:ee:76:7e:62:13:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 21 18:28:21 2026 GMT Not After : Sep 20 18:33:21 2027 GMT Subject: CN=EAED87E81A475F93F0344AAECAC2E0883C01FBD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:46:e6:05:ce:e5:a6:6a:9e:08:97:d0:6f: ca:6b:7a:f2:ff:6b:bb:11:e5:45:d9:5e:04:43:1e: 19:dd:7b:aa:53:9b:96:b0:f0:02:e8:18:96:66:a3: 71:29:b0:94:4d:87:0c:bc:cd:d3:ad:bb:54:d7:e5: 72:e3:16:e5:b8:c3:16:91:cf:17:d3:67:e5:d4:af: a8:2c:44:f5:14:e5:d3:f7:5c:7a:37:b8:36:2b:7d: 37:94:d3:3c:5b:d7:76:b5:68:d4:fc:62:77:ac:40: bf:d3:96:65:c6:09:7d:c4:a8:b3:4d:cf:66:b2:ab: 60:89:d1:10:e6:97:08:a2:ee:93:70:90:ea:b4:e1: 95:01:53:3e:ae:5b:40:ff:14:c7:ab:2e:9e:87:0a: 57:bd:c8:d7:25:f0:9e:54:97:23:b1:72:22:c2:85: 6d:f0:78:c5:19:a5:98:ff:f2:66:65:d4:ad:8f:9e: a8:84:6b:52:56:42:f1:15:c7:c2:70:59:ec:2c:25: 18:57:29:77:26:65:8c:52:c1:b9:6a:52:8e:fa:a1: a0:0f:85:72:bf:d8:bf:a7:8c:43:7c:96:19:26:4c: 2b:5b:ea:af:f1:cb:e8:87:05:7b:b7:3f:fa:ad:97: db:00:97:bd:8a:05:fb:ad:39:9e:37:2d:04:6b:29: aa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:ED:87:E8:1A:47:5F:93:F0:34:4A:AE:CA:C2:E0:88:3C:01:FB:D5 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218654.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:100e::/48 Signature Algorithm: sha256WithRSAEncryption 5b:60:55:5d:4a:20:2b:2d:6d:9f:10:ba:f8:a2:a3:0e:d0:19: 4e:8e:37:ec:f4:df:d2:6b:aa:c2:75:af:78:f3:cc:80:99:7f: 6e:01:7e:8a:0f:7a:5f:f1:3a:d1:fc:e2:3a:71:e5:0a:85:80: 32:79:97:2b:ec:62:0d:46:63:8c:67:68:bd:06:83:cc:b7:dd: d1:f5:c5:0f:a3:2b:03:cd:69:c5:ac:cb:fa:fa:86:28:82:ef: 16:10:38:1c:dd:5a:46:e8:dc:35:f6:a4:27:26:64:56:dc:ea: 98:e2:a8:aa:a1:13:52:2b:81:dd:8b:d6:c5:58:67:a6:c5:6d: 23:c4:b4:21:60:cd:7a:e0:b4:03:2d:9e:67:66:55:3d:dd:1d: 95:14:e8:68:03:5c:b9:e9:6b:6d:fc:a8:83:d9:8a:37:b7:06: d1:08:b4:ae:14:be:46:c1:ea:48:3c:d4:32:69:4b:b8:7a:c4: 93:27:4e:d1:50:29:ac:d0:ac:0a:7d:59:47:c1:5e:d4:52:93: 73:c8:5e:a2:4f:52:60:7b:cf:23:22:1b:43:76:a4:af:d3:9a: e8:b9:49:45:d1:57:4d:06:36:d2:d6:bf:26:3f:c5:95:ee:8c: 05:17:67:f5:03:b4:44:7d:25:ce:d8:77:fc:e9:e8:e6:98:a0: 12:c6:77:ff -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUFuo9s70m0kcgnLzkLDrudn5iEyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MjExODI4MjFaFw0yNzA5MjAxODMzMjFaMDMxMTAvBgNV BAMTKEVBRUQ4N0U4MUE0NzVGOTNGMDM0NEFBRUNBQzJFMDg4M0MwMUZCRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+O0bmBc7lpmqeCJfQb8prevL/ a7sR5UXZXgRDHhnde6pTm5aw8ALoGJZmo3EpsJRNhwy8zdOtu1TX5XLjFuW4wxaR zxfTZ+XUr6gsRPUU5dP3XHo3uDYrfTeU0zxb13a1aNT8YnesQL/TlmXGCX3EqLNN z2ayq2CJ0RDmlwii7pNwkOq04ZUBUz6uW0D/FMerLp6HCle9yNcl8J5UlyOxciLC hW3weMUZpZj/8mZl1K2PnqiEa1JWQvEVx8JwWewsJRhXKXcmZYxSwblqUo76oaAP hXK/2L+njEN8lhkmTCtb6q/xy+iHBXu3P/qtl9sAl72KBfutOZ43LQRrKaqpAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU6u2H6BpHX5PwNEquysLgiDwB+9UwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg2NTQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KAEA4wDQYJKoZIhvcNAQELBQADggEBAFtgVV1KICstbZ8Quviiow7QGU6ON+z0 39JrqsJ1r3jzzICZf24BfooPel/xOtH84jpx5QqFgDJ5lyvsYg1GY4xnaL0Gg8y3 3dH1xQ+jKwPNacWsy/r6hiiC7xYQOBzdWkbo3DX2pCcmZFbc6pjiqKqhE1Irgd2L 1sVYZ6bFbSPEtCFgzXrgtAMtnmdmVT3dHZUU6GgDXLnpa238qIPZije3BtEItK4U vkbB6kg81DJpS7h6xJMnTtFQKazQrAp9WUfBXtRSk3PIXqJPUmB7zyMiG0N2pK/T mui5SUXRV00GNtLWvyY/xZXujAUXZ/UDtER9Jc7Yd/zp6OaYoBLGd/8= -----END CERTIFICATE-----Generated at Thu Sep 24 01:25:47 2026 by rpki-client