$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61574.roa File: AS61574.roa (raw, json) Hash identifier: FUm8V6DQRZN+F4pJw85gRXScUbTnMxkdaON4Wn+EJh0= Subject key identifier: F3:BA:81:35:2E:24:0A:D5:B9:E2:9C:D0:97:92:C1:08:63:28:3A:39 Certificate issuer: /CN=F79647511753842C2E53F2B5A8CA789825A09B7D Certificate serial: 03FF82BCDEB89182186D07681E8A4DB7DA59EF Authority key identifier: F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61574.roa Signing time: Sat 13 Jun 2026 15:14:46 +0000 ROA not before: Sat 13 Jun 2026 15:09:46 +0000 ROA not after: Sat 12 Jun 2027 15:14:46 +0000 asID: 61574 IP address blocks: 138.185.229.0/24 maxlen: 24 138.185.230.0/24 maxlen: 24 2804:269c:c::/46 maxlen: 48 2804:269c:fe80::/48 maxlen: 48 2804:269c:fe81::/48 maxlen: 48 2804:269c:fe82::/48 maxlen: 48 2804:269c:fe83::/48 maxlen: 48 2804:269c:fe84::/48 maxlen: 48 2804:269c:fe85::/48 maxlen: 48 2804:269c:fe86::/48 maxlen: 48 2804:269c:fe87::/48 maxlen: 48 2804:269c:fe88::/48 maxlen: 48 2804:269c:fe89::/48 maxlen: 48 2804:269c:fe8a::/48 maxlen: 48 2804:269c:fe8b::/48 maxlen: 48 2804:269c:fe8c::/48 maxlen: 48 2804:269c:fe8d::/48 maxlen: 48 2804:269c:fe8e::/48 maxlen: 48 2804:269c:fe8f::/48 maxlen: 48 2804:269c:fe90::/48 maxlen: 48 2804:269c:fe91::/48 maxlen: 48 2804:269c:fe92::/48 maxlen: 48 2804:269c:fe93::/48 maxlen: 48 2804:269c:fe94::/48 maxlen: 48 2804:269c:fe95::/48 maxlen: 48 2804:269c:fe96::/48 maxlen: 48 2804:269c:fe97::/48 maxlen: 48 2804:269c:fe98::/48 maxlen: 48 2804:269c:fe99::/48 maxlen: 48 2804:269c:fe9a::/48 maxlen: 48 2804:269c:fe9b::/48 maxlen: 48 2804:269c:fe9c::/48 maxlen: 48 2804:269c:fe9d::/48 maxlen: 48 2804:269c:fe9e::/48 maxlen: 48 2804:269c:fe9f::/48 maxlen: 48 2804:269c:fea0::/48 maxlen: 48 2804:269c:fea1::/48 maxlen: 48 2804:269c:fea2::/48 maxlen: 48 2804:269c:fea3::/48 maxlen: 48 2804:269c:fea4::/48 maxlen: 48 2804:269c:fea5::/48 maxlen: 48 2804:269c:fea6::/48 maxlen: 48 2804:269c:fea7::/48 maxlen: 48 2804:269c:fea8::/48 maxlen: 48 2804:269c:fea9::/48 maxlen: 48 2804:269c:feaa::/48 maxlen: 48 2804:269c:feab::/48 maxlen: 48 2804:269c:feac::/48 maxlen: 48 2804:269c:fead::/48 maxlen: 48 2804:269c:feae::/48 maxlen: 48 2804:269c:feaf::/48 maxlen: 48 2804:269c:feb0::/48 maxlen: 48 2804:269c:feb1::/48 maxlen: 48 2804:269c:feb2::/48 maxlen: 48 2804:269c:feb3::/48 