$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: kwFcIyJ71JCXI0CudX0UVRvpvBmVT6uGm/tWEFf8/zs= Subject key identifier: AB:9B:91:EB:47:3D:81:00:EF:71:E6:9B:50:D4:C5:62:3C:67:D3:10 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 415AF2A7CF98E881ACF697B8AF9FF7DCEF7AAF21 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa Signing time: Fri 24 Jul 2026 13:49:23 +0000 ROA not before: Fri 24 Jul 2026 13:44:23 +0000 ROA not after: Fri 23 Jul 2027 13:49:23 +0000 asID: 14618 IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44 2a05:dfc3:f750::/44 maxlen: 48 2a0f:6284:4c50::/44 maxlen: 48 2a0f:6284:4c60::/44 maxlen: 48 2a0f:6284:4c70::/44 maxlen: 48 2a0f:6284:4c80::/44 maxlen: 48 2a0f:6284:4c90::/44 maxlen: 48 2a0f:6284:4cd0::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5a:f2:a7:cf:98:e8:81:ac:f6:97:b8:af:9f:f7:dc:ef:7a:af:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 24 13:44:23 2026 GMT Not After : Jul 23 13:49:23 2027 GMT Subject: CN=AB9B91EB473D8100EF71E69B50D4C5623C67D310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:d3:c7:95:e9:e0:3e:16:47:18:6b:8f:1d: 02:23:24:1e:1e:e2:b7:84:ed:c5:d7:fa:bc:ae:48: 4c:12:82:d6:32:e2:72:0c:86:84:af:06:3f:44:48: 26:ed:47:ab:8f:7c:cf:15:6f:05:3d:69:9e:d4:d0: ce:d0:ae:e3:6c:36:07:b9:42:6e:c4:f1:27:b6:30: 04:a6:91:62:db:69:b7:8f:2b:08:95:24:38:4c:7e: 15:9b:9e:e3:ed:fd:f3:b1:dd:7c:bf:ef:03:13:78: d1:5b:54:9b:20:32:e9:ad:56:1f:0d:5d:dc:c0:0f: 82:17:35:88:29:44:fa:e0:1d:3d:e0:cc:7d:e6:c6: 7a:30:50:d5:9d:fc:62:f4:7d:dc:4b:96:02:58:1d: d5:9a:4d:de:20:c6:47:83:91:91:a6:0a:94:00:a5: 00:5f:ec:ea:76:cf:27:64:52:9c:18:f6:fd:99:a1: 9f:f6:2f:f4:a1:66:7d:93:de:c5:62:ed:6e:d9:ae: 5d:44:fc:5f:3a:dd:c2:8e:6b:1e:8c:a1:96:0b:9e: 82:ad:e0:39:82:7d:28:f2:ec:43:20:a2:00:0c:a2: 12:1c:3b:6f:a5:61:92:c4:40:2c:88:c7:d6:31:75: b8:f4:01:71:8c:ff:28:8a:29:15:f6:e6:d9:01:1a: 9e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9B:91:EB:47:3D:81:00:EF:71:E6:9B:50:D4:C5:62:3C:67:D3:10 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f740::/43 2a0f:6284:4c50::-2a0f:6284:4c9f:ffff:ffff:ffff:ffff:ffff 2a0f:6284:4cd0::/44 Signature Algorithm: sha256WithRSAEncryption 84:c6:18:5c:b1:08:e8:5e:70:85:93:6e:1a:d6:d6:1a:a2:0f: 6e:79:77:fd:f7:c5:00:e0:1e:00:db:ba:85:f1:76:08:3f:45: 46:b3:eb:26:44:40:4e:d9:b6:40:37:d5:11:fb:e2:97:e3:b2: 54:64:44:91:58:e6:b7:59:ec:0e:9b:6b:d0:fa:2b:ca:05:43: 7c:17:65:49:c1:1a:a9:90:10:2c:b8:c1:22:62:32:43:58:90: 04:38:1c:84:59:2f:76:b6:e6:b2:27:72:18:fc:12:07:c7:c2: 3a:64:25:bc:ac:3b:13:ef:10:bd:e9:33:df:cf:03:e1:2c:59: 32:da:a3:af:c0:28:23:76:a6:e2:96:53:3c:f7:58:1b:85:b5: a3:bb:da:42:52:f2:7c:22:89:1e:e3:62:23:01:fa:35:86:2c: ae:92:b5:54:fa:af:a4:85:ee:f5:98:ac:2b:92:95:a4:f7:0b: 77:da:ef:60:c5:05:6c:38:1c:9d:65:33:1e:f3:bd:6e:89:2d: 20:bb:fb:c7:e5:d7:99:76:ca:4e:f1:fe:22:e2:8c:9c:f1:14: 0b:4d:fb:e3:17:8e:a5:76:4f:ce:33:72:cd:c5:fd:9c:d8:56: b3:74:23:3c:ac:98:99:62:3a:23:7c:2e:a2:5e:c8:5d:10:11: 57:a1:19:f5 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUQVryp8+Y6IGs9pe4r5/33O96ryEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjQxMzQ0MjNaFw0yNzA3MjMxMzQ5MjNaMDMxMTAvBgNV BAMTKEFCOUI5MUVCNDczRDgxMDBFRjcxRTY5QjUwRDRDNTYyM0M2N0QzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEdPHlengPhZHGGuPHQIjJB4e 4reE7cXX+ryuSEwSgtYy4nIMhoSvBj9ESCbtR6uPfM8VbwU9aZ7U0M7QruNsNge5 Qm7E8Se2MASmkWLbabePKwiVJDhMfhWbnuPt/fOx3Xy/7wMTeNFbVJsgMumtVh8N XdzAD4IXNYgpRPrgHT3gzH3mxnowUNWd/GL0fdxLlgJYHdWaTd4gxkeDkZGmCpQA pQBf7Op2zydkUpwY9v2ZoZ/2L/ShZn2T3sVi7W7Zrl1E/F863cKOax6MoZYLnoKt 4DmCfSjy7EMgogAMohIcO2+lYZLEQCyIx9Yxdbj0AXGM/yiKKRX25tkBGp5jAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUq5uR60c9gQDvceabUNTFYjxn0xAwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxNDYxOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wLAQCAAIwJgMHBSoF 38P3QDASAwcEKg9ihExQAwcFKg9ihEyAAwcEKg9ihEzQMA0GCSqGSIb3DQEBCwUA A4IBAQCExhhcsQjoXnCFk24a1tYaog9ueXf998UA4B4A27qF8XYIP0VGs+smREBO 2bZAN9UR++KX47JUZESRWOa3WewOm2vQ+ivKBUN8F2VJwRqpkBAsuMEiYjJDWJAE OByEWS92tuayJ3IY/BIHx8I6ZCW8rDsT7xC96TPfzwPhLFky2qOvwCgjdqbillM8 91gbhbWju9pCUvJ8Ioke42IjAfo1hiyukrVU+q+khe71mKwrkpWk9wt32u9gxQVs OBydZTMe871uiS0gu/vH5deZdspO8f4i4oyc8RQLTfvjF46ldk/OM3LNxf2c2Faz dCM8rJiZYjojfC6iXshdEBFXoRn1 -----END CERTIFICATE-----Generated at Tue Jul 28 17:00:01 2026 by rpki-client