$ rpki-client -vvvf krill.peering.ee.columbia.edu/repo/peering-testbed/2/AS61574.roa File: AS61574.roa (raw, json) Hash identifier: jDEug8OGPUbGf+JoHShh0ozfa7KW0EJP0HXhqUjMHJY= Subject key identifier: E4:94:36:55:BC:54:0D:38:AD:B3:1E:53:65:B9:72:A3:B3:20:61:76 Certificate issuer: /CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Certificate serial: 10A5EFBD8638E6767419706D66F989437289849F Authority key identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/AS61574.roa Signing time: Thu 10 Sep 2026 17:13:49 +0000 ROA not before: Thu 10 Sep 2026 17:08:49 +0000 ROA not after: Thu 09 Sep 2027 17:13:49 +0000 asID: 61574 IP address blocks: 138.185.228.0/23 maxlen: 24 2804:269c:c::/46 maxlen: 48 2804:269c:20::/46 maxlen: 48 2804:269c:fe80::/48 maxlen: 48 2804:269c:fe81::/48 maxlen: 48 2804:269c:fe82::/48 maxlen: 48 2804:269c:fe83::/48 maxlen: 48 2804:269c:fe84::/48 maxlen: 48 2804:269c:fe85::/48 maxlen: 48 2804:269c:fe86::/48 maxlen: 48 2804:269c:fe87::/48 maxlen: 48 2804:269c:fe88::/48 maxlen: 48 2804:269c:fe89::/48 maxlen: 48 2804:269c:fe8a::/48 maxlen: 48 2804:269c:fe8b::/48 maxlen: 48 2804:269c:fe8c::/48 maxlen: 48 2804:269c:fe8d::/48 maxlen: 48 2804:269c:fe8e::/48 maxlen: 48 2804:269c:fe8f::/48 maxlen: 48 2804:269c:fe90::/48 maxlen: 48 2804:269c:fe91::/48 maxlen: 48 2804:269c:fe92::/48 maxlen: 48 2804:269c:fe93::/48 maxlen: 48 2804:269c:fe94::/48 maxlen: 48 2804:269c:fe95::/48 maxlen: 48 2804:269c:fe96::/48 maxlen: 48 2804:269c:fe97::/48 maxlen: 48 2804:269c:fe98::/48 maxlen: 48 2804:269c:fe99::/48 maxlen: 48 2804:269c:fe9a::/48 maxlen: 48 2804:269c:fe9b::/48 maxlen: 48 2804:269c:fe9c::/48 maxlen: 48 2804:269c:fe9d::/48 maxlen: 48 2804:269c:fe9e::/48 maxlen: 48 2804:269c:fe9f::/48 maxlen: 48 2804:269c:fea0::/48 maxlen: 48 2804:269c:fea1::/48 maxlen: 48 2804:269c:fea2::/48 maxlen: 48 2804:269c:fea3::/48 maxlen: 48 2804:269c:fea4::/48 maxlen: 48 2804:269c:fea5::/48 maxlen: 48 2804:269c:fea6::/48 maxlen: 48 2804:269c:fea7::/48 maxlen: 48 2804:269c:fea8::/48 maxlen: 48 2804:269c:fea9::/48 maxlen: 48 2804:269c:feaa::/48 maxlen: 48 2804:269c:feab::/48 maxlen: 48 2804:269c:feac::/48 maxlen: 48 2804:269c:fead::/48 maxlen: 48 2804:269c:feae::/48 maxlen: 48 2804:269c:feaf::/48 maxlen: 48 2804:269c:feb0::/48 maxlen: 48 2804:269c:feb1::/48 maxlen: 48 2804:269c:feb2::/48 maxlen: 48 2804:269c:feb3::/48 maxlen: 48 2804:269c:feb4::/48 maxlen: 48 2804:269c:feb5::/48 maxlen: 48 2804:269c:feb6::/48 maxlen: 48 2804:269c:feb7::/48 maxlen: 48 2804:269c:feb8::/48 maxlen: 48 2804:269c:feb9::/48 maxlen: 48 2804:269c:feba::/48 maxlen: 48 2804:269c:febb::/48 maxlen: 48 2804:269c:febc::/48 maxlen: 48 2804:269c:febd::/48 maxlen: 48 2804:269c:febe::/48 maxlen: 48 2804:269c:febf::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Sep 2026 08:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a5:ef:bd:86:38:e6:76:74:19:70:6d:66:f9:89:43:72:89:84:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Validity Not Before: Sep 10 17:08:49 2026 GMT Not After : Sep 9 17:13:49 2027 GMT Subject: CN=E4943655BC540D38ADB31E5365B972A3B3206176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:07:48:46:b3:2e:fe:a7:ef:aa:46:b8:27: 56:dd:dc:2f:b7:1d:4b:35:cc:ea:b5:7b:e7:fe:98: 19:34:06:92:4f:a8:c9:df:20:d5:48:9c:d2:f7:76: 14:e3:15:05:44:af:d4:41:1d:d4:36:1d:1d:4a:bf: 1e:fa:fa:4b:fc:90:b6:99:26:c5:49:e6:d3:18:af: 33:d9:89:78:b7:31:a2:22:e3:49:f8:48:f9:f1:10: 