$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS18328.roa File: AS18328.roa (raw, json) Hash identifier: 4zO1r+wwNOGK2Nz2CkdBU67+cZhfqv1na1ZQg1o78Do= Subject key identifier: 16:B1:B9:B6:D0:3E:79:6D:68:7C:11:0F:24:EC:04:D2:A3:27:B5:EC Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 65C55E8405A34EE9648F8996C452AC79D710846E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS18328.roa Signing time: Tue 24 Feb 2026 08:16:05 +0000 ROA not before: Tue 24 Feb 2026 08:11:05 +0000 ROA not after: Tue 23 Feb 2027 08:16:05 +0000 asID: 18328 IP address blocks: 2a0f:6284:33fa::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 11:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c5:5e:84:05:a3:4e:e9:64:8f:89:96:c4:52:ac:79:d7:10:84:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 24 08:11:05 2026 GMT Not After : Feb 23 08:16:05 2027 GMT Subject: CN=16B1B9B6D03E796D687C110F24EC04D2A327B5EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:3c:66:85:a4:e5:f5:39:76:de:ce:bd:88: 91:bb:80:a1:0c:89:3e:4a:ca:25:c1:d7:30:d2:51: 26:10:a6:53:f6:09:96:78:b6:97:a5:a2:d9:dc:65: 84:dc:8f:4a:a1:62:78:56:3a:a6:a8:5c:b8:0d:46: 13:fe:28:fa:a5:a9:8c:04:5f:66:48:a2:a9:1d:0b: 69:c1:91:e3:74:49:67:62:f6:25:b5:c1:f4:fc:34: 4f:0a:3e:77:5c:97:62:0e:28:3b:0c:e0:12:2f:7e: f9:d8:97:e9:e7:dc:15:9b:e8:34:44:70:2b:e5:04: e4:e1:5e:87:bf:85:ec:7e:81:b6:d0:53:a0:74:a0: a9:b2:8c:76:ae:e1:89:b2:eb:bd:7f:f4:a2:4b:0c: 90:ba:9b:82:32:d1:c6:1f:a1:5d:48:31:f7:ef:ec: 4c:79:cc:7b:20:fa:6b:38:38:ff:12:9a:b5:9e:d6: c5:f3:6f:39:f4:1c:42:a7:cb:c3:bb:eb:00:06:13: dd:65:d8:f0:a2:a6:db:b4:72:69:e4:eb:b3:4a:89: 16:dc:e1:3b:93:1c:5d:b0:b6:16:5d:82:a7:9b:fc: 5c:d8:fe:40:8f:77:35:73:81:03:a2:ab:69:6b:1b: 11:f9:18:37:39:70:b5:18:0e:a0:41:6b:a1:6e:2a: 4a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B1:B9:B6:D0:3E:79:6D:68:7C:11:0F:24:EC:04:D2:A3:27:B5:EC X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS18328.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:33fa::/48 Signature Algorithm: sha256WithRSAEncryption 40:0f:e6:17:b8:d1:f6:7f:fb:12:9d:62:7c:b3:78:18:a8:b2: 8b:d3:ce:52:d5:4b:a6:4d:9a:9f:1d:b0:17:71:80:06:5e:1a: 28:b3:ff:9e:1b:7c:89:8a:eb:c9:73:fa:35:79:de:5f:4f:9c: 35:17:48:d9:86:5d:03:96:a4:7b:ce:b1:b7:d6:ba:18:cd:e0: a8:25:ad:d5:dd:01:d8:d1:90:f7:b9:5e:b5:a3:62:26:71:97: 85:76:e0:de:9c:2e:ff:ef:66:fe:43:de:6c:05:09:05:df:70: 2b:11:c4:fc:d0:83:aa:d9:41:7c:a5:c6:38:ef:d2:6d:ba:3d: 3f:ad:1f:b2:f4:8a:87:18:fd:00:e1:89:23:82:3f:39:86:4a: 22:20:ca:fe:b6:b3:29:df:60:ff:52:5a:61:ee:43:5e:1d:d4: 3b:62:57:56:2c:3b:94:f8:2a:99:13:5c:d8:7e:f3:fe:40:99: 48:49:b9:f0:d4:37:d0:43:e5:d3:ec:e9:90:f2:4d:1c:60:aa: 33:ee:de:59:56:ac:a9:93:8f:6f:2a:f6:49:28:2a:1d:be:75: 8e:13:90:c6:02:bb:9a:97:ca:25:f7:2c:e0:8b:6e:51:06:cc: 3a:65:1d:c8:a6:43:d7:93:94:a1:2d:ab:9a:d6:f8:11:88:48: f3:97:8d:d6 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUZcVehAWjTulkj4mWxFKsedcQhG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMjQwODExMDVaFw0yNzAyMjMwODE2MDVaMDMxMTAvBgNV BAMTKDE2QjFCOUI2RDAzRTc5NkQ2ODdDMTEwRjI0RUMwNEQyQTMyN0I1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VDxmhaTl9Tl23s69iJG7gKEM iT5KyiXB1zDSUSYQplP2CZZ4tpelotncZYTcj0qhYnhWOqaoXLgNRhP+KPqlqYwE X2ZIoqkdC2nBkeN0SWdi9iW1wfT8NE8KPndcl2IOKDsM4BIvfvnYl+nn3BWb6DRE cCvlBOThXoe/hex+gbbQU6B0oKmyjHau4Ymy671/9KJLDJC6m4Iy0cYfoV1IMffv 7Ex5zHsg+ms4OP8SmrWe1sXzbzn0HEKny8O76wAGE91l2PCiptu0cmnk67NKiRbc 4TuTHF2wthZdgqeb/FzY/kCPdzVzgQOiq2lrGxH5GDc5cLUYDqBBa6FuKkpdAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUFrG5ttA+eW1ofBEPJOwE0qMntewwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxODMyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoP YoQz+jANBgkqhkiG9w0BAQsFAAOCAQEAQA/mF7jR9n/7Ep1ifLN4GKiyi9POUtVL pk2anx2wF3GABl4aKLP/nht8iYrryXP6NXneX0+cNRdI2YZdA5ake86xt9a6GM3g qCWt1d0B2NGQ97letaNiJnGXhXbg3pwu/+9m/kPebAUJBd9wKxHE/NCDqtlBfKXG OO/Sbbo9P60fsvSKhxj9AOGJI4I/OYZKIiDK/razKd9g/1JaYe5DXh3UO2JXViw7 lPgqmRNc2H7z/kCZSEm58NQ30EPl0+zpkPJNHGCqM+7eWVasqZOPbyr2SSgqHb51 jhOQxgK7mpfKJfcs4ItuUQbMOmUdyKZD15OUoS2rmtb4EYhI85eN1g== -----END CERTIFICATE-----Generated at Mon Mar 2 19:35:50 2026 by rpki-client