maxlen: 48 2804:269c:feb4::/48 maxlen: 48 2804:269c:feb5::/48 maxlen: 48 2804:269c:feb6::/48 maxlen: 48 2804:269c:feb7::/48 maxlen: 48 2804:269c:feb8::/48 maxlen: 48 2804:269c:feb9::/48 maxlen: 48 2804:269c:feba::/48 maxlen: 48 2804:269c:febb::/48 maxlen: 48 2804:269c:febc::/48 maxlen: 48 2804:269c:febd::/48 maxlen: 48 2804:269c:febe::/48 maxlen: 48 2804:269c:febf::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jun 2026 04:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ff:82:bc:de:b8:91:82:18:6d:07:68:1e:8a:4d:b7:da:59:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79647511753842C2E53F2B5A8CA789825A09B7D Validity Not Before: Jun 13 15:09:46 2026 GMT Not After : Jun 12 15:14:46 2027 GMT Subject: CN=F3BA81352E240AD5B9E29CD09792C10863283A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:59:ff:1b:f4:d5:21:ca:01:e3:9d:c1:70:2e: 0b:5b:ef:98:86:ba:a2:be:ad:ae:73:cd:87:05:42: f2:17:62:ea:f1:0f:6d:bf:69:cf:b8:21:95:38:e0: 8e:61:c0:e7:5e:0c:b9:2e:40:c2:a4:7d:07:95:14: 32:56:a0:be:ee:8f:5b:d7:81:51:12:8d:09:92:fc: f6:59:07:5d:2c:c5:bd:8a:e2:dd:c1:06:a9:c3:4a: b9:da:f0:14:be:48:9e:ba:dd:96:c7:b0:f9:9f:6f: de:40:19:e8:2a:ae:0c:65:b2:6b:0f:f7:f1:7a:19: 2f:ed:a6:76:82:78:2d:6e:3c:7a:5a:29:65:77:40: 56:50:ba:f3:08:af:a4:87:d3:1d:b6:af:4b:a4:49: 21:ec:61:49:dd:70:55:5b:7e:a1:6e:0f:9e:e0:8c: 33:6d:9b:78:42:94:b7:82:a0:03:cd:c3:28:c6:6d: 96:47:19:e2:70:b5:d6:14:8a:1f:a6:74:12:5f:38: fe:7f:03:e7:3c:27:bd:dc:d4:15:bb:cf:34:f9:9e: 74:ee:e1:6a:6c:17:fa:16:ad:c9:4b:08:31:7e:85: 6c:10:ec:c7:8a:00:37:67:5a:6b:cb:51:69:27:c8: 14:1f:0e:2a:48:86:f7:71:76:fd:cc:ab:ae:5e:9d: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BA:81:35:2E:24:0A:D5:B9:E2:9C:D0:97:92:C1:08:63:28:3A:39 X509v3 Authority Key Identifier: keyid:F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.229.0-138.185.230.255 IPv6: 2804:269c:c::/46 2804:269c:fe80::/42 Signature Algorithm: sha256WithRSAEncryption 36:e8:c3:e9:85:fb:bf:8b:3a:f3:74:24:cb:d7:05:8c:1a:21: c7:6c:ab:d9:e7:e5:7c:a3:58:cc:3c:a6:70:b2:12:d4:59:ef: 1c:17:ae:91:c2:d4:3d:e9:7d:71:9e:8d:17:55:78:7c:df:bd: 0c:e4:e8:5d:03:5f:f4:88:5e:fd:d0:c7:d0:ff:9c:c4:4a:93: 14:30:04:b6:d8:25:8e:c3:fe:42:7e:fc:de:36:6d:80:46:24: 32:53:9f:d5:53:ff:4e:82:d2:96:e7:4c:6c:4b:9c:18:ce:8d: f1:28:26:44:a1:4c:d1:a9:88:6a:fc:11:6b:4f:f2:4c:90:75: 