37:a4:ca:ce:12:46:69:a7:56:a6:46:45:4c:a2:c3: 81:6e:30:b3:26:c8:7c:cb:a9:da:8e:46:3f:0f:38: b7:43:f8:34:e6:67:7e:f8:a9:9b:2c:27:ff:9f:43: b3:95:7e:5c:f6:bd:ac:74:60:94:61:28:4f:8d:33: e9:1a:7d:50:1a:98:8f:15:15:67:39:db:93:da:3b: 59:42:cc:39:4c:c4:6f:ff:99:1d:af:cd:7b:b6:3d: 13:e5:9f:a8:15:34:00:2e:02:51:40:4f:d9:af:a3: 9f:da:5c:95:54:0a:96:f7:d4:f5:14:69:4d:54:c0: 65:7a:e9:c4:f9:e9:05:f1:72:f4:68:38:3d:cc:8e: 20:94:b8:d6:82:95:0e:ba:c0:54:f2:e7:1b:0f:28: cc:25:84:37:29:ff:37:6b:9b:c3:29:c6:1f:41:7f: 87:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:94:36:55:BC:54:0D:38:AD:B3:1E:53:65:B9:72:A3:B3:20:61:76 X509v3 Authority Key Identifier: keyid:0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/AS61574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/23 IPv6: 2804:269c:c::/46 2804:269c:20::/46 2804:269c:fe80::/42 Signature Algorithm: sha256WithRSAEncryption 88:1e:65:f3:c7:54:23:9e:9e:55:cd:42:d0:1b:8b:67:2d:06: 83:a7:62:47:e7:4f:44:5d:c0:fa:27:ef:ee:4d:cd:92:7d:9c: 00:44:c6:9c:20:9c:a3:a0:a7:2f:3f:e4:8c:f2:11:e3:c7:f6: f2:fc:af:c7:5b:b9:b6:64:fe:d6:51:af:fd:de:1d:2c:39:6b: 00:34:cd:46:1a:a5:fc:e0:1b:b5:b7:5c:d0:85:69:8a:e6:a4: f9:36:f5:9c:a4:09:6d:77:7d:9a:2b:ff:eb:4c:57:e7:2a:34: e6:00:58:50:0f:4c:a5:3a:ec:d8:0f:5d:5b:5c:60:16:ee:6f: 1d:47:46:46:53:11:ef:9b:19:37:c4:cd:ea:b2:07:65:35:b1: 88:df:fd:57:27:9d:29:8b:31:53:3a:a7:a5:3e:91:e8:b2:57: 7c:a2:2f:8c:ec:3b:37:36:96:27:ed:88:2b:6c:67:70:7b:3f: a3:8e:89:cb:8b:de:29:8e:ba:ce:fc:97:df:84:5a:80:15:bd: 9d:a4:9e:55:eb:12:58:08:46:91:5e:72:a4:e3:4c:da:63:68: 94:fa:fb:00:18:5b:2c:5b:e3:22:07:bf:3c:6f:2b:c4:c7:16: 4e:0b:6a:99:1c:95:18:a9:f5:fa:ec:81:f7:4b:1c:5d:72:b2: fa:ed:37:5a -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUEKXvvYY45nZ0GXBtZvmJQ3KJhJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUxOEI2ODYy Q0UyRTg4RjAeFw0yNjA5MTAxNzA4NDlaFw0yNzA5MDkxNzEzNDlaMDMxMTAvBgNV BAMTKEU0OTQzNjU1QkM1NDBEMzhBREIzMUU1MzY1Qjk3MkEzQjMyMDYxNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILwdIRrMu/qfvqka4J1bd3C+3 HUs1zOq1e+f+mBk0BpJPqMnfINVInNL3dhTjFQVEr9RBHdQ2HR1Kvx76+kv8kLaZ JsVJ5tMYrzPZiXi3MaIi40n4SPnxEDekys4SRmmnVqZGRUyiw4FuMLMmyHzLqdqO Rj8POLdD+DTmZ374qZssJ/+fQ7OVflz2vax0YJRhKE+NM+kafVAamI8VFWc525Pa O1lCzDlMxG//mR2vzXu2PRPln6gVNAAuAlFAT9mvo5/aXJVUCpb31PUUaU1UwGV6 6cT56QXxcvRoOD3MjiCUuNaClQ66wFTy5xsPKMwlhDcp/zdrm8Mpxh9Bf4cbAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQU5JQ2VbxUDTitsx5TZblyo7MgYXYwHwYDVR0j BBgwFoAUDXKZz+qLM5nrJI+mhRi2hizi6I8wDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wRDcyOTlDRkVBOEIzMzk5RUIyNDhG QTY4NTE4QjY4NjJDRTJFODhGLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzBENzI5OUNGRUE4QjMzOTlFQjI0OEZBNjg1MThCNjg2MkNFMkU4OEYuY2Vy MGQGCCsGAQUFBwELBFgwVjBUBggrBgEFBQcwC4ZIcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8yL0FTNjE1 NzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8E MzAxMAwEAgABMAYDBAGKueQwIQQCAAIwGwMHAigEJpwADAMHAigEJpwAIAMHBigE Jpz+gDANBgkqhkiG9w0BAQsFAAOCAQEAiB5l88dUI56eVc1C0BuLZy0Gg6diR+dP RF3A+ifv7k3Nkn2cAETGnCCco6CnLz/kjPIR48f28vyvx1u5tmT+1lGv/d4dLDlr ADTNRhql/OAbtbdc0IVpiuak+Tb1nKQJbXd9miv/60xX5yo05gBYUA9MpTrs2A9d W1xgFu5vHUdGRlMR75sZN8TN6rIHZTWxiN/9VyedKYsxUzqnpT6R6LJXfKIvjOw7 NzaWJ+2IK2xncHs/o46Jy4veKY66zvyX34RagBW9naSeVesSWAhGkV5ypONM2mNo lPr7ABhbLFvjIge/PG8rxMcWTgtqmRyVGKn1+uyB90scXXKy+u03Wg== -----END CERTIFICATE-----Generated at Sun Sep 20 11:42:16 2026 by rpki-client