$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.roa File: AS61574.roa (raw, json) Hash identifier: mJSNTI1CmowbL/Jt9Ht6Kr+3PEoJsC+guXaJ+TUQYew= Subject key identifier: 5F:E0:29:D9:9F:28:F8:E5:46:87:D7:FC:06:C6:19:E9:FB:15:A7:35 Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: DB935D6E49ABDDB65BD2E345AE19DABA837814 Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.roa Signing time: Fri 10 Apr 2026 12:20:27 +0000 ROA not before: Fri 10 Apr 2026 12:15:27 +0000 ROA not after: Fri 09 Apr 2027 12:20:27 +0000 asID: 61574 IP address blocks: 2804:269c:c::/46 maxlen: 48 2804:269c:fe80::/48 maxlen: 48 2804:269c:fe81::/48 maxlen: 48 2804:269c:fe82::/48 maxlen: 48 2804:269c:fe83::/48 maxlen: 48 2804:269c:fe84::/48 maxlen: 48 2804:269c:fe85::/48 maxlen: 48 2804:269c:fe86::/48 maxlen: 48 2804:269c:fe87::/48 maxlen: 48 2804:269c:fe88::/48 maxlen: 48 2804:269c:fe89::/48 maxlen: 48 2804:269c:fe8a::/48 maxlen: 48 2804:269c:fe8b::/48 maxlen: 48 2804:269c:fe8c::/48 maxlen: 48 2804:269c:fe8d::/48 maxlen: 48 2804:269c:fe8e::/48 maxlen: 48 2804:269c:fe8f::/48 maxlen: 48 2804:269c:fe90::/48 maxlen: 48 2804:269c:fe91::/48 maxlen: 48 2804:269c:fe92::/48 maxlen: 48 2804:269c:fe93::/48 maxlen: 48 2804:269c:fe94::/48 maxlen: 48 2804:269c:fe95::/48 maxlen: 48 2804:269c:fe96::/48 maxlen: 48 2804:269c:fe97::/48 maxlen: 48 2804:269c:fe98::/48 maxlen: 48 2804:269c:fe99::/48 maxlen: 48 2804:269c:fe9a::/48 maxlen: 48 2804:269c:fe9b::/48 maxlen: 48 2804:269c:fe9c::/48 maxlen: 48 2804:269c:fe9d::/48 maxlen: 48 2804:269c:fe9e::/48 maxlen: 48 2804:269c:fe9f::/48 maxlen: 48 2804:269c:fea0::/48 maxlen: 48 2804:269c:fea1::/48 maxlen: 48 2804:269c:fea2::/48 maxlen: 48 2804:269c:fea3::/48 maxlen: 48 2804:269c:fea4::/48 maxlen: 48 2804:269c:fea5::/48 maxlen: 48 2804:269c:fea6::/48 maxlen: 48 2804:269c:fea7::/48 maxlen: 48 2804:269c:fea8::/48 maxlen: 48 2804:269c:fea9::/48 maxlen: 48 2804:269c:feaa::/48 maxlen: 48 2804:269c:feab::/48 maxlen: 48 2804:269c:feac::/48 maxlen: 48 2804:269c:fead::/48 maxlen: 48 2804:269c:feae::/48 maxlen: 48 2804:269c:feaf::/48 maxlen: 48 2804:269c:feb0::/48 maxlen: 48 2804:269c:feb1::/48 maxlen: 48 2804:269c:feb2::/48 maxlen: 48 2804:269c:feb3::/48 maxlen: 48 2804:269c:feb4::/48 maxlen: 48 2804:269c:feb5::/48 maxlen: 48 2804:269c:feb6::/48 maxlen: 48 2804:269c:feb7::/48 maxlen: 48 2804:269c:feb8::/48 maxlen: 48 2804:269c:feb9::/48 maxlen: 48 2804:269c:feba::/48 maxlen: 48 2804:269c:febb::/48 maxlen: 48 2804:269c:febc::/48 maxlen: 48 2804:269c:febd::/48 maxlen: 48 2804:269c:febe::/48 maxlen: 48 2804:269c:febf::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 00:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: db:93:5d:6e:49:ab:dd:b6:5b:d2:e3:45:ae:19:da:ba:83:78:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Apr 10 12:15:27 2026 GMT Not After : Apr 9 12:20:27 2027 GMT Subject: CN=5FE029D99F28F8E54687D7FC06C619E9FB15A735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:25:f4:57:c9:eb:be:c4:f2:cf:48:82:01: 86:a3:1b:c9:fa:0d:7d:ee:fd:c2:ca:98:a2:9a:c8: 49:5a:2b:16:dc:38:d3:50:77:3a:49:5b:ec:e8:81: 