$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: prHz1XmCNA/w3TP6ibpdbL32YvKSf44oUshtEhzsmDc= Subject key identifier: 2A:BE:88:37:D4:3A:5A:1E:B1:3D:27:6D:C6:9F:F8:AB:AB:88:83:06 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3BA6A904665B1615175A24F578D34F25CB6D90EB Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa Signing time: Wed 29 Jul 2026 09:21:28 +0000 ROA not before: Wed 29 Jul 2026 09:16:28 +0000 ROA not after: Wed 28 Jul 2027 09:21:28 +0000 asID: 14618 IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44 2a05:dfc3:f750::/44 maxlen: 48 2a0f:6284:4c50::/44 maxlen: 48 2a0f:6284:4c60::/44 maxlen: 48 2a0f:6284:4c70::/44 maxlen: 48 2a0f:6284:4c80::/44 maxlen: 48 2a0f:6284:4c90::/44 maxlen: 48 2a0f:6284:4cd0::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a6:a9:04:66:5b:16:15:17:5a:24:f5:78:d3:4f:25:cb:6d:90:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 29 09:16:28 2026 GMT Not After : Jul 28 09:21:28 2027 GMT Subject: CN=2ABE8837D43A5A1EB13D276DC69FF8ABAB888306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:25:f2:07:2e:a3:8f:45:93:d6:87:bd:e6:10: c3:78:6d:75:d0:f1:5e:8b:74:05:e1:d6:7a:b1:28: bc:c6:0f:f2:b4:19:26:14:8c:a9:19:46:67:c3:e7: 86:95:05:76:a3:b9:b4:3d:99:cb:d3:88:ff:5b:12: 8f:ce:af:d7:5b:a7:ce:a9:2f:bf:e5:44:98:cb:42: 71:d8:96:1f:97:65:7b:b0:75:51:df:85:60:a2:75: 34:ec:24:59:d2:19:74:eb:e0:a1:54:5f:49:46:7d: 72:cc:b7:dc:81:1d:b0:f4:a2:33:53:cd:65:ad:cd: 01:61:16:49:31:b3:1c:73:31:67:09:91:8b:88:99: 78:65:7b:3e:8d:80:e1:cc:79:68:56:3f:af:11:4f: 7b:01:f4:d9:76:0a:d5:79:6c:29:24:cb:f0:39:ac: c0:bc:76:b4:f3:34:95:a7:49:6c:2a:51:76:09:0a: 2c:ac:37:bf:94:17:61:fc:d3:94:60:cf:32:2f:55: 56:cb:7a:8b:02:4d:ea:85:86:e1:58:a6:f1:fe:c4: 7e:12:f7:5e:1e:3b:2e:b4:a9:a9:1a:83:55:65:71: 03:76:66:68:8d:23:4a:4b:7b:c2:db:e4:27:28:8b: 50:87:7f:79:80:29:ec:1a:23:09:7b:37:39:5c:0f: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BE:88:37:D4:3A:5A:1E:B1:3D:27:6D:C6:9F:F8:AB:AB:88:83:06 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f740::/43 2a0f:6284:4c50::-2a0f:6284:4c9f:ffff:ffff:ffff:ffff:ffff 2a0f:6284:4cd0::/44 Signature Algorithm: sha256WithRSAEncryption 1d:56:ea:3a:7e:bc:f2:22:a8:7d:af:03:49:ef:32:a2:e8:7c: c7:1d:6c:62:29:37:73:9d:08:9e:a3:2d:c6:db:cd:05:cc:57: df:9a:b8:88:57:22:83:40:0b:c5:1d:0e:85:85:fd:0d:a6:9b: 8d:e5:30:67:de:03:8e:c2:de:dd:99:61:e8:ff:c9:25:21:df: 0e:da:b9:86:63:39:5f:17:59:13:fb:b1:e7:a4:97:db:b1:3f: fa:57:9f:3c:d3:a1:47:0b:0d:8f:1d:8c:41:a5:9c:35:d4:4c: ea:75:57:45:56:58:c5:b2:5e:52:45:e5:4f:a2:7b:73:10:54: 76:76:6a:fc:6a:d8:34:9a:8c:77:b7:af:1c:88:24:58:14:73: df:f8:f4:41:b7:5c:88:e8:b8:4b:99:5d:e7:72:bb:34:35:10: 79:5b:e8:c0:d0:13:e8:1a:e6:f6:11:1b:5b:bc:85:85:98:d6: c2:89:56:7a:a7:21:66:b2:47:16:e3:81:d7:8b:e3:0b:36:4a: 91:d6:91:e4:85:01:2f:1d:c3:df:72:22:86:e5:9e:71:1f:3f: e0:06:fe:17:1d:50:cf:e9:f5:10:e0:b0:2f:29:d7:16:94:e1: 44:13:c2:29:25:15:2f:45:5a:59:7d:d5:c2:b7:23:f0:86:8b: c1:12:0d:f2 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUO6apBGZbFhUXWiT1eNNPJcttkOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjkwOTE2MjhaFw0yNzA3MjgwOTIxMjhaMDMxMTAvBgNV BAMTKDJBQkU4ODM3RDQzQTVBMUVCMTNEMjc2REM2OUZGOEFCQUI4ODgzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHJfIHLqOPRZPWh73mEMN4bXXQ 8V6LdAXh1nqxKLzGD/K0GSYUjKkZRmfD54aVBXajubQ9mcvTiP9bEo/Or9dbp86p L7/lRJjLQnHYlh+XZXuwdVHfhWCidTTsJFnSGXTr4KFUX0lGfXLMt9yBHbD0ojNT zWWtzQFhFkkxsxxzMWcJkYuImXhlez6NgOHMeWhWP68RT3sB9Nl2CtV5bCkky/A5 rMC8drTzNJWnSWwqUXYJCiysN7+UF2H805RgzzIvVVbLeosCTeqFhuFYpvH+xH4S 914eOy60qakag1VlcQN2ZmiNI0pLe8Lb5Ccoi1CHf3mAKewaIwl7NzlcD2mbAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUKr6IN9Q6Wh6xPSdtxp/4q6uIgwYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxNDYxOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wLAQCAAIwJgMHBSoF 38P3QDASAwcEKg9ihExQAwcFKg9ihEyAAwcEKg9ihEzQMA0GCSqGSIb3DQEBCwUA A4IBAQAdVuo6frzyIqh9rwNJ7zKi6HzHHWxiKTdznQieoy3G280FzFffmriIVyKD QAvFHQ6Fhf0NppuN5TBn3gOOwt7dmWHo/8klId8O2rmGYzlfF1kT+7HnpJfbsT/6 V58806FHCw2PHYxBpZw11EzqdVdFVljFsl5SReVPontzEFR2dmr8atg0mox3t68c iCRYFHPf+PRBt1yI6LhLmV3ncrs0NRB5W+jA0BPoGub2ERtbvIWFmNbCiVZ6pyFm skcW44HXi+MLNkqR1pHkhQEvHcPfciKG5Z5xHz/gBv4XHVDP6fUQ4LAvKdcWlOFE E8IpJRUvRVpZfdXCtyPwhovBEg3y -----END CERTIFICATE-----Generated at Wed Aug 26 07:55:55 2026 by rpki-client