$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33383a3a2f34382d3438203d3e203631353735.roa File: 323830343a323639633a33383a3a2f34382d3438203d3e203631353735.roa (raw, json) Hash identifier: XZNIZFLX1ToBilKimiEPe/jgsV7oXQFmiCZTt8m3j64= Subject key identifier: 41:D4:A8:4C:89:6C:CF:85:1C:C7:5D:18:12:4D:B6:C7:C0:35:B8:29 Certificate issuer: /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Certificate serial: 6659B75A9A7407E3ACE574ED1FC45AF334D9A9AB Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject info access: rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33383a3a2f34382d3438203d3e203631353735.roa Signing time: Mon 31 Aug 2026 14:07:15 +0000 ROA not before: Mon 31 Aug 2026 14:02:15 +0000 ROA not after: Mon 30 Aug 2027 14:07:15 +0000 asID: 61575 IP address blocks: 2804:269c:38::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Sep 2026 08:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:59:b7:5a:9a:74:07:e3:ac:e5:74:ed:1f:c4:5a:f3:34:d9:a9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Validity Not Before: Aug 31 14:02:15 2026 GMT Not After : Aug 30 14:07:15 2027 GMT Subject: CN=41D4A84C896CCF851CC75D18124DB6C7C035B829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:e8:ec:f2:24:14:3c:48:f6:97:5b:e9:0c: 17:88:27:20:0d:75:4a:2f:90:ba:7e:df:a8:d9:de: 4b:59:fe:17:b5:01:4c:ab:73:e9:85:d6:e5:08:49: f4:e6:67:82:3f:16:8c:4f:0e:62:47:8c:4c:16:fb: ac:fc:29:6c:ed:30:4d:d2:ee:3f:30:80:f4:71:7a: 4d:3d:73:9e:fd:61:15:2c:a0:98:dc:4b:39:be:d7: 14:7d:de:be:50:15:6c:33:d5:9f:da:b4:13:6d:82: ad:cd:59:71:27:0c:2e:26:0a:65:92:d1:5d:9b:77: 9a:ad:97:db:8e:4f:c2:63:c5:a2:d4:a5:54:26:f8: fe:ed:fb:95:0c:72:1a:a3:75:a3:5c:f0:7d:26:6e: 68:cf:bd:b5:fd:92:19:65:04:d9:e8:84:1a:f7:64: e3:c2:81:55:cd:02:28:b3:b0:48:c9:1c:d5:56:e8: f9:2f:c6:19:c0:ca:e0:b2:1c:c1:05:a3:e9:f1:71: ad:e6:a4:de:3d:1d:89:45:79:d0:a1:39:43:e9:fb: 05:b8:47:29:be:36:a4:92:2b:89:88:7c:b3:cd:31: 62:f2:a8:9a:15:b0:d1:61:0e:2e:33:12:67:38:ab: 18:9c:e6:53:96:59:36:8a:9d:19:69:7a:41:0b:98: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D4:A8:4C:89:6C:CF:85:1C:C7:5D:18:12:4D:B6:C7:C0:35:B8:29 X509v3 Authority Key Identifier: keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject Information Access: Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33383a3a2f34382d3438203d3e203631353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:38::/48 Signature Algorithm: sha256WithRSAEncryption 19:ac:c7:7c:98:2f:13:8b:bd:fb:28:31:db:cc:b5:f2:06:f3: 1b:e0:4c:79:ba:71:08:d0:0f:f0:fb:47:60:b3:62:34:e4:32: d2:da:30:66:bf:83:2b:3e:25:84:e8:68:9a:35:cf:c6:7c:6e: 9d:01:61:a5:53:63:e0:03:6c:ae:27:fb:a1:cf:18:8a:60:f4: 44:49:58:7d:3c:c2:4f:42:57:52:76:e9:0b:2f:1d:8f:6c:ca: 9a:2d:53:e2:89:08:1d:57:4b:10:8b:64:7e:b5:39:dd:c6:63: 74:70:a2:30:00:51:c6:71:8c:19:ef:3f:86:83:7f:7e:24:b0: 22:3f:50:d5:93:4b:ac:3a:b5:0e:1f:13:7e:f5:d0:b3:92:6f: 88:a8:ab:d7:80:01:47:af:f7:85:23:8d:61:dd:90:83:79:c6: 8c:06:8f:8a:cd:be:66:ca:d0:45:a0:7f:89:33:dd:fb:3d:fc: f8:01:5d:bc:a6:78:f8:fe:28:bf:00:36:c5:53:e8:03:2a:6b: e7:cb:bd:6b:91:5a:1d:1d:74:1b:cb:42:5a:34:a5:50:87:f7: 16:cf:96:ab:94:8d:89:d5:14:16:6a:e2:93:ec:96:ad:8d:89: 34:a5:f5:f7:89:aa:d3:bd:5a:f3:a5:d3:ea:55:b0:1b:80:01: 01:cf:35:91 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUZlm3Wpp0B+Os5XTtH8Ra8zTZqaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz MkM3MUREMjAeFw0yNjA4MzExNDAyMTVaFw0yNzA4MzAxNDA3MTVaMDMxMTAvBgNV BAMTKDQxRDRBODRDODk2Q0NGODUxQ0M3NUQxODEyNERCNkM3QzAzNUI4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/ejs8iQUPEj2l1vpDBeIJyAN dUovkLp+36jZ3ktZ/he1AUyrc+mF1uUISfTmZ4I/FoxPDmJHjEwW+6z8KWztME3S 7j8wgPRxek09c579YRUsoJjcSzm+1xR93r5QFWwz1Z/atBNtgq3NWXEnDC4mCmWS 0V2bd5qtl9uOT8JjxaLUpVQm+P7t+5UMchqjdaNc8H0mbmjPvbX9khllBNnohBr3 ZOPCgVXNAiizsEjJHNVW6PkvxhnAyuCyHMEFo+nxca3mpN49HYlFedChOUPp+wW4 Rym+NqSSK4mIfLPNMWLyqJoVsNFhDi4zEmc4qxic5lOWWTaKnRlpekELmDfTAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUQdSoTIlsz4Ucx10YEk22x8A1uCkwHwYDVR0j BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjCB hwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL2tyaWxsLmRhY3Mu dXR3ZW50ZS5ubC9yZXBvL3V0d2VudGUvMS8zMjM4MzAzNDNhMzIzNjM5NjMzYTMz MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzNzM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KAQmnAA4MA0GCSqGSIb3DQEBCwUAA4IBAQAZrMd8mC8Ti737KDHbzLXyBvMb4Ex5 unEI0A/w+0dgs2I05DLS2jBmv4MrPiWE6GiaNc/GfG6dAWGlU2PgA2yuJ/uhzxiK YPRESVh9PMJPQldSdukLLx2PbMqaLVPiiQgdV0sQi2R+tTndxmN0cKIwAFHGcYwZ 7z+Gg39+JLAiP1DVk0usOrUOHxN+9dCzkm+IqKvXgAFHr/eFI41h3ZCDecaMBo+K zb5mytBFoH+JM937Pfz4AV28pnj4/ii/ADbFU+gDKmvny71rkVodHXQby0JaNKVQ h/cWz5arlI2J1RQWauKT7JatjYk0pfX3iarTvVrzpdPqVbAbgAEBzzWR -----END CERTIFICATE-----Generated at Mon Sep 21 01:02:39 2026 by rpki-client