$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: ujGAtPymZ48yAaXPg+k2e/aOTHH8aBZ2EBFQnyBwRO8= Subject key identifier: BA:8B:E1:02:E6:3D:3B:32:89:48:F1:D7:B1:7A:A5:8F:0D:59:0B:4C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 20004BB4DBC2246784AF5DE69702C656BB54FA Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS16509.roa Signing time: Tue 01 Sep 2026 08:45:07 +0000 ROA not before: Tue 01 Sep 2026 08:40:07 +0000 ROA not after: Tue 31 Aug 2027 08:45:07 +0000 asID: 16509 IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44 2a05:dfc3:f750::/44 maxlen: 48 2a0f:6280:1003::/48 maxlen: 48 2a0f:6280:1110::/48 maxlen: 48 2a0f:6284:4c00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:00:4b:b4:db:c2:24:67:84:af:5d:e6:97:02:c6:56:bb:54:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 1 08:40:07 2026 GMT Not After : Aug 31 08:45:07 2027 GMT Subject: CN=BA8BE102E63D3B328948F1D7B17AA58F0D590B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:9a:45:a8:52:6c:56:dd:90:9a:f4:dc:a6: 33:07:9d:31:7b:3e:75:77:6b:55:70:ee:c9:a1:b4: fe:40:3a:b3:e4:95:7a:7e:49:28:ab:8c:b8:3b:06: cc:3e:63:c6:11:8a:14:51:e9:b9:2d:06:d4:24:10: 2a:b6:17:50:1f:21:88:b5:e8:a6:d3:e9:b7:a9:7f: 9d:fd:ea:cc:2a:41:11:cc:66:56:f6:55:31:54:17: 6f:f2:2b:18:5d:3e:44:4e:28:1a:95:2a:89:53:04: 8d:f6:bb:4d:25:47:e1:cb:91:e6:f0:ca:42:56:22: 0e:c8:9c:82:b1:de:c2:d1:2a:df:c1:9d:3d:d6:46: b5:11:2e:c7:11:ca:46:51:bb:77:fe:b9:89:21:31: dd:26:ab:8c:62:21:9e:fe:5d:88:76:3b:a0:f7:3c: eb:bb:81:18:c5:ab:fc:0e:90:a0:1d:5b:de:ce:c6: 61:f6:eb:8c:b3:3e:83:07:a4:28:81:da:77:6e:4c: 43:13:b2:64:dc:7d:b5:1b:19:3f:71:52:5a:ba:94: fe:ee:fb:67:de:12:c3:98:d1:e7:ae:7e:57:06:85: d5:e1:04:f3:9e:39:83:c2:13:52:4f:66:ad:a3:21: 2b:78:56:8f:b0:d8:9d:b6:44:4c:f0:97:b0:d2:a5: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8B:E1:02:E6:3D:3B:32:89:48:F1:D7:B1:7A:A5:8F:0D:59:0B:4C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f740::/43 2a0f:6280:1003::/48 2a0f:6280:1110::/48 2a0f:6284:4c00::/40 Signature Algorithm: sha256WithRSAEncryption 31:b7:3a:99:58:c3:7d:2a:02:7a:91:e9:7f:5f:84:1b:f6:bf: 4a:a3:dc:c2:fe:dc:83:a4:a1:ad:92:2a:20:49:54:20:83:ec: 03:fc:be:33:89:cf:b8:a9:10:4e:f6:ed:b1:e3:d7:cb:5c:03: 01:bf:37:e2:1a:c5:75:34:ec:0e:3e:c4:e2:57:ab:3e:7c:95: 14:b7:a8:e2:b8:09:81:b0:bb:06:69:d8:cb:f9:69:82:be:57: 5f:01:06:21:5d:44:67:44:b9:7a:55:61:00:e6:22:bb:af:12: 9b:2c:fc:ce:00:49:ba:e3:bb:eb:a1:0d:f6:75:f0:7b:dc:ec: 90:c5:32:be:df:ce:ca:e9:69:d2:3d:53:33:f3:34:9d:09:16: 56:e7:75:75:27:49:19:9c:18:83:2e:33:7e:8a:fb:da:8b:ec: ce:72:f8:f1:76:d2:ae:a9:d9:3b:7d:8f:28:a9:04:38:04:04: f0:c6:af:4c:12:62:48:af:04:43:4c:0c:4b:fe:6c:63:64:1a: 7f:19:c1:f2:0a:83:b2:26:47:57:f4:55:59:47:04:b4:20:f4: a5:b2:46:0a:68:86:b6:d8:1a:cc:29:ef:8d:fb:da:12:d7:bc: 44:f5:0b:80:b3:a2:40:fc:39:80:35:6c:57:cd:aa:c5:08:82: 4b:25:93:2f -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgITIABLtNvCJGeEr13mlwLGVrtU+jANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDM0NGNDE4OTg5MzZDQjlDNTczREIxRUFBQjk0QzZFNjY5 OTUxRkQ3MB4XDTI2MDkwMTA4NDAwN1oXDTI3MDgzMTA4NDUwN1owMzExMC8GA1UE AxMoQkE4QkUxMDJFNjNEM0IzMjg5NDhGMUQ3QjE3QUE1OEYwRDU5MEI0QzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5YmkWoUmxW3ZCa9NymMwedMXs+ dXdrVXDuyaG0/kA6s+SVen5JKKuMuDsGzD5jxhGKFFHpuS0G1CQQKrYXUB8hiLXo ptPpt6l/nf3qzCpBEcxmVvZVMVQXb/IrGF0+RE4oGpUqiVMEjfa7TSVH4cuR5vDK QlYiDsicgrHewtEq38GdPdZGtREuxxHKRlG7d/65iSEx3SarjGIhnv5diHY7oPc8 67uBGMWr/A6QoB1b3s7GYfbrjLM+gwekKIHad25MQxOyZNx9tRsZP3FSWrqU/u77 Z94Sw5jR565+VwaF1eEE8545g8ITUk9mraMhK3hWj7DYnbZETPCXsNKlDn0CAwEA AaOCAfgwggH0MB0GA1UdDgQWBBS6i+EC5j07MolI8dexeqWPDVkLTDAfBgNVHSME GDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0f BF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3Mi5uZXQvcmVwby9IWUVIT1NU LzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2OTk1MUZENy5jcmww gZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1Yzkx YmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2OTk1MUZE Ny5jZXIwTgYIKwYBBQUHAQsEQjBAMD4GCCsGAQUFBzALhjJyc3luYzovL2tyaWxs LjQ3MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9BUzE2NTA5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwcFKgXf w/dAAwcAKg9igBADAwcAKg9igBEQAwYAKg9ihEwwDQYJKoZIhvcNAQELBQADggEB ADG3OplYw30qAnqR6X9fhBv2v0qj3ML+3IOkoa2SKiBJVCCD7AP8vjOJz7ipEE72 7bHj18tcAwG/N+IaxXU07A4+xOJXqz58lRS3qOK4CYGwuwZp2Mv5aYK+V18BBiFd RGdEuXpVYQDmIruvEpss/M4ASbrju+uhDfZ18Hvc7JDFMr7fzsrpadI9UzPzNJ0J FlbndXUnSRmcGIMuM36K+9qL7M5y+PF20q6p2Tt9jyipBDgEBPDGr0wSYkivBENM DEv+bGNkGn8ZwfIKg7ImR1f0VVlHBLQg9KWyRgpohrbYGswp74372hLXvET1C4Cz okD8OYA1bFfNqsUIgkslky8= -----END CERTIFICATE-----Generated at Sun Sep 20 17:58:59 2026 by rpki-client