$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61574.roa File: AS61574.roa (raw, json) Hash identifier: CFBwLo4WbnRrp19g4XPkrkdP3QMm3ER/UNyHMztnsaE= Subject key identifier: 89:2E:18:E2:B2:F9:95:2C:69:0D:00:D1:3B:EC:D2:CB:FF:F3:25:B3 Certificate issuer: /CN=F79647511753842C2E53F2B5A8CA789825A09B7D Certificate serial: 18FD4BFDA88A98E10D7196806D68B72DB8E2B182 Authority key identifier: F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61574.roa Signing time: Mon 15 Jun 2026 21:23:13 +0000 ROA not before: Mon 15 Jun 2026 21:18:13 +0000 ROA not after: Mon 14 Jun 2027 21:23:13 +0000 asID: 61574 IP address blocks: 138.185.228.0/24 maxlen: 24 138.185.230.0/24 maxlen: 24 2804:269c:c::/46 maxlen: 48 2804:269c:fe80::/48 maxlen: 48 2804:269c:fe81::/48 maxlen: 48 2804:269c:fe82::/48 maxlen: 48 2804:269c:fe83::/48 maxlen: 48 2804:269c:fe84::/48 maxlen: 48 2804:269c:fe85::/48 maxlen: 48 2804:269c:fe86::/48 maxlen: 48 2804:269c:fe87::/48 maxlen: 48 2804:269c:fe88::/48 maxlen: 48 2804:269c:fe89::/48 maxlen: 48 2804:269c:fe8a::/48 maxlen: 48 2804:269c:fe8b::/48 maxlen: 48 2804:269c:fe8c::/48 maxlen: 48 2804:269c:fe8d::/48 maxlen: 48 2804:269c:fe8e::/48 maxlen: 48 2804:269c:fe8f::/48 maxlen: 48 2804:269c:fe90::/48 maxlen: 48 2804:269c:fe91::/48 maxlen: 48 2804:269c:fe92::/48 maxlen: 48 2804:269c:fe93::/48 maxlen: 48 2804:269c:fe94::/48 maxlen: 48 2804:269c:fe95::/48 maxlen: 48 2804:269c:fe96::/48 maxlen: 48 2804:269c:fe97::/48 maxlen: 48 2804:269c:fe98::/48 maxlen: 48 2804:269c:fe99::/48 maxlen: 48 2804:269c:fe9a::/48 maxlen: 48 2804:269c:fe9b::/48 maxlen: 48 2804:269c:fe9c::/48 maxlen: 48 2804:269c:fe9d::/48 maxlen: 48 2804:269c:fe9e::/48 maxlen: 48 2804:269c:fe9f::/48 maxlen: 48 2804:269c:fea0::/48 maxlen: 48 2804:269c:fea1::/48 maxlen: 48 2804:269c:fea2::/48 maxlen: 48 2804:269c:fea3::/48 maxlen: 48 2804:269c:fea4::/48 maxlen: 48 2804:269c:fea5::/48 maxlen: 48 2804:269c:fea6::/48 maxlen: 48 2804:269c:fea7::/48 maxlen: 48 2804:269c:fea8::/48 maxlen: 48 2804:269c:fea9::/48 maxlen: 48 2804:269c:feaa::/48 maxlen: 48 2804:269c:feab::/48 maxlen: 48 2804:269c:feac::/48 maxlen: 48 2804:269c:fead::/48 maxlen: 48 2804:269c:feae::/48 maxlen: 48 2804:269c:feaf::/48 maxlen: 48 2804:269c:feb0::/48 maxlen: 48 2804:269c:feb1::/48 maxlen: 48 2804:269c:feb2::/48 maxlen: 48 2804:269c:feb3::/48 maxlen: 48 2804:269c:feb4::/48 maxlen: 48 2804:269c:feb5::/48 maxlen: 48 2804:269c:feb6::/48 maxlen: 48 2804:269c:feb7::/48 maxlen: 48 2804:269c:feb8::/48 maxlen: 48 2804:269c:feb9::/48 maxlen: 48 2804:269c:feba::/48 maxlen: 48 2804:269c:febb::/48 maxlen: 48 2804:269c:febc::/48 maxlen: 48 2804:269c:febd::/48 maxlen: 48 2804:269c:febe::/48 maxlen: 48 2804:269c:febf::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 28 Jun 2026 05:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:fd:4b:fd:a8:8a:98:e1:0d:71:96:80:6d:68:b7:2d:b8:e2:b1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79647511753842C2E53F2B5A8CA789825A09B7D Validity Not Before: Jun 15 21:18:13 2026 GMT Not After : Jun 14 21:23:13 2027 GMT Subject: CN=892E18E2B2F9952C690D00D13BECD2CBFFF325B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:b1:25:10:02:d1:87:e2:9c:02:76:01:f6: 18:a2:dd:f2:22:ef:d0:ab:73:87:e6:7e:b7:43:a6: 89:34:87:a0:0e:7b:bb:9f:ab:03:a0:6e:69:18:a1: 71:6a:cb:05:17:69:9d:80:01:51:7b:ed:1c:a7:f1: e1:f4:3b:bb:fc:c1:d8:77:a8:6d:80:d1:3c:d1:f0: