$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218681.roa File: AS218681.roa (raw, json) Hash identifier: dGaIT9agDs0GKjAEtsk69U81FwqlYHlgYcMCaOCJPoo= Subject key identifier: D3:C7:42:AC:D5:2D:B3:18:85:C1:5B:42:E6:3C:3F:69:5C:31:8E:4B Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 7BE21BC29063DDF0437569A9559BA2FACAE5BE86 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218681.roa Signing time: Thu 08 Oct 2026 13:11:10 +0000 ROA not before: Thu 08 Oct 2026 13:06:10 +0000 ROA not after: Thu 07 Oct 2027 13:11:10 +0000 asID: 218681 IP address blocks: 2a0f:6284:33f9::/48 maxlen: 48 2a0f:6284:33fb::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 14:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e2:1b:c2:90:63:dd:f0:43:75:69:a9:55:9b:a2:fa:ca:e5:be:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 8 13:06:10 2026 GMT Not After : Oct 7 13:11:10 2027 GMT Subject: CN=D3C742ACD52DB31885C15B42E63C3F695C318E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:b5:5b:3b:23:11:19:f1:ee:ba:69:03:6c: 39:7f:2c:a2:a4:c4:86:68:ec:8d:87:64:93:06:77: 49:c6:77:fa:cd:10:b6:a6:dc:b7:61:37:5c:83:05: a9:00:ba:6d:a1:0b:62:31:15:2c:95:67:2f:4d:6b: 0c:d5:5e:7c:52:72:ce:df:bd:3a:3b:f5:31:82:0f: 62:c2:ec:19:aa:43:81:73:b7:a1:52:a7:23:fb:f9: 4d:d2:e9:57:65:73:2d:8b:09:29:c9:36:95:bd:ba: 5d:ab:d1:49:92:da:95:97:37:e4:0e:15:e8:41:2b: 0b:d6:ff:40:cd:9a:80:39:ff:dc:e0:08:51:98:70: 12:e5:4d:0c:a5:d1:97:a1:b8:0d:7d:06:bc:1f:d5: 2a:bd:b9:2d:08:b4:8d:31:67:4d:1d:80:fa:18:2a: 65:ad:da:25:64:ea:8e:7c:84:05:62:9d:38:22:04: ed:9c:10:85:79:f4:53:c1:56:f4:59:98:1c:ba:1d: 1f:dc:0f:8b:8c:f6:29:80:7a:07:2b:f2:22:4d:9a: bc:1f:88:a5:34:dc:9c:59:8d:c3:05:b5:1b:1b:fa: a4:af:76:93:8c:94:d1:cc:21:4b:57:8d:7c:9b:0d: 36:02:c0:3a:cf:6f:aa:38:de:f3:c2:94:97:76:be: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C7:42:AC:D5:2D:B3:18:85:C1:5B:42:E6:3C:3F:69:5C:31:8E:4B X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:33f9::/48 2a0f:6284:33fb::/48 Signature Algorithm: sha256WithRSAEncryption 0d:ea:07:da:9c:d8:32:e4:fe:29:13:0c:69:a4:7c:3c:11:5f: c6:4c:5f:f4:5e:9b:2f:d3:94:8b:31:a9:42:d3:59:de:65:bd: 43:e5:d5:93:ae:22:df:d1:72:86:e4:24:06:22:6d:13:6b:89: 91:ab:f3:65:94:bb:10:d1:60:fb:eb:2d:6b:ce:0e:72:ca:81: fb:ae:9b:3e:a6:40:30:a8:80:e4:51:4c:d9:33:2c:78:fe:51: a9:05:10:56:e2:f9:5b:b4:50:c5:96:c6:cf:ce:14:00:bc:aa: d3:5a:f5:67:30:1a:3a:db:d7:a9:a3:50:f4:8d:87:83:46:01: eb:ac:d5:e5:4b:5f:9e:0b:fd:d9:42:f7:96:87:28:7d:cd:f7: bf:2d:42:a4:c9:68:28:af:cd:dc:89:9a:50:70:78:40:07:25: 7e:ec:d4:16:75:b2:e5:4e:e5:4a:9e:eb:92:cf:51:57:61:4d: 87:ef:de:74:e3:09:3d:cc:27:7a:0c:1e:9e:04:4a:8c:3a:44: de:71:60:16:9b:8a:b9:e5:fe:86:1c:c9:4d:4c:91:37:8e:ec: ab:25:2a:f6:c1:c2:44:c1:1f:dc:5c:67:31:4b:96:8e:8d:a5: ee:d7:c3:df:92:96:76:30:45:27:97:2d:96:23:0c:1a:ef:35: cd:b0:fe:5c -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUe+IbwpBj3fBDdWmpVZui+srlvoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMDgxMzA2MTBaFw0yNzEwMDcxMzExMTBaMDMxMTAvBgNV BAMTKEQzQzc0MkFDRDUyREIzMTg4NUMxNUI0MkU2M0MzRjY5NUMzMThFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwobVbOyMRGfHuumkDbDl/LKKk xIZo7I2HZJMGd0nGd/rNELam3LdhN1yDBakAum2hC2IxFSyVZy9NawzVXnxScs7f vTo79TGCD2LC7BmqQ4Fzt6FSpyP7+U3S6Vdlcy2LCSnJNpW9ul2r0UmS2pWXN+QO FehBKwvW/0DNmoA5/9zgCFGYcBLlTQyl0ZehuA19Brwf1Sq9uS0ItI0xZ00dgPoY KmWt2iVk6o58hAVinTgiBO2cEIV59FPBVvRZmBy6HR/cD4uM9imAegcr8iJNmrwf iKU03JxZjcMFtRsb+qSvdpOMlNHMIUtXjXybDTYCwDrPb6o43vPClJd2vsXzAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU08dCrNUtsxiFwVtC5jw/aVwxjkswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg2ODEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KEM/kDBwAqD2KEM/swDQYJKoZIhvcNAQELBQADggEBAA3qB9qc2DLk/ikTDGmk fDwRX8ZMX/Remy/TlIsxqULTWd5lvUPl1ZOuIt/RcobkJAYibRNriZGr82WUuxDR YPvrLWvODnLKgfuumz6mQDCogORRTNkzLHj+UakFEFbi+Vu0UMWWxs/OFAC8qtNa 9WcwGjrb16mjUPSNh4NGAeus1eVLX54L/dlC95aHKH3N978tQqTJaCivzdyJmlBw eEAHJX7s1BZ1suVO5Uqe65LPUVdhTYfv3nTjCT3MJ3oMHp4ESow6RN5xYBabirnl /oYcyU1MkTeO7KslKvbBwkTBH9xcZzFLlo6Npe7Xw9+SlnYwRSeXLZYjDBrvNc2w /lw= -----END CERTIFICATE-----Generated at Sat Oct 10 05:44:07 2026 by rpki-client