$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS28753.roa File: AS28753.roa (raw, json) Hash identifier: 8JQIrfqkmGkvPpEv5vii+hjIY3zi6HN2EDGHDl5+21k= Subject key identifier: CD:39:17:BE:BD:41:33:35:2E:D4:B5:45:1E:17:43:7C:DF:06:0D:9A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4B65C328F1D7E4C5FE5EBCA45DC40A41139865A8 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS28753.roa Signing time: Tue 06 Oct 2026 15:53:06 +0000 ROA not before: Tue 06 Oct 2026 15:48:06 +0000 ROA not after: Tue 05 Oct 2027 15:53:06 +0000 asID: 28753 IP address blocks: 2a0f:6280:1051::/48 maxlen: 48 2a0f:6280:1053::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 14:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:65:c3:28:f1:d7:e4:c5:fe:5e:bc:a4:5d:c4:0a:41:13:98:65:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 6 15:48:06 2026 GMT Not After : Oct 5 15:53:06 2027 GMT Subject: CN=CD3917BEBD4133352ED4B5451E17437CDF060D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5b:ee:64:5a:1e:2b:1d:53:2b:13:10:fc:dc: 45:53:bf:16:08:7f:be:f3:7c:e1:55:58:d3:ac:33: 70:10:2e:f9:bd:8e:ac:7c:1c:5d:f3:f6:f6:00:b2: ab:e4:80:29:fa:94:dc:ee:6b:35:82:bd:69:94:49: bc:62:12:f6:44:28:c9:42:ef:8a:59:bb:e6:8b:d0: da:1f:2c:e2:af:74:e2:30:16:12:6f:48:7f:37:a8: 9a:e1:a8:15:86:73:cf:28:3b:87:9b:84:39:0f:d0: c4:cc:5d:51:38:31:dd:b4:a9:93:a7:7c:aa:b7:98: ae:53:e3:38:03:8f:5e:47:e5:93:62:a9:35:92:35: 83:77:e6:c2:51:11:c4:85:72:ac:f6:c4:18:2a:5e: 83:bb:a0:9e:38:e6:65:6c:c3:8e:7f:a9:48:f4:89: 2e:11:63:cb:0e:99:27:e6:5f:67:a7:32:6e:85:e5: 22:73:37:0e:9b:99:64:ef:44:ba:73:ed:63:7a:ea: 2c:21:33:d7:a8:a4:0f:21:3d:df:a3:f1:83:9a:42: 07:3b:8d:b2:25:a7:3e:11:71:99:4f:ab:c9:e2:58: b6:38:4e:17:22:4d:65:cc:a2:db:74:71:ac:33:14: 25:04:e5:a2:5b:8e:4d:c1:7c:c8:9b:0a:74:e6:27: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:39:17:BE:BD:41:33:35:2E:D4:B5:45:1E:17:43:7C:DF:06:0D:9A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS28753.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1051::/48 2a0f:6280:1053::/48 Signature Algorithm: sha256WithRSAEncryption 12:cb:92:77:3e:13:c3:a0:64:e5:7f:77:9f:eb:e2:6b:e6:03: 85:27:bb:92:2b:2d:2c:d2:c7:72:c7:fd:a8:62:f6:69:f4:a1: 0c:fe:64:21:89:ee:36:78:5c:db:43:98:58:25:8f:88:1f:da: 40:fe:57:48:f6:58:e1:24:28:8a:61:a5:ff:7c:4a:af:c8:6b: d8:c1:d0:77:e3:65:97:e8:72:3e:21:24:5b:22:01:79:49:83: 15:ef:ad:fb:0e:9c:9a:a2:5b:b7:7e:1d:18:a0:5c:e1:a0:1a: d7:db:0b:fd:9f:c4:1f:84:32:8a:f7:e1:25:60:6a:37:22:61: 5d:23:72:7f:e5:15:3d:c9:de:5c:9f:5f:e0:05:a0:f3:4e:7c: e4:f2:ab:6a:9d:d2:cb:e5:3d:79:74:7f:fb:72:da:c5:ef:3b: 84:35:7c:5b:c3:b7:06:29:45:ba:f8:25:dd:fb:de:53:4d:0e: 0f:e6:bf:8b:b8:6b:e6:c9:63:e8:04:b4:f6:ba:bd:3d:09:d0: b4:be:f9:3b:e8:d3:5e:22:de:48:da:c7:e4:84:4b:7b:81:33: b7:d3:f2:40:c5:1d:51:8b:9a:a1:b1:e1:50:3a:57:7e:c3:10: a0:9f:e7:ff:26:08:f2:95:e6:47:a7:5e:18:2d:98:75:9c:60: 7d:9f:0a:a5 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUS2XDKPHX5MX+XrykXcQKQROYZagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMDYxNTQ4MDZaFw0yNzEwMDUxNTUzMDZaMDMxMTAvBgNV BAMTKENEMzkxN0JFQkQ0MTMzMzUyRUQ0QjU0NTFFMTc0MzdDREYwNjBEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsW+5kWh4rHVMrExD83EVTvxYI f77zfOFVWNOsM3AQLvm9jqx8HF3z9vYAsqvkgCn6lNzuazWCvWmUSbxiEvZEKMlC 74pZu+aL0NofLOKvdOIwFhJvSH83qJrhqBWGc88oO4ebhDkP0MTMXVE4Md20qZOn fKq3mK5T4zgDj15H5ZNiqTWSNYN35sJREcSFcqz2xBgqXoO7oJ445mVsw45/qUj0 iS4RY8sOmSfmX2enMm6F5SJzNw6bmWTvRLpz7WN66iwhM9eopA8hPd+j8YOaQgc7 jbIlpz4RcZlPq8niWLY4ThciTWXMott0cawzFCUE5aJbjk3BfMibCnTmJ6wxAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUzTkXvr1BMzUu1LVFHhdDfN8GDZowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyODc1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoP YoAQUQMHACoPYoAQUzANBgkqhkiG9w0BAQsFAAOCAQEAEsuSdz4Tw6Bk5X93n+vi a+YDhSe7kistLNLHcsf9qGL2afShDP5kIYnuNnhc20OYWCWPiB/aQP5XSPZY4SQo imGl/3xKr8hr2MHQd+Nll+hyPiEkWyIBeUmDFe+t+w6cmqJbt34dGKBc4aAa19sL /Z/EH4QyivfhJWBqNyJhXSNyf+UVPcneXJ9f4AWg80585PKrap3Sy+U9eXR/+3La xe87hDV8W8O3BilFuvgl3fveU00OD+a/i7hr5slj6AS09rq9PQnQtL75O+jTXiLe SNrH5IRLe4Ezt9PyQMUdUYuaobHhUDpXfsMQoJ/n/yYI8pXmR6deGC2YdZxgfZ8K pQ== -----END CERTIFICATE-----Generated at Sat Oct 10 05:43:58 2026 by rpki-client