$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218798.roa File: AS218798.roa (raw, json) Hash identifier: AQDZAE5BvKkePvA0PlFRXiXdvUNmR+ipdu8gxHsi+b4= Subject key identifier: 8F:5F:FA:14:60:D1:5F:21:85:09:6E:6F:0A:5E:FD:92:D9:05:F6:AD Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 24F80A0BECC050873E9ACD311894D8D00D55D873 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218798.roa Signing time: Wed 02 Sep 2026 13:46:06 +0000 ROA not before: Wed 02 Sep 2026 13:41:06 +0000 ROA not after: Wed 01 Sep 2027 13:46:06 +0000 asID: 218798 IP address blocks: 2a0f:6283:4000::/34 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f8:0a:0b:ec:c0:50:87:3e:9a:cd:31:18:94:d8:d0:0d:55:d8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 2 13:41:06 2026 GMT Not After : Sep 1 13:46:06 2027 GMT Subject: CN=8F5FFA1460D15F2185096E6F0A5EFD92D905F6AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c5:60:c8:b8:4d:67:b0:93:c7:56:33:f5:2e: b9:6a:3d:30:5f:5f:9e:e8:cf:77:43:93:e9:21:97: b3:f1:95:55:3c:3b:b2:d1:d6:41:9f:d2:06:e3:04: e8:5d:f3:d6:4c:56:cb:b5:af:0a:81:57:21:c9:90: b0:0a:dc:81:c2:32:4c:d5:16:90:38:c9:df:01:72: ee:95:2e:76:bd:d8:7f:b5:51:da:b1:d7:5c:c9:39: c5:2a:57:62:62:ff:32:94:8d:7d:73:2b:60:97:b4: 25:21:05:a5:b3:e7:70:fb:fd:57:92:3a:91:a4:48: ed:66:7c:d2:db:9e:e6:42:20:4f:20:0d:a2:37:7e: 67:94:c0:f2:45:50:1c:b5:2d:b8:d3:80:40:44:9d: ab:13:84:2b:48:d7:a4:86:4d:58:56:67:25:fb:bc: 11:8f:a8:c7:ff:b8:e5:9d:08:02:97:b4:61:64:1c: 23:1c:65:e3:65:d7:9e:1b:da:5b:2b:68:ff:07:a8: 1d:6e:09:85:e2:9a:96:2f:f5:23:f2:42:f9:94:72: c1:a4:35:21:c5:e3:8a:62:bb:1b:ad:3e:f3:f3:3c: 74:88:7b:f4:cf:bd:fa:41:c0:8d:8e:62:d9:99:32: c1:c5:b6:5b:79:21:40:77:5a:9e:c2:de:97:86:5c: c0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5F:FA:14:60:D1:5F:21:85:09:6E:6F:0A:5E:FD:92:D9:05:F6:AD X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218798.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:4000::/34 Signature Algorithm: sha256WithRSAEncryption 6e:56:d3:f0:1b:f9:a5:ea:51:0d:5f:2b:25:80:40:40:74:8e: e5:e2:e4:c7:f8:b3:97:e8:83:e1:24:6f:f2:ae:d7:76:2d:92: 7e:98:c1:a7:16:cd:81:d9:18:78:54:d5:5f:8b:22:57:8f:85: 60:b1:1c:45:db:a6:a4:79:68:f2:7a:bf:18:7b:9b:3c:0b:9d: ef:b3:9d:1a:03:35:76:9b:da:e1:a2:11:82:72:f0:ec:cc:5f: a3:75:1f:28:16:7f:8c:5a:eb:e9:6c:d9:19:c0:c3:c3:25:9b: 7b:cf:78:a8:3b:e7:57:73:0a:07:17:f1:46:e5:a8:a2:6f:11: 5c:03:ae:3c:65:ac:3b:ee:b1:2e:e5:07:cd:cb:38:99:70:7b: 20:de:4b:02:29:e6:71:c5:04:5c:c8:b2:93:a2:74:95:3d:3c: b9:f0:db:58:26:44:4e:c4:6d:ed:52:35:97:a3:2e:02:42:db: a0:a2:d7:ed:3b:2a:48:fc:e5:0f:f9:90:f8:64:fd:47:0d:98: 6f:b5:0e:66:4a:26:27:e6:e0:d4:76:cc:52:9f:54:74:f1:fe: 2d:cc:29:ef:17:8e:5d:f7:1a:9b:25:fc:1d:52:aa:36:1d:26: 3f:e0:03:15:ef:a7:3d:f7:ce:2a:c1:38:c2:3b:8e:10:e7:b0: 26:1d:06:73 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUJPgKC+zAUIc+ms0xGJTY0A1V2HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MDIxMzQxMDZaFw0yNzA5MDExMzQ2MDZaMDMxMTAvBgNV BAMTKDhGNUZGQTE0NjBEMTVGMjE4NTA5NkU2RjBBNUVGRDkyRDkwNUY2QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwxWDIuE1nsJPHVjP1LrlqPTBf X57oz3dDk+khl7PxlVU8O7LR1kGf0gbjBOhd89ZMVsu1rwqBVyHJkLAK3IHCMkzV FpA4yd8Bcu6VLna92H+1Udqx11zJOcUqV2Ji/zKUjX1zK2CXtCUhBaWz53D7/VeS OpGkSO1mfNLbnuZCIE8gDaI3fmeUwPJFUBy1LbjTgEBEnasThCtI16SGTVhWZyX7 vBGPqMf/uOWdCAKXtGFkHCMcZeNl154b2lsraP8HqB1uCYXimpYv9SPyQvmUcsGk NSHF44piuxutPvPzPHSIe/TPvfpBwI2OYtmZMsHFtlt5IUB3Wp7C3peGXMAFAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUj1/6FGDRXyGFCW5vCl79ktkF9q0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg3OTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYq D2KDQDANBgkqhkiG9w0BAQsFAAOCAQEAblbT8Bv5pepRDV8rJYBAQHSO5eLkx/iz l+iD4SRv8q7Xdi2SfpjBpxbNgdkYeFTVX4siV4+FYLEcRdumpHlo8nq/GHubPAud 77OdGgM1dpva4aIRgnLw7Mxfo3UfKBZ/jFrr6WzZGcDDwyWbe894qDvnV3MKBxfx RuWoom8RXAOuPGWsO+6xLuUHzcs4mXB7IN5LAinmccUEXMiyk6J0lT08ufDbWCZE TsRt7VI1l6MuAkLboKLX7TsqSPzlD/mQ+GT9Rw2Yb7UOZkomJ+bg1HbMUp9UdPH+ Lcwp7xeOXfcamyX8HVKqNh0mP+ADFe+nPffOKsE4wjuOEOewJh0Gcw== -----END CERTIFICATE-----Generated at Mon Sep 21 04:09:53 2026 by rpki-client