$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS18457.roa File: AS18457.roa (raw, json) Hash identifier: kkMpNePAOVFcZdhlhoH9IpMxCVu/PVeR6/WBXNVPuIo= Subject key identifier: 52:04:7D:3E:51:60:F8:71:6B:97:45:9D:DA:CB:61:FF:C4:54:F3:3D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 193A62261DBB7BD9ABB48A1AB69D0E4A06BD4155 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS18457.roa Signing time: Thu 08 Oct 2026 13:04:35 +0000 ROA not before: Thu 08 Oct 2026 12:59:35 +0000 ROA not after: Thu 07 Oct 2027 13:04:35 +0000 asID: 18457 IP address blocks: 2a0f:6284:33f8::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 14:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3a:62:26:1d:bb:7b:d9:ab:b4:8a:1a:b6:9d:0e:4a:06:bd:41:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 8 12:59:35 2026 GMT Not After : Oct 7 13:04:35 2027 GMT Subject: CN=52047D3E5160F8716B97459DDACB61FFC454F33D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:e2:e1:8e:3f:59:fb:00:5c:a9:fc:86:e1: 04:3c:a0:57:e0:95:a9:5f:05:d5:ee:ea:0c:ae:ed: 9b:98:91:48:03:58:61:1d:6f:92:1a:d3:96:19:6e: 0b:b4:c5:ab:a3:7e:1b:ce:72:72:74:9f:2a:de:19: 7d:8b:75:db:c4:88:a3:9c:8b:5c:5f:6e:f1:0e:02: 07:a4:c6:ab:9d:f0:aa:d2:fc:b7:1a:4f:1c:7d:38: 39:2c:57:19:a1:88:a0:96:21:2a:a6:c6:68:df:2d: 02:7a:3c:1e:3b:2a:1d:3b:cc:4a:58:79:7c:28:1d: bf:79:70:3e:74:be:72:1e:58:ef:05:c8:20:52:f5: 89:49:a2:21:d4:38:d0:a5:c8:0a:39:82:75:e3:00: cb:51:3d:9e:93:7d:d3:a1:64:89:ce:7f:5d:11:83: 77:8d:cd:2c:2f:fa:5c:6d:9b:8e:a9:93:56:35:29: ad:d5:95:94:40:82:90:9e:4b:94:56:ff:07:d3:42: b7:d9:83:fd:fa:bf:f3:1b:d9:82:ff:5a:3b:23:b0: 30:62:4e:e1:dc:cb:4d:8c:d5:fc:e4:eb:d5:b1:7d: 80:0a:2a:57:b7:ac:b9:49:b1:4d:95:8f:9b:53:32: 42:55:23:7b:91:55:43:40:b7:59:5c:e0:60:c4:f7: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:04:7D:3E:51:60:F8:71:6B:97:45:9D:DA:CB:61:FF:C4:54:F3:3D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS18457.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:33f8::/48 Signature Algorithm: sha256WithRSAEncryption 54:a0:56:dc:eb:14:0e:ea:3c:93:58:12:4a:26:de:a8:6c:d4: fd:24:bc:e2:ba:dc:18:ed:db:53:8d:b5:77:74:5e:55:b7:3a: b9:df:04:d4:27:ee:3c:94:7b:bc:6c:de:44:0a:3f:fb:e4:c2: 51:2f:26:8f:91:17:ac:4b:28:31:07:c0:8b:1d:ff:66:e2:98: e8:19:07:bb:d8:0a:c6:b6:7d:02:cc:93:85:1b:2d:46:ae:2f: 1e:3d:ee:35:c1:45:53:59:88:c5:24:21:4f:41:5d:8b:8b:9d: ed:71:75:98:45:90:02:d2:75:98:75:af:d4:60:14:c9:bf:39: ec:01:40:6a:57:6a:75:12:86:f2:f8:a3:7f:d9:af:7b:07:78: 52:1f:26:5d:f3:04:aa:3c:41:a3:bd:e9:10:dd:f0:6f:38:ad: 1a:ee:aa:c4:ea:85:bb:58:82:ef:4a:a7:58:1e:df:77:ab:ff: 57:f7:e4:c2:f8:ba:bb:9c:b5:06:14:e1:c8:32:04:08:78:d0: ed:dd:66:91:93:4e:b9:6e:e7:ea:61:07:87:1f:9b:8f:43:d7: d0:23:d7:d0:17:5b:15:59:2d:02:1c:f3:bb:9b:e4:d8:e5:5d: 31:89:70:c0:00:51:2d:f6:36:ac:54:b0:38:a2:7f:ee:b0:81: 27:10:47:99 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUGTpiJh27e9mrtIoatp0OSga9QVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMDgxMjU5MzVaFw0yNzEwMDcxMzA0MzVaMDMxMTAvBgNV BAMTKDUyMDQ3RDNFNTE2MEY4NzE2Qjk3NDU5RERBQ0I2MUZGQzQ1NEYzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqOLhjj9Z+wBcqfyG4QQ8oFfg lalfBdXu6gyu7ZuYkUgDWGEdb5Ia05YZbgu0xaujfhvOcnJ0nyreGX2LddvEiKOc i1xfbvEOAgekxqud8KrS/LcaTxx9ODksVxmhiKCWISqmxmjfLQJ6PB47Kh07zEpY eXwoHb95cD50vnIeWO8FyCBS9YlJoiHUONClyAo5gnXjAMtRPZ6TfdOhZInOf10R g3eNzSwv+lxtm46pk1Y1Ka3VlZRAgpCeS5RW/wfTQrfZg/36v/Mb2YL/WjsjsDBi TuHcy02M1fzk69WxfYAKKle3rLlJsU2Vj5tTMkJVI3uRVUNAt1lc4GDE90inAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUUgR9PlFg+HFrl0Wd2sth/8RU8z0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxODQ1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoP YoQz+DANBgkqhkiG9w0BAQsFAAOCAQEAVKBW3OsUDuo8k1gSSibeqGzU/SS84rrc GO3bU421d3ReVbc6ud8E1CfuPJR7vGzeRAo/++TCUS8mj5EXrEsoMQfAix3/ZuKY 6BkHu9gKxrZ9AsyThRstRq4vHj3uNcFFU1mIxSQhT0Fdi4ud7XF1mEWQAtJ1mHWv 1GAUyb857AFAaldqdRKG8vijf9mvewd4Uh8mXfMEqjxBo73pEN3wbzitGu6qxOqF u1iC70qnWB7fd6v/V/fkwvi6u5y1BhThyDIECHjQ7d1mkZNOuW7n6mEHhx+bj0PX 0CPX0BdbFVktAhzzu5vk2OVdMYlwwABRLfY2rFSwOKJ/7rCBJxBHmQ== -----END CERTIFICATE-----Generated at Sat Oct 10 05:44:03 2026 by rpki-client