$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218805.roa File: AS218805.roa (raw, json) Hash identifier: 0QG8UdVDXAGI3edTRWUgQmFVRYKH9J+PxOkVvlaOVTE= Subject key identifier: 49:EE:D1:37:FF:98:97:BC:0E:65:5D:67:E1:65:DF:90:16:04:39:79 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 49FBF96147984A40FAD7F5A83A6D3539537F13C5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218805.roa Signing time: Thu 22 Oct 2026 21:10:13 +0000 ROA not before: Thu 22 Oct 2026 21:05:13 +0000 ROA not after: Thu 21 Oct 2027 21:10:13 +0000 asID: 218805 IP address blocks: 2a0f:6282:5000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 17:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fb:f9:61:47:98:4a:40:fa:d7:f5:a8:3a:6d:35:39:53:7f:13:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 22 21:05:13 2026 GMT Not After : Oct 21 21:10:13 2027 GMT Subject: CN=49EED137FF9897BC0E655D67E165DF9016043979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0c:fa:f3:42:bb:28:5e:9d:e2:e3:d4:2c:56: 16:7e:21:b5:69:ac:c3:e6:84:3b:f9:b7:ab:63:14: b2:dc:4f:e4:09:71:b3:0e:20:43:b5:3e:bf:96:d5: 5e:4e:d9:ac:61:98:68:16:e6:48:d0:9c:9c:fc:02: 0d:e5:c7:ef:91:c9:6a:7e:f6:c1:bf:11:a4:30:56: 24:84:fd:bb:7f:93:6d:e9:3f:2d:46:37:f2:a6:74: 91:a1:53:f7:ee:02:fb:e0:ef:eb:d6:59:59:79:2e: 3a:85:4a:bf:5d:76:ad:86:e9:41:3f:59:3c:8d:73: f8:b2:88:73:02:dd:6c:86:41:ad:a3:9f:53:a3:81: cd:bf:9d:b1:3b:74:07:23:12:6e:5a:1e:92:0f:dc: 1c:3f:d1:e3:94:65:31:18:a8:ee:2f:1a:6e:5d:94: 61:5c:34:e6:08:ac:1c:a0:4e:c9:b7:5b:05:b9:23: c2:27:4d:82:5a:00:37:a5:9b:6a:56:13:da:dd:c9: 0d:2d:af:25:a2:74:12:99:53:64:a5:a8:85:e5:5e: bf:44:72:2c:06:1d:70:da:d0:9d:f4:58:98:1f:8a: 84:a0:2e:97:be:d2:c1:01:03:51:93:3c:49:f2:c1: ba:1e:f3:d6:ad:de:c8:30:43:bb:c7:19:26:f0:0a: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EE:D1:37:FF:98:97:BC:0E:65:5D:67:E1:65:DF:90:16:04:39:79 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218805.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:5000::/36 Signature Algorithm: sha256WithRSAEncryption 2a:24:d9:d9:3e:33:b4:2b:1d:ec:27:fd:33:0e:7d:a1:c7:56: 51:74:e4:cd:2c:31:a4:b6:87:13:7b:e8:f8:17:de:d4:81:24: 14:6e:20:db:02:22:28:66:1f:68:c2:9f:8a:cb:4d:87:0c:06: 20:59:15:34:6a:ba:36:3c:86:7e:f3:fc:7e:74:07:ba:93:ff: 0d:5f:9b:d4:d6:c8:73:1d:21:63:41:a4:ef:4b:0a:c7:fd:91: fb:bd:f4:aa:e7:87:43:ee:73:a5:c9:86:c4:a9:79:43:e8:1e: 13:fd:6b:90:74:15:95:68:ca:33:a9:1b:61:45:00:9a:92:a8: 04:97:58:5c:74:39:c2:02:8c:3e:9a:d9:17:b5:12:41:9d:24: 54:eb:a7:f9:f8:00:59:35:aa:8c:e1:c8:7e:f5:01:d7:14:40: 02:94:c4:4c:b7:6d:ed:91:03:c2:61:32:30:d3:cd:a4:15:72: 44:f1:1b:9a:26:8a:a6:51:18:2e:b5:04:01:ea:9a:57:a3:02: a4:13:cc:7c:09:76:37:4c:8b:1f:fa:32:cd:52:6b:eb:c4:13: 78:f7:0c:ce:bb:7a:fc:b3:ec:8c:f2:a9:b4:e8:99:73:ad:b6: 32:45:9d:26:62:50:9c:00:24:4c:ba:f4:41:3c:dd:0f:be:84: ea:17:99:ed -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUSfv5YUeYSkD61/WoOm01OVN/E8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMjIyMTA1MTNaFw0yNzEwMjEyMTEwMTNaMDMxMTAvBgNV BAMTKDQ5RUVEMTM3RkY5ODk3QkMwRTY1NUQ2N0UxNjVERjkwMTYwNDM5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDPrzQrsoXp3i49QsVhZ+IbVp rMPmhDv5t6tjFLLcT+QJcbMOIEO1Pr+W1V5O2axhmGgW5kjQnJz8Ag3lx++RyWp+ 9sG/EaQwViSE/bt/k23pPy1GN/KmdJGhU/fuAvvg7+vWWVl5LjqFSr9ddq2G6UE/ WTyNc/iyiHMC3WyGQa2jn1Ojgc2/nbE7dAcjEm5aHpIP3Bw/0eOUZTEYqO4vGm5d lGFcNOYIrBygTsm3WwW5I8InTYJaADelm2pWE9rdyQ0tryWidBKZU2SlqIXlXr9E ciwGHXDa0J30WJgfioSgLpe+0sEBA1GTPEnywboe89at3sgwQ7vHGSbwCl5/AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUSe7RN/+Yl7wOZV1n4WXfkBYEOXkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg4MDUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KCUDANBgkqhkiG9w0BAQsFAAOCAQEAKiTZ2T4ztCsd7Cf9Mw59ocdWUXTkzSwx pLaHE3vo+Bfe1IEkFG4g2wIiKGYfaMKfistNhwwGIFkVNGq6NjyGfvP8fnQHupP/ DV+b1NbIcx0hY0Gk70sKx/2R+730queHQ+5zpcmGxKl5Q+geE/1rkHQVlWjKM6kb YUUAmpKoBJdYXHQ5wgKMPprZF7USQZ0kVOun+fgAWTWqjOHIfvUB1xRAApTETLdt 7ZEDwmEyMNPNpBVyRPEbmiaKplEYLrUEAeqaV6MCpBPMfAl2N0yLH/oyzVJr68QT ePcMzrt6/LPsjPKptOiZc622MkWdJmJQnAAkTLr0QTzdD76E6heZ7Q== -----END CERTIFICATE-----Generated at Thu Nov 5 04:56:12 2026 by rpki-client