$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33623a3a2f34382d3438203d3e203631353736.roa File: 323830343a323639633a33623a3a2f34382d3438203d3e203631353736.roa (raw, json) Hash identifier: 3PiMeU5I4aQkssZPlJqNjiKEZlf65rAkgAPvpTvCabo= Subject key identifier: E8:A5:70:D7:41:1D:06:B5:01:EC:0A:00:83:3C:E9:17:6B:34:A8:51 Certificate issuer: /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Certificate serial: 7E8294B075AA1AB8E4AEACCC47A0F7A44F5B48DA Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject info access: rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33623a3a2f34382d3438203d3e203631353736.roa Signing time: Mon 17 Aug 2026 08:16:53 +0000 ROA not before: Mon 17 Aug 2026 08:11:53 +0000 ROA not after: Mon 16 Aug 2027 08:16:53 +0000 asID: 61576 IP address blocks: 2804:269c:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 04:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:82:94:b0:75:aa:1a:b8:e4:ae:ac:cc:47:a0:f7:a4:4f:5b:48:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Validity Not Before: Aug 17 08:11:53 2026 GMT Not After : Aug 16 08:16:53 2027 GMT Subject: CN=E8A570D7411D06B501EC0A00833CE9176B34A851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:2f:59:89:03:25:ef:38:7e:10:92:74:45: 10:e1:61:0f:3d:7c:ca:15:aa:94:5e:08:da:2c:0d: c6:f4:17:79:36:d4:e1:73:dd:8a:10:0e:3b:0b:9e: b0:77:9d:b0:46:d9:73:43:02:56:70:a9:d5:87:79: f4:21:33:2b:a5:c8:8f:61:e7:3f:60:c6:c6:db:56: 80:61:86:ea:90:a6:66:e7:4e:c4:0e:1c:71:d8:99: ee:32:91:95:3f:4e:b9:ad:21:5a:4d:3f:dd:74:17: 94:e7:d9:44:89:3f:de:4a:f2:59:bb:5e:72:81:33: b8:87:92:b6:6e:cf:4f:39:6a:28:73:aa:46:00:c8: 83:ae:5b:50:5c:88:72:8d:74:23:2f:d4:36:f7:95: 71:3b:59:d1:a8:f8:0a:a6:e5:c8:05:68:9a:d7:1c: e6:b6:d1:c6:b4:36:a2:98:bd:f3:08:76:22:65:be: c3:66:89:de:20:00:7e:cb:1e:ee:65:cc:36:d7:95: 93:da:dc:25:96:05:24:5f:0a:36:4f:be:74:78:45: 36:16:b9:fb:a3:92:8f:43:83:30:aa:8d:60:dd:77: 51:9d:ea:47:bc:2f:fc:42:f8:30:dc:11:45:a8:bb: f8:91:7f:6f:fa:17:b9:51:d3:42:4c:18:06:a1:97: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A5:70:D7:41:1D:06:B5:01:EC:0A:00:83:3C:E9:17:6B:34:A8:51 X509v3 Authority Key Identifier: keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject Information Access: Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33623a3a2f34382d3438203d3e203631353736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:3b::/48 Signature Algorithm: sha256WithRSAEncryption 09:47:06:e6:ca:34:56:4f:bf:20:e5:33:6a:60:49:45:c6:ef: 45:90:ca:65:ea:26:7e:90:b5:26:61:a6:29:e9:1a:c8:c0:f3: 23:89:f2:ca:94:1b:85:3f:27:4f:4d:b2:6b:be:27:bd:d1:a1: 6f:23:4e:90:b1:7b:37:36:63:db:ab:0e:05:52:ba:47:b7:30: 8b:75:f5:fa:b4:35:b9:00:1d:d1:1e:b7:42:f8:41:8b:59:f1: 91:b4:e4:e4:7d:f2:bf:b4:f9:f4:bf:53:d7:37:85:69:fe:8b: 00:57:a9:ca:ab:96:38:4b:a8:c3:38:ca:9d:db:80:d6:99:a2: 3c:9b:6f:fa:99:f5:ba:4b:0a:52:c5:c0:f5:47:c5:9a:77:00: fd:08:a8:05:a6:55:36:58:a6:d9:40:df:45:0b:c0:9f:c9:cc: 50:08:67:32:04:a7:6b:56:23:25:44:d8:95:03:a4:5f:32:00: 60:58:6b:08:6c:35:f4:67:d8:b8:66:f3:ea:bb:fd:1d:5a:4b: 02:6e:cd:7d:9e:0b:a0:df:4b:a2:d2:e5:b0:5a:6b:d4:f4:86: 9a:13:10:9e:5e:7f:82:87:df:0e:9a:c9:83:72:35:f3:08:c2: de:24:46:56:cc:9d:f2:06:96:f5:f6:3c:6b:d9:00:85:79:f9: da:23:2c:8d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUfoKUsHWqGrjkrqzMR6D3pE9bSNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz MkM3MUREMjAeFw0yNjA4MTcwODExNTNaFw0yNzA4MTYwODE2NTNaMDMxMTAvBgNV BAMTKEU4QTU3MEQ3NDExRDA2QjUwMUVDMEEwMDgzM0NFOTE3NkIzNEE4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqli9ZiQMl7zh+EJJ0RRDhYQ89 fMoVqpReCNosDcb0F3k21OFz3YoQDjsLnrB3nbBG2XNDAlZwqdWHefQhMyulyI9h 5z9gxsbbVoBhhuqQpmbnTsQOHHHYme4ykZU/TrmtIVpNP910F5Tn2USJP95K8lm7 XnKBM7iHkrZuz085aihzqkYAyIOuW1BciHKNdCMv1Db3lXE7WdGo+Aqm5cgFaJrX HOa20ca0NqKYvfMIdiJlvsNmid4gAH7LHu5lzDbXlZPa3CWWBSRfCjZPvnR4RTYW ufujko9DgzCqjWDdd1Gd6ke8L/xC+DDcEUWou/iRf2/6F7lR00JMGAahl9etAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU6KVw10EdBrUB7AoAgzzpF2s0qFEwHwYDVR0j BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjCB hwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL2tyaWxsLmRhY3Mu dXR3ZW50ZS5ubC9yZXBvL3V0d2VudGUvMS8zMjM4MzAzNDNhMzIzNjM5NjMzYTMz NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzNzM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KAQmnAA7MA0GCSqGSIb3DQEBCwUAA4IBAQAJRwbmyjRWT78g5TNqYElFxu9FkMpl 6iZ+kLUmYaYp6RrIwPMjifLKlBuFPydPTbJrvie90aFvI06QsXs3NmPbqw4FUrpH tzCLdfX6tDW5AB3RHrdC+EGLWfGRtOTkffK/tPn0v1PXN4Vp/osAV6nKq5Y4S6jD OMqd24DWmaI8m2/6mfW6SwpSxcD1R8WadwD9CKgFplU2WKbZQN9FC8CfycxQCGcy BKdrViMlRNiVA6RfMgBgWGsIbDX0Z9i4ZvPqu/0dWksCbs19ngug30ui0uWwWmvU 9IaaExCeXn+Ch98OmsmDcjXzCMLeJEZWzJ3yBpb19jxr2QCFefnaIyyN -----END CERTIFICATE-----Generated at Mon Sep 21 16:57:11 2026 by rpki-client