$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218758.roa File: AS218758.roa (raw, json) Hash identifier: KbhSpm/cBpICBCpOvjjKGuYIBIGPn5bG+cF+rYxpuHM= Subject key identifier: F1:A4:15:2B:28:F1:C8:0E:A1:6E:EA:78:FC:EA:CB:88:97:21:EF:72 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 60720907088506BD7F2C7D7F610CB92CE98164C2 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218758.roa Signing time: Tue 22 Sep 2026 23:57:53 +0000 ROA not before: Tue 22 Sep 2026 23:52:53 +0000 ROA not after: Tue 21 Sep 2027 23:57:53 +0000 asID: 218758 IP address blocks: 2a0f:6280:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:72:09:07:08:85:06:bd:7f:2c:7d:7f:61:0c:b9:2c:e9:81:64:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 22 23:52:53 2026 GMT Not After : Sep 21 23:57:53 2027 GMT Subject: CN=F1A4152B28F1C80EA16EEA78FCEACB889721EF72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:45:9c:0d:95:c5:1a:f5:fa:fa:55:f3:c3: ad:1b:18:51:7f:4e:c9:75:c1:0c:d2:db:aa:8b:32: df:dc:d5:7e:0a:21:2b:bf:b7:d9:df:66:c1:f9:c4: f6:6d:ea:b9:9e:e6:e7:cb:19:63:20:ec:ea:a1:d3: 34:a0:6f:73:94:2a:b5:d7:1b:93:90:9e:86:92:ad: 01:92:2c:35:79:88:87:cc:16:f8:7a:cb:13:af:c2: c3:e9:24:14:38:76:a2:cb:63:40:a2:75:17:47:d9: d8:72:a3:78:a7:4e:72:a8:5d:fd:ac:9a:1f:7f:dc: 4d:b3:e5:fc:d4:63:45:75:bd:05:62:e4:dc:cd:16: 03:81:52:63:ba:15:7b:31:57:7b:ad:bf:51:1d:66: 6d:5c:2e:f4:37:60:b4:b4:76:b2:38:48:93:2c:46: be:b8:04:c1:78:2f:9e:fb:ae:47:bb:8d:43:2f:45: 04:18:cf:de:ae:7d:cb:89:d8:18:9f:3f:f8:f4:3f: b6:55:21:1f:bb:bd:8a:e1:41:62:90:ce:6b:3c:98: 56:ef:d6:8a:75:29:06:54:23:0d:34:9b:14:e8:da: b8:1a:10:0a:73:91:88:2b:ad:cb:f2:35:b4:f5:40: 29:a0:30:83:75:9d:46:a5:c2:94:1c:b6:40:22:41: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A4:15:2B:28:F1:C8:0E:A1:6E:EA:78:FC:EA:CB:88:97:21:EF:72 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218758.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:c000::/36 Signature Algorithm: sha256WithRSAEncryption 93:5b:a9:be:0e:41:98:41:7e:f1:5e:1d:7b:2d:f8:cd:c0:5e: da:c3:fe:70:4a:38:ba:d6:51:45:f4:d5:d0:da:9d:6d:67:63: 1b:68:aa:b7:86:02:75:16:8d:86:6c:62:28:1a:55:d7:a4:2b: 8e:34:57:89:5c:6b:ac:e9:fa:f0:2d:86:e1:32:a3:7a:58:41: 73:8e:43:37:1f:83:19:14:e3:21:3d:77:cb:84:a3:46:07:48: a7:3b:2c:9c:11:b3:11:b9:bf:d6:21:4a:6c:bc:0d:98:74:e0: f2:56:03:02:86:c2:c4:f2:18:8a:3e:1f:80:18:a6:a3:be:ab: 5f:e0:a0:05:c5:4d:e6:0c:ea:1b:6f:2f:7b:87:0e:05:81:03: 7a:31:08:72:b7:6c:fc:23:61:d3:5e:81:18:dd:3d:4c:41:36: 73:44:17:9f:a8:2d:64:79:a8:8d:dd:f3:65:c2:16:48:54:a2: 9d:b0:05:13:3a:d5:7b:72:f8:d0:e0:d1:28:f9:b8:2f:e0:8c: 8b:b4:13:fd:48:af:36:2e:12:21:a0:e1:bd:32:a7:5f:a5:23: 8e:4a:68:43:f7:26:97:d2:44:79:1a:f6:5b:8b:5d:f7:ef:31: 26:80:f6:06:26:bb:fc:9e:85:c8:52:0f:18:bb:ca:03:7d:f1: fd:03:ea:67 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUYHIJBwiFBr1/LH1/YQy5LOmBZMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MjIyMzUyNTNaFw0yNzA5MjEyMzU3NTNaMDMxMTAvBgNV BAMTKEYxQTQxNTJCMjhGMUM4MEVBMTZFRUE3OEZDRUFDQjg4OTcyMUVGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrkWcDZXFGvX6+lXzw60bGFF/ Tsl1wQzS26qLMt/c1X4KISu/t9nfZsH5xPZt6rme5ufLGWMg7Oqh0zSgb3OUKrXX G5OQnoaSrQGSLDV5iIfMFvh6yxOvwsPpJBQ4dqLLY0CidRdH2dhyo3inTnKoXf2s mh9/3E2z5fzUY0V1vQVi5NzNFgOBUmO6FXsxV3utv1EdZm1cLvQ3YLS0drI4SJMs Rr64BMF4L577rke7jUMvRQQYz96ufcuJ2BifP/j0P7ZVIR+7vYrhQWKQzms8mFbv 1op1KQZUIw00mxTo2rgaEApzkYgrrcvyNbT1QCmgMIN1nUalwpQctkAiQflPAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU8aQVKyjxyA6hbup4/OrLiJch73IwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg3NTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KAwDANBgkqhkiG9w0BAQsFAAOCAQEAk1upvg5BmEF+8V4dey34zcBe2sP+cEo4 utZRRfTV0NqdbWdjG2iqt4YCdRaNhmxiKBpV16QrjjRXiVxrrOn68C2G4TKjelhB c45DNx+DGRTjIT13y4SjRgdIpzssnBGzEbm/1iFKbLwNmHTg8lYDAobCxPIYij4f gBimo76rX+CgBcVN5gzqG28ve4cOBYEDejEIcrds/CNh016BGN09TEE2c0QXn6gt ZHmojd3zZcIWSFSinbAFEzrVe3L40ODRKPm4L+CMi7QT/UivNi4SIaDhvTKnX6Uj jkpoQ/cml9JEeRr2W4td9+8xJoD2Bia7/J6FyFIPGLvKA33x/QPqZw== -----END CERTIFICATE-----Generated at Thu Sep 24 01:25:38 2026 by rpki-client