$ rpki-client -vvf rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232382e302f32322d3234203d3e203437303635.roa File: 3133382e3138352e3232382e302f32322d3234203d3e203437303635.roa (raw, json) Hash identifier: prYKaZczwTRC77aK9U8/FqlfABtS14lKs5+TczTRNMY= Subject key identifier: EF:8F:8F:B9:A8:E2:54:14:27:EC:CB:8E:8A:D8:76:7B:C3:43:30:05 Certificate issuer: /CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC Certificate serial: 5844FC716CA7E3F08890AFDAD1C19FA93212F26A Authority key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer Subject info access: rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232382e302f32322d3234203d3e203437303635.roa Signing time: Fri 03 Apr 2026 02:00:18 +0000 ROA not before: Fri 03 Apr 2026 01:55:18 +0000 ROA not after: Fri 02 Apr 2027 02:00:18 +0000 asID: 47065 IP address blocks: 138.185.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 04 Apr 2026 03:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:44:fc:71:6c:a7:e3:f0:88:90:af:da:d1:c1:9f:a9:32:12:f2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC Validity Not Before: Apr 3 01:55:18 2026 GMT Not After : Apr 2 02:00:18 2027 GMT Subject: CN=EF8F8FB9A8E2541427ECCB8E8AD8767BC3433005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:76:70:a9:00:79:75:6c:7e:32:6d:69:b9: 2a:1b:13:6c:6d:c4:f6:00:71:f8:76:48:65:01:2a: 8a:61:7b:d4:3f:6a:df:dc:7b:04:fe:4c:5f:49:aa: de:6e:04:40:f7:08:4d:da:84:8a:e6:81:07:47:99: b7:2d:50:fe:64:73:e7:fc:5b:54:7c:73:5c:ec:6a: 9c:96:4e:04:88:cc:c6:31:9e:d4:a5:29:a9:d5:1b: f3:76:8d:b5:5d:f3:53:65:45:64:ed:44:3f:2a:04: ec:71:ce:5a:0c:08:fb:42:8d:2c:52:fd:32:eb:89: a9:56:44:a8:57:de:3e:0c:62:be:a3:5b:45:d3:9a: 9f:39:2b:6d:53:b0:0c:3c:4f:4f:7d:3a:d2:14:69: 4b:8b:3f:64:d8:dd:31:ea:59:9d:17:01:e6:2e:8d: 77:05:5e:b3:18:f3:1b:1b:c6:ff:6c:2d:73:c4:34: 22:78:ce:ff:ba:10:81:ba:2e:27:70:e4:54:2e:6b: e3:65:86:e5:32:ff:26:7e:2a:7a:9e:3d:fc:0d:c7: e6:bf:2b:c0:10:1e:31:c8:ba:5a:1d:35:95:87:60: d1:24:fa:44:59:8e:db:72:67:03:d3:e7:17:2f:44: 77:ec:ab:a4:e1:10:93:e1:e6:56:37:36:10:62:4d: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8F:8F:B9:A8:E2:54:14:27:EC:CB:8E:8A:D8:76:7B:C3:43:30:05 X509v3 Authority Key Identifier: keyid:F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232382e302f32322d3234203d3e203437303635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/22 Signature Algorithm: sha256WithRSAEncryption 26:42:ed:1b:2a:fc:2c:21:08:81:68:70:e3:35:1d:86:72:e6: 45:ca:36:dd:eb:e8:82:5b:8c:92:6b:3c:d2:09:66:8c:e0:b3: 