$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218843.roa File: AS218843.roa (raw, json) Hash identifier: S2K29638GzcQ40iOslgTjhh9hw9GnOELVb9sRyIz2pY= Subject key identifier: B7:1A:F3:17:51:2A:6B:04:BC:F7:B9:22:83:41:77:F2:9A:75:DD:22 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 77359B979CC50A11E1879A118B7DEB90ACFD049D Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218843.roa Signing time: Sat 29 Aug 2026 19:54:44 +0000 ROA not before: Sat 29 Aug 2026 19:49:44 +0000 ROA not after: Sat 28 Aug 2027 19:54:44 +0000 asID: 218843 IP address blocks: 2a0f:6280:1030::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 31 Aug 2026 16:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:35:9b:97:9c:c5:0a:11:e1:87:9a:11:8b:7d:eb:90:ac:fd:04:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 29 19:49:44 2026 GMT Not After : Aug 28 19:54:44 2027 GMT Subject: CN=B71AF317512A6B04BCF7B922834177F29A75DD22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:bb:c1:f6:85:f4:ee:b2:d9:33:9a:fd:aa: 25:67:34:1a:ba:64:cb:13:93:9c:8e:4a:85:2f:44: f7:1c:c5:ad:68:71:90:63:b4:9d:0b:1c:84:e5:e7: 84:c9:3b:60:13:eb:b8:6a:02:ff:6e:ca:21:af:da: 6e:ee:b8:2b:b3:a7:4b:ac:c7:7f:d0:fd:69:df:02: 15:af:b5:b2:77:c5:ff:07:18:75:c4:4e:c6:b5:db: 71:c0:a4:a1:77:d1:07:3b:0a:21:f4:0d:5d:58:05: cf:e1:c1:70:90:65:2d:eb:2e:1f:8a:57:ef:df:25: c5:27:de:6e:ee:13:21:4d:c2:d8:d2:9f:18:f5:41: 65:91:c6:21:58:4b:16:ce:3f:c5:f5:ab:e3:88:8d: 3f:5b:79:d8:f8:90:14:50:52:af:84:12:62:c2:9b: 55:3b:94:4a:a2:0c:2a:d2:30:a2:10:93:b6:ff:7d: 75:2f:ac:ad:18:9a:34:40:c2:86:4b:03:60:55:b2: 2e:c2:5a:8e:2b:7f:a2:32:2f:e3:dd:7f:6a:ae:f5: 74:db:44:bd:bd:78:4a:e3:99:f8:61:01:2a:ca:2f: 69:b7:2a:8e:a6:24:98:cf:e7:8f:59:c4:f3:ba:a2: 94:31:7a:18:76:2a:03:b3:1b:d1:8e:69:f5:75:c5: a4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1A:F3:17:51:2A:6B:04:BC:F7:B9:22:83:41:77:F2:9A:75:DD:22 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1030::/44 Signature Algorithm: sha256WithRSAEncryption 85:cc:5c:01:d6:c6:53:78:a2:41:83:e6:f2:16:53:ad:a4:8c: c1:72:e9:40:c6:f9:a4:3d:5d:d0:b8:31:a9:59:9d:58:20:68: b8:13:1e:43:7d:36:d4:5c:1b:e1:95:b8:99:57:fc:46:36:14: cc:fc:4e:7a:c7:50:4e:b9:93:aa:19:81:18:f4:f9:36:c6:d9: 22:c7:51:b3:22:f5:2d:7b:3a:39:90:b2:0a:ae:8d:c2:18:ff: 17:68:d9:34:71:25:15:cc:88:b5:7e:8a:3e:a9:4e:89:7b:c3: 11:02:bc:a3:68:1b:fd:d5:5c:20:d4:e5:56:c9:68:7d:53:c1: b9:7d:eb:70:a8:a1:e7:6b:9f:dc:b6:7f:39:e8:02:24:31:8e: 4d:3c:a6:6a:6f:02:09:e6:72:a5:5c:84:89:f1:0f:f9:d9:9b: bc:c6:2f:fc:aa:19:91:da:0a:63:f6:32:8a:74:15:d2:aa:6b: 57:94:20:7e:37:bf:1b:7c:06:3e:62:d0:9c:44:08:13:48:fd: b4:37:11:2e:88:c6:2a:6c:6c:4f:d6:b8:03:d2:05:96:39:d6: 28:04:8a:c6:c3:2e:3b:08:9d:1f:1c:d9:67:ab:68:f6:0a:2d: 6d:e5:08:50:db:23:0f:81:0e:21:38:c2:8a:39:2d:60:55:9b: 00:e4:cf:33 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUdzWbl5zFChHhh5oRi33rkKz9BJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MjkxOTQ5NDRaFw0yNzA4MjgxOTU0NDRaMDMxMTAvBgNV BAMTKEI3MUFGMzE3NTEyQTZCMDRCQ0Y3QjkyMjgzNDE3N0YyOUE3NUREMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChjbvB9oX07rLZM5r9qiVnNBq6 ZMsTk5yOSoUvRPccxa1ocZBjtJ0LHITl54TJO2AT67hqAv9uyiGv2m7uuCuzp0us x3/Q/WnfAhWvtbJ3xf8HGHXETsa123HApKF30Qc7CiH0DV1YBc/hwXCQZS3rLh+K V+/fJcUn3m7uEyFNwtjSnxj1QWWRxiFYSxbOP8X1q+OIjT9bedj4kBRQUq+EEmLC m1U7lEqiDCrSMKIQk7b/fXUvrK0YmjRAwoZLA2BVsi7CWo4rf6IyL+Pdf2qu9XTb RL29eErjmfhhASrKL2m3Ko6mJJjP549ZxPO6opQxehh2KgOzG9GOafV1xaSvAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUtxrzF1EqawS897kig0F38pp13SIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg4NDMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KAEDAwDQYJKoZIhvcNAQELBQADggEBAIXMXAHWxlN4okGD5vIWU62kjMFy6UDG +aQ9XdC4MalZnVggaLgTHkN9NtRcG+GVuJlX/EY2FMz8TnrHUE65k6oZgRj0+TbG 2SLHUbMi9S17OjmQsgqujcIY/xdo2TRxJRXMiLV+ij6pTol7wxECvKNoG/3VXCDU 5VbJaH1Twbl963Cooedrn9y2fznoAiQxjk08pmpvAgnmcqVchInxD/nZm7zGL/yq GZHaCmP2Mop0FdKqa1eUIH43vxt8Bj5i0JxECBNI/bQ3ES6IxipsbE/WuAPSBZY5 1igEisbDLjsInR8c2WeraPYKLW3lCFDbIw+BDiE4woo5LWBVmwDkzzM= -----END CERTIFICATE-----Generated at Mon Aug 31 03:15:25 2026 by rpki-client