7e:e2:1a:27:e9:15:62:fd:e5:65:76:a2:35:af:4c:bc:be:32: 5b:7d:9c:60:b1:01:33:af:c3:20:a4:22:3a:a9:9f:94:51:f0: 3f:9a:87:38:22:81:fb:df:f4:81:33:fa:41:d6:16:63:b7:4f: cf:6d:be:62:78:bc:56:cb:ed:5f:d5:f0:b7:f8:fa:d4:dc:bc: ec:f1:80:57:35:08:5d:52:3e:12:02:f9:ad:67:c5:99:9f:50: a2:03:77:70:6d:e1:08:c6:5f:e7:72:a9:21:ee:b0:5d:14:61: 48:02:84:46:1c:0b:45:78:b9:1b:e6:ba:88:91:6b:ed:b0:49: 6e:4c:20:7d -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgITA/+CvN64kYIYbQdoHopNt9pZ7zANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGNzk2NDc1MTE3NTM4NDJDMkU1M0YyQjVBOENBNzg5ODI1 QTA5QjdEMB4XDTI2MDYxMzE1MDk0NloXDTI3MDYxMjE1MTQ0NlowMzExMC8GA1UE AxMoRjNCQTgxMzUyRTI0MEFENUI5RTI5Q0QwOTc5MkMxMDg2MzI4M0EzOTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPJZ/xv01SHKAeOdwXAuC1vvmIa6 or6trnPNhwVC8hdi6vEPbb9pz7ghlTjgjmHA514MuS5AwqR9B5UUMlagvu6PW9eB URKNCZL89lkHXSzFvYri3cEGqcNKudrwFL5Inrrdlsew+Z9v3kAZ6CquDGWyaw/3 8XoZL+2mdoJ4LW48elopZXdAVlC68wivpIfTHbavS6RJIexhSd1wVVt+oW4PnuCM M22beEKUt4KgA83DKMZtlkcZ4nC11hSKH6Z0El84/n8D5zwnvdzUFbvPNPmedO7h amwX+hatyUsIMX6FbBDsx4oAN2daa8tRaSfIFB8OKkiG93F2/cyrrl6d/00CAwEA AaOCAg0wggIJMB0GA1UdDgQWBBTzuoE1LiQK1bninNCXksEIYyg6OTAfBgNVHSME GDAWgBT3lkdRF1OELC5T8rWoyniYJaCbfTAOBgNVHQ8BAf8EBAMCB4AwegYDVR0f BHMwcTBvoG2ga4ZpcnN5bmM6Ly9rcmlsbC5wZWVyaW5nLmVlLmNvbHVtYmlhLmVk dS9yZXBvL3BlZXJpbmctdGVzdGJlZC8xL0Y3OTY0NzUxMTc1Mzg0MkMyRTUzRjJC NUE4Q0E3ODk4MjVBMDlCN0QuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcw AoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBv LzEvRjc5NjQ3NTExNzUzODQyQzJFNTNGMkI1QThDQTc4OTgyNUEwOUI3RC5jZXIw ZAYIKwYBBQUHAQsEWDBWMFQGCCsGAQUFBzALhkhyc3luYzovL2tyaWxsLnBlZXJp bmcuZWUuY29sdW1iaWEuZWR1L3JlcG8vcGVlcmluZy10ZXN0YmVkLzEvQVM2MTU3 NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBBBggrBgEFBQcBBwEB/wQy MDAwFAQCAAEwDjAMAwQAirnlAwQAirnmMBgEAgACMBIDBwIoBCacAAwDBwYoBCac /oAwDQYJKoZIhvcNAQELBQADggEBADbow+mF+7+LOvN0JMvXBYwaIcdsq9nn5Xyj WMw8pnCyEtRZ7xwXrpHC1D3pfXGejRdVeHzfvQzk6F0DX/SIXv3Qx9D/nMRKkxQw BLbYJY7D/kJ+/N42bYBGJDJTn9VT/06C0pbnTGxLnBjOjfEoJkShTNGpiGr8EWtP 8kyQdX7iGifpFWL95WV2ojWvTLy+Mlt9nGCxATOvwyCkIjqpn5RR8D+ahzgigfvf 9IEz+kHWFmO3T89tvmJ4vFbL7V/V8Lf4+tTcvOzxgFc1CF1SPhIC+a1nxZmfUKID d3Bt4QjGX+dyqSHusF0UYUgChEYcC0V4uRvmuoiRa+2wSW5MIH0= -----END CERTIFICATE-----Generated at Sun Jun 14 12:03:37 2026 by rpki-client