$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS401818.roa File: AS401818.roa (raw, json) Hash identifier: yZi4V07SPntPrDArkZ5fLuvRB0eL6LoZYD+fQ4a+AOk= Subject key identifier: C9:8E:CA:D0:F1:5F:55:AB:00:4E:33:46:21:3A:69:80:5C:8D:98:36 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1861E76610250F98F570EDCCC462041FABB106DB Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS401818.roa Signing time: Mon 03 Nov 2025 11:15:18 +0000 ROA not before: Mon 03 Nov 2025 11:10:18 +0000 ROA not after: Mon 02 Nov 2026 11:15:18 +0000 asID: 401818 IP address blocks: 2a0f:6283:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:61:e7:66:10:25:0f:98:f5:70:ed:cc:c4:62:04:1f:ab:b1:06:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 3 11:10:18 2025 GMT Not After : Nov 2 11:15:18 2026 GMT Subject: CN=C98ECAD0F15F55AB004E3346213A69805C8D9836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:d8:3f:fd:d4:f1:73:73:e9:17:59:05:74: a1:89:20:b4:9e:de:9a:50:9d:8b:71:24:51:06:68: f5:b9:0b:23:43:1a:5d:7e:34:03:f1:3f:3b:1f:6c: b5:df:57:0e:ca:65:e0:50:60:1e:87:61:f1:3b:98: 68:93:cf:ad:e2:66:b3:a6:21:70:90:58:a3:c8:42: 5b:5a:09:93:2e:9d:e4:db:a3:ac:4d:2e:d2:f7:bc: af:ab:85:8b:57:24:e5:32:db:31:dd:7a:ad:56:f0: 10:f2:30:10:ec:27:49:01:dd:83:70:fb:58:d9:05: 81:c5:de:62:b2:39:91:3e:5f:32:fb:75:71:42:6e: 37:cf:08:cf:31:c8:d0:e1:f5:3e:b2:10:40:9c:12: 6c:db:b6:f6:eb:ed:4a:1d:55:2f:f6:6d:f6:fa:47: b5:25:47:7d:24:39:e3:98:b4:f8:39:e4:19:cf:f0: a0:41:63:76:e6:77:1a:97:00:6b:84:95:44:61:c2: 5f:82:dd:45:6d:0d:bc:e3:ac:03:be:c1:2b:25:92: f0:8c:ee:d9:aa:74:00:e1:9f:54:a7:95:28:19:10: 5a:d5:19:6f:24:ee:f7:2c:45:e4:a7:06:0f:d0:4f: 3d:48:32:20:95:b9:6a:38:51:a4:44:f6:72:39:2f: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8E:CA:D0:F1:5F:55:AB:00:4E:33:46:21:3A:69:80:5C:8D:98:36 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS401818.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:7000::/36 Signature Algorithm: sha256WithRSAEncryption 26:3e:01:a4:5e:b0:3b:d8:aa:0e:69:f9:0a:6f:95:08:f0:0b: 55:df:0b:2c:f6:3d:b1:5f:3d:ce:23:58:73:84:b3:a6:bd:01: 7c:f6:49:a2:b1:57:25:ba:94:28:be:d6:da:d1:b7:7d:2d:2f: b1:7a:db:b1:38:62:2f:71:d5:e3:3d:02:0b:a5:4a:56:a2:fa: df:6e:72:12:00:80:18:2c:5d:29:44:38:bf:bd:a5:1b:5f:4a: 51:95:10:4e:65:bc:1c:fc:67:20:5d:f5:1b:bb:18:d0:56:ea: 8e:3a:5a:d7:27:10:46:f8:20:2c:d4:87:e7:cf:01:aa:07:d1: fd:f8:42:68:dc:b8:84:f6:78:ca:1e:fa:50:12:8f:a6:80:29: 5c:fc:4c:3a:d0:3d:6a:6e:0d:cd:dd:91:a7:aa:11:ad:bf:c7: ec:76:a3:e3:77:13:9d:e1:ac:96:6a:6a:2e:b4:d9:e6:e0:30: 0a:32:da:93:6b:95:13:a4:d8:4e:b6:93:6e:ba:0d:8e:49:81: 85:de:6d:2a:5c:aa:cf:96:31:64:ac:2b:cc:cd:1a:3e:2f:30: 6e:be:10:1c:f9:30:fe:42:6a:54:b0:c2:9e:b6:d4:f9:bc:54: 08:29:92:b7:f0:eb:55:18:4a:8a:f1:a4:da:4f:e6:77:07:45: 44:3a:2b:4a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUGGHnZhAlD5j1cO3MxGIEH6uxBtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTExMDMxMTEwMThaFw0yNjExMDIxMTE1MThaMDMxMTAvBgNV BAMTKEM5OEVDQUQwRjE1RjU1QUIwMDRFMzM0NjIxM0E2OTgwNUM4RDk4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1D9g//dTxc3PpF1kFdKGJILSe 3ppQnYtxJFEGaPW5CyNDGl1+NAPxPzsfbLXfVw7KZeBQYB6HYfE7mGiTz63iZrOm IXCQWKPIQltaCZMuneTbo6xNLtL3vK+rhYtXJOUy2zHdeq1W8BDyMBDsJ0kB3YNw +1jZBYHF3mKyOZE+XzL7dXFCbjfPCM8xyNDh9T6yEECcEmzbtvbr7UodVS/2bfb6 R7UlR30kOeOYtPg55BnP8KBBY3bmdxqXAGuElURhwl+C3UVtDbzjrAO+wSslkvCM 7tmqdADhn1SnlSgZEFrVGW8k7vcsReSnBg/QTz1IMiCVuWo4UaRE9nI5L5uBAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUyY7K0PFfVasATjNGITppgFyNmDYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0MDE4MTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KDcDANBgkqhkiG9w0BAQsFAAOCAQEAJj4BpF6wO9iqDmn5Cm+VCPALVd8LLPY9 sV89ziNYc4Szpr0BfPZJorFXJbqUKL7W2tG3fS0vsXrbsThiL3HV4z0CC6VKVqL6 325yEgCAGCxdKUQ4v72lG19KUZUQTmW8HPxnIF31G7sY0Fbqjjpa1ycQRvggLNSH 588BqgfR/fhCaNy4hPZ4yh76UBKPpoApXPxMOtA9am4Nzd2Rp6oRrb/H7Haj43cT neGslmpqLrTZ5uAwCjLak2uVE6TYTraTbroNjkmBhd5tKlyqz5YxZKwrzM0aPi8w br4QHPkw/kJqVLDCnrbU+bxUCCmSt/DrVRhKivGk2k/mdwdFRDorSg== -----END CERTIFICATE-----Generated at Wed Nov 5 11:40:05 2025 by rpki-client