$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: hd2eGXsZFvPA0+45U8pk2Nlg/HGCdhcVdCq4yqeTLto= Subject key identifier: 48:38:29:2E:E2:35:DF:FD:81:3C:CD:6C:7A:5E:C1:BC:50:61:63:2D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 78CC945C1FA60F32D8BC74A8B36078A051A9F157 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa Signing time: Sun 20 Jul 2025 06:06:48 +0000 ROA not before: Sun 20 Jul 2025 06:01:48 +0000 ROA not after: Sun 19 Jul 2026 06:06:48 +0000 asID: 14618 IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44 2a05:dfc3:f750::/44 maxlen: 48 2a09:54c6:dfff::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 02:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:cc:94:5c:1f:a6:0f:32:d8:bc:74:a8:b3:60:78:a0:51:a9:f1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 20 06:01:48 2025 GMT Not After : Jul 19 06:06:48 2026 GMT Subject: CN=4838292EE235DFFD813CCD6C7A5EC1BC5061632D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:6e:aa:b4:af:0f:ac:23:16:39:02:08:54: a4:9c:4d:6f:c7:fc:97:7a:f7:9b:28:59:e1:b6:f5: 39:40:1b:c5:2c:38:25:b6:b7:57:f2:f5:b3:71:31: 9d:18:3d:79:77:96:2c:fc:89:bf:2f:1b:ea:27:81: 1d:5a:cc:83:d0:24:22:da:57:f5:09:1e:1b:7a:6f: 2d:6f:80:d5:6f:37:5f:38:6b:fd:01:f2:34:f1:a2: 0f:47:11:68:71:cc:73:af:99:3e:3c:de:f2:5d:32: 84:14:f6:cf:4c:59:d8:db:ff:68:7d:cc:e1:59:82: fc:c0:c0:dd:7e:b1:40:cf:f5:3b:96:ac:de:41:3e: e1:22:4d:59:6d:b7:72:90:30:c1:fa:ea:0f:2f:e7: 98:8d:c6:e5:07:ff:da:f2:f0:e5:12:51:8f:57:b7: 90:ee:7d:bc:e2:cf:19:96:da:6a:37:37:2b:76:bf: 7c:7d:95:91:8a:4a:d3:a0:12:75:94:f9:3d:7d:5c: 65:60:55:3a:e3:e5:3d:d5:67:d4:f0:68:9b:b4:ad: 70:71:85:b5:35:0a:d7:3b:ac:bd:c8:97:a3:d0:70: 1e:59:60:b9:05:93:c0:6e:a4:79:a4:4c:c0:53:80: 3f:b1:ee:ab:f3:39:22:78:c6:e1:f2:bc:53:06:61: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:38:29:2E:E2:35:DF:FD:81:3C:CD:6C:7A:5E:C1:BC:50:61:63:2D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f740::/43 2a09:54c6:dfff::/48 Signature Algorithm: sha256WithRSAEncryption 7e:61:85:c6:bd:60:61:e4:87:66:f9:93:5f:59:59:cf:7b:d6: df:70:72:c9:c0:cb:3f:14:fe:ba:46:ea:23:66:fe:0e:cf:b0: 18:75:89:83:e5:5d:f7:21:03:73:cc:09:98:68:dd:76:79:d2: ab:ae:18:3d:c7:76:8d:c4:51:2d:95:ad:01:d2:30:11:ad:00: a0:13:4b:2e:c8:38:14:f9:c0:13:3c:0a:67:26:93:b5:84:65: 93:ce:e7:67:5d:23:d0:69:aa:bc:ad:32:72:68:c0:e4:7f:1b: a8:2d:5f:43:03:39:f6:ec:8c:37:fe:a7:9a:51:32:fb:56:dc: a9:78:3d:13:23:b0:c5:d1:26:02:2a:7f:2a:28:2e:36:f5:15: 37:c4:f8:7e:39:3c:e0:a7:c2:ec:af:ba:e1:03:e7:5c:41:89: 4c:89:d8:bf:72:8c:92:6d:06:48:ad:20:83:99:84:5a:36:8b: a4:79:02:20:d3:41:2b:b8:7d:dd:37:2c:02:fa:f7:9f:dc:18: 5d:f9:56:17:56:33:34:6b:e7:d0:f8:cb:e8:9a:4b:b4:9f:48: 40:a4:55:0a:c0:20:2a:72:a4:a9:ba:0d:b1:25:38:95:11:6d: 45:97:53:67:f8:dc:f7:e8:93:7c:18:e0:98:76:2d:c6:83:03: ad:3a:85:3d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUeMyUXB+mDzLYvHSos2B4oFGp8VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MjAwNjAxNDhaFw0yNjA3MTkwNjA2NDhaMDMxMTAvBgNV BAMTKDQ4MzgyOTJFRTIzNURGRkQ4MTNDQ0Q2QzdBNUVDMUJDNTA2MTYzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDON26qtK8PrCMWOQIIVKScTW/H /Jd695soWeG29TlAG8UsOCW2t1fy9bNxMZ0YPXl3liz8ib8vG+ongR1azIPQJCLa V/UJHht6by1vgNVvN184a/0B8jTxog9HEWhxzHOvmT483vJdMoQU9s9MWdjb/2h9 zOFZgvzAwN1+sUDP9TuWrN5BPuEiTVltt3KQMMH66g8v55iNxuUH/9ry8OUSUY9X t5DufbzizxmW2mo3Nyt2v3x9lZGKStOgEnWU+T19XGVgVTrj5T3VZ9TwaJu0rXBx hbU1Ctc7rL3Il6PQcB5ZYLkFk8BupHmkTMBTgD+x7qvzOSJ4xuHyvFMGYWXpAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUSDgpLuI13/2BPM1sel7BvFBhYy0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxNDYxOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBSoF 38P3QAMHACoJVMbf/zANBgkqhkiG9w0BAQsFAAOCAQEAfmGFxr1gYeSHZvmTX1lZ z3vW33ByycDLPxT+ukbqI2b+Ds+wGHWJg+Vd9yEDc8wJmGjddnnSq64YPcd2jcRR LZWtAdIwEa0AoBNLLsg4FPnAEzwKZyaTtYRlk87nZ10j0GmqvK0ycmjA5H8bqC1f QwM59uyMN/6nmlEy+1bcqXg9EyOwxdEmAip/KiguNvUVN8T4fjk84KfC7K+64QPn XEGJTInYv3KMkm0GSK0gg5mEWjaLpHkCINNBK7h93TcsAvr3n9wYXflWF1YzNGvn 0PjL6JpLtJ9IQKRVCsAgKnKkqboNsSU4lRFtRZdTZ/jc9+iTfBjgmHYtxoMDrTqF PQ== -----END CERTIFICATE-----Generated at Wed Aug 6 13:14:52 2025 by rpki-client