$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218748.roa File: AS218748.roa (raw, json) Hash identifier: ErPhZT8lcRUENOg6hTgqcbYL0e34moCNo2MEQXk1raM= Subject key identifier: B0:DA:50:9B:28:6F:21:F0:77:07:89:D2:95:AF:19:31:56:FF:17:CE Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3DE2FC2E72B5B0529D20CE48C0AE63D63FBE1360 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218748.roa Signing time: Thu 10 Sep 2026 00:20:46 +0000 ROA not before: Thu 10 Sep 2026 00:15:46 +0000 ROA not after: Thu 09 Sep 2027 00:20:46 +0000 asID: 218748 IP address blocks: 2a0f:6283:9000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 11:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e2:fc:2e:72:b5:b0:52:9d:20:ce:48:c0:ae:63:d6:3f:be:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 10 00:15:46 2026 GMT Not After : Sep 9 00:20:46 2027 GMT Subject: CN=B0DA509B286F21F0770789D295AF193156FF17CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a6:fc:17:af:d3:de:07:1a:66:00:2d:00:11: c7:70:bb:fd:57:0b:e9:49:18:66:82:01:97:74:0a: 9a:24:37:f4:c1:31:f6:39:b5:68:e9:81:2e:52:7a: 14:69:29:fd:c0:30:62:61:81:0d:c9:65:46:3b:5d: 40:f3:1c:40:3b:31:af:92:c1:fd:f2:6b:74:33:35: a2:95:91:27:52:27:44:87:0a:da:83:d4:b5:07:52: ab:0e:ba:64:c2:75:75:c7:ae:16:c7:e8:bf:9f:bc: 32:d1:45:ef:28:d2:57:9d:6f:84:b8:a3:71:36:d3: 02:1c:80:a2:33:6e:b3:d7:34:04:2c:1e:c2:04:d5: ff:22:2c:cb:f5:b9:ed:22:bb:f6:a4:7e:30:c3:3c: 1e:2f:37:48:7b:8f:b7:e9:b8:e9:9e:4f:c6:14:c3: 96:65:f9:6a:a7:77:79:7d:9d:fe:8b:d0:e5:9e:ba: 26:ee:80:67:88:53:d9:3b:fe:ad:f9:62:b7:fc:67: 66:39:25:66:dc:31:f5:2c:3b:f5:2b:8a:40:e2:5a: 5f:f0:8f:50:89:0e:a1:97:57:b7:dc:48:b6:dc:4a: cd:a4:8f:e4:be:27:30:e0:86:05:e9:45:96:08:b1: da:dc:2e:84:d6:9a:28:3e:c9:f9:80:db:1a:ba:88: 78:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DA:50:9B:28:6F:21:F0:77:07:89:D2:95:AF:19:31:56:FF:17:CE X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218748.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:9000::/36 Signature Algorithm: sha256WithRSAEncryption 30:e9:2f:2d:67:3c:0e:69:21:cd:46:1d:4d:11:86:b2:5d:ec: df:af:d6:13:f7:52:6e:e0:0f:2b:cf:f1:a5:6c:39:44:5d:e3: c1:2c:85:5e:cf:8f:bd:4b:d1:44:fb:42:da:85:f7:78:99:b3: 40:87:fc:99:bf:68:2a:d5:a1:e8:35:fd:fe:bf:cc:d7:d0:7d: d8:1e:f2:77:dc:c1:b8:6e:be:d0:c8:46:e1:67:e8:57:d4:a8: fd:5d:cc:69:de:df:04:4d:bf:03:67:1a:c4:27:23:7c:e8:10: 58:d7:6b:c0:ef:01:80:4b:12:7f:65:5b:ba:f2:75:38:1d:93: 52:dd:9b:1e:ea:b5:7d:c4:b9:ba:45:69:68:b9:bd:fe:c8:87: 34:4d:f4:5a:03:0f:a0:a8:7e:68:69:17:ea:4f:fe:e4:ac:85: 94:20:96:4e:97:ab:c0:e4:27:ad:bf:b4:2e:61:74:b2:b4:31: 9d:c7:02:b6:48:b9:55:c7:6e:5d:ac:c3:0a:03:6e:8c:4f:6b: ba:ce:51:ea:30:1c:cf:f2:ed:a9:86:6f:e0:5f:67:8d:54:b1: 24:24:6d:a3:ee:b2:9e:b9:20:0f:20:22:97:a4:e1:d9:79:e3: 4f:86:a7:30:f7:5f:38:8c:20:d5:71:b9:3f:94:db:25:05:19: d1:0b:f6:e1 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUPeL8LnK1sFKdIM5IwK5j1j++E2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTAwMDE1NDZaFw0yNzA5MDkwMDIwNDZaMDMxMTAvBgNV BAMTKEIwREE1MDlCMjg2RjIxRjA3NzA3ODlEMjk1QUYxOTMxNTZGRjE3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUpvwXr9PeBxpmAC0AEcdwu/1X C+lJGGaCAZd0CpokN/TBMfY5tWjpgS5SehRpKf3AMGJhgQ3JZUY7XUDzHEA7Ma+S wf3ya3QzNaKVkSdSJ0SHCtqD1LUHUqsOumTCdXXHrhbH6L+fvDLRRe8o0ledb4S4 o3E20wIcgKIzbrPXNAQsHsIE1f8iLMv1ue0iu/akfjDDPB4vN0h7j7fpuOmeT8YU w5Zl+Wqnd3l9nf6L0OWeuibugGeIU9k7/q35Yrf8Z2Y5JWbcMfUsO/UrikDiWl/w j1CJDqGXV7fcSLbcSs2kj+S+JzDghgXpRZYIsdrcLoTWmig+yfmA2xq6iHh5AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUsNpQmyhvIfB3B4nSla8ZMVb/F84wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg3NDgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KDkDANBgkqhkiG9w0BAQsFAAOCAQEAMOkvLWc8DmkhzUYdTRGGsl3s36/WE/dS buAPK8/xpWw5RF3jwSyFXs+PvUvRRPtC2oX3eJmzQIf8mb9oKtWh6DX9/r/M19B9 2B7yd9zBuG6+0MhG4WfoV9So/V3Mad7fBE2/A2caxCcjfOgQWNdrwO8BgEsSf2Vb uvJ1OB2TUt2bHuq1fcS5ukVpaLm9/siHNE30WgMPoKh+aGkX6k/+5KyFlCCWTper wOQnrb+0LmF0srQxnccCtki5VcduXazDCgNujE9rus5R6jAcz/LtqYZv4F9njVSx JCRto+6ynrkgDyAil6Th2XnjT4anMPdfOIwg1XG5P5TbJQUZ0Qv24Q== -----END CERTIFICATE-----Generated at Fri Sep 18 22:23:23 2026 by rpki-client