$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218843.roa File: AS218843.roa (raw, json) Hash identifier: wB8ZnzidOMJr/B+JtvhY50CQ93HwIDH3bn9MjdbDub4= Subject key identifier: E4:F7:78:4B:D8:3C:2E:0C:EE:4D:DC:66:45:D6:A3:B9:93:6F:40:02 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 09ACA2829CDABFD578A40FDB540F75DC3A6A339C Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218843.roa Signing time: Mon 21 Sep 2026 14:19:50 +0000 ROA not before: Mon 21 Sep 2026 14:14:50 +0000 ROA not after: Mon 20 Sep 2027 14:19:50 +0000 asID: 218843 IP address blocks: 2a0f:6280:1002::/48 maxlen: 48 2a0f:6280:1030::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ac:a2:82:9c:da:bf:d5:78:a4:0f:db:54:0f:75:dc:3a:6a:33:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 21 14:14:50 2026 GMT Not After : Sep 20 14:19:50 2027 GMT Subject: CN=E4F7784BD83C2E0CEE4DDC6645D6A3B9936F4002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:54:73:ac:a7:1b:51:9a:a2:cb:9e:6d:45: d4:3c:27:3e:1b:d9:95:0c:eb:58:da:60:7f:e5:43: f2:a2:1e:27:9d:24:03:a4:1e:ac:5b:e5:88:c3:93: 23:2e:4b:96:84:fd:d3:ce:a8:ca:60:37:5d:e7:72: e5:2a:53:4b:5f:bb:cf:c1:d3:8c:c7:f2:3a:dd:36: c4:cc:86:3d:cf:00:63:30:1d:30:e3:73:da:51:3e: 83:f6:ec:87:10:6e:69:3e:94:f0:49:65:40:16:de: aa:87:ab:4f:48:b6:a3:51:1d:ad:6a:90:1a:15:f8: e6:8b:3b:6f:14:e0:c5:83:f5:e8:7c:5e:d7:4a:eb: 44:14:1c:dd:64:c0:d2:7f:c3:c0:55:94:f6:3f:29: 77:fd:d3:94:a7:ce:4a:f3:6e:0b:f8:2d:d6:5f:4b: 9f:45:c6:6f:65:a6:86:b4:1b:74:cd:b2:f0:ce:2e: e7:8e:10:d8:c3:30:70:1f:46:28:04:0d:c5:7d:15: e5:89:69:e2:ec:e5:b9:1f:af:27:2a:cf:08:7d:aa: 65:e2:99:f6:00:3b:3b:49:1f:da:22:b9:77:8b:62: 7b:51:42:b5:10:d2:27:ef:04:a7:fe:32:be:87:fe: bb:f7:03:3f:68:f9:4e:cc:ce:ac:e2:56:f4:11:79: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F7:78:4B:D8:3C:2E:0C:EE:4D:DC:66:45:D6:A3:B9:93:6F:40:02 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1002::/48 2a0f:6280:1030::/44 Signature Algorithm: sha256WithRSAEncryption 47:ce:dd:32:3a:cc:a7:e0:66:89:3f:96:a3:c4:60:74:47:21: f6:4d:e3:74:01:52:61:b5:bc:3d:65:fc:e9:4e:71:cb:6a:8d: f0:c7:f0:23:c2:94:cf:3d:d6:a8:de:8e:48:3f:3d:02:cd:6c: b0:1d:27:97:52:6c:02:cc:fa:d8:d4:5c:d1:29:e7:c6:c9:d1: ee:95:c2:0f:e7:e9:d8:7b:91:c9:19:ad:07:d0:bf:d4:d6:00: 9a:4b:b1:18:d1:e5:ad:5d:58:01:3e:bd:9a:92:85:37:6e:83: e5:31:90:44:a0:ff:81:bf:18:2a:ba:53:5c:68:a5:d1:82:6c: f4:f0:b2:33:f2:48:ef:1d:04:5b:3d:8a:b3:45:6c:6b:a1:1b: 10:5e:c4:19:d8:a1:da:86:c8:45:54:27:fe:5c:4e:7f:ad:a5: e7:75:da:f3:1a:b2:b2:c6:c7:b4:6d:7b:25:81:30:96:4a:a9: 85:58:b5:b8:66:74:1d:70:57:bb:78:0e:32:42:0c:75:09:0e: ce:c0:2a:3f:17:39:86:b7:4c:ce:f2:b8:bf:9e:5f:bf:05:4b: 19:22:8e:56:bf:29:43:57:e7:e9:77:38:26:79:1c:00:c8:34: ad:5b:6c:82:87:35:33:06:13:12:65:4e:8c:ab:0a:8a:f1:15: 0f:82:2f:fb -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUCayigpzav9V4pA/bVA913DpqM5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MjExNDE0NTBaFw0yNzA5MjAxNDE5NTBaMDMxMTAvBgNV BAMTKEU0Rjc3ODRCRDgzQzJFMENFRTREREM2NjQ1RDZBM0I5OTM2RjQwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyVRzrKcbUZqiy55tRdQ8Jz4b 2ZUM61jaYH/lQ/KiHiedJAOkHqxb5YjDkyMuS5aE/dPOqMpgN13ncuUqU0tfu8/B 04zH8jrdNsTMhj3PAGMwHTDjc9pRPoP27IcQbmk+lPBJZUAW3qqHq09ItqNRHa1q kBoV+OaLO28U4MWD9eh8XtdK60QUHN1kwNJ/w8BVlPY/KXf905Snzkrzbgv4LdZf S59Fxm9lpoa0G3TNsvDOLueOENjDMHAfRigEDcV9FeWJaeLs5bkfrycqzwh9qmXi mfYAOztJH9oiuXeLYntRQrUQ0ifvBKf+Mr6H/rv3Az9o+U7MzqziVvQReZ/5AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU5Pd4S9g8LgzuTdxmRdajuZNvQAIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg4NDMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KAEAIDBwQqD2KAEDAwDQYJKoZIhvcNAQELBQADggEBAEfO3TI6zKfgZok/lqPE YHRHIfZN43QBUmG1vD1l/OlOcctqjfDH8CPClM891qjejkg/PQLNbLAdJ5dSbALM +tjUXNEp58bJ0e6Vwg/n6dh7kckZrQfQv9TWAJpLsRjR5a1dWAE+vZqShTdug+Ux kESg/4G/GCq6U1xopdGCbPTwsjPySO8dBFs9irNFbGuhGxBexBnYodqGyEVUJ/5c Tn+tped12vMasrLGx7RteyWBMJZKqYVYtbhmdB1wV7t4DjJCDHUJDs7AKj8XOYa3 TM7yuL+eX78FSxkijla/KUNX5+l3OCZ5HADINK1bbIKHNTMGExJlToyrCorxFQ+C L/s= -----END CERTIFICATE-----Generated at Thu Sep 24 01:24:48 2026 by rpki-client