b8:33:67:47:db:e0:35:29:69:01:21:a8:ba:86:95: 6f:e9:dd:1d:6d:c6:5b:c3:d5:75:c5:ce:eb:57:c6: eb:a5:28:9d:65:58:f8:63:2c:21:ef:68:3c:c6:71: 2b:f3:50:55:c1:33:97:fe:34:7a:ac:17:20:a7:2d: 8a:ea:7f:36:88:c5:cc:fa:c1:e5:5d:70:7d:bd:d7: 79:15:60:6f:53:c5:41:a5:d3:12:f0:de:a0:47:0a: 60:62:f0:89:c4:8e:98:cd:8d:ae:5c:21:51:2e:34: ec:ff:68:15:93:81:53:fb:4a:29:67:57:21:e2:ea: 35:51:6a:87:42:e3:1d:0f:c1:83:52:08:c7:27:6f: 9b:74:04:e1:28:56:44:c6:86:8c:f9:3c:69:8d:d6: 0e:4a:49:ae:ef:da:3f:b7:7a:43:d9:85:9c:66:09: 67:4f:1f:5e:05:c0:13:39:43:3f:a2:ca:51:87:81: 5f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2E:18:E2:B2:F9:95:2C:69:0D:00:D1:3B:EC:D2:CB:FF:F3:25:B3 X509v3 Authority Key Identifier: keyid:F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/24 138.185.230.0/24 IPv6: 2804:269c:c::/46 2804:269c:fe80::/42 Signature Algorithm: sha256WithRSAEncryption 89:57:16:d6:62:b9:b2:dd:82:e0:3f:8a:81:65:c6:ef:0a:a6: 0b:66:63:b9:16:8a:46:6b:ee:5f:f2:aa:d0:95:88:4a:e1:c5: b9:e5:ac:e8:ad:36:57:07:95:72:2c:46:b1:ed:6a:cd:9c:91: 93:e3:8d:20:b7:2d:4c:d9:20:23:92:e8:31:cf:e1:27:f0:88: 11:e1:06:8a:69:9e:23:f6:5e:40:97:c3:2b:5a:63:91:8a:92: 79:5f:74:fd:22:63:df:99:57:2a:4f:db:18:13:f4:2a:81:43: 97:e8:2b:a8:c3:a9:bf:06:93:3a:dc:11:3e:64:ae:21:b3:e8: 55:48:6b:72:69:e5:6f:05:24:54:a7:7f:f9:ca:15:1b:23:ed: bd:bf:48:88:28:38:ef:81:45:2e:05:17:80:42:af:4f:af:bf: d8:aa:6a:08:cb:db:41:c7:4f:09:de:98:ce:fe:60:68:10:55: 7a:33:b2:d1:cd:cc:a4:e1:70:0c:52:05:ea:9a:62:08:40:1d: 82:e1:75:96:95:c5:66:51:25:f4:f5:3c:85:d1:8c:3b:cc:d9: f7:c7:4c:89:e5:e5:03:81:e4:89:3d:51:5c:8f:46:02:e4:65: cf:41:22:f7:61:17:be:9d:ec:6c:7f:48:f2:93:78:b2:da:be: 49:99:d6:06 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUGP1L/aiKmOENcZaAbWi3LbjisYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NjQ3NTExNzUzODQyQzJFNTNGMkI1QThDQTc4OTgy NUEwOUI3RDAeFw0yNjA2MTUyMTE4MTNaFw0yNzA2MTQyMTIzMTNaMDMxMTAvBgNV BAMTKDg5MkUxOEUyQjJGOTk1MkM2OTBEMDBEMTNCRUNEMkNCRkZGMzI1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/rElEALRh+KcAnYB9hii3fIi 79Crc4fmfrdDpok0h6AOe7ufqwOgbmkYoXFqywUXaZ2AAVF77Ryn8eH0O7v8wdh3 qG2A0TzR8LgzZ0fb4DUpaQEhqLqGlW/p3R1txlvD1XXFzutXxuulKJ1lWPhjLCHv aDzGcSvzUFXBM5f+NHqsFyCnLYrqfzaIxcz6weVdcH2913kVYG9TxUGl0xLw3qBH CmBi8InEjpjNja5cIVEuNOz/aBWTgVP7SilnVyHi6jVRaodC4x0PwYNSCMcnb5t0 BOEoVkTGhoz5PGmN1g5KSa7v2j+3ekPZhZxmCWdPH14FwBM5Qz+iylGHgV9RAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUiS4Y4rL5lSxpDQDRO+zSy//zJbMwHwYDVR0j BBgwFoAU95ZHURdThCwuU/K1qMp4mCWgm30wDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMS9GNzk2NDc1MTE3NTM4NDJDMkU1M0Yy QjVBOENBNzg5ODI1QTA5QjdELmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xL0Y3OTY0NzUxMTc1Mzg0MkMyRTUzRjJCNUE4Q0E3ODk4MjVBMDlCN0QuY2Vy MGQGCCsGAQUFBwELBFgwVjBUBggrBgEFBQcwC4ZIcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8xL0FTNjE1 NzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBACKueQDBACKueYwGAQCAAIwEgMHAigEJpwADAMHBigEJpz+ gDANBgkqhkiG9w0BAQsFAAOCAQEAiVcW1mK5st2C4D+KgWXG7wqmC2ZjuRaKRmvu X/Kq0JWISuHFueWs6K02VweVcixGse1qzZyRk+ONILctTNkgI5LoMc/hJ/CIEeEG immeI/ZeQJfDK1pjkYqSeV90/SJj35lXKk/bGBP0KoFDl+grqMOpvwaTOtwRPmSu IbPoVUhrcmnlbwUkVKd/+coVGyPtvb9IiCg474FFLgUXgEKvT6+/2KpqCMvbQcdP Cd6Yzv5gaBBVejOy0c3MpOFwDFIF6ppiCEAdguF1lpXFZlEl9PU8hdGMO8zZ98dM ieXlA4HkiT1RXI9GAuRlz0Ei92EXvp3sbH9I8pN4stq+SZnWBg== -----END CERTIFICATE-----Generated at Sat Jun 27 13:09:23 2026 by rpki-client