91:55:55:d2:19:d7:a2:74:34:e0:40:17:3f:45:56: 98:b9:e7:0b:17:34:f6:1c:ef:0a:56:4a:77:13:b8: 25:4d:c2:28:80:29:7c:d6:6c:0e:03:33:60:9f:61: 09:b3:da:4d:79:bd:37:62:37:a8:d2:a8:c3:98:81: 64:f4:00:84:d4:36:0a:64:c7:f7:f3:7f:c2:66:c0: 30:c2:1c:5b:bf:3e:9f:80:1a:a0:39:56:1e:de:67: 6c:0d:45:b5:c0:62:cc:39:c9:36:6a:3a:31:e1:5c: 57:9e:d6:1f:7d:17:ca:d2:df:2e:75:dc:14:e3:12: 8c:cf:91:eb:95:51:52:0c:b0:9e:3c:97:b9:c7:b6: 56:f6:e6:9e:f7:2d:76:d0:91:82:dd:f8:78:d9:09: 1a:d7:0b:be:11:4a:a3:f8:dd:92:b8:0e:4e:74:63: 9d:03:8e:ef:f7:a3:89:7e:c7:4c:52:93:e9:23:b2: d3:75:32:02:cc:02:09:f4:c2:5a:b3:ac:02:71:85: 98:44:87:17:9d:55:e0:9d:9c:4c:f4:f9:05:7e:97: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E0:29:D9:9F:28:F8:E5:46:87:D7:FC:06:C6:19:E9:FB:15:A7:35 X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:c::/46 2804:269c:fe80::/42 Signature Algorithm: sha256WithRSAEncryption 8c:65:92:88:bd:0d:de:a8:3f:a0:7f:fa:27:3d:02:ad:77:52: bc:fb:07:2d:5b:4c:94:2d:4b:cf:a7:96:89:fb:92:9f:77:ff: 70:5f:e1:33:d7:f1:9e:f2:27:0f:54:e6:38:e3:f8:15:9d:32: 06:45:62:17:85:79:00:71:76:5b:89:1c:be:7e:b8:e9:d1:86: ac:f2:c1:6f:50:d4:41:5f:17:d0:49:af:22:a2:a6:97:e8:2e: ae:b5:56:c3:ab:ca:f8:8c:42:ad:7d:ae:ca:0f:9d:dd:13:ba: 07:04:b6:a2:0c:7b:44:11:bf:74:ff:d1:5e:3b:8d:d3:64:1f: b1:43:ab:a1:50:e3:22:dd:4a:eb:c3:f7:60:08:7c:da:59:fa: 70:2b:47:30:6a:90:b5:aa:70:16:d2:eb:d4:31:e3:54:9c:b0: 1c:92:2b:eb:c3:6c:a7:ab:41:13:20:61:9d:f2:55:8b:c1:b7: a7:bf:e8:ba:22:28:0c:42:8e:7f:8d:d1:5a:df:04:46:37:26: 93:f4:a3:1c:75:f1:02:b6:ec:53:2d:01:a4:c8:bb:0e:b7:08: 5f:c8:0e:4a:2a:eb:64:3d:20:79:0f:7c:80:bb:a2:1a:b9:77: c0:35:3d:ca:a0:12:36:3d:aa:63:d7:3a:63:ba:0f:f9:14:b6: b1:2f:f5:57 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUANuTXW5Jq922W9LjRa4Z2rqDeBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNjA0MTAxMjE1MjdaFw0yNzA0MDkxMjIwMjdaMDMxMTAvBgNV BAMTKDVGRTAyOUQ5OUYyOEY4RTU0Njg3RDdGQzA2QzYxOUU5RkIxNUE3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3iX0V8nrvsTyz0iCAYajG8n6 DX3u/cLKmKKayElaKxbcONNQdzpJW+zogZFVVdIZ16J0NOBAFz9FVpi55wsXNPYc 7wpWSncTuCVNwiiAKXzWbA4DM2CfYQmz2k15vTdiN6jSqMOYgWT0AITUNgpkx/fz f8JmwDDCHFu/Pp+AGqA5Vh7eZ2wNRbXAYsw5yTZqOjHhXFee1h99F8rS3y513BTj EozPkeuVUVIMsJ48l7nHtlb25p73LXbQkYLd+HjZCRrXC74RSqP43ZK4Dk50Y50D ju/3o4l+x0xSk+kjstN1MgLMAgn0wlqzrAJxhZhEhxedVeCdnEz0+QV+l6IvAgMB AAGjggH3MIIB8zAdBgNVHQ4EFgQUX+Ap2Z8o+OVGh9f8BsYZ6fsVpzUwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MGQGCCsGAQUFBwELBFgwVjBUBggrBgEFBQcwC4ZIcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8wL0FTNjE1 NzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwIoBCacAAwDBwYoBCac/oAwDQYJKoZIhvcNAQELBQADggEB AIxlkoi9Dd6oP6B/+ic9Aq13Urz7By1bTJQtS8+nlon7kp93/3Bf4TPX8Z7yJw9U 5jjj+BWdMgZFYheFeQBxdluJHL5+uOnRhqzywW9Q1EFfF9BJryKippfoLq61VsOr yviMQq19rsoPnd0TugcEtqIMe0QRv3T/0V47jdNkH7FDq6FQ4yLdSuvD92AIfNpZ +nArRzBqkLWqcBbS69Qx41ScsBySK+vDbKerQRMgYZ3yVYvBt6e/6LoiKAxCjn+N 0VrfBEY3JpP0oxx18QK27FMtAaTIuw63CF/IDkoq62Q9IHkPfIC7ohq5d8A1Pcqg EjY9qmPXOmO6D/kUtrEv9Vc= -----END CERTIFICATE-----Generated at Sat Apr 18 05:48:44 2026 by rpki-client