8f:87:6c:3d:a8:ff:05:98:7f:cb:f5:d7:21:4b:17:15:a1:71: 82:c4:9e:94:d5:a1:c7:08:96:1d:ff:ad:2c:8d:e4:c9:d2:34: ef:4b:a5:19:70:c3:f8:da:f3:6b:37:cc:92:09:78:05:0a:58: 34:5c:87:7f:d1:ee:be:68:8c:b1:16:22:51:84:3d:65:ae:c7: eb:bc:15:04:96:4b:42:e4:5b:a6:3e:fc:1f:60:7f:f0:fb:b4: f1:a3:8e:b1:5d:1e:4a:46:fd:fa:73:c6:23:8d:bc:24:3d:cd: e3:ba:95:31:24:a3:bd:b4:60:6e:78:71:70:bc:21:94:56:3e: a5:8a:60:62:e4:82:a4:ea:7d:4c:05:0c:cb:16:58:0b:65:96: 61:41:e5:0e:02:8d:12:b5:d6:24:31:81:b0:0a:26:eb:f4:54: 35:58:fe:de:e1:cc:c7:fc:41:1b:e6:54:09:27:2f:e0:c8:50: 56:d2:44:3d:be:a0:20:83:d2:e7:df:ff:c7:46:20:b5:5c:eb: 8c:46:63:a4:f3:8a:9a:16:4e:ae:13:8d:12:b0:d9:22:32:e4: c7:fa:fe:65 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUWET8cWyn4/CIkK/a0cGfqTIS8mowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBQUQ5MjVFNTM0QkQ3MkU2QjNFOTg2OTIwMUQwNDZD NzkxNkFGQzAeFw0yNjA0MDMwMTU1MThaFw0yNzA0MDIwMjAwMThaMDMxMTAvBgNV BAMTKEVGOEY4RkI5QThFMjU0MTQyN0VDQ0I4RThBRDg3NjdCQzM0MzMwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnDHZwqQB5dWx+Mm1puSobE2xt xPYAcfh2SGUBKophe9Q/at/cewT+TF9Jqt5uBED3CE3ahIrmgQdHmbctUP5kc+f8 W1R8c1zsapyWTgSIzMYxntSlKanVG/N2jbVd81NlRWTtRD8qBOxxzloMCPtCjSxS /TLrialWRKhX3j4MYr6jW0XTmp85K21TsAw8T099OtIUaUuLP2TY3THqWZ0XAeYu jXcFXrMY8xsbxv9sLXPENCJ4zv+6EIG6Lidw5FQua+NlhuUy/yZ+KnqePfwNx+a/ K8AQHjHIulodNZWHYNEk+kRZjttyZwPT5xcvRHfsq6ThEJPh5lY3NhBiTY9RAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU74+PuajiVBQn7MuOith2e8NDMAUwHwYDVR0j BBgwFoAU8KrZJeU0vXLms+mGkgHQRseRavwwDgYDVR0PAQH/BAQDAgeAMF4GA1Ud HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8zL0Yw QUFEOTI1RTUzNEJENzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMuY3JsMIGFBggr BgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3JpbGwucGVlcmluZy5l ZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC9GMEFBRDkyNUU1 MzRCRDcyRTZCM0U5ODY5MjAxRDA0NkM3OTE2QUZDLmNlcjB5BggrBgEFBQcBCwRt MGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8z LzMxMzMzODJlMzEzODM1MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAz NDM3MzAzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCirnkMA0GCSqGSIb3DQEBCwUAA4IBAQAmQu0b KvwsIQiBaHDjNR2GcuZFyjbd6+iCW4ySazzSCWaM4LOPh2w9qP8FmH/L9dchSxcV oXGCxJ6U1aHHCJYd/60sjeTJ0jTvS6UZcMP42vNrN8ySCXgFClg0XId/0e6+aIyx FiJRhD1lrsfrvBUElktC5FumPvwfYH/w+7Txo46xXR5KRv36c8YjjbwkPc3jupUx JKO9tGBueHFwvCGUVj6limBi5IKk6n1MBQzLFlgLZZZhQeUOAo0StdYkMYGwCibr 9FQ1WP7e4czH/EEb5lQJJy/gyFBW0kQ9vqAgg9Ln3//HRiC1XOuMRmOk84qaFk6u E40SsNkiMuTH+v5l -----END CERTIFICATE-----Generated at Fri Apr 3 12:36:01 2026 by rpki-client